{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,11]],"date-time":"2026-07-11T17:34:11Z","timestamp":1783791251355,"version":"3.55.0"},"publisher-location":"New York, NY, USA","reference-count":31,"publisher":"ACM","license":[{"start":{"date-parts":[[2019,12,9]],"date-time":"2019-12-09T00:00:00Z","timestamp":1575849600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"Key Science Technology Project of Shandong Province","award":["2015G GX101046"],"award-info":[{"award-number":["2015G GX101046"]}]},{"name":"National Natural Science Foundation of China","award":["91546203"],"award-info":[{"award-number":["91546203"]}]},{"name":"Shandong Province, China","award":["2018CXGC0708, 2017CXGC0704"],"award-info":[{"award-number":["2018CXGC0708, 2017CXGC0704"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2019,12,9]]},"DOI":"10.1145\/3359789.3359801","type":"proceedings-article","created":{"date-parts":[[2019,11,22]],"date-time":"2019-11-22T18:41:59Z","timestamp":1574448119000},"page":"126-137","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":131,"title":["How to prove your model belongs to you"],"prefix":"10.1145","author":[{"given":"Zheng","family":"Li","sequence":"first","affiliation":[{"name":"Shandong University, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Chengyu","family":"Hu","sequence":"additional","affiliation":[{"name":"Shandong University, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yang","family":"Zhang","sequence":"additional","affiliation":[{"name":"CISPA Helmholtz Center for Information Security, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Shanqing","family":"Guo","sequence":"additional","affiliation":[{"name":"Shandong University, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2019,12,9]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"Proceedings of the 2018 USENIX Security Symposium (USENIX Security). USENIX.","author":"Adi Yossi","year":"2018","unstructured":"Yossi Adi , Carsten Baum , Moustapha Cisse , Benny Pinkas , and Joseph Keshet . 2018 . Turning Your Weakness Into a Strength: Watermarking Deep Neural Networks by Backdooring . In Proceedings of the 2018 USENIX Security Symposium (USENIX Security). USENIX. Yossi Adi, Carsten Baum, Moustapha Cisse, Benny Pinkas, and Joseph Keshet. 2018. Turning Your Weakness Into a Strength: Watermarking Deep Neural Networks by Backdooring. In Proceedings of the 2018 USENIX Security Symposium (USENIX Security). USENIX."},{"key":"e_1_3_2_1_2_1","volume-title":"EPO guidelines on patentability of artificial intelligence and machine learning. Retrieved","author":"AI","year":"2018","unstructured":"AI patent 2018. EPO guidelines on patentability of artificial intelligence and machine learning. Retrieved November 8, 2018 from http:\/\/patentblog.kluweriplaw.com\/2018\/11\/08\/epo-guidelines-on-patentability-of-artificial-intelligence-and-machine-learning\/ AI patent 2018. EPO guidelines on patentability of artificial intelligence and machine learning. Retrieved November 8, 2018 from http:\/\/patentblog.kluweriplaw.com\/2018\/11\/08\/epo-guidelines-on-patentability-of-artificial-intelligence-and-machine-learning\/"},{"key":"e_1_3_2_1_3_1","volume-title":"Proceedings of the 2017 Annual Conference on Neural Information Processing Systems (NIPS). NIPS, 4467--4475","author":"Chen Yunpeng","year":"2017","unstructured":"Yunpeng Chen , Jianan Li , Huaxin Xiao , Xiaojie Jin , Shuicheng Yan , and Jiashi Feng . 2017 . Dual Path Networks . In Proceedings of the 2017 Annual Conference on Neural Information Processing Systems (NIPS). NIPS, 4467--4475 . Yunpeng Chen, Jianan Li, Huaxin Xiao, Xiaojie Jin, Shuicheng Yan, and Jiashi Feng. 2017. Dual Path Networks. In Proceedings of the 2017 Annual Conference on Neural Information Processing Systems (NIPS). NIPS, 4467--4475."},{"key":"e_1_3_2_1_4_1","volume-title":"Natural Language Processing (Almost) from Scratch. Journal of Machine learning Research","author":"Collobert Ronan","year":"2011","unstructured":"Ronan Collobert , Jason Weston , Leon Bottou , Michael Karlen , Koray Kavukcuoglu , and Pavel P Kuksa . 2011. Natural Language Processing (Almost) from Scratch. Journal of Machine learning Research ( 2011 ). Ronan Collobert, Jason Weston, Leon Bottou, Michael Karlen, Koray Kavukcuoglu, and Pavel P Kuksa. 2011. Natural Language Processing (Almost) from Scratch. Journal of Machine learning Research (2011)."},{"key":"e_1_3_2_1_5_1","unstructured":"Corinna Cortes Yann LeCun and Christopher JC Burges. 1998. The MNIST database of handwritten digits. http:\/\/yann.lecun.com\/exdb\/mnist\/.  Corinna Cortes Yann LeCun and Christopher JC Burges. 1998. The MNIST database of handwritten digits. http:\/\/yann.lecun.com\/exdb\/mnist\/."},{"key":"e_1_3_2_1_6_1","volume-title":"Artificial intelligence and machine learning. Retrieved","author":"EPO","year":"2018","unstructured":"EPO guidelines 2018. Artificial intelligence and machine learning. Retrieved November 1, 2018 from https:\/\/www.epo.org\/law-practice\/legal-texts\/html\/guidelines2018\/e\/g_ii_3_3_1.htm EPO guidelines 2018. Artificial intelligence and machine learning. Retrieved November 1, 2018 from https:\/\/www.epo.org\/law-practice\/legal-texts\/html\/guidelines2018\/e\/g_ii_3_3_1.htm"},{"key":"e_1_3_2_1_7_1","volume-title":"Deep Learning","author":"Goodfellow Ian","unstructured":"Ian Goodfellow , Yoshua Bengio , and Aaron Courville . 2016. Deep Learning . MIT Press . Ian Goodfellow, Yoshua Bengio, and Aaron Courville. 2016. Deep Learning. MIT Press."},{"key":"e_1_3_2_1_8_1","volume-title":"Generative Adversarial Networks. CoRR abs\/1406.2661","author":"Goodfellow Ian J.","year":"2014","unstructured":"Ian J. Goodfellow , Jean Pouget-Abadie , Mehdi Mirza , Bing Xu , David Warde-Farley , Sherjil Ozair , Aaron Courville , and Yoshua Bengio . 2014. Generative Adversarial Networks. CoRR abs\/1406.2661 ( 2014 ). Ian J. Goodfellow, Jean Pouget-Abadie, Mehdi Mirza, Bing Xu, David Warde-Farley, Sherjil Ozair, Aaron Courville, and Yoshua Bengio. 2014. Generative Adversarial Networks. CoRR abs\/1406.2661 (2014)."},{"key":"e_1_3_2_1_9_1","volume-title":"Proceedings of the 2017 1st International Workshop on Deep Learning for Mobile Systems and Applications (DLMSA). ACM, 13--17","author":"Guo Jia","year":"2017","unstructured":"Jia Guo and Miodrag Potkonjak . 2017 . Pruning Filters and Classes:Towards On-Device Customization of Convolutional Neural Networks . In Proceedings of the 2017 1st International Workshop on Deep Learning for Mobile Systems and Applications (DLMSA). ACM, 13--17 . Jia Guo and Miodrag Potkonjak. 2017. Pruning Filters and Classes:Towards On-Device Customization of Convolutional Neural Networks. In Proceedings of the 2017 1st International Workshop on Deep Learning for Mobile Systems and Applications (DLMSA). ACM, 13--17."},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/3240765.3240862"},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-46493-0_38"},{"key":"e_1_3_2_1_13_1","volume-title":"A stochastic approximation method. The annals of mathematical statistics","author":"Herbert Robbins","year":"1951","unstructured":"Robbins Herbert and Sutton Monro . 1951. A stochastic approximation method. The annals of mathematical statistics ( 1951 ). Robbins Herbert and Sutton Monro. 1951. A stochastic approximation method. The annals of mathematical statistics (1951)."},{"key":"e_1_3_2_1_14_1","volume-title":"Have You Stolen My Model? Evasion Attacks Against Deep Neural Network Watermarking Techniques. CoRR abs\/1809.00615","author":"Hitaj Dorjan","year":"2018","unstructured":"Dorjan Hitaj and Luigi V Mancini . 2018. Have You Stolen My Model? Evasion Attacks Against Deep Neural Network Watermarking Techniques. CoRR abs\/1809.00615 ( 2018 ). Dorjan Hitaj and Luigi V Mancini. 2018. Have You Stolen My Model? Evasion Attacks Against Deep Neural Network Watermarking Techniques. CoRR abs\/1809.00615 (2018)."},{"key":"e_1_3_2_1_15_1","volume-title":"MobileNets: Efficient Convolutional Neural Networks for Mobile Vision Applications. CoRR abs\/1704.04681","author":"Howard Andrew G.","year":"2017","unstructured":"Andrew G. Howard , Menglong Zhu , Bo Chen , Dmitry Kalenichenko , Weijun Wang , Tobias Weyand , Marco Andreetto , and Hartwig Adam . 2017. MobileNets: Efficient Convolutional Neural Networks for Mobile Vision Applications. CoRR abs\/1704.04681 ( 2017 ). Andrew G. Howard, Menglong Zhu, Bo Chen, Dmitry Kalenichenko, Weijun Wang, Tobias Weyand, Marco Andreetto, and Hartwig Adam. 2017. MobileNets: Efficient Convolutional Neural Networks for Mobile Vision Applications. CoRR abs\/1704.04681 (2017)."},{"key":"e_1_3_2_1_16_1","volume-title":"Kingma and Jimmy Ba","author":"Diederik","year":"2014","unstructured":"Diederik P. Kingma and Jimmy Ba . 2014 . Adam : A Method for Stochastic Optimization. CoRR abs\/1412.6980 (2014). Diederik P. Kingma and Jimmy Ba. 2014. Adam: A Method for Stochastic Optimization. CoRR abs\/1412.6980 (2014)."},{"key":"e_1_3_2_1_17_1","article-title":"Learning multiple layers of features from tiny images. https:\/\/www.cs.toronto.edu\/~kriz\/cifar.html","author":"Krizhevsky A.","year":"2009","unstructured":"A. Krizhevsky and G. Hinton . 2009 . Learning multiple layers of features from tiny images. https:\/\/www.cs.toronto.edu\/~kriz\/cifar.html . Journal of Computer Science Department, University of Toronto, Tech. Rep. A. Krizhevsky and G. Hinton. 2009. Learning multiple layers of features from tiny images. https:\/\/www.cs.toronto.edu\/~kriz\/cifar.html. Journal of Computer Science Department, University of Toronto, Tech. Rep.","journal-title":"Journal of Computer Science Department, University of Toronto, Tech. Rep."},{"key":"e_1_3_2_1_18_1","volume-title":"Gradient-based learning applied to document recognition","author":"Lecun Yann","unstructured":"Yann Lecun , Leon Bottou , Yoshua Bengio , and Patrick Haffner . 1998. Gradient-based learning applied to document recognition . Institute of Electrical and Electronics Engineers (1998) . Yann Lecun, Leon Bottou, Yoshua Bengio, and Patrick Haffner. 1998. Gradient-based learning applied to document recognition. Institute of Electrical and Electronics Engineers (1998)."},{"key":"e_1_3_2_1_19_1","volume-title":"Proceedings of the 2013 Annual Conference on Neural Information Processing Systems (NIPS). NIPS, 3111--3119","author":"Mikolov Tomas","year":"2013","unstructured":"Tomas Mikolov , Ilya Sutskever , Kai Chen , Greg S. Corrado , and Jeffrey Dean . 2013 . Distributed Representations of Words and Phrases and their Compositionally . In Proceedings of the 2013 Annual Conference on Neural Information Processing Systems (NIPS). NIPS, 3111--3119 . Tomas Mikolov, Ilya Sutskever, Kai Chen, Greg S. Corrado, and Jeffrey Dean. 2013. Distributed Representations of Words and Phrases and their Compositionally. In Proceedings of the 2013 Annual Conference on Neural Information Processing Systems (NIPS). NIPS, 3111--3119."},{"key":"e_1_3_2_1_20_1","volume-title":"Robust Watermarking of Neural Network with Exponential Weighting. CoRR abs\/1901.06151","author":"Namba Ryota","year":"2019","unstructured":"Ryota Namba and Jun Sakuma . 2019. Robust Watermarking of Neural Network with Exponential Weighting. CoRR abs\/1901.06151 ( 2019 ). Ryota Namba and Jun Sakuma. 2019. Robust Watermarking of Neural Network with Exponential Weighting. CoRR abs\/1901.06151 (2019)."},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-24574-4_28"},{"key":"e_1_3_2_1_22_1","volume-title":"Workshop on NIPS.","author":"Paszke Adam","year":"2017","unstructured":"Adam Paszke , Sam Gross , Soumith Chintala , Gregory Chanan , Edward Yang , Zachary DeVito , Zeming Lin , Alban Desmaison , Luca Antiga , and Adam Lerer . 2017 . Automatic differentiation in PyTorch. https:\/\/pytorch.org\/ . Workshop on NIPS. Adam Paszke, Sam Gross, Soumith Chintala, Gregory Chanan, Edward Yang, Zachary DeVito, Zeming Lin, Alban Desmaison, Luca Antiga, and Adam Lerer. 2017. Automatic differentiation in PyTorch. https:\/\/pytorch.org\/. Workshop on NIPS."},{"key":"e_1_3_2_1_23_1","volume-title":"DeepSigns: A Generic Watermarking Framework for IP Protection of Deep Learning Models. CoRR abs\/1804.00750","author":"Rouhani Bita Darvish","year":"2018","unstructured":"Bita Darvish Rouhani , Huili Chen , and Farinaz Koushanfar . 2018. DeepSigns: A Generic Watermarking Framework for IP Protection of Deep Learning Models. CoRR abs\/1804.00750 ( 2018 ). Bita Darvish Rouhani, Huili Chen, and Farinaz Koushanfar. 2018. DeepSigns: A Generic Watermarking Framework for IP Protection of Deep Learning Models. CoRR abs\/1804.00750 (2018)."},{"key":"e_1_3_2_1_24_1","volume-title":"ML-Leaks: Model and Data Independent Membership Inference Attacks and Defenses on Machine Learning Models. CoRR abs\/1806.01246","author":"Salem Ahmed","year":"2018","unstructured":"Ahmed Salem , Yang Zhang , Mathias Humbert , Mario Fritz , and Michael Backes . 2018. ML-Leaks: Model and Data Independent Membership Inference Attacks and Defenses on Machine Learning Models. CoRR abs\/1806.01246 ( 2018 ). Ahmed Salem, Yang Zhang, Mathias Humbert, Mario Fritz, and Michael Backes. 2018. ML-Leaks: Model and Data Independent Membership Inference Attacks and Defenses on Machine Learning Models. CoRR abs\/1806.01246 (2018)."},{"key":"e_1_3_2_1_25_1","volume-title":"Very Deep Convolutional Networks for Large-Scale Image Recognition. CoRR abs\/1409.1556","author":"Simonyan Karen","year":"2014","unstructured":"Karen Simonyan and Andrew Zisserman . 2014. Very Deep Convolutional Networks for Large-Scale Image Recognition. CoRR abs\/1409.1556 ( 2014 ). Karen Simonyan and Andrew Zisserman. 2014. Very Deep Convolutional Networks for Large-Scale Image Recognition. CoRR abs\/1409.1556 (2014)."},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2015.7298594"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1145\/3078971.3078974"},{"key":"e_1_3_2_1_28_1","volume-title":"Image quality assessment: from error visibility to structural similarity. Transactions on Image Processing","author":"Wang Zhou","year":"2004","unstructured":"Zhou Wang . 2004. Image quality assessment: from error visibility to structural similarity. Transactions on Image Processing ( 2004 ). Zhou Wang. 2004. Image quality assessment: from error visibility to structural similarity. Transactions on Image Processing (2004)."},{"key":"e_1_3_2_1_29_1","unstructured":"Yonghui Wu Mike Schuster Zhifeng Chen Quoc V. Le Mohammad Norouzi Wolfgang Macherey Maxim Krikun Yuan Cao Qin Gao Klaus Macherey Jeff Klingner Apurva Shah Melvin Johnson Xiaobing Liuand A\u00cc\u0141A\u00cc\u013aukasz Kaiser Stephan Gouws Yoshikiyo Kato Taku Kudo Hideto Kazawa Keith Stevens George Kurian Nishant Patil Wei Wang Cliff Young Jason Smith Jason Riesa Alex Rudnick Oriol Vinyals Greg Corrado Macduff Hughes and Jeffrey Dean. 2016. Google\u00e2\u0102Źs Neural Machine Translation System: Bridging the Gap between Human and Machine Translation. CoRR abs\/1609.08144 (2016).  Yonghui Wu Mike Schuster Zhifeng Chen Quoc V. Le Mohammad Norouzi Wolfgang Macherey Maxim Krikun Yuan Cao Qin Gao Klaus Macherey Jeff Klingner Apurva Shah Melvin Johnson Xiaobing Liuand A\u00cc\u0141A\u00cc\u013aukasz Kaiser Stephan Gouws Yoshikiyo Kato Taku Kudo Hideto Kazawa Keith Stevens George Kurian Nishant Patil Wei Wang Cliff Young Jason Smith Jason Riesa Alex Rudnick Oriol Vinyals Greg Corrado Macduff Hughes and Jeffrey Dean. 2016. Google\u00e2\u0102Źs Neural Machine Translation System: Bridging the Gap between Human and Machine Translation. CoRR abs\/1609.08144 (2016)."},{"key":"e_1_3_2_1_30_1","volume-title":"Achieving Human Parity in Conversational Speech Recognition. CoRR abs\/1610.05256","author":"Xiong Wayne","year":"2016","unstructured":"Wayne Xiong , Jasha Droppo , Xuedong Huang , Frank Seide , Michael L Seltzer , Andreas Stolcke , Dong Yu , and Geoffrey Zweig . 2016. Achieving Human Parity in Conversational Speech Recognition. CoRR abs\/1610.05256 ( 2016 ). Wayne Xiong, Jasha Droppo, Xuedong Huang, Frank Seide, Michael L Seltzer, Andreas Stolcke, Dong Yu, and Geoffrey Zweig. 2016. Achieving Human Parity in Conversational Speech Recognition. CoRR abs\/1610.05256 (2016)."},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1145\/3196494.3196550"}],"event":{"name":"ACSAC '19: 2019 Annual Computer Security Applications Conference","location":"San Juan Puerto Rico USA","acronym":"ACSAC '19"},"container-title":["Proceedings of the 35th Annual Computer Security Applications Conference"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3359789.3359801","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3359789.3359801","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T23:23:07Z","timestamp":1750202587000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3359789.3359801"}},"subtitle":["a blind-watermark based framework to protect intellectual property of DNN"],"short-title":[],"issued":{"date-parts":[[2019,12,9]]},"references-count":31,"alternative-id":["10.1145\/3359789.3359801","10.1145\/3359789"],"URL":"https:\/\/doi.org\/10.1145\/3359789.3359801","relation":{},"subject":[],"published":{"date-parts":[[2019,12,9]]},"assertion":[{"value":"2019-12-09","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}