{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,29]],"date-time":"2026-06-29T17:59:25Z","timestamp":1782755965898,"version":"3.54.5"},"reference-count":56,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"7","license":[{"start":{"date-parts":[[2021,7,1]],"date-time":"2021-07-01T00:00:00Z","timestamp":1625097600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2021,7,1]],"date-time":"2021-07-01T00:00:00Z","timestamp":1625097600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2021,7,1]],"date-time":"2021-07-01T00:00:00Z","timestamp":1625097600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61902235"],"award-info":[{"award-number":["61902235"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["U1636206"],"award-info":[{"award-number":["U1636206"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["U1936214"],"award-info":[{"award-number":["U1936214"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61525203"],"award-info":[{"award-number":["61525203"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Shanghai \u201cChen Guang\u201d Project","award":["19CG46"],"award-info":[{"award-number":["19CG46"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Circuits Syst. Video Technol."],"published-print":{"date-parts":[[2021,7]]},"DOI":"10.1109\/tcsvt.2020.3030671","type":"journal-article","created":{"date-parts":[[2020,10,13]],"date-time":"2020-10-13T15:56:20Z","timestamp":1602604580000},"page":"2591-2601","source":"Crossref","is-referenced-by-count":177,"title":["Watermarking Neural Networks With Watermarked Images"],"prefix":"10.1109","volume":"31","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-1599-7232","authenticated-orcid":false,"given":"Hanzhou","family":"Wu","sequence":"first","affiliation":[{"name":"School of Communication and Information Engineering, Shanghai University, Shanghai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Gen","family":"Liu","sequence":"additional","affiliation":[{"name":"School of Communication and Information Engineering, Shanghai University, Shanghai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yuwei","family":"Yao","sequence":"additional","affiliation":[{"name":"School of Communication and Information Engineering, Shanghai University, Shanghai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5867-1315","authenticated-orcid":false,"given":"Xinpeng","family":"Zhang","sequence":"additional","affiliation":[{"name":"School of Communication and Information Engineering, Shanghai University, Shanghai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref39","first-page":"4278","article-title":"Inception-v4, inception-ResNet and the impact of residual connections on learning","author":"szegedy","year":"2017","journal-title":"Proc AAAI Conf Artif Intell"},{"key":"ref38","first-page":"5967","article-title":"Image-to-image translation with conditional adversarial nets","author":"isola","year":"2017","journal-title":"Proc IEEE Conf Comput Vis Pattern Recognit"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1145\/3321705.3329808"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1145\/3359789.3359801"},{"key":"ref31","article-title":"On the robustness of the backdoor-based watermarking in deep neural networks","author":"shafieinejad","year":"2019","journal-title":"arXiv 1906 07745"},{"key":"ref30","article-title":"Turning your weakness into a strength: Watermarking deep neural networks by backdooring","author":"adi","year":"2018","journal-title":"arXiv 1802 04633"},{"key":"ref37","article-title":"Auto-encoding variational Bayes","author":"kingma","year":"2013","journal-title":"arXiv 1312 6114"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v34i07.6976"},{"key":"ref35","first-page":"2672","article-title":"Generative adversarial networks","author":"goodfellow","year":"2014","journal-title":"Proc Int Conf Neural Inf Process"},{"key":"ref34","article-title":"BlackMarks: Blackbox multibit watermarking for deep neural networks","author":"chen","year":"2019","journal-title":"arXiv 1904 00344"},{"key":"ref28","article-title":"DeepSigns: A generic watermarking framework for IP protection of deep learning models","author":"darvish rouhani","year":"2018","journal-title":"arXiv 1804 00750"},{"key":"ref27","first-page":"4714","article-title":"Rethinking deep neural network ownership verification: Embedding passports to defeat ambiguity attacks","author":"fan","year":"2019","journal-title":"Proc Adv Neural Inf Process Syst (NeurIPS)"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/3196494.3196550"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2015.7298594"},{"key":"ref1","doi-asserted-by":"crossref","first-page":"436","DOI":"10.1038\/nature14539","article-title":"Deep learning","volume":"521","author":"lecun","year":"2015","journal-title":"Nature"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/2909827.2933196"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/TCSVT.2020.2998476"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/WIFS.2016.7823903"},{"key":"ref24","article-title":"Distortion agnostic deep watermarking","author":"luo","year":"2020","journal-title":"arXiv 2001 04580"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-01267-0_40"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.2352\/ISSN.2470-1173.2020.4.MWSF-022"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/3078971.3078974"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/ICIP.2019.8803636"},{"key":"ref51","first-page":"740","article-title":"Microsoft COCO: Common objects in context","author":"lin","year":"2014","journal-title":"Proc Eur Conf Comput Vis"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4302-5930-5_7"},{"key":"ref55","article-title":"Adam: A method for stochastic optimization","author":"kingma","year":"2014","journal-title":"arXiv 1412 6980"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/ACPR.2017.61"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.350"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/ICVGIP.2008.47"},{"key":"ref10","article-title":"Google’s neural machine translation system: Bridging the gap between human and machine translation","author":"wu","year":"2016","journal-title":"arXiv 1609 08144"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/5.771065"},{"key":"ref40","first-page":"315","article-title":"Deep sparse rectifier neural networks","author":"glorot","year":"2011","journal-title":"Proc Int Conf Artif Intell Stat"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/TCSVT.2017.2712162"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/TCSVT.2016.2556585"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/TCSVT.2016.2633878"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/TCSVT.2019.2953720"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/EUSIPCO.2015.7362343"},{"key":"ref17","first-page":"11","author":"milano","year":"2012","journal-title":"Content Control Digital Watermarking and Fingerprinting"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/WIFS.2014.7084298"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/3335203.3335732"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref3","first-page":"234","article-title":"U-Net: Convolutional networks for biomedical image segmentation","author":"ronneberger","year":"2015","journal-title":"Proc Int Conf Med Image Comput Comput -Assist Intervent"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/TASL.2011.2116010"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2012.2205597"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/TASLP.2014.2339736"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP.2012.6288864"},{"key":"ref49","year":"2020","journal-title":"Danbooru2019 A Large-Scale Crowdsourced and Tagged Anime Illustration Dataset"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/P16-1162"},{"key":"ref46","first-page":"794","article-title":"GradNorm: Gradient normalization for adaptive loss balancing in deep multitask networks","author":"chen","year":"2018","journal-title":"Proc Int Conf Mach Learn"},{"key":"ref45","article-title":"MTAdam: Automatic balancing of multiple training loss terms","author":"malkiel","year":"2020","journal-title":"arXiv 2006 14683"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2003.819861"},{"key":"ref47","article-title":"BadNets: Identifying vulnerabilities in the machine learning model supply chain","author":"gu","year":"2017","journal-title":"arXiv 1708 06733"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/LSP.2016.2548421"},{"key":"ref41","first-page":"1097","article-title":"ImageNet classification with deep convolutional neural networks","author":"krizhevsky","year":"2012","journal-title":"Proc Adv Neural Inf Process Syst"},{"key":"ref44","article-title":"Very deep convolutional networks for large-scale image recognition","author":"simonyan","year":"2014","journal-title":"arXiv 1409 1556"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-46475-6_43"}],"container-title":["IEEE Transactions on Circuits and Systems for Video Technology"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/76\/9471039\/09222304.pdf?arnumber=9222304","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,25]],"date-time":"2025-08-25T20:49:19Z","timestamp":1756154959000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9222304\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,7]]},"references-count":56,"journal-issue":{"issue":"7"},"URL":"https:\/\/doi.org\/10.1109\/tcsvt.2020.3030671","relation":{},"ISSN":["1051-8215","1558-2205"],"issn-type":[{"value":"1051-8215","type":"print"},{"value":"1558-2205","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021,7]]}}}