{"id":"https://openalex.org/W7127091963","doi":"https://doi.org/10.1109/trustcom66490.2025.00120","title":"Adversarial Example Based Fingerprint Embedding for Robust Copyright Protection in Split Learning","display_name":"Adversarial Example Based Fingerprint Embedding for Robust Copyright Protection in Split Learning","publication_year":2025,"publication_date":"2025-11-14","ids":{"openalex":"https://openalex.org/W7127091963","doi":"https://doi.org/10.1109/trustcom66490.2025.00120"},"language":"en","primary_location":{"id":"doi:10.1109/trustcom66490.2025.00120","doi":"https://doi.org/10.1109/trustcom66490.2025.00120","is_oa":false,"landing_page_url":"https://doi.org/10.1109/trustcom66490.2025.00120","pdf_url":null,"source":{"id":"https://openalex.org/S4363608016","display_name":"IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE 24th International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom)","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","is_traditional":true,"indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2503.04825","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5124751239","display_name":"Zhangting Lin","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I9842412","display_name":"Nanjing University of Aeronautics and Astronautics","ror":"https://ror.org/01scyh794","country_code":"CN","type":"education","lineage":["https://openalex.org/I9842412"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhangting Lin","raw_affiliation_strings":["Nanjing University of Aeronautics and Astronautics,College of Computer Science and Technology,Nanjing,China,211106"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Nanjing University of Aeronautics and Astronautics,College of Computer Science and Technology,Nanjing,China,211106","institution_ids":["https://openalex.org/I9842412"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5022068526","display_name":"Mingfu Xue","orcid":"https://orcid.org/0000-0003-2408-503X","observed_orcids":["https://orcid.org/0000-0003-2408-503X"]},"institutions":[{"id":"https://openalex.org/I66867065","display_name":"East China Normal University","ror":"https://ror.org/02n96ep67","country_code":"CN","type":"education","lineage":["https://openalex.org/I66867065"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Mingfu Xue","raw_affiliation_strings":["East China Normal University,School of Communication and Electronic Engineering,Shanghai,China,200241"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"East China Normal University,School of Communication and Electronic Engineering,Shanghai,China,200241","institution_ids":["https://openalex.org/I66867065"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5124820839","display_name":"Wenmao Liu","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wenmao Liu","raw_affiliation_strings":["NSFOCUS Information Technology Co., Ltd.,Beijing,China,100089"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NSFOCUS Information Technology Co., Ltd.,Beijing,China,100089","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5017238118","display_name":"Liquan CHEN","orcid":"https://orcid.org/0000-0002-7202-4939","observed_orcids":["https://orcid.org/0000-0002-7202-4939"]},"institutions":[{"id":"https://openalex.org/I76569877","display_name":"Southeast University","ror":"https://ror.org/04ct4d772","country_code":"CN","type":"education","lineage":["https://openalex.org/I76569877"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Liquan Chen","raw_affiliation_strings":["Southeast University,School of Cyber Science and Engineering,Nanjing,China,211102"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Southeast University,School of Cyber Science and Engineering,Nanjing,China,211102","institution_ids":["https://openalex.org/I76569877"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.07,"has_fulltext":true,"cited_by_count":3,"citation_normalized_percentile":{"value":0.79637144,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":96,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"1038","last_page":"1045"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.5419999957084656,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.5419999957084656,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.14900000393390656,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10388","display_name":"Advanced Steganography and Watermarking Techniques","score":0.07460000365972519,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/split-learning","display_name":"split learning","score":0.9160000085830688},{"id":"https://openalex.org/keywords/copyright-protection","display_name":"copyright protection","score":0.8479999899864197},{"id":"https://openalex.org/keywords/adversarial-examples","display_name":"adversarial examples","score":0.7760000228881836},{"id":"https://openalex.org/keywords/model-fingerprinting","display_name":"model fingerprinting","score":0.5759999752044678},{"id":"https://openalex.org/keywords/data-leakage","display_name":"data leakage","score":0.5830000042915344},{"id":"https://openalex.org/keywords/intellectual-property-infringement","display_name":"intellectual property infringement","score":0.7620000243186951},{"id":"https://openalex.org/keywords/fingerprint-verification","display_name":"fingerprint verification","score":0.621999979019165}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7642999887466431},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.6674000024795532},{"id":"https://openalex.org/C71901391","wikidata":"https://www.wikidata.org/wiki/Q7126699","display_name":"Upload","level":2,"score":0.625},{"id":"https://openalex.org/C2777826928","wikidata":"https://www.wikidata.org/wiki/Q3745713","display_name":"Fingerprint (computing)","level":2,"score":0.6086999773979187},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5171999931335449},{"id":"https://openalex.org/C41608201","wikidata":"https://www.wikidata.org/wiki/Q980509","display_name":"Embedding","level":2,"score":0.506600022315979},{"id":"https://openalex.org/C77618280","wikidata":"https://www.wikidata.org/wiki/Q1155772","display_name":"Scheme (mathematics)","level":2,"score":0.47780001163482666},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.4560999870300293},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.45260000228881836},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.42250001430511475},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.42080000042915344},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4077000021934509},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.4027000069618225},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.35910001397132874},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.34439998865127563},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3375999927520752},{"id":"https://openalex.org/C164995936","wikidata":"https://www.wikidata.org/wiki/Q5450283","display_name":"Fingerprint Verification Competition","level":4,"score":0.33719998598098755},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.3310999870300293},{"id":"https://openalex.org/C189950617","wikidata":"https://www.wikidata.org/wiki/Q937228","display_name":"Property (philosophy)","level":2,"score":0.3246000111103058},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.30730000138282776},{"id":"https://openalex.org/C2992525071","wikidata":"https://www.wikidata.org/wiki/Q50818671","display_name":"Federated learning","level":2,"score":0.3066999912261963},{"id":"https://openalex.org/C168406668","wikidata":"https://www.wikidata.org/wiki/Q178022","display_name":"Fingerprint recognition","level":3,"score":0.3046000003814697},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.2962000072002411},{"id":"https://openalex.org/C34974158","wikidata":"https://www.wikidata.org/wiki/Q131257","display_name":"Intellectual property","level":2,"score":0.2816999852657318},{"id":"https://openalex.org/C58489278","wikidata":"https://www.wikidata.org/wiki/Q1172284","display_name":"Data set","level":2,"score":0.2720000147819519},{"id":"https://openalex.org/C67174900","wikidata":"https://www.wikidata.org/wiki/Q178022","display_name":"Minutiae","level":4,"score":0.26739999651908875},{"id":"https://openalex.org/C2779582901","wikidata":"https://www.wikidata.org/wiki/Q21013010","display_name":"Distributed learning","level":2,"score":0.25929999351501465}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/trustcom66490.2025.00120","doi":"https://doi.org/10.1109/trustcom66490.2025.00120","is_oa":false,"landing_page_url":"https://doi.org/10.1109/trustcom66490.2025.00120","pdf_url":null,"source":{"id":"https://openalex.org/S4363608016","display_name":"IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE 24th International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom)","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:2503.04825","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2503.04825","pdf_url":"https://arxiv.org/pdf/2503.04825","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2503.04825","doi":"https://doi.org/10.48550/arxiv.2503.04825","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2503.04825","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2503.04825","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2503.04825","pdf_url":"https://arxiv.org/pdf/2503.04825","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[{"display_name":"Peace, justice, and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.47620001435279846}],"study_designs":[],"awards":[{"id":"https://openalex.org/G5080558733","display_name":null,"funder_award_id":"62372231","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7127091963.pdf","grobid_xml":"https://content.openalex.org/works/W7127091963.grobid-xml"},"referenced_works_count":21,"referenced_works":["https://openalex.org/W2108598243","https://openalex.org/W2112796928","https://openalex.org/W2194775991","https://openalex.org/W2810611310","https://openalex.org/W2903470619","https://openalex.org/W2994624247","https://openalex.org/W2998600867","https://openalex.org/W3204946808","https://openalex.org/W3215453688","https://openalex.org/W4220734716","https://openalex.org/W4296411155","https://openalex.org/W4311731280","https://openalex.org/W4317549124","https://openalex.org/W4320005719","https://openalex.org/W4372266209","https://openalex.org/W4376167314","https://openalex.org/W4378513358","https://openalex.org/W4386043909","https://openalex.org/W4387848684","https://openalex.org/W4391093146","https://openalex.org/W4402937642"],"related_works":["https://openalex.org/W6948189424","https://openalex.org/W4399310521","https://openalex.org/W4285077897","https://openalex.org/W4387046674","https://openalex.org/W3195937011","https://openalex.org/W4410177181","https://openalex.org/W4390348448","https://openalex.org/W4405011892","https://openalex.org/W7123825382","https://openalex.org/W4387185516"],"abstract_inverted_index":{"Currently,":[0],"deep":[1],"learning":[2],"models":[3,83],"are":[4,139],"easily":[5],"exposed":[6],"to":[7,22,30,34,65,103,131],"data":[8,32,43,51],"leakage":[9],"risks.":[10],"As":[11],"a":[12,20,57,74,115,162,207],"distributed":[13],"model,":[14,100],"Split":[15,81,98],"Learning":[16,82,99],"thus":[17],"emerged":[18],"as":[19,71,141],"solution":[21],"address":[23],"this":[24,88],"issue.":[25],"The":[26,110],"model":[27,62,145,196],"is":[28,63,84,159],"splitted":[29],"avoid":[31],"uploading":[33],"the":[35,48,92,133,144,147,153,156,182,190],"server":[36,55],"and":[37,45,54,106,176],"reduce":[38],"computing":[39],"requirements":[40],"while":[41],"ensuring":[42],"privacy":[44],"security.":[46],"However,":[47],"transmission":[49],"of":[50,117,155,169],"between":[52],"clients":[53],"creates":[56],"potential":[58],"vulnerability.":[59],"In":[60],"particular,":[61],"vulnerable":[64],"intellectual":[66],"property":[67],"(IP)":[68],"infringement":[69],"such":[70],"piracy.":[72],"Alarmingly,":[73],"dedicated":[75],"copyright":[76,94,108],"protection":[77,95],"framework":[78],"tailored":[79],"for":[80,97],"still":[85],"lacking.":[86],"To":[87],"end,":[89],"we":[90,123],"propose":[91],"first":[93,113],"scheme":[96],"leveraging":[101],"fingerprint":[102,134,164,209],"ensure":[104],"effective":[105],"robust":[107,215],"protection.":[109],"proposed":[111],"method":[112],"generates":[114],"set":[116],"specifically":[118],"designed":[119],"adversarial":[120,137],"examples.":[121],"Then,":[122],"select":[124],"those":[125],"examples":[126,138],"that":[127,189,213],"would":[128],"induce":[129],"misclassifications":[130],"form":[132],"set.":[135],"These":[136],"embedded":[140,191],"fingerprints":[142,192],"into":[143],"during":[146],"training":[148],"process.":[149],"Exhaustive":[150],"experiments":[151],"highlight":[152],"effectiveness":[154],"scheme.":[157],"This":[158],"demonstrated":[160],"by":[161],"remarkable":[163],"verification":[165,210],"success":[166,211],"rate":[167,212],"(FVSR)":[168],"100%":[170,177],"on":[171,174,178],"MNIST,":[172],"98%":[173],"CIFAR-10,":[175],"ImageNet,":[179],"respectively.":[180],"Meanwhile,":[181],"model\u2019s":[183],"accuracy":[184],"only":[185],"decreases":[186],"slightly,":[187],"indicating":[188],"do":[193],"not":[194],"compromise":[195],"performance.":[197],"Even":[198],"under":[199],"label":[200],"inference":[201],"attack,":[202],"our":[203],"approach":[204],"consistently":[205],"achieves":[206],"high":[208],"ensures":[214],"verification.":[216]},"counts_by_year":[{"year":2026,"cited_by_count":3}],"updated_date":"2026-11-10T11:39:43.021295","created_date":"2026-02-03T00:00:00"}