{"id":"https://openalex.org/W4385478121","doi":"https://doi.org/10.1109/ijcnn54540.2023.10191063","title":"Interesting Near-boundary Data: Inferring Model Ownership for DNNs","display_name":"Interesting Near-boundary Data: Inferring Model Ownership for DNNs","publication_year":2023,"publication_date":"2023-06-18","ids":{"openalex":"https://openalex.org/W4385478121","doi":"https://doi.org/10.1109/ijcnn54540.2023.10191063"},"language":"en","primary_location":{"id":"doi:10.1109/ijcnn54540.2023.10191063","is_oa":false,"landing_page_url":"http://dx.doi.org/10.1109/ijcnn54540.2023.10191063","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 International Joint Conference on Neural Networks (IJCNN)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5050582535","display_name":"Zhe Sun","orcid":"https://orcid.org/0000-0001-6694-2568"},"institutions":[{"id":"https://openalex.org/I205237279","display_name":"Nankai University","ror":"https://ror.org/01y1kjr75","country_code":"CN","type":"education","lineage":["https://openalex.org/I205237279"]},{"id":"https://openalex.org/I4210126530","display_name":"Data Assurance and Communication Security","ror":"https://ror.org/02z2gfm30","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210126530","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhe Sun","raw_affiliation_strings":["Tianjin Key Laboratory of Network and Data Security Technology","College of Cyber Science, College of Computer Science, Nankai University, Tianjin, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tianjin Key Laboratory of Network and Data Security Technology","institution_ids":["https://openalex.org/I4210126530"]},{"raw_affiliation_string":"College of Cyber Science, College of Computer Science, Nankai University, Tianjin, China","institution_ids":["https://openalex.org/I205237279"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100514002","display_name":"Zongwen Yang","orcid":null},"institutions":[{"id":"https://openalex.org/I205237279","display_name":"Nankai University","ror":"https://ror.org/01y1kjr75","country_code":"CN","type":"education","lineage":["https://openalex.org/I205237279"]},{"id":"https://openalex.org/I4210126530","display_name":"Data Assurance and Communication Security","ror":"https://ror.org/02z2gfm30","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210126530","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zongwen Yang","raw_affiliation_strings":["Tianjin Key Laboratory of Network and Data Security Technology","College of Cyber Science, College of Computer Science, Nankai University, Tianjin, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tianjin Key Laboratory of Network and Data Security Technology","institution_ids":["https://openalex.org/I4210126530"]},{"raw_affiliation_string":"College of Cyber Science, College of Computer Science, Nankai University, Tianjin, China","institution_ids":["https://openalex.org/I205237279"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101009728","display_name":"Zhongyu Huang","orcid":"https://orcid.org/0000-0002-0085-5848"},"institutions":[{"id":"https://openalex.org/I205237279","display_name":"Nankai University","ror":"https://ror.org/01y1kjr75","country_code":"CN","type":"education","lineage":["https://openalex.org/I205237279"]},{"id":"https://openalex.org/I4210126530","display_name":"Data Assurance and Communication Security","ror":"https://ror.org/02z2gfm30","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210126530","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhongyu Huang","raw_affiliation_strings":["Tianjin Key Laboratory of Network and Data Security Technology","College of Cyber Science, College of Computer Science, Nankai University, Tianjin, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tianjin Key Laboratory of Network and Data Security Technology","institution_ids":["https://openalex.org/I4210126530"]},{"raw_affiliation_string":"College of Cyber Science, College of Computer Science, Nankai University, Tianjin, China","institution_ids":["https://openalex.org/I205237279"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100433544","display_name":"Yu Zhang","orcid":"https://orcid.org/0000-0002-3952-670X"},"institutions":[{"id":"https://openalex.org/I205237279","display_name":"Nankai University","ror":"https://ror.org/01y1kjr75","country_code":"CN","type":"education","lineage":["https://openalex.org/I205237279"]},{"id":"https://openalex.org/I4210126530","display_name":"Data Assurance and Communication Security","ror":"https://ror.org/02z2gfm30","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210126530","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yu Zhang","raw_affiliation_strings":["Tianjin Key Laboratory of Network and Data Security Technology","College of Cyber Science, College of Computer Science, Nankai University, Tianjin, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tianjin Key Laboratory of Network and Data Security Technology","institution_ids":["https://openalex.org/I4210126530"]},{"raw_affiliation_string":"College of Cyber Science, College of Computer Science, Nankai University, Tianjin, China","institution_ids":["https://openalex.org/I205237279"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100442199","display_name":"Jianzhong Zhang","orcid":"https://orcid.org/0000-0001-7056-8206"},"institutions":[{"id":"https://openalex.org/I205237279","display_name":"Nankai University","ror":"https://ror.org/01y1kjr75","country_code":"CN","type":"education","lineage":["https://openalex.org/I205237279"]},{"id":"https://openalex.org/I4210126530","display_name":"Data Assurance and Communication Security","ror":"https://ror.org/02z2gfm30","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210126530","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jianzhong Zhang","raw_affiliation_strings":["Tianjin Key Laboratory of Network and Data Security Technology","College of Cyber Science, College of Computer Science, Nankai University, Tianjin, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tianjin Key Laboratory of Network and Data Security Technology","institution_ids":["https://openalex.org/I4210126530"]},{"raw_affiliation_string":"College of Cyber Science, College of Computer Science, Nankai University, Tianjin, China","institution_ids":["https://openalex.org/I205237279"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.1632,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.54594815,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":94},"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9804999828338623,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10036","display_name":"Advanced Neural Network Applications","score":0.9678000211715698,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8106034994125366},{"id":"https://openalex.org/keywords/boundary","display_name":"Boundary (topology)","score":0.7549394965171814},{"id":"https://openalex.org/keywords/ambiguity","display_name":"Ambiguity","score":0.6443671584129333},{"id":"https://openalex.org/keywords/generator","display_name":"Generator (circuit theory)","score":0.548678457736969},{"id":"https://openalex.org/keywords/data-modeling","display_name":"Data modeling","score":0.4962359070777893},{"id":"https://openalex.org/keywords/noise","display_name":"Noise (video)","score":0.4512629806995392},{"id":"https://openalex.org/keywords/reuse","display_name":"Reuse","score":0.4451432228088379},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.4379866421222687},{"id":"https://openalex.org/keywords/property","display_name":"Property (philosophy)","score":0.43133994936943054},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.35922276973724365},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.18343374133110046},{"id":"https://openalex.org/keywords/power","display_name":"Power (physics)","score":0.1396327018737793},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.09409987926483154}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8106034994125366},{"id":"https://openalex.org/C62354387","wikidata":"https://www.wikidata.org/wiki/Q875399","display_name":"Boundary (topology)","level":2,"score":0.7549394965171814},{"id":"https://openalex.org/C2780522230","wikidata":"https://www.wikidata.org/wiki/Q1140419","display_name":"Ambiguity","level":2,"score":0.6443671584129333},{"id":"https://openalex.org/C2780992000","wikidata":"https://www.wikidata.org/wiki/Q17016113","display_name":"Generator (circuit theory)","level":3,"score":0.548678457736969},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.4962359070777893},{"id":"https://openalex.org/C99498987","wikidata":"https://www.wikidata.org/wiki/Q2210247","display_name":"Noise (video)","level":3,"score":0.4512629806995392},{"id":"https://openalex.org/C206588197","wikidata":"https://www.wikidata.org/wiki/Q846574","display_name":"Reuse","level":2,"score":0.4451432228088379},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4379866421222687},{"id":"https://openalex.org/C189950617","wikidata":"https://www.wikidata.org/wiki/Q937228","display_name":"Property (philosophy)","level":2,"score":0.43133994936943054},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.35922276973724365},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.18343374133110046},{"id":"https://openalex.org/C163258240","wikidata":"https://www.wikidata.org/wiki/Q25342","display_name":"Power (physics)","level":2,"score":0.1396327018737793},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.09409987926483154},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.0},{"id":"https://openalex.org/C548081761","wikidata":"https://www.wikidata.org/wiki/Q180388","display_name":"Waste management","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/ijcnn54540.2023.10191063","is_oa":false,"landing_page_url":"http://dx.doi.org/10.1109/ijcnn54540.2023.10191063","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 International Joint Conference on Neural Networks (IJCNN)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G3633636046","display_name":null,"funder_award_id":"2022YFB3103202","funder_id":"https://openalex.org/F4320335777","funder_display_name":"National Key Research and Development Program of China"}],"funders":[{"id":"https://openalex.org/F4320335777","display_name":"National Key Research and Development Program of China","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":31,"referenced_works":["https://openalex.org/W1945616565","https://openalex.org/W2194775991","https://openalex.org/W2407386500","https://openalex.org/W2579318729","https://openalex.org/W2935349488","https://openalex.org/W2963542245","https://openalex.org/W2963684088","https://openalex.org/W2963744840","https://openalex.org/W2963857521","https://openalex.org/W2973539365","https://openalex.org/W2985954225","https://openalex.org/W3006874538","https://openalex.org/W3093403688","https://openalex.org/W3096093113","https://openalex.org/W3118608800","https://openalex.org/W3127260909","https://openalex.org/W3159892921","https://openalex.org/W3164111940","https://openalex.org/W3179216274","https://openalex.org/W3202278031","https://openalex.org/W6640425456","https://openalex.org/W6685352114","https://openalex.org/W6738693630","https://openalex.org/W6747838042","https://openalex.org/W6760237559","https://openalex.org/W6766821575","https://openalex.org/W6773816653","https://openalex.org/W6774150056","https://openalex.org/W6784650815","https://openalex.org/W6784712565","https://openalex.org/W6790544463"],"related_works":["https://openalex.org/W2353179089","https://openalex.org/W2923538289","https://openalex.org/W2353125546","https://openalex.org/W2470643824","https://openalex.org/W4400595174","https://openalex.org/W2349635380","https://openalex.org/W4353089801","https://openalex.org/W2353819554","https://openalex.org/W2359488321","https://openalex.org/W2389866386"],"abstract_inverted_index":{"Deep":[0],"neural":[1],"networks":[2],"(DNNs)":[3],"require":[4,180],"expensive":[5],"training,":[6],"which":[7,53],"is":[8,17,121,189],"why":[9],"the":[10,50,94,115,123,130,135,144,155,158,181],"protection":[11],"of":[12,83,146,157],"model":[13,22,31,37,58,73,80,85,137,166,193],"intellectual":[14],"property":[15],"(IP)":[16],"becoming":[18],"more":[19],"critical.":[20],"Recently,":[21],"stealing":[23],"has":[24],"emerged":[25],"frequently,":[26],"and":[27,33,75,138,187],"many":[28,151],"researchers":[29],"design":[30,110,150],"watermarking":[32],"fingerprinting":[34],"for":[35,71,192],"verifying":[36,84],"ownership.":[38,86],"However,":[39],"attacks":[40],"such":[41],"as":[42,69],"ambiguity":[43],"statements":[44],"have":[45],"been":[46],"used":[47],"to":[48,57,78,92,105,113,129,153,184,195],"break":[49],"current":[51],"defense,":[52],"poses":[54],"a":[55,111],"challenge":[56],"ownership":[59,74,81,167],"verification.":[60],"Therefore,":[61],"this":[62,88,147],"paper":[63],"proposes":[64,77],"an":[65,99],"interesting":[66],"near-boundary":[67,96,116,124],"data":[68,97,125,183],"evidence":[70],"obtaining":[72],"innovatively":[76],"infer":[79],"instead":[82],"In":[87],"paper,":[89],"we":[90,149],"propose":[91],"generate":[93,106],"initial":[95],"using":[98],"algorithm":[100],"that":[101,122,165,175],"adds":[102],"slight":[103],"noise":[104],"adversarial":[107],"examples.":[108],"We":[109],"generator":[112],"privatize":[114],"data.":[117],"Our":[118],"main":[119],"observation":[120],"exhibit":[126],"results":[127,163],"close":[128],"classification":[131],"boundary":[132],"in":[133],"both":[134],"source":[136],"its":[139],"derived":[140],"stolen":[141],"model.":[142],"At":[143],"end":[145],"work,":[148],"experiments":[152],"verify":[154],"effectiveness":[156],"proposed":[159],"method.":[160,198],"The":[161],"experimental":[162],"demonstrate":[164],"can":[168],"be":[169,185],"inferred":[170],"with":[171],"high":[172],"confidence.":[173],"Noting":[174],"our":[176,197],"method":[177],"does":[178],"not":[179],"training":[182],"private,":[186],"it":[188],"extremely":[190],"costly":[191],"stealers":[194],"reuse":[196]},"counts_by_year":[{"year":2024,"cited_by_count":1}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}