{"id":"https://openalex.org/W7224960486","doi":"https://doi.org/10.3390/electronics15215048","title":"Feature-Decoupled Contrastive Self-Distillation for Black-Box Watermark Removal","display_name":"Feature-Decoupled Contrastive Self-Distillation for Black-Box Watermark Removal","publication_year":2026,"publication_date":"2026-10-30","ids":{"openalex":"https://openalex.org/W7224960486","doi":"https://doi.org/10.3390/electronics15215048"},"language":"en","primary_location":{"id":"doi:10.3390/electronics15215048","doi":"https://doi.org/10.3390/electronics15215048","is_oa":true,"landing_page_url":"https://doi.org/10.3390/electronics15215048","pdf_url":null,"source":{"id":"https://openalex.org/S4210202905","display_name":"Electronics","issn_l":"2079-9292","issn":["2079-9292"],"is_oa":true,"is_in_doaj":false,"is_core":true,"listed_in":["anvur-scientific","cwts-core","norway-1","poland-100","russia-white-list-2","vabb-shw"],"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Electronics","raw_type":"journal-article"},"volume":null,"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.3390/electronics15215048","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5160227774","display_name":"Wei Wang","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wei Wang","raw_affiliation_strings":["National Key Laboratory of Electromagnetic Space Security, Jiaxing 314000, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Key Laboratory of Electromagnetic Space Security, Jiaxing 314000, China","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5159905000","display_name":"Shaofei Yang","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Shaofei Yang","raw_affiliation_strings":["National Key Laboratory of Electromagnetic Space Security, Jiaxing 314000, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Key Laboratory of Electromagnetic Space Security, Jiaxing 314000, China","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100713406","display_name":"Jiawei Zhu","orcid":"https://orcid.org/0009-0005-5819-0307","observed_orcids":["https://orcid.org/0009-0005-5819-0307","https://orcid.org/0009-0005-9412-3507"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jiawei Zhu","raw_affiliation_strings":["National Key Laboratory of Electromagnetic Space Security, Jiaxing 314000, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Key Laboratory of Electromagnetic Space Security, Jiaxing 314000, China","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5160215938","display_name":"Siyuan Zhu","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I55712492","display_name":"Zhejiang University of Technology","ror":"https://ror.org/02djqfd08","country_code":"CN","type":"education","lineage":["https://openalex.org/I55712492"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Siyuan Zhu","raw_affiliation_strings":["College of Computer Science and Technology, Zhejiang University of Technology, Hangzhou 310023, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology, Zhejiang University of Technology, Hangzhou 310023, China","institution_ids":["https://openalex.org/I55712492"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5125030635","display_name":"Yang Bai","orcid":"https://orcid.org/0009-0008-7391-0167","observed_orcids":["https://orcid.org/0009-0008-7391-0167"]},"institutions":[{"id":"https://openalex.org/I55712492","display_name":"Zhejiang University of Technology","ror":"https://ror.org/02djqfd08","country_code":"CN","type":"education","lineage":["https://openalex.org/I55712492"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yang Bai","raw_affiliation_strings":["College of Computer Science and Technology, Zhejiang University of Technology, Hangzhou 310023, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology, Zhejiang University of Technology, Hangzhou 310023, China","institution_ids":["https://openalex.org/I55712492"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101758654","display_name":"Jinyin Chen","orcid":"https://orcid.org/0000-0002-7153-2755","observed_orcids":["https://orcid.org/0000-0002-7153-2755"]},"institutions":[{"id":"https://openalex.org/I55712492","display_name":"Zhejiang University of Technology","ror":"https://ror.org/02djqfd08","country_code":"CN","type":"education","lineage":["https://openalex.org/I55712492"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jinyin Chen","raw_affiliation_strings":["College of Computer Science and Technology, Zhejiang University of Technology, Hangzhou 310023, China"],"raw_orcid":"https://orcid.org/0000-0002-7153-2755","affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology, Zhejiang University of Technology, Hangzhou 310023, China","institution_ids":["https://openalex.org/I55712492"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5159905000"],"corresponding_institution_ids":[],"apc_list":{"value":2400,"currency":"CHF","value_usd":2896},"apc_paid":{"value":2400,"currency":"CHF","value_usd":2896},"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.82513875,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"15","issue":"21","first_page":"5048","last_page":"5048"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9404000043869019,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9404000043869019,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10388","display_name":"Advanced Steganography and Watermarking Techniques","score":0.04529999941587448,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.006399999838322401,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/watermark-removal","display_name":"watermark removal","score":0.8510000109672546},{"id":"https://openalex.org/keywords/black-box-attacks","display_name":"black-box attacks","score":0.8320000171661377},{"id":"https://openalex.org/keywords/contrastive-learning","display_name":"contrastive learning","score":0.6079999804496765},{"id":"https://openalex.org/keywords/self-distillation","display_name":"self-distillation","score":0.9879999756813049},{"id":"https://openalex.org/keywords/feature-decoupling","display_name":"feature decoupling","score":0.9890000224113464},{"id":"https://openalex.org/keywords/pseudo-labeling","display_name":"pseudo-labeling","score":0.6359999775886536},{"id":"https://openalex.org/keywords/unlabeled-data","display_name":"unlabeled data","score":0.7760000228881836},{"id":"https://openalex.org/keywords/adversarial-perturbations","display_name":"adversarial perturbations","score":0.4490000009536743},{"id":"https://openalex.org/keywords/intellectual-property-protection","display_name":"intellectual property protection","score":0.652999997138977}],"concepts":[{"id":"https://openalex.org/C164112704","wikidata":"https://www.wikidata.org/wiki/Q7974348","display_name":"Watermark","level":3,"score":0.934499979019165},{"id":"https://openalex.org/C150817343","wikidata":"https://www.wikidata.org/wiki/Q875932","display_name":"Digital watermarking","level":3,"score":0.7578999996185303},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.7095000147819519},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6489999890327454},{"id":"https://openalex.org/C155512373","wikidata":"https://www.wikidata.org/wiki/Q287450","display_name":"Residual","level":2,"score":0.5927000045776367},{"id":"https://openalex.org/C36464697","wikidata":"https://www.wikidata.org/wiki/Q451553","display_name":"Visualization","level":2,"score":0.5037000179290771},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.4196999967098236},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.4120999872684479},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.4068000018596649},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.39559999108314514},{"id":"https://openalex.org/C205606062","wikidata":"https://www.wikidata.org/wiki/Q5249645","display_name":"Decoupling (probability)","level":2,"score":0.39160001277923584},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.34139999747276306},{"id":"https://openalex.org/C40969351","wikidata":"https://www.wikidata.org/wiki/Q3516228","display_name":"Word error rate","level":2,"score":0.33169999718666077},{"id":"https://openalex.org/C2776135515","wikidata":"https://www.wikidata.org/wiki/Q17143721","display_name":"Regularization (linguistics)","level":2,"score":0.3224000036716461},{"id":"https://openalex.org/C21200559","wikidata":"https://www.wikidata.org/wiki/Q7451068","display_name":"Sensitivity (control systems)","level":2,"score":0.31779998540878296},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.27900001406669617},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.2624000012874603}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.3390/electronics15215048","doi":"https://doi.org/10.3390/electronics15215048","is_oa":true,"landing_page_url":"https://doi.org/10.3390/electronics15215048","pdf_url":null,"source":{"id":"https://openalex.org/S4210202905","display_name":"Electronics","issn_l":"2079-9292","issn":["2079-9292"],"is_oa":true,"is_in_doaj":false,"is_core":true,"listed_in":["anvur-scientific","cwts-core","norway-1","poland-100","russia-white-list-2","vabb-shw"],"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Electronics","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.3390/electronics15215048","doi":"https://doi.org/10.3390/electronics15215048","is_oa":true,"landing_page_url":"https://doi.org/10.3390/electronics15215048","pdf_url":null,"source":{"id":"https://openalex.org/S4210202905","display_name":"Electronics","issn_l":"2079-9292","issn":["2079-9292"],"is_oa":true,"is_in_doaj":false,"is_core":true,"listed_in":["anvur-scientific","cwts-core","norway-1","poland-100","russia-white-list-2","vabb-shw"],"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Electronics","raw_type":"journal-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320338464","display_name":"Natural Science Foundation of Zhejiang Province","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":30,"referenced_works":["https://openalex.org/W2579318729","https://openalex.org/W2806082141","https://openalex.org/W2807363941","https://openalex.org/W2934843808","https://openalex.org/W2935349488","https://openalex.org/W3019933269","https://openalex.org/W3157391214","https://openalex.org/W3158487140","https://openalex.org/W3170224286","https://openalex.org/W3185788529","https://openalex.org/W4206532602","https://openalex.org/W4285604392","https://openalex.org/W4362471971","https://openalex.org/W4385988784","https://openalex.org/W4392005731","https://openalex.org/W4400392053","https://openalex.org/W4403480789","https://openalex.org/W4406744737","https://openalex.org/W4407982570","https://openalex.org/W4409800870","https://openalex.org/W4409907310","https://openalex.org/W4413682770","https://openalex.org/W4415680774","https://openalex.org/W4416425372","https://openalex.org/W4416566805","https://openalex.org/W7134198811","https://openalex.org/W7153264788","https://openalex.org/W7154456053","https://openalex.org/W7160257910","https://openalex.org/W7166737752"],"related_works":["https://openalex.org/W7117476104","https://openalex.org/W7131824548","https://openalex.org/W2985954225","https://openalex.org/W2952348804","https://openalex.org/W4226133545","https://openalex.org/W3094363799","https://openalex.org/W4397049040","https://openalex.org/W3087709229","https://openalex.org/W7204109581","https://openalex.org/W7125838433"],"abstract_inverted_index":{"Deep":[0],"neural":[1],"networks":[2],"have":[3],"been":[4],"widely":[5],"deployed":[6],"in":[7,213],"numerous":[8],"real-world":[9],"applications,":[10],"making":[11],"trained":[12],"models":[13],"valuable":[14],"intellectual":[15],"property.":[16],"However,":[17],"embedded":[18],"watermarks":[19,59],"remain":[20],"vulnerable":[21],"to":[22,92,140,183,204],"removal":[23,56],"attacks,":[24],"particularly":[25],"when":[26,221],"an":[27,61,101],"adversary":[28],"has":[29],"only":[30],"limited":[31],"clean":[32,66],"unlabeled":[33,67,169],"data":[34],"and":[35,95,129,138,154,185,189,217,229,239],"the":[36,76,80,112,120,142,158,167,173,178,193,196,205,214,222,234,237],"original":[37,113],"watermark":[38,55,164,180,243],"information":[39],"is":[40,89,105,181,209],"unavailable.":[41],"To":[42],"address":[43],"this":[44,46],"problem,":[45],"paper":[47],"proposes":[48],"a":[49],"feature-decoupled":[50],"contrastive":[51],"self-distillation":[52,131,240],"method":[53,160],"for":[54,242],"against":[57],"black-box-verifiable":[58],"under":[60,166],"editable-model":[62],"threat":[63],"model.":[64],"Given":[65],"data,":[68],"high-confidence":[69],"pseudo-labels":[70],"are":[71,226],"first":[72],"generated":[73],"solely":[74],"from":[75,124],"output":[77],"predictions":[78,139],"of":[79,111,177,236],"watermarked":[81,207],"model,":[82],"without":[83,107],"requiring":[84],"ground-truth":[85],"labels.":[86],"Feature":[87],"decoupling":[88],"then":[90],"employed":[91],"distinguish":[93],"normal":[94,144],"watermark-related":[96,103,125],"features,":[97],"based":[98],"on":[99,148,187],"which":[100],"inferred":[102],"perturbation":[104],"obtained":[106],"assuming":[108],"exact":[109],"recovery":[110],"secret":[114],"trigger.":[115],"Contrastive":[116],"learning":[117],"subsequently":[118],"guides":[119],"editable":[121],"model":[122,208],"away":[123],"representations,":[126],"while":[127],"feature-":[128],"label-level":[130],"provide":[132],"layer-wise":[133],"regularization":[134],"across":[135],"intermediate":[136],"representations":[137],"preserve":[141],"model\u2019s":[143],"task":[145],"behavior.":[146],"Experiments":[147],"four":[149],"datasets":[150],"(MNIST,":[151],"CIFAR-10,":[152],"ImageNet-10,":[153],"ImageNet-100)":[155],"demonstrate":[156,233],"that":[157],"proposed":[159],"effectively":[161],"reduces":[162],"residual":[163],"behavior":[165],"limited-data,":[168],"setting.":[170],"For":[171,192],"example,":[172],"verification":[174],"success":[175],"rate":[176],"BadNets":[179],"reduced":[182],"4.0%":[184],"5.67%":[186],"CIFAR-10":[188],"ImageNet-100,":[190],"respectively.":[191],"complete":[194],"method,":[195],"largest":[197],"reported":[198],"mean":[199],"main-task":[200],"accuracy":[201],"drop":[202],"relative":[203],"pre-removal":[206],"3.95":[210],"percentage":[211,219],"points":[212,220],"main":[215],"comparison":[216],"4.98":[218],"data-proportion":[223],"sensitivity":[224],"experiments":[225],"included.":[227],"Visualization":[228],"ablation":[230],"results":[231],"further":[232],"effectiveness":[235],"feature-decoupling":[238],"components":[241],"removal.":[244]},"counts_by_year":[],"updated_date":"2026-11-04T10:54:05.112534","created_date":"2026-10-31T00:00:00"}