{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,9]],"date-time":"2026-07-09T06:14:27Z","timestamp":1783577667466,"version":"3.55.0"},"reference-count":52,"publisher":"IEEE","license":[{"start":{"date-parts":[[2026,6,22]],"date-time":"2026-06-22T00:00:00Z","timestamp":1782086400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,6,22]],"date-time":"2026-06-22T00:00:00Z","timestamp":1782086400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026,6,22]]},"DOI":"10.1109\/dsn69566.2026.00062","type":"proceedings-article","created":{"date-parts":[[2026,7,8]],"date-time":"2026-07-08T19:41:43Z","timestamp":1783539703000},"page":"590-603","source":"Crossref","is-referenced-by-count":0,"title":["LymphNode: A Plug-and-Play Access Control Method for Deep Neural Networks"],"prefix":"10.1109","author":[{"given":"Hanyu","family":"Pei","sequence":"first","affiliation":[{"name":"University of Louisville,Department of Computer Science and Engineering"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Shang","family":"Liu","sequence":"additional","affiliation":[{"name":"University of Louisville,Department of Computer Science and Engineering"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Zeyan","family":"Liu","sequence":"additional","affiliation":[{"name":"University of Louisville,Department of Computer Science and Engineering"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","article-title":"Gpt-4 technical report","volume-title":"Tech. Rep.","year":"2024"},{"key":"ref2","article-title":"Llama: Open and efficient foundation language models","author":"Touvron","year":"2023"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.5555\/3241094.3241142"},{"key":"ref4","first-page":"1345","article-title":"High accuracy and high fidelity extraction of neural networks","volume-title":"29th USENIX Security Symposium (USENIX Security 20)","author":"Jagielski"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813677"},{"key":"ref6","first-page":"1615","article-title":"Turning your weakness into a strength: Watermarking deep neural networks by backdooring","volume-title":"27th USENIX Security Symposium (USENIX Security 18)","author":"Adi"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/3078971.3078974"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/3196494.3196550"},{"key":"ref9","first-page":"1","article-title":"Deep-lock: Secure authorization for deep neural networks","volume-title":"2020 IEEE 38th VLSI Test Symposium (VTS)","author":"Alam"},{"key":"ref10","first-page":"15380","article-title":"Model assertion: A defense against model theft via authorized model encryption","volume-title":"Proceedings of the IEEE\/CVF International Conference on Computer Vision (ICCV)","author":"Chen"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/3679202"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/tetc.2022.3231012"},{"key":"ref13","article-title":"Prediction poisoning: Towards defenses against DNN model stealing attacks","volume-title":"International Conference on Learning Representations (ICLR)","author":"Orekondy"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2023.3244107"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00509"},{"key":"ref16","first-page":"253","article-title":"The secret revealer: Generative model-inversion attacks against machine learning models","volume-title":"Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR)","author":"Zhang"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/3297858.3304051"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.52202\/068431-0962"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.52202\/075280-2371"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/3433210.3437526"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1007\/s00521-019-04434-z"},{"key":"ref22","article-title":"DynaMarks: Defending against deep learning model extraction using dynamic watermarking","author":"Chakraborty","year":"2022"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833693"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51070.2023.00409"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v39i10.33117"},{"key":"ref26","article-title":"Robust universal adversarial perturbations","author":"Xu","year":"2022"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/tpami.2025.3630185"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2018.2861800"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/DAC18072.2020.9218651"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/3664647.3685507"},{"key":"ref31","article-title":"Slalom: Fast, verifiable and private execution of neural networks in trusted hardware","volume-title":"International Conference on Learning Representations (ICLR)","author":"Tramer"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP57164.2023.00014"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1145\/3505634"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1049\/cmu2.12759"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1049\/cdt2.12056"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2023.3261327"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1145\/3548606.3560678"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.17"},{"key":"ref39","article-title":"Pruning convolutional neural networks for resource efficient inference","volume-title":"International Conference on Learning Representations","author":"Molchanov"},{"key":"ref40","article-title":"Pruning filters for efficient convnets","volume-title":"International Conference on Learning Representations (ICLR)","author":"Li"},{"key":"ref41","first-page":"1135","article-title":"Learning both weights and connections for efficient neural networks","author":"Han","year":"2015","journal-title":"Advances in Neural Information Processing Systems (NeurIPS)"},{"key":"ref42","article-title":"Learning multiple layers of features from tiny images","volume-title":"Tech. Rep.","author":"Krizhevsky","year":"2009"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/5.726791"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.2118\/18761-MS"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref46","article-title":"An image is worth 16x16 words: Transformers for image recognition at scale","volume-title":"International Conference on Learning Representations","author":"Dosovitskiy"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.5555\/2999134.2999257"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.243"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.01152"},{"key":"ref50","article-title":"Badnets: Identifying vulnerabilities in the machine learning model supply chain","author":"Gu","year":"2017"},{"key":"ref51","article-title":"Targeted backdoor attacks on deep learning systems using data poisoning","author":"Chen","year":"2017"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2021.3088846"}],"event":{"name":"2026 56th Annual IEEE International Conference on Dependable Systems and Networks (DSN)","location":"Charlotte, NC, USA","start":{"date-parts":[[2026,6,22]]},"end":{"date-parts":[[2026,6,25]]}},"container-title":["2026 56th Annual IEEE International Conference on Dependable Systems and Networks (DSN)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11593123\/11593173\/11593458.pdf?arnumber=11593458","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,9]],"date-time":"2026-07-09T05:22:32Z","timestamp":1783574552000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11593458\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,6,22]]},"references-count":52,"URL":"https:\/\/doi.org\/10.1109\/dsn69566.2026.00062","relation":{},"subject":[],"published":{"date-parts":[[2026,6,22]]}}}