{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,8]],"date-time":"2026-01-08T08:05:52Z","timestamp":1767859552177,"version":"3.49.0"},"reference-count":60,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62472454"],"award-info":[{"award-number":["62472454"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["U2336208"],"award-info":[{"award-number":["U2336208"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"Postgraduate Academic Innovation Program","doi-asserted-by":"publisher","award":["73120-12253019"],"award-info":[{"award-number":["73120-12253019"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans.Inform.Forensic Secur."],"published-print":{"date-parts":[[2025]]},"DOI":"10.1109\/tifs.2025.3592572","type":"journal-article","created":{"date-parts":[[2025,7,24]],"date-time":"2025-07-24T17:54:21Z","timestamp":1753379661000},"page":"7764-7776","source":"Crossref","is-referenced-by-count":1,"title":["New Visible Watermark Protection Mechanism Based on Information Hiding"],"prefix":"10.1109","volume":"20","author":[{"ORCID":"https:\/\/orcid.org\/0009-0004-3612-7959","authenticated-orcid":false,"given":"Wenhong","family":"Huang","sequence":"first","affiliation":[{"name":"School of Cyber Science and Technology, Shenzhen Campus of Sun Yat-sen University, Shenzhen, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yunshu","family":"Dai","sequence":"additional","affiliation":[{"name":"School of Cyber Science and Technology, Shenzhen Campus of Sun Yat-sen University, Shenzhen, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1243-3909","authenticated-orcid":false,"given":"Jianwei","family":"Fei","sequence":"additional","affiliation":[{"name":"School of Cyber Science and Technology, Shenzhen Campus of Sun Yat-sen University, Shenzhen, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3098-3373","authenticated-orcid":false,"given":"Fangjun","family":"Huang","sequence":"additional","affiliation":[{"name":"School of Cyber Science and Technology, Shenzhen Campus of Sun Yat-sen University, Shenzhen, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00702"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v35i2.16205"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/WACV48630.2021.00373"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/3474085.3475592"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v37i2.25337"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1016\/j.neunet.2024.106961"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-19781-9_1"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/3581783.3612034"},{"key":"ref9","article-title":"Towards deep learning models resistant to adversarial attacks","author":"Madry","year":"2017","journal-title":"arXiv:1706.06083"},{"key":"ref10","first-page":"3319","article-title":"Axiomatic attribution for deep networks","volume-title":"Proc. Int. Conf. Mach. Learn.","volume":"70","author":"Sundararajan"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2024.3491778"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/TAES.2025.3529431"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2024.104155"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.00469"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.00772"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1016\/j.jisa.2023.103572"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1016\/j.neunet.2023.03.037"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2024.3525089"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW59228.2023.00228"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v32i1.11668"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/278476.278484"},{"key":"ref22","article-title":"Explaining and harnessing adversarial examples","author":"Goodfellow","year":"2014","journal-title":"arXiv:1412.6572"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/3422622"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"ref25","article-title":"Adversarial machine learning at scale","author":"Kurakin","year":"2016","journal-title":"arXiv:1611.01236"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2020.3003571"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2022.3186791"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/TCSVT.2022.3148406"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2023.3262156"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2024.3402153"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2024.3453041"},{"key":"ref32","article-title":"Reversible adversarial attack based on reversible image transformation","author":"Yin","year":"2019","journal-title":"arXiv:1911.02360"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.00070"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1016\/j.patrec.2022.12.018"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1007\/s11042-023-15383-0"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/ICIP.1994.413536"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1147\/sj.353.0313"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/TCSVT.2023.3311483"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1007\/s11042-024-19029-7"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1007\/s11042-023-17014-0"},{"key":"ref41","first-page":"2066","article-title":"Hiding images in plain sight: Deep steganography","volume-title":"Proc. Adv. Neural Inf. Process. Syst. (NIPS)","volume":"30","author":"Baluja"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.02165"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1007\/s11042-023-16171-6"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1007\/s00371-023-03050-2"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1007\/s11042-023-15727-w"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/TMM.2024.3405717"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1145\/3323873.3325011"},{"key":"ref48","article-title":"NICE: Non-linear independent components estimation","author":"Dinh","year":"2014","journal-title":"arXiv:1410.8516"},{"key":"ref49","first-page":"2214","article-title":"The reversible residual network: Backpropagation without storing activations","volume-title":"Proc. Adv. Neural Inf. Process. Syst. (NIPS)","volume":"30","author":"Gomez"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v37i4.25633"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1016\/j.neunet.2023.02.005"},{"key":"ref52","first-page":"80730","article-title":"CRoSS: Diffusion model makes controllable, robust and secure image steganography","volume-title":"Proc. Adv. Neural Inf. Process. Syst. (NIPS)","author":"Yu"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/34.192463"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/TCSVT.2024.3460172"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW50498.2020.00224"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1109\/JSEN.2023.3246043"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-10602-1_48"},{"key":"ref58","article-title":"Adam: A method for stochastic optimization","author":"Kingma","year":"2014","journal-title":"arXiv:1412.6980"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00068"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-24574-4_28"}],"container-title":["IEEE Transactions on Information Forensics and Security"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/10206\/10810755\/11095771.pdf?arnumber=11095771","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,1]],"date-time":"2025-08-01T18:13:57Z","timestamp":1754072037000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11095771\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025]]},"references-count":60,"URL":"https:\/\/doi.org\/10.1109\/tifs.2025.3592572","relation":{},"ISSN":["1556-6013","1556-6021"],"issn-type":[{"value":"1556-6013","type":"print"},{"value":"1556-6021","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025]]}}}