{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,13]],"date-time":"2026-10-13T17:23:56Z","timestamp":1791912236022,"version":"4.3.4"},"reference-count":56,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"4","license":[{"start":{"date-parts":[[2024,12,1]],"date-time":"2024-12-01T00:00:00Z","timestamp":1733011200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"funder":[{"name":"General Research Fund of the Hong Kong Research Grants Council","award":["1420352"],"award-info":[{"award-number":["1420352"]}]},{"name":"Research Matching Grant Scheme","award":["7106937"],"award-info":[{"award-number":["7106937"]}]},{"name":"Research Matching Grant Scheme","award":["8601130"],"award-info":[{"award-number":["8601130"]}]},{"name":"Research Matching Grant Scheme","award":["8601440"],"award-info":[{"award-number":["8601440"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE J. Emerg. Sel. Topics Circuits Syst."],"published-print":{"date-parts":[[2024,12]]},"DOI":"10.1109\/jetcas.2024.3476386","type":"journal-article","created":{"date-parts":[[2024,10,30]],"date-time":"2024-10-30T13:53:03Z","timestamp":1730296383000},"page":"608-619","source":"Crossref","is-referenced-by-count":9,"title":["On Function-Coupled Watermarks for Deep Neural Networks"],"prefix":"10.1109","volume":"14","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-7327-7786","authenticated-orcid":false,"given":"Xiangyu","family":"Wen","sequence":"first","affiliation":[{"name":"Department of Computer Science and Engineering, The Chinese University of Hong Kong, Hong Kong, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9122-5923","authenticated-orcid":false,"given":"Yu","family":"Li","sequence":"additional","affiliation":[{"name":"School of Computer Science and Technology, Harbin Institute of Technology (Shenzhen), Shenzhen, Guangdong, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6181-3900","authenticated-orcid":false,"given":"Wei","family":"Jiang","sequence":"additional","affiliation":[{"name":"School of Information and Software Engineering, University of Electronic Science and Technology of China, Chengdu, Sichuan, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6747-126X","authenticated-orcid":false,"given":"Qiang","family":"Xu","sequence":"additional","affiliation":[{"name":"Department of Computer Science and Engineering, The Chinese University of Hong Kong, Hong Kong, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.14778\/3415478.3415530"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/3196494.3196550"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/3321705.3329808"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1007\/s00521-019-04434-z"},{"key":"ref5","first-page":"6978","article-title":"Watermarking deep neural networks with greedy residuals","volume-title":"Proc. ICML","author":"Liu"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/3078971.3078974"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/3323873.3325042"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/3297858.3304051"},{"key":"ref9","first-page":"4716","article-title":"Rethinking deep neural network ownership verification: Embedding passports to defeat ambiguity attacks","volume-title":"Proc. NeurIPS","author":"Fan"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2021.3088846"},{"key":"ref11","first-page":"1615","article-title":"Turning your weakness into a strength: Watermarking deep neural networks by backdooring","volume-title":"Proc. USENIX Secur.","author":"Adi"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom50675.2020.00062"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2021\/80"},{"issue":"1","key":"ref14","first-page":"1929","article-title":"Dropout: A simple way to prevent neural networks from overfitting","volume":"15","author":"Srivastava","year":"2014","journal-title":"J. Mach. Learn. Res."},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1016\/j.jisa.2021.103004"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/ICPR48806.2021.9413062"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.2352\/ISSN.2470-1173.2020.4.MWSF-022"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.3390\/e22121379"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2909068"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/3240765.3240862"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/3474085.3475591"},{"key":"ref22","first-page":"1","article-title":"Explaining and harnessing adversarial examples","volume-title":"Proc. ICLR","author":"Goodfellow"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP.2001.941335"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP43922.2022.9747416"},{"key":"ref25","first-page":"1450","article-title":"Certified neural network watermarks with randomized smoothing","volume-title":"Proc. ICML","author":"Bansal"},{"key":"ref26","first-page":"1","article-title":"Very deep convolutional networks for large-scale image recognition","volume-title":"Proc. ICLR","author":"Simonyan"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/5.726791"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref29","article-title":"Learning multiple layers of features from tiny images","author":"Krizhevsky","year":"2009"},{"issue":"7","key":"ref30","first-page":"3","article-title":"Tiny ImageNet visual recognition challenge","volume":"7","author":"Ya","year":"2015","journal-title":"CS 231N"},{"key":"ref31","first-page":"1937","article-title":"Entangled watermarks as a defense against model extraction","volume-title":"Proc. USENIX Secur. Symp.","author":"Jia"},{"key":"ref32","first-page":"1","article-title":"Deep neural network fingerprinting by conferrable adversarial examples","volume-title":"Proc. ICLR","author":"Lukas"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1145\/3359789.3359801"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00486"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.01457"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2022.3182979"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833747"},{"key":"ref38","first-page":"3635","article-title":"Fine-tuning is not enough: A simple yet effective watermark removal attack for DNN models","volume-title":"Proc. 30th Int. Joint Conf. Artif. Intell.","author":"Guo"},{"key":"ref39","first-page":"1","article-title":"mixup: Beyond empirical risk minimization","volume-title":"Proc. ICLR","author":"Zhang"},{"key":"ref40","first-page":"1058","article-title":"Regularization of neural networks using DropConnect","volume-title":"Proc. IEEE Int. Conf. Mach. Learn. (PMLR)","author":"Wan"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1145\/3372297.3423362"},{"key":"ref42","article-title":"Targeted backdoor attacks on deep learning systems using data poisoning","author":"Chen","year":"2017","journal-title":"arXiv:1712.05526"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.01615"},{"key":"ref44","first-page":"18944","article-title":"Backdoor attack with imperceptible input and latent modification","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"34","author":"Doan"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00509"},{"key":"ref46","first-page":"16696","article-title":"Margin-based neural network watermarking","volume-title":"Proc. ICML","author":"Kim"},{"key":"ref47","first-page":"14900","article-title":"Anti-backdoor learning: Training clean models on poisoned data","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"34","author":"Li"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00031"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3363216"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.74"},{"key":"ref51","first-page":"1","article-title":"Domain watermark: Effective and harmless dataset copyright protection is closed at hand","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"36","author":"Guo"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1145\/3581783.3612515"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1145\/3437880.3460401"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2022.3196790"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2023.109844"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2023.3250210"}],"container-title":["IEEE Journal on Emerging and Selected Topics in Circuits and Systems"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/5503868\/10799540\/10738841.pdf?arnumber=10738841","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,1,15]],"date-time":"2025-01-15T15:02:02Z","timestamp":1736953322000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10738841\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,12]]},"references-count":56,"journal-issue":{"issue":"4"},"URL":"https:\/\/doi.org\/10.1109\/jetcas.2024.3476386","relation":{},"ISSN":["2156-3357","2156-3365"],"issn-type":[{"value":"2156-3357","type":"print"},{"value":"2156-3365","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,12]]}}}