{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,8]],"date-time":"2026-02-08T03:39:29Z","timestamp":1770521969147,"version":"3.49.0"},"reference-count":30,"publisher":"IEEE","license":[{"start":{"date-parts":[[2021,1,10]],"date-time":"2021-01-10T00:00:00Z","timestamp":1610236800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2021,1,10]],"date-time":"2021-01-10T00:00:00Z","timestamp":1610236800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2021,1,10]],"date-time":"2021-01-10T00:00:00Z","timestamp":1610236800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001381","name":"National Research Foundation (NRF) Singapore","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100001381","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61572278"],"award-info":[{"award-number":["61572278"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2021,1,10]]},"DOI":"10.1109\/icpr48806.2021.9412684","type":"proceedings-article","created":{"date-parts":[[2021,5,6]],"date-time":"2021-05-06T02:15:54Z","timestamp":1620267354000},"page":"10149-10156","source":"Crossref","is-referenced-by-count":29,"title":["Removing Backdoor-Based Watermarks in Neural Networks with Limited Data"],"prefix":"10.1109","author":[{"given":"Xuankai","family":"Liu","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Fengting","family":"Li","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Bihan","family":"Wen","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Qi","family":"Li","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/3359789.3359790"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/3078971.3078974"},{"key":"ref11","first-page":"1615","article-title":"Turning your weakness into a strength: Watermarking deep neural networks by backdooring","author":"adi","year":"0","journal-title":"27th USENIX Security Symposium ( USENIX Security 18)"},{"key":"ref12","article-title":"Leveraging unlabeled data for watermark removal of deep neural networks","author":"chen","year":"0","journal-title":"ICML Workshop on Learning Security and Privacy"},{"key":"ref13","article-title":"Refit: a unified watermark removal framework for deep learning systems with limited data","author":"chen","year":"2019","journal-title":"arXiv Cryptography and Security"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1073\/pnas.1611835114"},{"key":"ref15","author":"shafieinejad","year":"2019","journal-title":"On the robustness of the backdoor-based watermarking in deep neural networks"},{"key":"ref16","article-title":"Targeted backdoor attacks on deep learning systems using data poisoning","author":"chen","year":"2017","journal-title":"arXiv Cryptography and Security"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00031"},{"key":"ref18","author":"liu","year":"2018","journal-title":"Trojaning Attack on Neural Networks"},{"key":"ref19","author":"gu","year":"2017","journal-title":"BadNets Identifying vulnerabilities in the machine learning model supply chain"},{"key":"ref28","author":"hitaj","year":"2018","journal-title":"Have you stolen my model? evasion attacks against deep neural network watermarking techniques"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/ICMLA.2015.152"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP.2019.8682202"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2014.214"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-62416-7_15"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v34i07.7000"},{"key":"ref5","first-page":"14","article-title":"Scaling machine learning as a service","author":"li","year":"0","journal-title":"International Conference on Predictive Applications and APIs"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/3196494.3196550"},{"key":"ref7","author":"rouhani","year":"0","journal-title":"Deepsigns A generic watermarking framework for protecting the ownership of deep learning models"},{"key":"ref2","first-page":"173","article-title":"Deep speech 2: End-to-end speech recognition in english and mandarin","author":"amodei","year":"0","journal-title":"International Conference on Machine Learning"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1007\/s00521-019-04434-z"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/72.554195"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/5.726791"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/3128572.3140450"},{"key":"ref21","author":"liu","year":"2017","journal-title":"Trojaning Attack on Neural Networks"},{"key":"ref24","author":"chen","year":"2018","journal-title":"Detecting backdoor attacks on deep neural networks by activation clustering"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-00470-5_13"},{"key":"ref26","author":"chou","year":"2018","journal-title":"Sentinet Detecting physical attacks against deep learning systems"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/3359789.3359790"}],"event":{"name":"2020 25th International Conference on Pattern Recognition (ICPR)","location":"Milan, Italy","start":{"date-parts":[[2021,1,10]]},"end":{"date-parts":[[2021,1,15]]}},"container-title":["2020 25th International Conference on Pattern Recognition (ICPR)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/9411940\/9411911\/09412684.pdf?arnumber=9412684","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,5,10]],"date-time":"2022-05-10T15:40:48Z","timestamp":1652197248000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9412684\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,1,10]]},"references-count":30,"URL":"https:\/\/doi.org\/10.1109\/icpr48806.2021.9412684","relation":{},"subject":[],"published":{"date-parts":[[2021,1,10]]}}}