{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,9]],"date-time":"2026-07-09T15:30:40Z","timestamp":1783611040719,"version":"3.55.0"},"reference-count":61,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"2","license":[{"start":{"date-parts":[[2024,3,1]],"date-time":"2024-03-01T00:00:00Z","timestamp":1709251200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2024,3,1]],"date-time":"2024-03-01T00:00:00Z","timestamp":1709251200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2024,3,1]],"date-time":"2024-03-01T00:00:00Z","timestamp":1709251200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62020106013"],"award-info":[{"award-number":["62020106013"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61972454"],"award-info":[{"award-number":["61972454"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61802051"],"award-info":[{"award-number":["61802051"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61772121"],"award-info":[{"award-number":["61772121"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61728102"],"award-info":[{"award-number":["61728102"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Sichuan Science and Technology Program","award":["2020JDTD0007"],"award-info":[{"award-number":["2020JDTD0007"]}]},{"name":"Sichuan Science and Technology Program","award":["2020YFG0298"],"award-info":[{"award-number":["2020YFG0298"]}]},{"name":"Fundamental Research Funds for Chinese Central Universities","award":["ZYGX2020ZB027"],"award-info":[{"award-number":["ZYGX2020ZB027"]}]},{"name":"Singapore Ministry of Education AcRF Tier 2","award":["MOET2EP20121-0006"],"award-info":[{"award-number":["MOET2EP20121-0006"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Dependable and Secure Comput."],"published-print":{"date-parts":[[2024,3]]},"DOI":"10.1109\/tdsc.2023.3261327","type":"journal-article","created":{"date-parts":[[2023,3,24]],"date-time":"2023-03-24T18:37:06Z","timestamp":1679683026000},"page":"685-700","source":"Crossref","is-referenced-by-count":49,"title":["A Comprehensive Defense Framework Against Model Extraction Attacks"],"prefix":"10.1109","volume":"21","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-4592-8094","authenticated-orcid":false,"given":"Wenbo","family":"Jiang","sequence":"first","affiliation":[{"name":"School of Computer Science and Engineering, University of Electronic Science and Technology of China, Chengdu, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1961-7946","authenticated-orcid":false,"given":"Hongwei","family":"Li","sequence":"additional","affiliation":[{"name":"School of Computer Science and Engineering, University of Electronic Science and Technology of China, Chengdu, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9764-9345","authenticated-orcid":false,"given":"Guowen","family":"Xu","sequence":"additional","affiliation":[{"name":"School of Computer Science and Engineering, Nanyang Technological University, Singapore"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6595-6650","authenticated-orcid":false,"given":"Tianwei","family":"Zhang","sequence":"additional","affiliation":[{"name":"School of Computer Science and Engineering, Nanyang Technological University, Singapore"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5720-0941","authenticated-orcid":false,"given":"Rongxing","family":"Lu","sequence":"additional","affiliation":[{"name":"Faculty of Computer Science, University of New Brunswick, Fredericton, NB, Canada"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP.2019.8682539"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00907"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1038\/518020a"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4842-4470-8_2"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/3318464.3386126"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/3394486.3406699"},{"key":"ref7","article-title":"The era of cognitive systems: An inside look at IBM watson and how it works","author":"High","year":"2012"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.5555\/3241094.3241142"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00038"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2019.00044"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00509"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2020.24178"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v34i01.5432"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00031"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/ICC.2019.8761422"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/TVT.2020.2977378"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.282"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/3052973.3053009"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.41"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813677"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243834"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/3274694.3274740"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00085"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/CNS48642.2020.9162336"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2019.00020"},{"key":"ref26","article-title":"Prediction poisoning: Utility-constrained defenses against model stealing attacks","author":"Orekondy","year":"2019"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1145\/3474085.3475591"},{"key":"ref28","article-title":"Deep neural network fingerprinting by conferrable adversarial examples","author":"Lukas","year":"2019"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2021\/336"},{"key":"ref30","first-page":"1","article-title":"Deep neural network fingerprinting by conferrable adversarial examples","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Lukas"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.00474"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2021.3106169"},{"key":"ref33","article-title":"Stealing neural networks via timing side channels","author":"Duddu","year":"2018"},{"key":"ref34","article-title":"Explaining and harnessing adversarial examples","author":"Goodfellow","year":"2014"},{"key":"ref35","first-page":"1","article-title":"Adversarial manipulation of deep representations","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Sabour"},{"key":"ref36","article-title":"Model zoo: Discover open source deep learning code and pretrained models"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1145\/3196494.3196550"},{"key":"ref38","first-page":"1615","article-title":"Turning your weakness into a strength: Watermarking deep neural networks by backdooring","volume-title":"Proc. USENIX Secur. Symp.","author":"Adi"},{"key":"ref39","article-title":"Entangled watermarks as a defense against model extraction","author":"Jia","year":"2020"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00031"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.48550\/ARXIV.1706.06083"},{"key":"ref42","article-title":"High accuracy and high fidelity extraction of neural networks","volume-title":"Proc. 29th USENIX Secur. Symp.","author":"Jagielski"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN.2014.6889457"},{"key":"ref44","article-title":"Adversarial active learning for deep networks: A margin based approach","author":"Ducoffe","year":"2018"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1201\/9781351251389-8"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1145\/3128572.3140447"},{"key":"ref47","article-title":"Distilling the knowledge in a neural network","author":"Hinton","year":"2015"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1007\/s10489-020-02086-4"},{"key":"ref49","first-page":"870","article-title":"Adversarial label flips attack on support vector machines","volume-title":"Proc. Eur. Conf. Artif. Intell.","author":"Xiao"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1007\/s00521-020-04831-9"},{"key":"ref51","volume-title":"Optimal Stopping Rules","volume":"8","author":"Shiryaev","year":"2007"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/T-C.1974.223784"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1145\/3446776"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/5.726791"},{"key":"ref55","article-title":"Fashion-MNIST: A novel image dataset for benchmarking machine learning algorithms","author":"Xiao","year":"2017"},{"key":"ref56","article-title":"Learning multiple layers of features from tiny images","author":"Krizhevsky","year":"2009"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1145\/3065386"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1109\/sp46215.2023.10179406"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1145\/3078971.3078974"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2002.1008392"},{"key":"ref61","first-page":"1","article-title":"Dataset inference: Ownership resolution inmachine learning","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Maini"}],"container-title":["IEEE Transactions on Dependable and Secure Computing"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/8858\/10472294\/10080996.pdf?arnumber=10080996","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,3,26]],"date-time":"2024-03-26T12:48:48Z","timestamp":1711457328000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10080996\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,3]]},"references-count":61,"journal-issue":{"issue":"2"},"URL":"https:\/\/doi.org\/10.1109\/tdsc.2023.3261327","relation":{},"ISSN":["1545-5971","1941-0018","2160-9209"],"issn-type":[{"value":"1545-5971","type":"print"},{"value":"1941-0018","type":"electronic"},{"value":"2160-9209","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,3]]}}}