{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,10]],"date-time":"2026-02-10T16:11:58Z","timestamp":1770739918868,"version":"3.49.0"},"reference-count":47,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"Liverpool Centre for Cardiovascular Science and University of Exeter"},{"name":"Royal Society Fund, U.K.","award":["IEC\\NSFC\\242172"],"award-info":[{"award-number":["IEC\\NSFC\\242172"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. on Image Process."],"published-print":{"date-parts":[[2026]]},"DOI":"10.1109\/tip.2026.3655563","type":"journal-article","created":{"date-parts":[[2026,1,28]],"date-time":"2026-01-28T21:01:28Z","timestamp":1769634088000},"page":"1290-1304","source":"Crossref","is-referenced-by-count":0,"title":["StealthMark: Harmless and Stealthy Ownership Verification for Medical Segmentation via Uncertainty-Guided Backdoors"],"prefix":"10.1109","volume":"35","author":[{"ORCID":"https:\/\/orcid.org\/0009-0000-6526-0928","authenticated-orcid":false,"given":"Qinkai","family":"Yu","sequence":"first","affiliation":[{"name":"Division of Biomedical Sciences, Bioengineering Program, King Abdullah University of Science and Technology (KAUST), Thuwal, Saudi Arabia"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0003-2020-6989","authenticated-orcid":false,"given":"Chong","family":"Zhang","sequence":"additional","affiliation":[{"name":"School of Advanced Technology, Xi’an Jiaotong-Liverpool University, Suzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0240-3033","authenticated-orcid":false,"given":"Gaojie","family":"Jin","sequence":"additional","affiliation":[{"name":"Computer Science Department, University of Exeter, Exeter, U.K."}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7740-8843","authenticated-orcid":false,"given":"Tianjin","family":"Huang","sequence":"additional","affiliation":[{"name":"Computer Science Department, University of Exeter, Exeter, U.K."}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3641-1429","authenticated-orcid":false,"given":"Wei","family":"Zhou","sequence":"additional","affiliation":[{"name":"School of Computer Science and Informatics, Cardiff University, Cardiff, U.K."}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0003-0772-2575","authenticated-orcid":false,"given":"Wenhui","family":"Li","sequence":"additional","affiliation":[{"name":"Computer Science Department, University of Exeter, Exeter, U.K."}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1671-1379","authenticated-orcid":false,"given":"Xiaobo","family":"Jin","sequence":"additional","affiliation":[{"name":"School of Advanced Technology, Xi’an Jiaotong-Liverpool University, Suzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6734-5247","authenticated-orcid":false,"given":"Bo","family":"Huang","sequence":"additional","affiliation":[{"name":"College of Optoelectronic Engineering, Chongqing University, Chongqing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4357-4592","authenticated-orcid":false,"given":"Yitian","family":"Zhao","sequence":"additional","affiliation":[{"name":"Chinese Academy of Sciences, Ningbo Cixi Institute of Biomedical Engineering, Cixi, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Guang","family":"Yang","sequence":"additional","affiliation":[{"name":"School of Bioengineering, Imperial College London, London, U.K."}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7566-1626","authenticated-orcid":false,"given":"Gregory Y. H.","family":"Lip","sequence":"additional","affiliation":[{"name":"Liverpool Centre for Cardiovascular Science, University of Liverpool, Liverpool, U.K."}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7873-0922","authenticated-orcid":false,"given":"Yalin","family":"Zheng","sequence":"additional","affiliation":[{"name":"Liverpool Centre for Cardiovascular Science, University of Liverpool, Liverpool, U.K."}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3731-9168","authenticated-orcid":false,"given":"Aline","family":"Villavicencio","sequence":"additional","affiliation":[{"name":"Computer Science Department, University of Exeter, Exeter, U.K."}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7344-2174","authenticated-orcid":false,"given":"Yanda","family":"Meng","sequence":"additional","affiliation":[{"name":"Division of Biomedical Sciences, Bioengineering Program, King Abdullah University of Science and Technology (KAUST), Thuwal, Saudi Arabia"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1016\/j.media.2017.07.005"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1038\/s41592-020-01008-z"},{"key":"ref3","first-page":"13238","article-title":"Untargeted backdoor watermark: Towards harmless and stealthy dataset copyright protection","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"35","author":"Li"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2025.230338"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v34i07.6976"},{"key":"ref6","article-title":"A recipe for watermarking diffusion models","author":"Zhao","year":"2023","journal-title":"arXiv:2303.10137"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2909068"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/SaTML59370.2024.00020"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1147\/sj.353.0313"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-01267-0_40"},{"key":"ref11","first-page":"1615","article-title":"Turning your weakness into a strength: Watermarking deep neural networks by backdooring","volume-title":"Proc. USENIX Secur.","author":"Adi"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2023.3322315"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134077"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/SMC52423.2021.9658998"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/3196494.3196550"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/N16-3020"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1016\/j.media.2024.103183"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1038\/s41586-020-2145-8"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.48550\/arXiv.1802.00368"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-25066-8_9"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.48550\/arXiv.2102.04306"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51070.2023.00371"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1038\/s41467-024-44824-z"},{"key":"ref24","article-title":"Targeted backdoor attacks on deep learning systems using data poisoning","author":"Chen","year":"2017","journal-title":"arXiv:1712.05526"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/TCSVT.2003.815957"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-72390-2_42"},{"key":"ref27","article-title":"Explainability matters: Backdoor attacks on medical imaging","author":"Nwadike","year":"2020","journal-title":"arXiv:2101.00008"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.02021"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-72104-5_38"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-72111-3_59"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/3487890"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.5555\/3295222"},{"key":"ref33","article-title":"A unified approach to interpreting model predictions","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Lundberg"},{"key":"ref34","first-page":"3319","article-title":"Axiomatic attribution for deep networks","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Sundararajan"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.74"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1016\/j.media.2019.101570"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/ISBI.2014.6867807"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/IEMBS.2010.5626137"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1117\/12.2293584"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/CBMS.2011.5999143"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN48605.2020.9207664"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1007\/s11548-013-0926-3"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1016\/j.compmedimag.2015.02.007"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/TMI.2015.2487997"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1155\/2017\/4037190"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-37734-2_37"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/CSF51468.2021.00044"}],"container-title":["IEEE Transactions on Image Processing"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/83\/11355710\/11364088.pdf?arnumber=11364088","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,2,9]],"date-time":"2026-02-09T21:10:32Z","timestamp":1770671432000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11364088\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026]]},"references-count":47,"URL":"https:\/\/doi.org\/10.1109\/tip.2026.3655563","relation":{},"ISSN":["1057-7149","1941-0042"],"issn-type":[{"value":"1057-7149","type":"print"},{"value":"1941-0042","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026]]}}}