{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,9]],"date-time":"2026-06-09T00:00:49Z","timestamp":1780963249162,"version":"3.54.1"},"reference-count":27,"publisher":"Elsevier BV","license":[{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/legal\/tdmrep-license"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-017"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-012"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-004"}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["Journal of Information Security and Applications"],"published-print":{"date-parts":[[2026,7]]},"DOI":"10.1016\/j.jisa.2026.104468","type":"journal-article","created":{"date-parts":[[2026,4,21]],"date-time":"2026-04-21T16:17:19Z","timestamp":1776788239000},"page":"104468","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":0,"special_numbering":"C","title":["Fingerprint-based watermarking for protecting and tracing black-box NLP models"],"prefix":"10.1016","volume":"100","author":[{"ORCID":"https:\/\/orcid.org\/0009-0005-7615-9071","authenticated-orcid":false,"given":"Yili","family":"Wang","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1932-725X","authenticated-orcid":false,"given":"Xuefeng","family":"Fan","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0005-6693-6850","authenticated-orcid":false,"given":"Zhi","family":"Chen","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3777-9479","authenticated-orcid":false,"given":"Xiaoyi","family":"Zhou","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"78","reference":[{"key":"10.1016\/j.jisa.2026.104468_bib0001","doi-asserted-by":"crossref","unstructured":"Brady D., Lund T., Wang. Chatting about ChatGPT: how may AI and GPT impact academia and libraries?; 2023; 40(3), 26\u201329. Emerald Publishing Limited; 2023.","DOI":"10.1108\/LHTN-01-2023-0009"},{"key":"10.1016\/j.jisa.2026.104468_bib0002","unstructured":"Ren Y. C., Li Y., Duan. Evaluation on agi\/gpt based on the dikwp for ernie bot, arXiv preprint."},{"issue":"1","key":"10.1016\/j.jisa.2026.104468_bib0003","first-page":"364","article-title":"War of the chatbots: bard, bing chat, chatgpt, ernie and beyond. the new ai gold rush and its impact on higher education","volume":"6","author":"Rudolph","year":"2023","journal-title":"J Appl Learn Teach"},{"key":"10.1016\/j.jisa.2026.104468_bib0004","series-title":"Tech. Rep.","article-title":"Deepseek llm: scaling open-source language models with longtermism","author":"Bi","year":"2024"},{"key":"10.1016\/j.jisa.2026.104468_bib0005","series-title":"Tech. Rep.","article-title":"I know what you trained last summer: a survey on stealing machine learning models and defences","author":"Oliynyk","year":"2023"},{"key":"10.1016\/j.jisa.2026.104468_bib0006","series-title":"Watermarking for large language models: a survey","volume":"vol. 13","author":"Yang","year":"2025"},{"key":"10.1016\/j.jisa.2026.104468_bib0007","series-title":"A survey of text watermarking in the era of large language models","volume":"vol. 57","author":"Liu","year":"2024"},{"key":"10.1016\/j.jisa.2026.104468_bib0008","series-title":"Turning from TF-IDF to TF-IGM for term weighting in text classification","volume":"vol. 66","author":"Chen","year":"2016"},{"key":"10.1016\/j.jisa.2026.104468_bib0009","first-page":"953","article-title":"Survey of copyright protection schemes based on dnn model","volume":"59","author":"Fan","year":"2022","journal-title":"J Comput Res Dev"},{"key":"10.1016\/j.jisa.2026.104468_bib0010","series-title":"ACM on international conference on multimedia retrieval","first-page":"269","article-title":"Shigeyuki sakazawa and shin\u2019ichi satoh, embedding watermarks into deep neural networks","author":"Uchida","year":"2017"},{"key":"10.1016\/j.jisa.2026.104468_bib0011","series-title":"IEEE\/ACM International conference on computer-aided design (ICCAD)","first-page":"1","article-title":"Watermarking deep neural networks for embedded systems","author":"Guo","year":"2018"},{"key":"10.1016\/j.jisa.2026.104468_bib0012","series-title":"Watermarking neural networks with watermarked images","volume":"vol. 31","author":"Wu","year":"2020"},{"key":"10.1016\/j.jisa.2026.104468_bib0013","series-title":"Proceedings of the 2011 conference on empirical methods in natural language processing","first-page":"1363","article-title":"Watermarking the outputs of structured prediction with an application in statistical machine translation","author":"Venugopal","year":"2011"},{"key":"10.1016\/j.jisa.2026.104468_bib0014","series-title":"IEEE Intl conf on dependable, autonomic and secure computing","first-page":"574","article-title":"Robust black-box watermarking for deep neural network using inverse document frequency","author":"Yadollahi","year":"2021"},{"key":"10.1016\/j.jisa.2026.104468_bib0015","series-title":"2021 IEEE Symposium on security and privacy (SP)","first-page":"121","article-title":"Adversarial watermarking transformer: towards tracing text provenance with data hiding","author":"Abdelnabi","year":"2021"},{"key":"10.1016\/j.jisa.2026.104468_bib0016","series-title":"TADW: traceable and anti-detection dynamic watermarking of deep neural networks, security and communication networks","volume":"vol. 2022","author":"Dong","year":"2022"},{"key":"10.1016\/j.jisa.2026.104468_bib0017","series-title":"Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition","first-page":"23585","article-title":"Map: mask-pruning for source-free model intellectual property protection","author":"Peng","year":"2024"},{"key":"10.1016\/j.jisa.2026.104468_bib0018","series-title":"Beyond binary classification: customizable text watermark on large language models, 2024 international joint conference on neural networks (IJCNN)","author":"Xu","year":"2024"},{"key":"10.1016\/j.jisa.2026.104468_bib0019","series-title":"An information-theoretic perspective of tf-idf measures","volume":"vol. 39","author":"Aizawa","year":"2003"},{"key":"10.1016\/j.jisa.2026.104468_bib0020","series-title":"ChatGPT\/OpenAI statistics: how many people use ChatGPT","author":"Team","year":"2024"},{"key":"10.1016\/j.jisa.2026.104468_bib0021","series-title":"IEEE 8th annual ubiquitous computing, electronics and mobile communication conference (UEMCON)","first-page":"540","article-title":"Deep cnn-lstm with combined kernels from multiple branches for imdb review sentiment analysis","author":"Yenter","year":"2017"},{"key":"10.1016\/j.jisa.2026.104468_bib0022","article-title":"Character-level convolutional networks for text classification","volume":"28","author":"Zhang","year":"2015","journal-title":"Adv Neural Inf Process Syst"},{"key":"10.1016\/j.jisa.2026.104468_bib0023","series-title":"SecNLP: an NLP classification model watermarking framework based on multi-task learning","volume":"vol. 86","author":"Dai","year":"2024"},{"key":"10.1016\/j.jisa.2026.104468_bib0024","series-title":"Fundamentals of recurrent neural network (RNN) and long short-term memory (LSTM) network","volume":"vol. 404","author":"Sherstinsky","year":"2020"},{"key":"10.1016\/j.jisa.2026.104468_bib0025","series-title":"Improving text classification with weighted word embeddings via a multi-channel TextCNN model","volume":"vol. 363","author":"Guo","year":"2019"},{"key":"10.1016\/j.jisa.2026.104468_bib0026","author":"Khan","year":"2025"},{"key":"10.1016\/j.jisa.2026.104468_bib0027","series-title":"Tech. Rep.","article-title":"A survey of data augmentation approaches for nlp","author":"Feng","year":"2021"}],"container-title":["Journal of Information Security and Applications"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S2214212626000980?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S2214212626000980?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2026,6,8]],"date-time":"2026-06-08T23:29:19Z","timestamp":1780961359000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S2214212626000980"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,7]]},"references-count":27,"alternative-id":["S2214212626000980"],"URL":"https:\/\/doi.org\/10.1016\/j.jisa.2026.104468","relation":{},"ISSN":["2214-2126"],"issn-type":[{"value":"2214-2126","type":"print"}],"subject":[],"published":{"date-parts":[[2026,7]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"Fingerprint-based watermarking for protecting and tracing black-box NLP models","name":"articletitle","label":"Article Title"},{"value":"Journal of Information Security and Applications","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.jisa.2026.104468","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2026 Published by Elsevier Ltd.","name":"copyright","label":"Copyright"}],"article-number":"104468"}}