{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,31]],"date-time":"2026-07-31T05:01:22Z","timestamp":1785474082548,"version":"3.56.0"},"reference-count":44,"publisher":"IEEE","license":[{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026,7]]},"DOI":"10.1109\/eurosp68448.2026.00051","type":"proceedings-article","created":{"date-parts":[[2026,7,30]],"date-time":"2026-07-30T19:07:38Z","timestamp":1785438458000},"page":"696-711","source":"Crossref","is-referenced-by-count":0,"title":["Re-Key-Free, Risky-Free: Adaptable Model Usage Control"],"prefix":"10.1109","author":[{"given":"Zihan","family":"Wang","sequence":"first","affiliation":[{"name":"The University of Queensland"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Zhongkui","family":"Ma","sequence":"additional","affiliation":[{"name":"The University of Queensland"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xinguo","family":"Feng","sequence":"additional","affiliation":[{"name":"The University of Queensland"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Chuan","family":"Yan","sequence":"additional","affiliation":[{"name":"The University of Queensland"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Dongge","family":"Liu","sequence":"additional","affiliation":[{"name":"Google LLC"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ruoxi","family":"Sun","sequence":"additional","affiliation":[{"name":"CSIRO"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Derui","family":"Wang","sequence":"additional","affiliation":[{"name":"CSIRO"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Minhui","family":"Xue","sequence":"additional","affiliation":[{"name":"CSIRO"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Guangdong","family":"Bai","sequence":"additional","affiliation":[{"name":"City University of Hong Kong"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","article-title":"Private AI Compute: our next step in building private and helpful AI","author":"Yagnik","year":"2025"},{"key":"ref2","first-page":"42 614","article-title":"NNSplitter: An active defense solution for DNN model via automated weight obfuscation","volume-title":"Proceedings of the 40th International Conference on Machine Learning (ICML)","volume":"202","author":"Zhou"},{"key":"ref3","first-page":"5233","article-title":"SoK: All you need to know about On-Device ML model extraction - the gap between research and practice","volume-title":"33rd USENIX Security Symposium (USENIX Security)","author":"Nayan"},{"key":"ref4","first-page":"6507","article-title":"Being transparent is merely the beginning: Enforcing purpose limitation with polynomial approximation","volume-title":"33rd USENIX Security Symposium (USENIX Security)","author":"Liu"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/3696410.3714737"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/GCCE50665.2020.9291813"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/WIFS.2018.8630791"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/TETC.2022.3231012"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/sp54263.2024.00233"},{"key":"ref10","article-title":"Generative AI statistics: Insights and emerging trends for 2025","author":"Malec","year":"2024"},{"key":"ref11","article-title":"An image is worth 16x16 words: Transformers for image recognition at scale","volume-title":"Proceedings of the 9th International Conference on Learning Representations (ICLR)","author":"Dosovitskiy"},{"key":"ref12","first-page":"8640","article-title":"A probabilistic approach to neural network pruning","volume-title":"Proceedings of the 38th International Conference on Machine Learning (ICML)","volume":"139","author":"Qian"},{"key":"ref13","first-page":"129","article-title":"What is the state of neural network pruning?","volume-title":"Proceedings of Machine Learning and Systems (MLSys)","volume":"2","author":"Blalock"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/TCAD.2020.3018403"},{"key":"ref15","article-title":"Explaining and harnessing adversarial examples","volume-title":"Proceedings of the Third International Conference on Learning Representations (ICLR)","author":"Goodfellow"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2018.2886017"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/DAC18072.2020.9218651"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/SP46215.2023.10179382"},{"key":"ref19","article-title":"Pruning filters for efficient convnets","volume-title":"Proceedings of the Fifth International Conference on Learning Representations (ICLR)","author":"Li"},{"key":"ref20","article-title":"Pruning convolutional neural networks for resource efficient inference","volume-title":"Proceedings of the Fifth International Conference on Learning Representations (ICLR)","author":"Molchanov"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/MLSP52302.2021.9596121"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1017\/9781108231596"},{"key":"ref23","first-page":"6682","article-title":"Proving the lottery ticket hypothesis: pruning is all you need","volume-title":"Proceedings of the 37th International Conference on Machine Learning (ICML)","author":"Malach"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/5.726791"},{"key":"ref25","article-title":"Fashion-MNIST: a novel image dataset for benchmarking machine learning algorithms","author":"Xiao","year":"2017"},{"key":"ref26","article-title":"Learning multiple layers of features from tiny images","volume-title":"University of Toronto","author":"Krizhevsky","year":"2009"},{"key":"ref27","article-title":"Caltech-256 object category dataset","author":"Griffin","year":"2007"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/ICVGIP.2008.47"},{"key":"ref29","doi-asserted-by":"crossref","DOI":"10.18653\/v1\/W18-5446","article-title":"GLUE: A multi-task benchmark and analysis platform for natural language understanding","volume-title":"Proceedings of International Conference on Learning Representations (ICLR)","author":"Wang"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/D13-1170"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2020.findings-emnlp.148"},{"key":"ref32","first-page":"649","article-title":"Character-level convolutional networks for text classification","volume":"28","author":"Zhang","year":"2015","journal-title":"Advances in Neural Information Processing Systems (NeurIPS)"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1145\/3078971.3078974"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1145\/3240765.3240862"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/277044.277240"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/TCSS.2023.3268950"},{"key":"ref37","article-title":"Rethinking deep neural network ownership verification: Embedding passports to defeat ambiguity attacks","author":"Fan","year":"2019","journal-title":"Advances in Neural Information Processing Systems (NeurIPS)"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/CIC.2016.065"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/HST.2018.8383886"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v35i11.17155"},{"key":"ref41","article-title":"Partial fine-tuning: A successor to full fine-tuning for vision transformers","author":"Ye","year":"2023"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.52202\/068431-1919"},{"key":"ref43","article-title":"LoRA: Low-rank adaptation of large language models","volume-title":"Proceedings of the 10th International Conference on Learning Representations (ICLR)","author":"Hu"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2022.acl-short.1"}],"event":{"name":"2026 IEEE 11th European Symposium on Security and Privacy (EuroS&P)","location":"Lisbon, Portugal","start":{"date-parts":[[2026,7,6]]},"end":{"date-parts":[[2026,7,10]]}},"container-title":["2026 IEEE 11th European Symposium on Security and Privacy (EuroS&P)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11624144\/11623655\/11624312.pdf?arnumber=11624312","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,31]],"date-time":"2026-07-31T04:53:40Z","timestamp":1785473620000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11624312\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,7]]},"references-count":44,"URL":"https:\/\/doi.org\/10.1109\/eurosp68448.2026.00051","relation":{},"subject":[],"published":{"date-parts":[[2026,7]]}}}