{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,7]],"date-time":"2026-07-07T15:54:20Z","timestamp":1783439660710,"version":"3.54.6"},"reference-count":48,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"2","license":[{"start":{"date-parts":[[2026,3,1]],"date-time":"2026-03-01T00:00:00Z","timestamp":1772323200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2026,3,1]],"date-time":"2026-03-01T00:00:00Z","timestamp":1772323200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,3,1]],"date-time":"2026-03-01T00:00:00Z","timestamp":1772323200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"NSFC\/RGC Collaborative Research Scheme","award":["CRS_HKUST602\/24"],"award-info":[{"award-number":["CRS_HKUST602\/24"]}]},{"name":"NSFC\/RGC Joint Research Scheme","award":["N_PolyU529\/22"],"award-info":[{"award-number":["N_PolyU529\/22"]}]},{"name":"NSFC\/RGC Joint Research Scheme","award":["62261160391"],"award-info":[{"award-number":["62261160391"]}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62472032"],"award-info":[{"award-number":["62472032"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Open Foundation of Key Laboratory of Cyberspace Security"},{"DOI":"10.13039\/501100002338","name":"Ministry of Education of the People's Republic of China","doi-asserted-by":"publisher","award":["KLCS20240209"],"award-info":[{"award-number":["KLCS20240209"]}],"id":[{"id":"10.13039\/501100002338","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Young Elite Scientists Sponsorship Program"},{"name":"CAST","award":["2023QNRC001"],"award-info":[{"award-number":["2023QNRC001"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Dependable and Secure Comput."],"published-print":{"date-parts":[[2026,3]]},"DOI":"10.1109\/tdsc.2025.3621865","type":"journal-article","created":{"date-parts":[[2025,10,15]],"date-time":"2025-10-15T17:43:00Z","timestamp":1760550180000},"page":"1894-1909","source":"Crossref","is-referenced-by-count":5,"title":["$\\mathsf {Trident}$ Trident: A Secure Framework for Flexible Artificial Intelligence Model Lifecycle Management in Public Clouds"],"prefix":"10.1109","volume":"23","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-9854-2697","authenticated-orcid":false,"given":"Mingyang","family":"Zhao","sequence":"first","affiliation":[{"name":"Department of Computing, The Hong Kong Polytechnic University, Hong Kong"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0003-5630-8442","authenticated-orcid":false,"given":"Zekai","family":"Yu","sequence":"additional","affiliation":[{"name":"School of Computer Science and Engineering, University of Electronic Science and Technology of China, Chengdu, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0001-9274-8264","authenticated-orcid":false,"given":"Qiyuan","family":"Li","sequence":"additional","affiliation":[{"name":"School of Cyberspace Science and Technology, Beijing Institute of Technology, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7684-8540","authenticated-orcid":false,"given":"Chuan","family":"Zhang","sequence":"additional","affiliation":[{"name":"School of Cyberspace Science and Technology, Beijing Institute of Technology, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Song","family":"Guo","sequence":"additional","affiliation":[{"name":"Department of Computer Science and Engineering, The Hong Kong University of Science and Technology, Hong Kong"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4223-8220","authenticated-orcid":false,"given":"Bin","family":"Xiao","sequence":"additional","affiliation":[{"name":"Department of Computing, The Hong Kong Polytechnic University, Hong Kong"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/3637528.3671497"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2023\/710"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v38i20.30264"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/3613904.3642402"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/SP54263.2024.00099"},{"key":"ref6","first-page":"1813","article-title":"REMARK-LLM: A robust and efficient watermarking framework for generative large language models","volume-title":"Proc. 33rd USENIX Secur. Symp.","author":"Zhang","year":"2024"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2024.acl-long.315"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2024.findings-acl.327"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2024.findings-acl.678"},{"key":"ref10","first-page":"13423","article-title":"AquaLoRA: Toward white-box protection for customized stable diffusion models via watermark LORA","volume-title":"Proc. 41st Int. Conf. Mach. Learn.","author":"Feng","year":"2024"},{"key":"ref11","first-page":"30718","article-title":"Adaptive text watermark for large language models","volume-title":"Proc. 41st Int. Conf. Mach. Learn.","author":"Liu","year":"2024"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00039"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23066"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1016\/j.csi.2024.103875"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2023.3330171"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2024.3436925"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/JSAC.2023.3345392"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2023.3326379"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/TSC.2024.3451183"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/JSAC.2025.3560008"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2025.3550787"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/TMC.2024.3516119"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/TSC.2024.3380258"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/3658644.3690281"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2024.3461408"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM52122.2024.10621342"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2022.acl-long.507"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v38i18.29959"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/ICDE60146.2024.00135"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/ICDE60146.2024.00393"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM52122.2024.10621254"},{"key":"ref32","first-page":"42543","article-title":"Position: Technical research and talent is needed for effective AI governance","volume-title":"Proc. 41st Int. Conf. Mach. Learn.","author":"Reuel","year":"2024"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/SP54263.2024.00250"},{"key":"ref34","first-page":"5680","article-title":"Stealing part of a production language model","volume-title":"Proc. 41st Int. Conf. Mach. Learn.","author":"Carlini","year":"2024"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/3597503.3623325"},{"key":"ref36","first-page":"5823","article-title":"Prompt stealing attacks against text-to-image generation models","volume-title":"Proc. 33rd USENIX Secur. Symp.","author":"Shen","year":"2024"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1145\/3576915.3616652"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833607"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2020.24178"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2007.11"},{"key":"ref41","first-page":"1","article-title":"Chameleon signatures","volume-title":"Proc. Netw. Distrib. Syst. Secur. Symp.","author":"Krawczyk","year":"2000"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1145\/3214303"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-96884-1_19"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-032-01881-6_9"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/JPROC.2022.3205665"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-30620-4_8"},{"key":"ref47","first-page":"6993","article-title":"Dacapo: Automatic bootstrapping management for efficient fully homomorphic encryption","volume-title":"Proc. 33rd USENIX Secur. Symp.","author":"Cheon","year":"2024"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1145\/3423558"}],"container-title":["IEEE Transactions on Dependable and Secure Computing"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/8858\/11434575\/11204181.pdf?arnumber=11204181","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,3,17]],"date-time":"2026-03-17T20:22:08Z","timestamp":1773778928000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11204181\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,3]]},"references-count":48,"journal-issue":{"issue":"2"},"URL":"https:\/\/doi.org\/10.1109\/tdsc.2025.3621865","relation":{},"ISSN":["1545-5971","1941-0018","2160-9209"],"issn-type":[{"value":"1545-5971","type":"print"},{"value":"1941-0018","type":"electronic"},{"value":"2160-9209","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,3]]}}}