{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,11,15]],"date-time":"2025-11-15T08:03:46Z","timestamp":1763193826463,"version":"3.45.0"},"reference-count":33,"publisher":"IEEE","license":[{"start":{"date-parts":[[2025,6,30]],"date-time":"2025-06-30T00:00:00Z","timestamp":1751241600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,6,30]],"date-time":"2025-06-30T00:00:00Z","timestamp":1751241600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025,6,30]]},"DOI":"10.1109\/ijcnn64981.2025.11228005","type":"proceedings-article","created":{"date-parts":[[2025,11,14]],"date-time":"2025-11-14T18:46:15Z","timestamp":1763145975000},"page":"1-8","source":"Crossref","is-referenced-by-count":0,"title":["DAV: An Adaptive Defense Framework for Model Extraction Attacks"],"prefix":"10.1109","author":[{"given":"Peng","family":"Sui","sequence":"first","affiliation":[{"name":"Hangzhou Dianzi University,School of Computer Science,Hangzhou,China,310018"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jiapeng","family":"Zhou","sequence":"additional","affiliation":[{"name":"Hangzhou Dianzi University,School of Computer Science,Hangzhou,China,310018"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yu","family":"Chen","sequence":"additional","affiliation":[{"name":"Hangzhou Dianzi University,School of Computer Science,Hangzhou,China,310018"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Youhuizi","family":"Li","sequence":"additional","affiliation":[{"name":"Hangzhou Dianzi University,School of Computer Science,Hangzhou,China,310018"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00907"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v34i01.5432"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2020.24178"},{"article-title":"Stealing machine learning models via prediction apis","volume-title":"USENIX Security Symposium,USENIX Security Symposium","author":"Tram\u00e8r","key":"ref4"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.41"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813677"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243834"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2019.00044"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/3274694.3274740"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/cvpr42600.2020.00085"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2023.3261327"},{"key":"ref12","article-title":"Dawn: Dynamic adversarial watermarking of neural networks","author":"Szyller","year":"2019","journal-title":"Cornell University -arXiv, Cornell University - arXiv"},{"key":"ref13","first-page":"5305","article-title":"ModelGuard: Information-Theoretic defense against model extraction attacks","volume-title":"33rd USENIX Security Symposium (USENIX Security 24)","author":"Tang"},{"key":"ref14","article-title":"Prediction poisoning: Towards defenses against dnn model stealing attacks","author":"Orekondy","year":"2019","journal-title":"Learning,arXiv: Learning"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2019.00020"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/3052973.3053009"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.00474"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v37i8.26150"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2019.00020"},{"article-title":"How to steer your adversary: Targeted and efficient model stealing defenses with gradient redirection","year":"2022","author":"Mazeika","key":"ref20"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1201\/9781351251389-8"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52733.2024.02294"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/ICMLA58977.2023.00015"},{"article-title":"Deep anomaly detection with outlier exposure","volume-title":"International Conference on Learning Representations,International Conference on Learning Representations","author":"Hendrycks","key":"ref24"},{"key":"ref25","article-title":"Fashion-mnist: a novel image dataset for benchmarking machine learning algorithms","author":"Han","year":"2017","journal-title":"Learning,arXiv: Learning"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/5.726791"},{"article-title":"Reading digits in natural images with unsupervised feature learning","year":"2011","author":"Netzer","key":"ref27"},{"article-title":"Learning multiple layers of features from tiny images","year":"2009","author":"Krizhevsky","key":"ref28"},{"article-title":"High accuracy and high fidelity extraction of neural networks","volume-title":"USENIX Security Symposium","author":"Jagielski","key":"ref29"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833693"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/SP46215.2023.10179406"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.00474"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v37i8.26150"}],"event":{"name":"2025 International Joint Conference on Neural Networks (IJCNN)","start":{"date-parts":[[2025,6,30]]},"location":"Rome, Italy","end":{"date-parts":[[2025,7,5]]}},"container-title":["2025 International Joint Conference on Neural Networks (IJCNN)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11227166\/11227148\/11228005.pdf?arnumber=11228005","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,11,15]],"date-time":"2025-11-15T08:01:03Z","timestamp":1763193663000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11228005\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,6,30]]},"references-count":33,"URL":"https:\/\/doi.org\/10.1109\/ijcnn64981.2025.11228005","relation":{},"subject":[],"published":{"date-parts":[[2025,6,30]]}}}