{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,11]],"date-time":"2026-07-11T16:38:42Z","timestamp":1783787922862,"version":"3.55.0"},"reference-count":48,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"8","license":[{"start":{"date-parts":[[2024,8,1]],"date-time":"2024-08-01T00:00:00Z","timestamp":1722470400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2024,8,1]],"date-time":"2024-08-01T00:00:00Z","timestamp":1722470400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2024,8,1]],"date-time":"2024-08-01T00:00:00Z","timestamp":1722470400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"International Scholar Exchange Fellowship (ISEF) Program through the Chey Institute for Advanced Studies, South Korea"},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["U19B2004"],"award-info":[{"award-number":["U19B2004"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Neural Netw. Learning Syst."],"published-print":{"date-parts":[[2024,8]]},"DOI":"10.1109\/tnnls.2023.3250210","type":"journal-article","created":{"date-parts":[[2023,3,6]],"date-time":"2023-03-06T18:43:27Z","timestamp":1678128207000},"page":"11204-11217","source":"Crossref","is-referenced-by-count":35,"title":["Unambiguous and High-Fidelity Backdoor Watermarking for Deep Neural Networks"],"prefix":"10.1109","volume":"35","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-5184-4359","authenticated-orcid":false,"given":"Guang","family":"Hua","sequence":"first","affiliation":[{"name":"School of Electronic Information, Wuhan University, Wuhan, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5063-9484","authenticated-orcid":false,"given":"Andrew Beng Jin","family":"Teoh","sequence":"additional","affiliation":[{"name":"School of Electrical and Electronic Engineering, College of Engineering, Yonsei University, Seoul, South Korea"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3545-7863","authenticated-orcid":false,"given":"Yong","family":"Xiang","sequence":"additional","affiliation":[{"name":"School of Information Technology, Deakin University, Burwood, VIC, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8533-1612","authenticated-orcid":false,"given":"Hao","family":"Jiang","sequence":"additional","affiliation":[{"name":"School of Electronic Information, Wuhan University, Wuhan, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1038\/nature14539"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-15398-4_13"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2009.5206848"},{"key":"ref4","first-page":"1877","article-title":"Language models are few-shot learners","volume-title":"Proc. Adv. Neural Inf. Process. Syst. (NeurIPS)","volume":"33","author":"Brown"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/TCAD.2020.3018403"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1016\/j.neucom.2021.07.051"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/3078971.3078974"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/3323873.3325042"},{"key":"ref9","first-page":"4716","article-title":"Rethinking deep neural network ownership verification: Embedding passports to defeat ambiguity attacks","volume-title":"Proc. Adv. Neural Inf. Process. Syst. (NeurIPS)","author":"Fan"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-55393-7_33"},{"key":"ref11","first-page":"1340","article-title":"DeepWatermark: Embedding watermark into DNN model","volume-title":"Proc. Asia\u2013Pacific Signal Inf. Process. Assoc. Annu. Summit Conf. (APSIPA ASC)","author":"Kuribayashi"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.21437\/Interspeech.2020-2787"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/3394171.3413729"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/3297858.3304051"},{"key":"ref15","first-page":"1615","article-title":"Turning your weakness into a strength: Watermarking deep neural networks by backdooring","volume-title":"Proc. 27th USENIX Secur. Symp. (USENIX Secur.)","author":"Adi"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/3196494.3196550"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/3240765.3240862"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/3359789.3359801"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1007\/s00521-019-04434-z"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/3321705.3329808"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1186\/s13640-020-00527-1"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-47436-2_35"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom50675.2020.00062"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1016\/j.comcom.2019.12.016"},{"key":"ref25","first-page":"1","article-title":"Deep neural network fingerprinting by conferrable adversarial examples","volume-title":"Proc. Int. Conf. Learn. Represent. (ICLR)","author":"Lukas"},{"key":"ref26","article-title":"Entangled watermarks as a defense against model extraction","volume-title":"Proc. 30th USENIX Secur. Symp. (USENIX Secur.)","author":"Jia"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1145\/3398394"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/tnnls.2022.3182979"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v34i07.6871"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1007\/s11042-021-11135-0"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00112"},{"key":"ref32","article-title":"Color and edge-aware adversarial image perturbations","author":"Bassett","year":"2020","journal-title":"arXiv:2008.12454"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2020.2981604"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/TCSVT.2020.3030671"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v34i07.6976"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2021.3064850"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2020.2991378"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1145\/3052973.3053009"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/TEVC.2019.2890858"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/tc.2021.3065172"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW.2017.172"},{"key":"ref42","first-page":"1","article-title":"A baseline for detecting misclassified and out-of-distribution examples in neural networks","volume-title":"Proc. Int. Conf. Learn. Represent. (ICLR)","author":"Hendrycks"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2013.2267960"},{"key":"ref44","volume-title":"Pattern Classification","author":"Duda","year":"2001"},{"key":"ref45","article-title":"Deep residual learning for image recognition","author":"He","year":"2015","journal-title":"arXiv:1512.03385"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.5244\/C.30.87"},{"key":"ref47","first-page":"6105","article-title":"EfficientNet: Rethinking model scaling for convolutional neural networks","volume-title":"Proc. 36th Int. Conf. Mach. Learn. (ICML)","volume":"97","author":"Tan"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-46478-7_31"}],"container-title":["IEEE Transactions on Neural Networks and Learning Systems"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/5962385\/10623582\/10059007.pdf?arnumber=10059007","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,8,6]],"date-time":"2024-08-06T18:15:30Z","timestamp":1722968130000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10059007\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,8]]},"references-count":48,"journal-issue":{"issue":"8"},"URL":"https:\/\/doi.org\/10.1109\/tnnls.2023.3250210","relation":{},"ISSN":["2162-237X","2162-2388"],"issn-type":[{"value":"2162-237X","type":"print"},{"value":"2162-2388","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,8]]}}}