{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,9,16]],"date-time":"2025-09-16T16:25:06Z","timestamp":1758039906708,"version":"3.44.0"},"reference-count":53,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"18","license":[{"start":{"date-parts":[[2025,9,15]],"date-time":"2025-09-15T00:00:00Z","timestamp":1757894400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2025,9,15]],"date-time":"2025-09-15T00:00:00Z","timestamp":1757894400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,9,15]],"date-time":"2025-09-15T00:00:00Z","timestamp":1757894400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"CCF-Ant Privacy Computing Special Research Fund","award":["CCF-AFSG RF20220019"],"award-info":[{"award-number":["CCF-AFSG RF20220019"]}]},{"DOI":"10.13039\/501100003399","name":"Science and Technology Commission of Shanghai Municipality","doi-asserted-by":"crossref","award":["24ZR1424000"],"award-info":[{"award-number":["24ZR1424000"]}],"id":[{"id":"10.13039\/501100003399","id-type":"DOI","asserted-by":"crossref"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"crossref","award":["U23B2023"],"award-info":[{"award-number":["U23B2023"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"crossref"}]},{"name":"Basic Research Program for Natural Science of Guizhou Province","award":["QIANKEHEJICHU-ZD[2025]-043"],"award-info":[{"award-number":["QIANKEHEJICHU-ZD[2025]-043"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Internet Things J."],"published-print":{"date-parts":[[2025,9,15]]},"DOI":"10.1109\/jiot.2025.3586013","type":"journal-article","created":{"date-parts":[[2025,7,4]],"date-time":"2025-07-04T13:52:10Z","timestamp":1751637130000},"page":"38172-38184","source":"Crossref","is-referenced-by-count":0,"title":["StegGuard: Secrets Encoder and Decoder Act as Fingerprint of Self-Supervised Pretrained Model"],"prefix":"10.1109","volume":"12","author":[{"ORCID":"https:\/\/orcid.org\/0009-0001-1495-2323","authenticated-orcid":false,"given":"Xingdong","family":"Ren","sequence":"first","affiliation":[{"name":"School of Communications and Information Engineering, Shanghai University, Shanghai, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1599-7232","authenticated-orcid":false,"given":"Hanzhou","family":"Wu","sequence":"additional","affiliation":[{"name":"School of Communications and Information Engineering, Shanghai University, Shanghai, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yinggui","family":"Wang","sequence":"additional","affiliation":[{"name":"Ant Misuan Technology, Ant Group Company Ltd., Hangzhou, Zhejiang, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0003-4127-637X","authenticated-orcid":false,"given":"Haojie","family":"Liu","sequence":"additional","affiliation":[{"name":"School of Communications and Information Engineering, Shanghai University, Shanghai, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Xiaofeng","family":"Lu","sequence":"additional","affiliation":[{"name":"School of Communications and Information Engineering, Shanghai University, Shanghai, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6440-8513","authenticated-orcid":false,"given":"Guangling","family":"Sun","sequence":"additional","affiliation":[{"name":"School of Communications and Information Engineering, Shanghai University, Shanghai, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.5555\/3524938.3525087"},{"key":"ref2","article-title":"Improved baselines with momentum contrastive learning","author":"Chen","year":"2020","journal-title":"arXiv:2003.04297"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01553"},{"key":"ref4","first-page":"1","article-title":"Rethinking deep neural network ownership verification: Embedding passports to defeat ambiguity attacks","volume-title":"Proc. 33rd Adv. Neural Inf. Process. Syst.","author":"Fan"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v34i07.6976"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833747"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/TCSVT.2020.3030671"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/3433210.3437526"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00486"},{"key":"ref10","article-title":"Deep neural network fingerprinting by conferrable adversarial examples","author":"Lukas","year":"2021","journal-title":"arXiv:1912.00888"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.2352\/ISSN.2470-1173.2020.4.MWSF-022"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/3297858.3304051"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/WIFS53200.2021.9648376"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2909068"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833644"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1007\/s00521-019-04434-z"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.17"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/ISCAS51556.2021.9401119"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484749"},{"key":"ref20","article-title":"ML-leaks: Model and data independent membership inference attacks and defenses on machine learning models","author":"Salem","year":"2018","journal-title":"arXiv:1806.01246"},{"key":"ref21","first-page":"1","article-title":"Thieves on sesame street! Model extraction of BERT-based APIs","volume-title":"Proc. Int. Conf. Learn. Represent.","author":"Kalpesh"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00509"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.01571"},{"key":"ref24","first-page":"1615","article-title":"Turning your weakness into a strength: Watermarking deep neural networks by backdooring","volume-title":"Proc. 27th USENIX Secur. Symp. (USENIX Secur.)","author":"Adi"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/ICDIS55630.2022.00042"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1145\/3548606.3559355"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2025.230338"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1016\/j.comcom.2019.12.016"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01307"},{"key":"ref30","first-page":"36571","article-title":"Are you stealing my model? sample correlation for fingerprinting deep neural networks","volume-title":"Proc. 36th Adv. Neural Inf. Process. Syst.","author":"Guan"},{"key":"ref31","first-page":"12058","article-title":"Dataset inference for self-supervised models","volume-title":"Proc. 36th Adv. Neural Inf. Process. Syst.","author":"Dziedzic"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2024.naacl-long.180"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1007\/s11263-024-02254-w"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/SP54263.2024.00232"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/3652583.3658057"},{"key":"ref36","first-page":"1","article-title":"Prediction poisoning: Towards defenses against DNN model stealing attacks","volume-title":"Proc. 8th Int. Conf. Learn. Represent.","author":"Orekondy"},{"key":"ref37","article-title":"Defending against machine learning model stealing attacks using deceptive perturbations","author":"Lee","year":"2018","journal-title":"arXiv:1806.00054"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00085"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1145\/3548606.3560586"},{"key":"ref40","first-page":"5757","article-title":"On the difficulty of defending self-supervised learning against model extraction","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Dziedzic"},{"key":"ref41","first-page":"1","article-title":"Bucks for buckets (B4B): Active defenses against stealing encoders","volume-title":"Proc. 37th NeurIPS","author":"Dubinski"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2025.3538266"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.00082"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2024\/81"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1007\/s11263-015-0816-y"},{"volume-title":"Learning Multiple Layers of Features from Tiny Images","year":"2009","author":"Krizhevsky","key":"ref46"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN.2011.6033395"},{"key":"ref48","first-page":"215","article-title":"An analysis of single-layer networks in unsupervised feature learning","volume-title":"Proc. 14th Int. Conf. Artif. Intell. Stat.","author":"Coates"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref50","article-title":"Very deep convolutional networks for large-scale image recognition","author":"Simonyan","year":"2015","journal-title":"arXiv:1409.1556"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.243"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.48550\/arXiv.2010.11929"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.74"}],"container-title":["IEEE Internet of Things Journal"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/6488907\/11153580\/11071981.pdf?arnumber=11071981","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,9,11]],"date-time":"2025-09-11T05:06:18Z","timestamp":1757567178000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11071981\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,9,15]]},"references-count":53,"journal-issue":{"issue":"18"},"URL":"https:\/\/doi.org\/10.1109\/jiot.2025.3586013","relation":{},"ISSN":["2327-4662","2372-2541"],"issn-type":[{"type":"electronic","value":"2327-4662"},{"type":"electronic","value":"2372-2541"}],"subject":[],"published":{"date-parts":[[2025,9,15]]}}}