{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,12,1]],"date-time":"2025-12-01T11:29:44Z","timestamp":1764588584861,"version":"3.41.2"},"reference-count":44,"publisher":"Wiley","issue":"1","license":[{"start":{"date-parts":[[2024,10,17]],"date-time":"2024-10-17T00:00:00Z","timestamp":1729123200000},"content-version":"vor","delay-in-days":290,"URL":"http:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62362025"],"award-info":[{"award-number":["62362025"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100013142","name":"Key Research and Development Project of Hainan Province","doi-asserted-by":"publisher","award":["ZDYF2022GXJS224"],"award-info":[{"award-number":["ZDYF2022GXJS224"]}],"id":[{"id":"10.13039\/501100013142","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["onlinelibrary.wiley.com"],"crossmark-restriction":true},"short-container-title":["International Journal of Intelligent Systems"],"published-print":{"date-parts":[[2024,1]]},"abstract":"<jats:p>Reversible adversarial example (RAE) is an effective cutting\u2010edge technology for protecting the intellectual property (IP) of datasets. However, existing RAE schemes primarily focus on the adversarial and restoration capabilities of adversarial examples (AE), with little attention paid to traceability, which is crucial for IP protection. This oversight leads to the inability to prevent authorized users from redistributing data, thereby posing significant IP security risks. To address this issue, we propose a novel approach named TAE\u2010RWP, wherein adversarial perturbations in AEs are treated as tools for IP verification. To enable the traceability of AEs, we introduce varying degrees of warping to the adversarial perturbations within the AEs of authorized users, utilizing the warping degree as a traceable feature. To further strengthen traceability, we adopt a technique named \u201crandom warping\u201d to maintain the resilience of adversarial perturbations against distortions, and employ a strategy named \u201cnoise mode\u201d to improve the verification model\u2019s capacity to recognize distortion features. Experimental results indicate that AEs generated by TAE\u2010RWP exhibit remarkable adversarial strength and restoration abilities, while the verification model demonstrates excellence in recognizing distortion features.<\/jats:p>","DOI":"10.1155\/2024\/6054172","type":"journal-article","created":{"date-parts":[[2024,10,17]],"date-time":"2024-10-17T12:19:48Z","timestamp":1729167588000},"update-policy":"https:\/\/doi.org\/10.1002\/crossmark_policy","source":"Crossref","is-referenced-by-count":1,"title":["TAE\u2010RWP: Traceable Adversarial Examples With Recoverable Warping Perturbation"],"prefix":"10.1155","volume":"2024","author":[{"ORCID":"https:\/\/orcid.org\/0009-0003-6350-5057","authenticated-orcid":false,"given":"Fan","family":"Xing","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3777-9479","authenticated-orcid":false,"given":"Xiaoyi","family":"Zhou","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0000-1371-8917","authenticated-orcid":false,"given":"Hongli","family":"Peng","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1932-725X","authenticated-orcid":false,"given":"Xuefeng","family":"Fan","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8955-8489","authenticated-orcid":false,"given":"Wenbao","family":"Han","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8306-7195","authenticated-orcid":false,"given":"Yuqing","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"311","published-online":{"date-parts":[[2024,10,17]]},"reference":[{"key":"e_1_2_9_1_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2022.108873"},{"key":"e_1_2_9_2_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.neucom.2022.09.106"},{"key":"e_1_2_9_3_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.neucom"},{"key":"e_1_2_9_4_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2023.110172"},{"key":"e_1_2_9_5_2","doi-asserted-by":"publisher","DOI":"10.1007\/s10489-022-03926-1"},{"key":"e_1_2_9_6_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.neucom.2023.127192"},{"key":"e_1_2_9_7_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.neucom.2023.01.017"},{"key":"e_1_2_9_8_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2023.109863"},{"key":"e_1_2_9_9_2","doi-asserted-by":"publisher","DOI":"10.1109\/TCSVT.2023.3279116"},{"key":"e_1_2_9_10_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.neucom.2024.127593"},{"key":"e_1_2_9_11_2","doi-asserted-by":"publisher","DOI":"10.1109\/TCSVT.2018.2803303"},{"key":"e_1_2_9_12_2","doi-asserted-by":"publisher","DOI":"10.1109\/tcsvt.2023.3286393"},{"key":"e_1_2_9_13_2","doi-asserted-by":"publisher","DOI":"10.1109\/TMM.2016.2569497"},{"key":"e_1_2_9_14_2","unstructured":"NguyenA.andTranA. Wanet\u2013Imperceptible Warping-Based Backdoor Attack 2021 https:\/\/research.vinai.io\/wp-content\/uploads\/2021\/01\/WaNet-Imperceptible-Warping-based-Backdoor-Attack.pdf https:\/\/doi.org\/10.48550\/arXiv.2102.10369."},{"key":"e_1_2_9_15_2","doi-asserted-by":"crossref","unstructured":"HuaC. ZhangS. WangW. LiZ. andZhangJ. Wba: A Warping-Based Approach to Generating Imperceptible Adversarial Examples 2022 IEEE International Conference on Trust Security and Privacy in Computing and Communications December 2022 Wuhan China IEEE 361\u2013368.","DOI":"10.1109\/TrustCom56396.2022.00057"},{"key":"e_1_2_9_16_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.neunet.2023.07.010"},{"key":"e_1_2_9_17_2","doi-asserted-by":"crossref","unstructured":"CarliniN.andWagnerD. Towards Evaluating the Robustness of Neural Networks 2017 IEEE Symposium on Security and Privacy (Sp) May 2017 Jose CA 39\u201357.","DOI":"10.1109\/SP.2017.49"},{"key":"e_1_2_9_18_2","unstructured":"SzegedyC. ZarembaW. SutskeverI.et al. Intriguing Properties of Neural Networks 2013 https:\/\/arxiv.org\/abs\/1312.6199 https:\/\/doi.org\/10.48550\/arXiv.1312.6199."},{"key":"e_1_2_9_19_2","unstructured":"GoodfellowI. J. ShlensJ. andSzegedyC. Explaining and Harnessing Adversarial Examples 2014 https:\/\/arxiv.org\/abs\/1412.6572 https:\/\/doi.org\/10.48550\/arXiv.1412.6572."},{"key":"e_1_2_9_20_2","unstructured":"MadryA. MakelovA. SchmidtL. TsiprasD. andVladuA. Towards Deep Learning Models Resistant to Adversarial Attacks 2017 https:\/\/arxiv.org\/abs\/1706.06083 https:\/\/doi.org\/10.48550\/arXiv.1706.06083."},{"key":"e_1_2_9_21_2","doi-asserted-by":"crossref","unstructured":"XiaoC. LiB. ZhuJ.-Y. HeW. LiuM. andSongD. Generating Adversarial Examples With Adversarial Networks Proceedings of the Twenty-Seventh International Joint Conference on Artificial Intelligence July 2018 Stockholm Sweden 3905\u20133911 https:\/\/doi.org\/10.24963\/ijcai.2018\/543.","DOI":"10.24963\/ijcai.2018\/543"},{"key":"e_1_2_9_22_2","doi-asserted-by":"crossref","unstructured":"ZhuangH. ZhangY. andLiuS. A Pilot Study of Query-Free Adversarial Attack Against Stable Diffusion 2023 https:\/\/arxiv.org\/abs\/2303.16378.","DOI":"10.1109\/CVPRW59228.2023.00236"},{"key":"e_1_2_9_23_2","doi-asserted-by":"crossref","unstructured":"ChenX. GaoX. ZhaoJ. YeK. andXuC.-Z. Advdiffuser: Natural Adversarial Example Synthesis With Diffusion Models Proceedings of the IEEE\/CVF International Conference on Computer Vision October 2023 Montreal Canada 4562\u20134572.","DOI":"10.1109\/ICCV51070.2023.00421"},{"key":"e_1_2_9_24_2","unstructured":"MaoC. ChiquierM. WangH. YangJ. andVondrickC. Adversarial Attacks Are Reversible With Natural Supervision 2021 https:\/\/arxiv.org\/abs\/2103.14222."},{"key":"e_1_2_9_25_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2022.109048"},{"key":"e_1_2_9_26_2","unstructured":"YinZ. WangH. ChenL. WangJ. andZhangW. Reversible Adversarial Attack Based on Reversible Image Transformation 2019 https:\/\/arxiv.org\/abs\/1911.02360 https:\/\/doi.org\/10.48550\/arXiv.1911.02360."},{"key":"e_1_2_9_27_2","doi-asserted-by":"publisher","DOI":"10.1109\/TCSVT.2022.3207008"},{"key":"e_1_2_9_28_2","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2022.3186791"},{"key":"e_1_2_9_29_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.patrec.2022.12.018"},{"key":"e_1_2_9_30_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2023.109549"},{"key":"e_1_2_9_31_2","unstructured":"ZhangH. PunC. M. andDuX. Reversible Adversarial Examples With Beam Search Attack and Grayscale Invariance 2023 https:\/\/arxiv.org\/abs\/2306.11322."},{"key":"e_1_2_9_32_2","doi-asserted-by":"publisher","DOI":"10.1109\/5.726791"},{"key":"e_1_2_9_33_2","unstructured":"GriffinG. HolubA. andPeronaP. Caltech-256 Object Category Dataset 2007 https:\/\/authors.library.caltech.edu\/7694\/1\/CNS-TR-2007-001.pdf."},{"key":"e_1_2_9_34_2","doi-asserted-by":"crossref","unstructured":"LiuZ. LuoP. WangX. andTangX. Deep Learning Face Attributes in the Wild Proceedings of the IEEE International Conference on Computer Vision December 2015 Santiago Chile 3730\u20133738.","DOI":"10.1109\/ICCV.2015.425"},{"key":"e_1_2_9_35_2","doi-asserted-by":"crossref","unstructured":"HuangG. LiuZ. Van Der MaatenL. andWeinbergerK. Q. Densely Connected Convolutional Networks 2017 https:\/\/arxiv.org\/abs\/1608.06993.","DOI":"10.1109\/CVPR.2017.243"},{"key":"e_1_2_9_36_2","doi-asserted-by":"crossref","unstructured":"HeK. ZhangX. RenS. andSunJ. Deep Residual Learning for Image Recognition Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition June 2016 Vegas NV 770\u2013778.","DOI":"10.1109\/CVPR.2016.90"},{"key":"e_1_2_9_37_2","unstructured":"KingmaD. P.andBaJ. Adam: A Method for Stochastic Optimization 2014 https:\/\/arxiv.org\/abs\/1412.6980 https:\/\/doi.org\/10.48550\/arXiv.1412.6980."},{"key":"e_1_2_9_38_2","unstructured":"ZinkevichM. Online Convex Programming and Generalized Infinitesimal Gradient Ascent Proceedings of the 20th International Conference on Machine Learning April 2003 Fort Lauderdale FL 928\u2013936."},{"key":"e_1_2_9_39_2","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2003.819861"},{"key":"e_1_2_9_40_2","doi-asserted-by":"crossref","unstructured":"SelvarajuR. R. CogswellM. DasA. VedantamR. ParikhD. andBatraD. Grad-Cam: Visual Explanations From Deep Networks via Gradient-Based Localization 2017 https:\/\/arxiv.org\/abs\/1610.02391.","DOI":"10.1109\/ICCV.2017.74"},{"key":"e_1_2_9_41_2","doi-asserted-by":"crossref","unstructured":"HowardA. SandlerM. ChuG.et al. Searching for Mobilenetv3 2019 1314\u20131324 https:\/\/arxiv.org\/abs\/1905.02244.","DOI":"10.1109\/ICCV.2019.00140"},{"key":"e_1_2_9_42_2","unstructured":"RombachR. BlattmannA. LorenzD. EsserP. andOmmerB. High-Resolution Image Synthesis with Latent Diffusion Models 2022 https:\/\/arxiv.org\/abs\/2112.10752."},{"key":"e_1_2_9_43_2","unstructured":"SongJ. MengC. andErmonS. Denoising Diffusion Implicit Models 2020 https:\/\/arxiv.org\/abs\/2010.02502 https:\/\/doi.org\/10.48550\/arXiv.2010.02502."},{"key":"e_1_2_9_44_2","doi-asserted-by":"publisher","DOI":"10.48550\/arXiv.2305.16936"}],"container-title":["International Journal of Intelligent Systems"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/onlinelibrary.wiley.com\/doi\/pdf\/10.1155\/2024\/6054172","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,11,29]],"date-time":"2024-11-29T20:30:46Z","timestamp":1732912246000},"score":1,"resource":{"primary":{"URL":"https:\/\/onlinelibrary.wiley.com\/doi\/10.1155\/2024\/6054172"}},"subtitle":[],"editor":[{"given":"Youxi","family":"Wu","sequence":"additional","affiliation":[],"role":[{"role":"editor","vocabulary":"crossref"}]}],"short-title":[],"issued":{"date-parts":[[2024,1]]},"references-count":44,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2024,1]]}},"alternative-id":["10.1155\/2024\/6054172"],"URL":"https:\/\/doi.org\/10.1155\/2024\/6054172","archive":["Portico"],"relation":{},"ISSN":["0884-8173","1098-111X"],"issn-type":[{"type":"print","value":"0884-8173"},{"type":"electronic","value":"1098-111X"}],"subject":[],"published":{"date-parts":[[2024,1]]},"assertion":[{"value":"2024-04-27","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2024-09-05","order":2,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2024-10-17","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}],"article-number":"6054172"}}