{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,12]],"date-time":"2026-05-12T16:15:23Z","timestamp":1778602523620,"version":"3.51.4"},"publisher-location":"New York, NY, USA","reference-count":65,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,12,2]],"date-time":"2024-12-02T00:00:00Z","timestamp":1733097600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/501100006374","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62472096, 62172104, 62172105, 62102093, 62102091, 62302101, 62202106"],"award-info":[{"award-number":["62472096, 62172104, 62172105, 62102093, 62102091, 62302101, 62202106"]}],"id":[{"id":"10.13039\/501100006374","id-type":"DOI","asserted-by":"publisher"}]},{"name":"National Key Research and Development Program","award":["2021YFB3101200"],"award-info":[{"award-number":["2021YFB3101200"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,12,2]]},"DOI":"10.1145\/3658644.3690334","type":"proceedings-article","created":{"date-parts":[[2024,12,9]],"date-time":"2024-12-09T12:19:20Z","timestamp":1733746760000},"page":"675-689","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":2,"title":["<scp>Neural Dehydration:<\/scp>\n            Effective Erasure of Black-box Watermarks from DNNs with Limited Data"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0000-7500-3722","authenticated-orcid":false,"given":"Yifan","family":"Lu","sequence":"first","affiliation":[{"name":"Fudan University, Shanghai, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0005-7636-5190","authenticated-orcid":false,"given":"Wenxuan","family":"Li","sequence":"additional","affiliation":[{"name":"Fudan University, Shanghai, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3567-3478","authenticated-orcid":false,"given":"Mi","family":"Zhang","sequence":"additional","affiliation":[{"name":"Fudan University, Shanghai, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1394-0395","authenticated-orcid":false,"given":"Xudong","family":"Pan","sequence":"additional","affiliation":[{"name":"Fudan University, Shanghai, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9714-5545","authenticated-orcid":false,"given":"Min","family":"Yang","sequence":"additional","affiliation":[{"name":"Fudan University, Shanghai, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2024,12,9]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978318"},{"key":"e_1_3_2_1_2_1","volume-title":"27th USENIX Security Symposium (USENIX Security 18)","author":"Adi Yossi","year":"2018","unstructured":"Yossi Adi, Carsten Baum, Moustapha Cisse, Benny Pinkas, and Joseph Keshet. 2018. Turning your weakness into a strength: Watermarking deep neural networks by backdooring. In 27th USENIX Security Symposium (USENIX Security 18). 1615--1631."},{"key":"e_1_3_2_1_3_1","first-page":"102277","article-title":"Neural Network Laundering: Removing Black-Box Backdoor Watermarks from Deep Neural","volume":"106","author":"Aiken William","year":"2020","unstructured":"William Aiken, Hyoungshick Kim, and Simon S. Woo. 2020. Neural Network Laundering: Removing Black-Box Backdoor Watermarks from Deep Neural Networks. Comput. Secur., Vol. 106 (2020), 102277.","journal-title":"Networks. Comput. Secur."},{"key":"e_1_3_2_1_4_1","volume-title":"Machine learning in tracking associations with stereo vision and lidar observations for an autonomous vehicle. In 2016 IEEE intelligent vehicles symposium (IV)","author":"Allodi Marco","unstructured":"Marco Allodi, Alberto Broggi, Domenico Giaquinto, Marco Patander, and Antonio Prioletti. 2016. Machine learning in tracking associations with stereo vision and lidar observations for an autonomous vehicle. In 2016 IEEE intelligent vehicles symposium (IV). IEEE, 648--653."},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.mlwa.2021.100164"},{"key":"e_1_3_2_1_6_1","volume-title":"NeurIPS 2020 Workshop on Pre-registration in Machine Learning. PMLR, 325--342","author":"Benz Philipp","year":"2021","unstructured":"Philipp Benz, Chaoning Zhang, Adil Karjauv, and In So Kweon. 2021. Robustness may be at odds with fairness: An empirical study on class-wise accuracy. In NeurIPS 2020 Workshop on Pre-registration in Machine Learning. PMLR, 325--342."},{"key":"e_1_3_2_1_7_1","volume-title":"28th USENIX security symposium (USENIX security 19). 267--284.","author":"Carlini Nicholas","unstructured":"Nicholas Carlini, Chang Liu, \u00dalfar Erlingsson, Jernej Kos, and Dawn Song. 2019. The secret sharer: Evaluating and testing unintended memorization in neural networks. In 28th USENIX security symposium (USENIX security 19). 267--284."},{"key":"e_1_3_2_1_8_1","volume-title":"30th USENIX Security Symposium (USENIX Security 21)","author":"Carlini Nicholas","year":"2021","unstructured":"Nicholas Carlini, Florian Tramer, Eric Wallace, Matthew Jagielski, Ariel Herbert-Voss, Katherine Lee, Adam Roberts, Tom Brown, Dawn Song, Ulfar Erlingsson, et al. 2021. Extracting training data from large language models. In 30th USENIX Security Symposium (USENIX Security 21). 2633--2650."},{"key":"e_1_3_2_1_9_1","first-page":"1780","article-title":"You are caught stealing my winning lottery ticket! Making a lottery ticket claim its ownership","volume":"34","author":"Chen Xuxi","year":"2021","unstructured":"Xuxi Chen, Tianlong Chen, Zhenyu Zhang, and Zhangyang Wang. 2021. You are caught stealing my winning lottery ticket! Making a lottery ticket claim its ownership. Advances in Neural Information Processing Systems, Vol. 34 (2021), 1780--1791.","journal-title":"Advances in Neural Information Processing Systems"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/3433210.3453079"},{"key":"e_1_3_2_1_11_1","volume-title":"ICML workshop on Security and Privacy of Machine Learning. 1--6.","author":"Chen Xinyun","year":"2019","unstructured":"Xinyun Chen, Wenxiao Wang, Yiming Ding, Chris Bender, Ruoxi Jia, Bo Li, and Dawn Song. 2019. Leveraging unlabeled data for watermark removal of deep neural networks. In ICML workshop on Security and Privacy of Machine Learning. 1--6."},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2022.3175616"},{"key":"e_1_3_2_1_13_1","volume-title":"EMNIST: Extending MNIST to handwritten letters. In 2017 international joint conference on neural networks (IJCNN)","author":"Cohen Gregory","year":"2017","unstructured":"Gregory Cohen, Saeed Afshar, Jonathan Tapson, and Andre Van Schaik. 2017. EMNIST: Extending MNIST to handwritten letters. In 2017 international joint conference on neural networks (IJCNN). IEEE, 2921--2926."},{"key":"e_1_3_2_1_14_1","volume-title":"Licensing Machine Learning models. The Turing Way. https:\/\/book.the-turing-way.org\/reproducible-research\/licensing\/licensing-ml.html Accessed on","author":"Way Community The Turing","year":"2024","unstructured":"The Turing Way Community. 2021. Licensing Machine Learning models. The Turing Way. https:\/\/book.the-turing-way.org\/reproducible-research\/licensing\/licensing-ml.html Accessed on July 21, 2024."},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1145\/3297858.3304051"},{"key":"e_1_3_2_1_16_1","volume-title":"Bert: Pre-training of deep bidirectional transformers for language understanding. arXiv preprint arXiv:1810.04805","author":"Devlin Jacob","year":"2018","unstructured":"Jacob Devlin, Ming-Wei Chang, Kenton Lee, and Kristina Toutanova. 2018. Bert: Pre-training of deep bidirectional transformers for language understanding. arXiv preprint arXiv:1810.04805 (2018)."},{"key":"e_1_3_2_1_17_1","volume-title":"Hugging Face Models. https:\/\/huggingface.co\/models Retrieved","author":"Face Hugging","year":"2024","unstructured":"Hugging Face. 2024. Hugging Face Models. https:\/\/huggingface.co\/models Retrieved April 10, 2024 from"},{"key":"e_1_3_2_1_18_1","volume-title":"Boosting Adversarial Transferability by Achieving Flat Local Maxima. arXiv preprint arXiv:2306.05225","author":"Ge Zhijin","year":"2023","unstructured":"Zhijin Ge, Fanhua Shang, Hongying Liu, Yuanyuan Liu, and Xiaosen Wang. 2023. Boosting Adversarial Transferability by Achieving Flat Local Maxima. arXiv preprint arXiv:2306.05225 (2023)."},{"key":"e_1_3_2_1_19_1","volume-title":"IBM came up with a watermark for neural networks. https:\/\/thenextweb.com\/news\/ibm-came-up-with-a-watermark-for-neural-networks Retrieved","author":"Greene Tristan","year":"2024","unstructured":"Tristan Greene. 2018. IBM came up with a watermark for neural networks. https:\/\/thenextweb.com\/news\/ibm-came-up-with-a-watermark-for-neural-networks Retrieved April 10, 2024 from"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/3240765.3240862"},{"key":"e_1_3_2_1_21_1","volume-title":"International Joint Conference on Artificial Intelligence.","author":"Guo Shangwei","year":"2020","unstructured":"Shangwei Guo, Tianwei Zhang, Han Qiu, Yi Zeng, Tao Xiang, and Yang Liu. 2020. Fine-tuning Is Not Enough: A Simple yet Effective Watermark Removal Attack for DNN Models. In International Joint Conference on Artificial Intelligence."},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2814818"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.243"},{"key":"e_1_3_2_1_25_1","volume-title":"Adversarial examples are not bugs, they are features. Advances in neural information processing systems","author":"Ilyas Andrew","year":"2019","unstructured":"Andrew Ilyas, Shibani Santurkar, Dimitris Tsipras, Logan Engstrom, Brandon Tran, and Aleksander Madry. 2019. Adversarial examples are not bugs, they are features. Advances in neural information processing systems, Vol. 32 (2019)."},{"key":"e_1_3_2_1_26_1","volume-title":"International conference on machine learning. pmlr, 448--456","author":"Ioffe Sergey","year":"2015","unstructured":"Sergey Ioffe and Christian Szegedy. 2015. Batch normalization: Accelerating deep network training by reducing internal covariate shift. In International conference on machine learning. pmlr, 448--456."},{"key":"e_1_3_2_1_27_1","volume-title":"USENIX Security Symposium. 1937--1954","author":"Jia Hengrui","year":"2021","unstructured":"Hengrui Jia, Christopher A Choquette-Choo, Varun Chandrasekaran, and Nicolas Papernot. 2021. Entangled Watermarks as a Defense against Model Extraction.. In USENIX Security Symposium. 1937--1954."},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1073\/pnas.1611835114"},{"key":"e_1_3_2_1_29_1","unstructured":"Alex Krizhevsky Geoffrey Hinton et al. 2009. Learning multiple layers of features from tiny images. (2009)."},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1007\/s00521-019-04434-z"},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1109\/5.726791"},{"key":"e_1_3_2_1_32_1","unstructured":"Yann LeCun Corinna Cortes and Christopher J.C. Burges. 1998 b. The MNIST Database of Handwritten Digits. http:\/\/yann.lecun.com\/exdb\/mnist\/ (1998)."},{"key":"e_1_3_2_1_33_1","volume-title":"Fingerprinting, Model Access, and Attacks. arXiv preprint arXiv:2304.11285","author":"Lederer Isabell","year":"2023","unstructured":"Isabell Lederer, Rudolf Mayer, and Andreas Rauber. 2023. Identifying Appropriate Intellectual Property Protection Mechanisms for Machine Learning Models: A Systematization of Watermarking, Fingerprinting, Model Access, and Attacks. arXiv preprint arXiv:2304.11285 (2023)."},{"key":"e_1_3_2_1_34_1","volume-title":"Evaluating the robustness of trigger set-based watermarks embedded in deep neural networks","author":"Lee Suyoung","year":"2022","unstructured":"Suyoung Lee, Wonho Song, Suman Jana, Meeyoung Cha, and Sooel Son. 2022. Evaluating the robustness of trigger set-based watermarks embedded in deep neural networks. IEEE Transactions on Dependable and Secure Computing (2022)."},{"key":"e_1_3_2_1_35_1","volume-title":"Piracy resistant watermarks for deep neural networks. arXiv preprint arXiv:1910.01226","author":"Li Huiying","year":"2019","unstructured":"Huiying Li, Emily Wenger, Shawn Shan, Ben Y Zhao, and Haitao Zheng. 2019. Piracy resistant watermarks for deep neural networks. arXiv preprint arXiv:1910.01226 (2019)."},{"key":"e_1_3_2_1_36_1","volume-title":"Visualizing the loss landscape of neural nets. Advances in neural information processing systems","author":"Li Hao","year":"2018","unstructured":"Hao Li, Zheng Xu, Gavin Taylor, Christoph Studer, and Tom Goldstein. 2018. Visualizing the loss landscape of neural nets. Advances in neural information processing systems, Vol. 31 (2018)."},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1145\/3359789.3359801"},{"key":"e_1_3_2_1_38_1","volume-title":"RAID 2018, Heraklion, Crete, Greece, September 10--12, 2018, Proceedings 21","author":"Liu Kang","year":"2018","unstructured":"Kang Liu, Brendan Dolan-Gavitt, and Siddharth Garg. 2018. Fine-pruning: Defending against backdooring attacks on deep neural networks. In Research in Attacks, Intrusions, and Defenses: 21st International Symposium, RAID 2018, Heraklion, Crete, Greece, September 10--12, 2018, Proceedings 21. Springer, 273--294."},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICPR48806.2021.9412684"},{"key":"e_1_3_2_1_40_1","volume-title":"Neural Dehydration: Effective Erasure of Black-box Watermarks from DNNs with Limited Data. arXiv preprint arXiv:2309.03466","author":"Lu Yifan","year":"2024","unstructured":"Yifan Lu, Wenxuan Li, Mi Zhang, Xudong Pan, and Min Yang. 2024. Neural Dehydration: Effective Erasure of Black-box Watermarks from DNNs with Limited Data. arXiv preprint arXiv:2309.03466 (2024)."},{"key":"e_1_3_2_1_41_1","volume-title":"https:\/\/github.com\/dnn-security\/Watermark-Robustness-Toolbox Retrieved","author":"Lukas Nils","year":"2024","unstructured":"Nils Lukas. 2022. Watermark-Robustness-Toolbox. https:\/\/github.com\/dnn-security\/Watermark-Robustness-Toolbox Retrieved April 10, 2024 from"},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833693"},{"key":"e_1_3_2_1_43_1","first-page":"26230","article-title":"On the tradeoff between robustness and fairness","volume":"35","author":"Ma Xinsong","year":"2022","unstructured":"Xinsong Ma, Zekai Wang, and Weiwei Liu. 2022. On the tradeoff between robustness and fairness. Advances in Neural Information Processing Systems, Vol. 35 (2022), 26230--26241.","journal-title":"Advances in Neural Information Processing Systems"},{"key":"e_1_3_2_1_44_1","volume-title":"Inceptionism: Going deeper into neural networks.","author":"Mordvintsev Alexander","year":"2015","unstructured":"Alexander Mordvintsev, Christopher Olah, and Mike Tyka. 2015. Inceptionism: Going deeper into neural networks. (2015)."},{"key":"e_1_3_2_1_45_1","doi-asserted-by":"publisher","DOI":"10.1145\/3321705.3329808"},{"key":"e_1_3_2_1_46_1","volume-title":"Deep Face Recognition. In British Machine Vision Conference. https:\/\/api.semanticscholar.org\/CorpusID:4637184","author":"Parkhi Omkar M.","year":"2015","unstructured":"Omkar M. Parkhi, Andrea Vedaldi, and Andrew Zisserman. 2015. Deep Face Recognition. In British Machine Vision Conference. https:\/\/api.semanticscholar.org\/CorpusID:4637184"},{"key":"e_1_3_2_1_47_1","volume-title":"Proceedings of the 2021 ACM Workshop on Information Hiding and Multimedia Security","author":"Shafieinejad Masoumeh","year":"2019","unstructured":"Masoumeh Shafieinejad, Jiaqi Wang, Nils Lukas, and Florian Kerschbaum. 2019. On the Robustness of Backdoor-based Watermarking in Deep Neural Networks. Proceedings of the 2021 ACM Workshop on Information Hiding and Multimedia Security (2019)."},{"key":"e_1_3_2_1_48_1","volume-title":"Very deep convolutional networks for large-scale image recognition. arXiv preprint arXiv:1409.1556","author":"Simonyan Karen","year":"2014","unstructured":"Karen Simonyan and Andrew Zisserman. 2014. Very deep convolutional networks for large-scale image recognition. arXiv preprint arXiv:1409.1556 (2014)."},{"key":"e_1_3_2_1_49_1","volume-title":"ISC 2021, Virtual Event, November 10--12, 2021, Proceedings (Lecture Notes in Computer Science","volume":"357","author":"Sun Shichang","year":"2021","unstructured":"Shichang Sun, Haoqi Wang, Mingfu Xue, Yushu Zhang, Jian Wang, and Weiqiang Liu. 2021. Detect and Remove Watermark in Deep Neural Networks via Generative Adversarial Networks. In Information Security - 24th International Conference, ISC 2021, Virtual Event, November 10--12, 2021, Proceedings (Lecture Notes in Computer Science, Vol. 13118), Joseph K. Liu, Sokratis K. Katsikas, Weizhi Meng, Willy Susilo, and Rolly Intan (Eds.). Springer, 341--357."},{"key":"e_1_3_2_1_50_1","volume-title":"30th USENIX Security Symposium, USENIX Security 2021","author":"Sun Zhichuang","year":"2021","unstructured":"Zhichuang Sun, Ruimin Sun, Long Lu, and Alan Mislove. 2021. Mind Your Weight(s): A Large-scale Study on Insufficient Machine Learning Model Protection in Mobile Apps. In 30th USENIX Security Symposium, USENIX Security 2021, August 11--13, 2021, Michael D. Bailey and Rachel Greenstadt (Eds.). USENIX Association, 1955--1972. https:\/\/www.usenix.org\/conference\/usenixsecurity21\/presentation\/sun-zhichuang"},{"key":"e_1_3_2_1_51_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.308"},{"key":"e_1_3_2_1_52_1","doi-asserted-by":"publisher","DOI":"10.1145\/3447548.3467403"},{"key":"e_1_3_2_1_53_1","volume-title":"25th USENIX security symposium (USENIX Security 16). 601--618.","author":"Tram\u00e8r Florian","unstructured":"Florian Tram\u00e8r, Fan Zhang, Ari Juels, Michael K Reiter, and Thomas Ristenpart. 2016. Stealing machine learning models via prediction APIs. In 25th USENIX security symposium (USENIX Security 16). 601--618."},{"key":"e_1_3_2_1_54_1","doi-asserted-by":"publisher","DOI":"10.1145\/3078971.3078974"},{"key":"e_1_3_2_1_55_1","article-title":"Visualizing data using t-SNE","volume":"9","author":"der Maaten Laurens Van","year":"2008","unstructured":"Laurens Van der Maaten and Geoffrey Hinton. 2008. Visualizing data using t-SNE. Journal of machine learning research, Vol. 9, 11 (2008).","journal-title":"Journal of machine learning research"},{"key":"e_1_3_2_1_56_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00031"},{"key":"e_1_3_2_1_57_1","doi-asserted-by":"publisher","DOI":"10.1145\/3442381.3450000"},{"key":"e_1_3_2_1_58_1","volume-title":"International conference on machine learning. PMLR, 11492--11501","author":"Xu Han","year":"2021","unstructured":"Han Xu, Xiaorui Liu, Yaxin Li, Anil Jain, and Jiliang Tang. 2021. To be robust or to be fair: Towards fairness in adversarial training. In International conference on machine learning. PMLR, 11492--11501."},{"key":"e_1_3_2_1_59_1","volume-title":"32th USENIX security symposium (USENIX Security 23).","author":"Yan Yifan","unstructured":"Yifan Yan, Xudong Pan, Mi Zhang, and Min Yang. 2023. Rethinking White-Box Watermarks on Deep Learning Models under Neural Structural Obfuscation. In 32th USENIX security symposium (USENIX Security 23)."},{"key":"e_1_3_2_1_60_1","volume-title":"Effectiveness of Distillation Attack and Countermeasure on Neural Network Watermarking. ArXiv","author":"Yang Ziqi","year":"2019","unstructured":"Ziqi Yang, Hung Dang, and Ee-Chien Chang. 2019. Effectiveness of Distillation Attack and Countermeasure on Neural Network Watermarking. ArXiv, Vol. abs\/1906.06046 (2019)."},{"key":"e_1_3_2_1_61_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00874"},{"key":"e_1_3_2_1_62_1","volume-title":"Few-Shot Unlearning by Model Inversion. arXiv preprint arXiv:2205.15567","author":"Yoon Youngsik","year":"2022","unstructured":"Youngsik Yoon, Jinhwan Nam, Hyojeong Yun, Dongwoo Kim, and Jungseul Ok. 2022. Few-Shot Unlearning by Model Inversion. arXiv preprint arXiv:2205.15567 (2022)."},{"key":"e_1_3_2_1_63_1","doi-asserted-by":"publisher","DOI":"10.1145\/3196494.3196550"},{"key":"e_1_3_2_1_64_1","volume-title":"Medical image classification using synergic deep learning. Medical image analysis","author":"Zhang Jianpeng","year":"2019","unstructured":"Jianpeng Zhang, Yutong Xie, Qi Wu, and Yong Xia. 2019. Medical image classification using synergic deep learning. Medical image analysis, Vol. 54 (2019), 10--19."},{"key":"e_1_3_2_1_65_1","volume-title":"Attention Distraction: Watermark Removal Through Continual Learning with Selective Forgetting. 2022 IEEE International Conference on Multimedia and Expo (ICME)","author":"Zhong Qi","year":"2022","unstructured":"Qi Zhong, Leo Yu Zhang, Shengshan Hu, Longxiang Gao, Jun Zhang, and Yang Xiang. 2022. Attention Distraction: Watermark Removal Through Continual Learning with Selective Forgetting. 2022 IEEE International Conference on Multimedia and Expo (ICME) (2022), 1--6."}],"event":{"name":"CCS '24: ACM SIGSAC Conference on Computer and Communications Security","location":"Salt Lake City UT USA","acronym":"CCS '24","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3658644.3690334","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3658644.3690334","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,22]],"date-time":"2025-08-22T06:14:24Z","timestamp":1755843264000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3658644.3690334"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,12,2]]},"references-count":65,"alternative-id":["10.1145\/3658644.3690334","10.1145\/3658644"],"URL":"https:\/\/doi.org\/10.1145\/3658644.3690334","relation":{},"subject":[],"published":{"date-parts":[[2024,12,2]]},"assertion":[{"value":"2024-12-09","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}