{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,6]],"date-time":"2026-04-06T20:50:48Z","timestamp":1775508648540,"version":"3.50.1"},"reference-count":51,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62402131"],"award-info":[{"award-number":["62402131"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62372130"],"award-info":[{"award-number":["62372130"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["U23A20307"],"award-info":[{"award-number":["U23A20307"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62472116"],"award-info":[{"award-number":["62472116"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62132018"],"award-info":[{"award-number":["62132018"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62272118"],"award-info":[{"award-number":["62272118"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Guangzhou Basic and Applied Basic Research Project","award":["2023A04J1725"],"award-info":[{"award-number":["2023A04J1725"]}]},{"name":"Guangzhou Basic and Applied Basic Research Project","award":["2025A03J3182"],"award-info":[{"award-number":["2025A03J3182"]}]},{"name":"Guangzhou Basic and Applied Basic Research Project","award":["2024A03J0397"],"award-info":[{"award-number":["2024A03J0397"]}]},{"name":"Scientific Research Innovation Capability Support Project for Young Faculty","award":["SRICSPYF-BS2025017"],"award-info":[{"award-number":["SRICSPYF-BS2025017"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans.Inform.Forensic Secur."],"published-print":{"date-parts":[[2026]]},"DOI":"10.1109\/tifs.2026.3672383","type":"journal-article","created":{"date-parts":[[2026,3,9]],"date-time":"2026-03-09T19:57:10Z","timestamp":1773086230000},"page":"3498-3512","source":"Crossref","is-referenced-by-count":0,"title":["Your Non-Transferable Learning is Fragile: Practical Breach of Protected Models"],"prefix":"10.1109","volume":"21","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-2854-2931","authenticated-orcid":false,"given":"Anli","family":"Yan","sequence":"first","affiliation":[{"name":"School of Computer Science and Technology, Hainan University, Haikou, Hainan, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0000-5823-8343","authenticated-orcid":false,"given":"Huali","family":"Ren","sequence":"additional","affiliation":[{"name":"School of Artificial Intelligence, Guangzhou University, Guangzhou, Guangdong, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3762-674X","authenticated-orcid":false,"given":"Kanghua","family":"Mo","sequence":"additional","affiliation":[{"name":"School of Artificial Intelligence, Guangzhou University, Guangzhou, Guangdong, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Peigen","family":"Ye","sequence":"additional","affiliation":[{"name":"School of Cyberspace Science and Technology, Beijing Institute of Technology, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zhenxin","family":"Zhang","sequence":"additional","affiliation":[{"name":"School of Cyber Engineering, Xidian University, Xi’an, Shaanxi, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1493-9671","authenticated-orcid":false,"given":"Hongyang","family":"Yan","sequence":"additional","affiliation":[{"name":"School of Artificial Intelligence, Guangzhou University, Guangzhou, Guangdong, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0385-8793","authenticated-orcid":false,"given":"Jin","family":"Li","sequence":"additional","affiliation":[{"name":"School of Artificial Intelligence, Guangzhou University, Guangzhou, Guangdong, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","first-page":"1615","article-title":"Turning your weakness into a strength: Watermarking deep neural networks by backdooring","volume-title":"Proc. 27th USENIX Conf. Security Symp.","author":"Adi"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/WACV57701.2024.00183"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/TSC.2024.3349784"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2025.3538266"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52733.2024.01169"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.52202\/075280-2572"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/SP54263.2024.00234"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-73016-0_22"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2023.241012"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1007\/978-981-96-8183-9_7"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52733.2024.02721"},{"key":"ref12","article-title":"Improving non-transferable representation learning by harnessing content and style","volume-title":"Proc. The 12th Int. Conf. Learn. Represent.","author":"Hong"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/SP54263.2024.00248"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2024.110887"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2023.110230"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.02310"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1038\/s41467-024-46142-w"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v38i19.30128"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v39i17.34012"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2024.3370978"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.52202\/075280-1498"},{"key":"ref22","article-title":"Alignment-aware model extraction attacks on large language models","author":"Liang","year":"2024","journal-title":"arXiv:2409.02718"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.52202\/075280-2443"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.01915"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/3749987"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/TAI.2024.3351116"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2025.3530691"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52733.2024.02226"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52733.2024.00218"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01307"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/TITS.2024.3439557"},{"key":"ref32","first-page":"5305","article-title":"Modelguard: Information-theoretic defense against model extraction attacks","volume-title":"Proc. 33rd USENIX Secur. Symp. (Security)","author":"Tang"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51070.2023.00470"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2024.3450282"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.01961"},{"key":"ref36","article-title":"Non-transferable learning: A new approach for model ownership verification and applicability authorization","volume-title":"Proc. 12th Int. Conf. Learn. Represent.","author":"Wang"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/SP54263.2024.00233"},{"key":"ref38","first-page":"945","article-title":"MLaaS in the wild: Workload analysis and scheduling in large-scale heterogeneous GPU clusters","volume-title":"Proc. 19th USENIX Symp. Networked Syst. Design Implement. (NSDI)","author":"Weng"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/SP54263.2024.00110"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.52202\/068431-0741"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM48880.2022.9796701"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2025.3552175"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1016\/j.inffus.2023.102008"},{"key":"ref44","article-title":"Adversarial unlearning of backdoors via implicit hypergradient","volume-title":"Proc. 10th Int. Conf. Learn. Represent.","author":"Zeng"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1145\/3696410.3714894"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/SECON55815.2022.9918591"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52733.2024.00025"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/SP54263.2024.00232"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2023.3285015"},{"key":"ref50","article-title":"Archlock: Locking dnn transferability at the architecture level with a zero-cost binary predictor","volume-title":"Proc. The 12th Int. Conf. Learn. Represent.","author":"Zhou"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51070.2023.00412"}],"container-title":["IEEE Transactions on Information Forensics and Security"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/10206\/11313711\/11426974.pdf?arnumber=11426974","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,4,6]],"date-time":"2026-04-06T19:55:07Z","timestamp":1775505307000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11426974\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026]]},"references-count":51,"URL":"https:\/\/doi.org\/10.1109\/tifs.2026.3672383","relation":{},"ISSN":["1556-6013","1556-6021"],"issn-type":[{"value":"1556-6013","type":"print"},{"value":"1556-6021","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026]]}}}