{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,4]],"date-time":"2026-06-04T19:29:50Z","timestamp":1780601390967,"version":"3.54.1"},"reference-count":53,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"7","license":[{"start":{"date-parts":[[2025,10,1]],"date-time":"2025-10-01T00:00:00Z","timestamp":1759276800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2025,10,1]],"date-time":"2025-10-01T00:00:00Z","timestamp":1759276800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,10,1]],"date-time":"2025-10-01T00:00:00Z","timestamp":1759276800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"Cloud Technology Endowed Professorship"},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["U22B2062"],"award-info":[{"award-number":["U22B2062"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["U23B2023"],"award-info":[{"award-number":["U23B2023"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62102189"],"award-info":[{"award-number":["62102189"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62372125"],"award-info":[{"award-number":["62372125"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"National Social Sciences Foundation of China","award":["2022-SKJJ-C-082"],"award-info":[{"award-number":["2022-SKJJ-C-082"]}]},{"name":"Nanjing Major Science and Technology Special Project","award":["202405002"],"award-info":[{"award-number":["202405002"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE J. Sel. Top. Signal Process."],"published-print":{"date-parts":[[2025,10]]},"DOI":"10.1109\/jstsp.2025.3583896","type":"journal-article","created":{"date-parts":[[2025,6,27]],"date-time":"2025-06-27T13:46:05Z","timestamp":1751031965000},"page":"1392-1405","source":"Crossref","is-referenced-by-count":1,"title":["ProIP-D2FDM: Protecting Intellectual Property of Deepfake Fingerprint Detection Model on Cross-Material Generalization"],"prefix":"10.1109","volume":"19","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-5323-1297","authenticated-orcid":false,"given":"Chengsheng","family":"Yuan","sequence":"first","affiliation":[{"name":"Engineering Research Center of Digital Forensics, Ministry of Education, the School of Computer Science, Nanjing University of Information Science and Technology, Nanjing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Qiang","family":"Guo","sequence":"additional","affiliation":[{"name":"Engineering Research Center of Digital Forensics, Ministry of Education, the School of Computer Science, Nanjing University of Information Science and Technology, Nanjing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Shasha","family":"Zhang","sequence":"additional","affiliation":[{"name":"Engineering Research Center of Digital Forensics, Ministry of Education, the School of Computer Science, Nanjing University of Information Science and Technology, Nanjing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5641-7169","authenticated-orcid":false,"given":"Zhili","family":"Zhou","sequence":"additional","affiliation":[{"name":"School of Artificial Intelligence, Guangzhou University, Guangdong, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6860-647X","authenticated-orcid":false,"given":"Zhihua","family":"Xia","sequence":"additional","affiliation":[{"name":"College of Cyber Security, Jinan University, Guangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9208-5336","authenticated-orcid":false,"given":"Kim-Kwang Raymond","family":"Choo","sequence":"additional","affiliation":[{"name":"Department of Information Systems and Cyber Security, University of Texas at San Antonio, San Antonio, TX, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2932119"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/TVT.2017.2760281"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/TCSS.2021.3102591"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/TGCN.2021.3067374"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/ICCES48766.2020.9138067"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/TCDS.2021.3062624"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/LSP.2023.3293471"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484805"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/3078971.3078974"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/3196494.3196550"},{"key":"ref11","first-page":"1615","article-title":"Turning your weakness into a strength: Watermarking deep neural networks by backdooring","volume-title":"Proc. 27th USENIX Secur. Symp.","author":"Adi","year":"2018"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.2299\/jsp.24.141"},{"key":"ref13","first-page":"1","article-title":"Hiding images in plain sight: Deep steganography","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Baluja","year":"2017"},{"key":"ref14","article-title":"Undistillable: Making a nasty teacher that cannot teach students","author":"Ma","year":"2021"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/BIOMS.2014.6951531"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1049\/el.2018.0621"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/TCDS.2019.2920364"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1007\/s11554-019-00928-0"},{"key":"ref19","article-title":"End-to-end fingerprints liveness detection using convolutional networks with gram module","author":"Park","year":"2018"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/tai.2021.3133824"},{"key":"ref21","first-page":"1340","article-title":"Deepwatermark: Embedding watermark into DNN model","volume-title":"Proc. Asia-Pacific Signal Inf. Process. Assoc. Annu. Summit Conf.","author":"Kuribayashi","year":"2020"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/3297858.3304051"},{"key":"ref23","first-page":"1","article-title":"Rethinking deep neural network ownership verification: Embedding passports to defeat ambiguity attacks","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Fan","year":"2019"},{"key":"ref24","first-page":"22619","article-title":"Passport-aware normalization for deep model protection","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Zhang","year":"2020"},{"key":"ref25","article-title":"Evolutionary trigger set generation for DNN black-box watermarking","author":"Guo","year":"2019"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1007\/s00521-019-04434-z"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1145\/3240765.3240862"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2021.3064850"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/TCSVT.2020.3030671"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1007\/s10489-022-03339-0"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2003.08.007"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/ICB45273.2019.8987374"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833747"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1145\/1150402.1150464"},{"key":"ref35","article-title":"Distilling the knowledge in a neural network","author":"Hinton","year":"2015"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.754"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.121"},{"key":"ref38","article-title":"Kickstarting deep reinforcement learning","author":"Schmitt","year":"2018"},{"key":"ref39","first-page":"1","article-title":"Learning efficient object detection models with knowledge distillation","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Chen","year":"2017"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.5555\/2969033.2969125"},{"key":"ref41","first-page":"1","article-title":"Zero-shot knowledge transfer via adversarial belief matching","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Micaelli","year":"2019"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00361"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v33i01.33014886"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN48605.2020.9207235"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2020.2970494"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.2969524"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-01267-0_40"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/TGRS.2017.2656380"},{"issue":"1","key":"ref49","first-page":"723","article-title":"A kernel two-sample test","volume":"13","author":"Gretton","year":"2012","journal-title":"J. Mach. Learn. Res."},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1145\/3321705.3329808"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/ICPR.2010.579"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1007\/s11042-020-10035-z"},{"key":"ref53","article-title":"Explaining and harnessing adversarial examples","author":"Goodfellow","year":"2014"}],"container-title":["IEEE Journal of Selected Topics in Signal Processing"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/4200690\/11320985\/11053661.pdf?arnumber=11053661","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,2,12]],"date-time":"2026-02-12T20:59:44Z","timestamp":1770929984000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11053661\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,10]]},"references-count":53,"journal-issue":{"issue":"7"},"URL":"https:\/\/doi.org\/10.1109\/jstsp.2025.3583896","relation":{},"ISSN":["1932-4553","1941-0484"],"issn-type":[{"value":"1932-4553","type":"print"},{"value":"1941-0484","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,10]]}}}