{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,16]],"date-time":"2026-05-16T04:00:33Z","timestamp":1778904033983,"version":"3.51.4"},"reference-count":60,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"2","license":[{"start":{"date-parts":[[2025,3,1]],"date-time":"2025-03-01T00:00:00Z","timestamp":1740787200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2025,3,1]],"date-time":"2025-03-01T00:00:00Z","timestamp":1740787200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,3,1]],"date-time":"2025-03-01T00:00:00Z","timestamp":1740787200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Dependable and Secure Comput."],"published-print":{"date-parts":[[2025,3]]},"DOI":"10.1109\/tdsc.2024.3456811","type":"journal-article","created":{"date-parts":[[2024,9,10]],"date-time":"2024-09-10T19:33:23Z","timestamp":1725996803000},"page":"1717-1731","source":"Crossref","is-referenced-by-count":4,"title":["DuplexGuard: Safeguarding Deletion Right in Machine Unlearning via Duplex Watermarking"],"prefix":"10.1109","volume":"22","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-5702-5749","authenticated-orcid":false,"given":"Xiaoyu","family":"Zhang","sequence":"first","affiliation":[{"name":"State Key Laboratory of Integrated Service Networks (ISN), Xidian University, Xi’an, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0002-5847-3575","authenticated-orcid":false,"given":"Chenyang","family":"Zhang","sequence":"additional","affiliation":[{"name":"State Key Laboratory of Integrated Service Networks (ISN), Xidian University, Xi’an, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4110-2068","authenticated-orcid":false,"given":"Jian","family":"Lou","sequence":"additional","affiliation":[{"name":"School of Software Engineering, Sun Yat-sen University, Guangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1852-6364","authenticated-orcid":false,"given":"Kai","family":"Wu","sequence":"additional","affiliation":[{"name":"School of Artificial Intelligence, Xidian University, Xi’an, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1525-3356","authenticated-orcid":false,"given":"Zilong","family":"Wang","sequence":"additional","affiliation":[{"name":"State Key Laboratory of Integrated Service Networks (ISN), Xidian University, Xi’an, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5858-5070","authenticated-orcid":false,"given":"Xiaofeng","family":"Chen","sequence":"additional","affiliation":[{"name":"State Key Laboratory of Integrated Service Networks (ISN), Xidian University, Xi’an, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.3390\/INFOo11020108"},{"key":"ref2","article-title":"WebGPT: Browser-assisted question-answering with human feedback","author":"Nakano","year":"2021"},{"key":"ref3","first-page":"1764","article-title":"Towards end-to-end speech recognition with recurrent neural networks","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Graves"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP.2013.6638947"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/3534678.3539092"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/3539618.3591899"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2009.5206848"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1007\/s11263-020-01316-z"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/2766462.2767755"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2023.3348204"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2019.2941244"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2015.35"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484756"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v35i13.17371"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2023.3328269"},{"key":"ref16","article-title":"Dataset inference: Ownership resolution in machine learning","author":"Maini","year":"2021"},{"key":"ref17","article-title":"Dataset inference for self-supervised models","author":"Dziedzic","year":"2022"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2023.3265535"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/3510548.3519376"},{"key":"ref20","first-page":"8326","article-title":"Radioactive data: Tracing through training","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Sablayrolles"},{"key":"ref21","article-title":"Untargeted backdoor watermark: Towards harmless and stealthy dataset copyright protection","author":"Li","year":"2022"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00031"},{"key":"ref23","first-page":"16913","article-title":"Adversarial neuron pruning purifies backdoored deep models","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Wu"},{"key":"ref24","first-page":"22285","article-title":"One-shot neural backdoor erasing via adversarial weight masking","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Chai"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/3503161.3548065"},{"key":"ref26","first-page":"3518","article-title":"Making AI forget you: Data deletion in machine learning","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Ginart"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00019"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/3485447.3511997"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2022\/556"},{"key":"ref30","article-title":"Certified data removal from machine learning models","author":"Guo","year":"2019"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00932"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.00085"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58526-6_23"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1145\/3196494.3196550"},{"key":"ref35","first-page":"1615","article-title":"Turning your weakness into a strength: Watermarking deep neural networks by backdooring","volume-title":"Proc. 27th USENIX Secur. Symp.","author":"Adi"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2020.3021407"},{"key":"ref37","first-page":"44424","article-title":"Hidden poison: Machine unlearning enables camouflaged poisoning attacks","volume-title":"Proc. 37th Int. Conf. Neural Inf. Process. Syst.","author":"Di"},{"key":"ref38","article-title":"Witches\u2019 brew: Industrial scale data poisoning via gradient matching","author":"Geiping","year":"2020","journal-title":"arXiv: 2009.02276"},{"key":"ref39","first-page":"19165","article-title":"Sleeper agent: Scalable hidden trigger backdoors for neural networks trained from scratch","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Souri"},{"key":"ref40","article-title":"Learning multiple layers of features from tiny images","author":"Krizhevsky","year":"2009"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.2118\/18761-MS"},{"key":"ref42","article-title":"Imagenette: A smaller subset of 10 easily classified classes from Imagenet","author":"Howard"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1007\/s11263-015-0816-y"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref45","article-title":"Very deep convolutional networks for large-scale image recognition","author":"Simonyan","year":"2014"},{"issue":"3","key":"ref46","article-title":"Online algorithms and stochastic approximations","volume":"5","author":"Saad","year":"1998","journal-title":"Online Learn."},{"key":"ref47","volume-title":"Introduction to Mathematical Statistics","author":"Hogg","year":"2004"},{"key":"ref48","volume-title":"Information Theory and Statistics","author":"Kullback","year":"1997"},{"key":"ref49","first-page":"1937","article-title":"Entangled watermarks as a defense against model extraction","volume-title":"Proc. USENIX Secur. Symp.","author":"Jia"},{"key":"ref50","article-title":"DeepViT: Towards deeper vision transformer","author":"Zhou","year":"2021"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v34i07.6871"},{"key":"ref52","article-title":"Label-consistent backdoor attacks","author":"Turner","year":"2019"},{"key":"ref53","article-title":"Wanet\u2013imperceptible warping-based backdoor attack","author":"Nguyen","year":"2021"},{"key":"ref54","article-title":"Bernoulli distribution","author":"Weisstein","year":"2002"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.01929"},{"key":"ref56","article-title":"Gradient-based language model red teaming","author":"Wichers","year":"2024"},{"key":"ref57","first-page":"61593","article-title":"On prompt-driven safeguarding for large language models","volume-title":"Proc. 41st Int. Conf. Mach. Learn.","volume":"235","author":"Zheng"},{"key":"ref58","article-title":"BERT: Pre-training of deep bidirectional transformers for language understanding","author":"Devlin","year":"2018"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/D18-1404"},{"key":"ref60","first-page":"1631","article-title":"Recursive deep models for semantic compositionality over a sentiment treebank","volume-title":"Proc. Conf. Empirical Methods Natural Lang. Process.","author":"Socher"}],"container-title":["IEEE Transactions on Dependable and Secure Computing"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/8858\/10925471\/10670570.pdf?arnumber=10670570","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,3,17]],"date-time":"2025-03-17T21:20:56Z","timestamp":1742246456000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10670570\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,3]]},"references-count":60,"journal-issue":{"issue":"2"},"URL":"https:\/\/doi.org\/10.1109\/tdsc.2024.3456811","relation":{},"ISSN":["1545-5971","1941-0018","2160-9209"],"issn-type":[{"value":"1545-5971","type":"print"},{"value":"1941-0018","type":"electronic"},{"value":"2160-9209","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,3]]}}}