{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,25]],"date-time":"2026-02-25T17:11:07Z","timestamp":1772039467675,"version":"3.50.1"},"reference-count":26,"publisher":"IEEE","license":[{"start":{"date-parts":[[2025,5,25]],"date-time":"2025-05-25T00:00:00Z","timestamp":1748131200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,5,25]],"date-time":"2025-05-25T00:00:00Z","timestamp":1748131200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025,5,25]]},"DOI":"10.1109\/iscas56072.2025.11044032","type":"proceedings-article","created":{"date-parts":[[2025,6,27]],"date-time":"2025-06-27T17:42:19Z","timestamp":1751046139000},"page":"1-5","source":"Crossref","is-referenced-by-count":1,"title":["PUF-based Edge DNN Model IP Protection with Self-obfuscation and Publicly Verifiable Ownership"],"prefix":"10.1109","author":[{"given":"Jingdong","family":"Jiang","sequence":"first","affiliation":[{"name":"The Chinese University of Hong Kong,School of Science and Engineering,Shenzhen,China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yue","family":"Zheng","sequence":"additional","affiliation":[{"name":"The Chinese University of Hong Kong,School of Science and Engineering,Shenzhen,China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Chip-Hong","family":"Chang","sequence":"additional","affiliation":[{"name":"Nanyang Technological University,School of Electrical and Electronic Engineering,Singapore"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/JETCAS.2024.3477348"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/3078971.3078974"},{"key":"ref3","first-page":"17 061","article-title":"A watermark for large language models","volume-title":"Proceedings of the 40th International Conference on Machine Learning, ser. Proceedings of Machine Learning Research","volume":"202","author":"Kirchenbauer"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/AICAS54282.2022.9869923"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00486"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1016\/j.comcom.2019.12.016"},{"key":"ref7","article-title":"Rethinking deep neural network ownership verification: Embedding passports to defeat ambiguity attacks","volume-title":"Proc. Adv. Neural Inf. Process. Syst.(NeuralIPS)","volume":"32","author":"Fan"},{"key":"ref8","first-page":"22 619","article-title":"Passport-aware normalization for deep model protection","volume-title":"Proc. Adv. Neural Inf. Process. Syst.(NeuralIPS)","volume":"33","author":"Zhang"},{"key":"ref9","first-page":"22 177","article-title":"Trapdoor normalization with irreversible ownership verification","volume-title":"Proc. Int. Conf. Mach. Learn.(ICML)","volume":"202","author":"Liu"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2022.3198267"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/MCAS.2017.2713305"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/TCSII.2023.3309105"},{"key":"ref13","article-title":"Device-bind key-storageless hardware AI model IP protection: A PUF and permute-diffusion encryption-enabled approach","author":"Pan","year":"2022"},{"key":"ref14","article-title":"Physical Unclonable Function (PUF)","year":"2023"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/ISSCC.2019.8662537"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2024.3354115"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/JSSC.2022.3233373"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/502512.502546"},{"key":"ref19","article-title":"Learning multiple layers of features from tiny images","author":"Krizhevsky","year":"2009","journal-title":"Canadian Institute For Advanced Research, Tech. Rep"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2006.79"},{"key":"ref21","article-title":"Imagenet classification with deep convolutional neural networks","volume-title":"Proc. Adv. Neural Inf. Process. Syst.(NeuralIPS)","volume":"25","author":"Krizhevsky"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/3505634"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2021.3088846"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52733.2024.01169"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.00785"}],"event":{"name":"2025 IEEE International Symposium on Circuits and Systems (ISCAS)","location":"London, United Kingdom","start":{"date-parts":[[2025,5,25]]},"end":{"date-parts":[[2025,5,28]]}},"container-title":["2025 IEEE International Symposium on Circuits and Systems (ISCAS)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11043142\/11042930\/11044032.pdf?arnumber=11044032","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,28]],"date-time":"2025-06-28T07:10:06Z","timestamp":1751094606000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11044032\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,5,25]]},"references-count":26,"URL":"https:\/\/doi.org\/10.1109\/iscas56072.2025.11044032","relation":{},"subject":[],"published":{"date-parts":[[2025,5,25]]}}}