{"id":"https://openalex.org/W4319988713","doi":"https://doi.org/10.1109/lsp.2023.3239737","title":"Universal BlackMarks: Key-Image-Free Blackbox Multi-Bit Watermarking of Deep Neural Networks","display_name":"Universal BlackMarks: Key-Image-Free Blackbox Multi-Bit Watermarking of Deep Neural Networks","publication_year":2023,"publication_date":"2023-01-01","ids":{"openalex":"https://openalex.org/W4319988713","doi":"https://doi.org/10.1109/lsp.2023.3239737"},"language":"en","primary_location":{"id":"doi:10.1109/lsp.2023.3239737","is_oa":false,"landing_page_url":"https://doi.org/10.1109/lsp.2023.3239737","pdf_url":null,"source":{"id":"https://openalex.org/S120629676","display_name":"IEEE Signal Processing Letters","issn_l":"1070-9908","issn":["1070-9908","1558-2361"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Signal Processing Letters","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100361413","display_name":"Li Li","orcid":"https://orcid.org/0000-0003-4799-5896"},"institutions":[{"id":"https://openalex.org/I113940042","display_name":"Shanghai University","ror":"https://ror.org/006teas31","country_code":"CN","type":"education","lineage":["https://openalex.org/I113940042"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Li Li","raw_affiliation_strings":["School of Communication and Information Engineering, Shanghai University, Shanghai, China"],"affiliations":[{"raw_affiliation_string":"School of Communication and Information Engineering, Shanghai University, Shanghai, China","institution_ids":["https://openalex.org/I113940042"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5067689180","display_name":"Weiming Zhang","orcid":"https://orcid.org/0000-0001-5576-6108"},"institutions":[{"id":"https://openalex.org/I126520041","display_name":"University of Science and Technology of China","ror":"https://ror.org/04c4dkn09","country_code":"CN","type":"education","lineage":["https://openalex.org/I126520041","https://openalex.org/I19820366"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Weiming Zhang","raw_affiliation_strings":["CAS Key Laboratory of Electro-Magnetic Space Information, University of Science and Technology of China, Hefei, China"],"affiliations":[{"raw_affiliation_string":"CAS Key Laboratory of Electro-Magnetic Space Information, University of Science and Technology of China, Hefei, China","institution_ids":["https://openalex.org/I126520041"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5007836692","display_name":"Mauro Barni","orcid":"https://orcid.org/0000-0002-7368-0866"},"institutions":[{"id":"https://openalex.org/I102064193","display_name":"University of Siena","ror":"https://ror.org/01tevnk56","country_code":"IT","type":"education","lineage":["https://openalex.org/I102064193"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Mauro Barni","raw_affiliation_strings":["Departmen of Information Engineering and Mathematics, University of Siena, Via Roma, Siena, Italy"],"affiliations":[{"raw_affiliation_string":"Departmen of Information Engineering and Mathematics, University of Siena, Via Roma, Siena, Italy","institution_ids":["https://openalex.org/I102064193"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5100361413"],"corresponding_institution_ids":["https://openalex.org/I113940042"],"apc_list":null,"apc_paid":null,"fwci":2.0879,"has_fulltext":false,"cited_by_count":17,"citation_normalized_percentile":{"value":0.88896841,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":99},"biblio":{"volume":"30","issue":null,"first_page":"36","last_page":"40"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10388","display_name":"Advanced Steganography and Watermarking Techniques","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10388","display_name":"Advanced Steganography and Watermarking Techniques","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.9970999956130981,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/watermark","display_name":"Watermark","score":0.8816598653793335},{"id":"https://openalex.org/keywords/digital-watermarking","display_name":"Digital watermarking","score":0.8534002304077148},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7843445539474487},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.642398476600647},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5610637664794922},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.5428299307823181},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.4575061798095703},{"id":"https://openalex.org/keywords/softmax-function","display_name":"Softmax function","score":0.4438466429710388},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.4057517945766449},{"id":"https://openalex.org/keywords/embedding","display_name":"Embedding","score":0.4048178493976593},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.3511754870414734},{"id":"https://openalex.org/keywords/image","display_name":"Image (mathematics)","score":0.3507577180862427}],"concepts":[{"id":"https://openalex.org/C164112704","wikidata":"https://www.wikidata.org/wiki/Q7974348","display_name":"Watermark","level":3,"score":0.8816598653793335},{"id":"https://openalex.org/C150817343","wikidata":"https://www.wikidata.org/wiki/Q875932","display_name":"Digital watermarking","level":3,"score":0.8534002304077148},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7843445539474487},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.642398476600647},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5610637664794922},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.5428299307823181},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.4575061798095703},{"id":"https://openalex.org/C188441871","wikidata":"https://www.wikidata.org/wiki/Q7554146","display_name":"Softmax function","level":3,"score":0.4438466429710388},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.4057517945766449},{"id":"https://openalex.org/C41608201","wikidata":"https://www.wikidata.org/wiki/Q980509","display_name":"Embedding","level":2,"score":0.4048178493976593},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.3511754870414734},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.3507577180862427},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/lsp.2023.3239737","is_oa":false,"landing_page_url":"https://doi.org/10.1109/lsp.2023.3239737","pdf_url":null,"source":{"id":"https://openalex.org/S120629676","display_name":"IEEE Signal Processing Letters","issn_l":"1070-9908","issn":["1070-9908","1558-2361"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Signal Processing Letters","raw_type":"journal-article"},{"id":"pmh:oai:usiena-air.unisi.it:11365/1229938","is_oa":false,"landing_page_url":"https://hdl.handle.net/11365/1229938","pdf_url":null,"source":{"id":"https://openalex.org/S4377196319","display_name":"Use Siena air (University of Siena)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I102064193","host_organization_name":"University of Siena","host_organization_lineage":["https://openalex.org/I102064193"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Clean water and sanitation","id":"https://metadata.un.org/sdg/6","score":0.6000000238418579}],"awards":[{"id":"https://openalex.org/G175089312","display_name":null,"funder_award_id":"U20B2047","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G2429589907","display_name":null,"funder_award_id":"U1936214","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G3062678198","display_name":null,"funder_award_id":"2101050020","funder_id":"https://openalex.org/F4320321885","funder_display_name":"Science and Technology Commission of Shanghai Municipality"},{"id":"https://openalex.org/G3986437333","display_name":null,"funder_award_id":"62002334","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G4838404910","display_name":null,"funder_award_id":"62102386","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G7086524931","display_name":null,"funder_award_id":"202006340042","funder_id":"https://openalex.org/F4320322725","funder_display_name":"China Scholarship Council"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320321885","display_name":"Science and Technology Commission of Shanghai Municipality","ror":"https://ror.org/03kt66j61"},{"id":"https://openalex.org/F4320322725","display_name":"China Scholarship Council","ror":"https://ror.org/04atp4p48"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":21,"referenced_works":["https://openalex.org/W12634471","https://openalex.org/W1491163994","https://openalex.org/W2194775991","https://openalex.org/W2579318729","https://openalex.org/W2619510810","https://openalex.org/W2768064608","https://openalex.org/W2787075213","https://openalex.org/W2806082141","https://openalex.org/W2909703150","https://openalex.org/W2935349488","https://openalex.org/W2952608669","https://openalex.org/W2963125010","https://openalex.org/W2997717738","https://openalex.org/W3102733833","https://openalex.org/W3105676597","https://openalex.org/W3135872251","https://openalex.org/W3185788529","https://openalex.org/W3205572447","https://openalex.org/W4246193833","https://openalex.org/W6747838042","https://openalex.org/W6758359881"],"related_works":["https://openalex.org/W2137394636","https://openalex.org/W2358993821","https://openalex.org/W1516446231","https://openalex.org/W2098152888","https://openalex.org/W1559740347","https://openalex.org/W2040356834","https://openalex.org/W2385289568","https://openalex.org/W2381486749","https://openalex.org/W1514507288","https://openalex.org/W2183032046"],"abstract_inverted_index":{"Existing":[0],"methods":[1],"for":[2,59],"Deep":[3],"Neural":[4],"Networks":[5],"(DNN)":[6],"watermarking":[7,56],"either":[8],"require":[9],"accessing":[10],"the":[11,15,30,33,64,67,73,76,87,96,100,116,121,124,142,148,168,176,179,187,190],"internal":[12],"parameters":[13],"of":[14,29,41,66,75,99,123,147,178,189],"DNN":[16,34,55,101,125,181],"models":[17],"(white-box":[18],"watermarking),":[19],"or":[20],"rely":[21],"on":[22,161,186],"backdooring":[23],"to":[24,80,95,103,109,141,156,170],"enforce":[25],"a":[26,38,52,92,110,127,137,172,183],"desired":[27],"behavior":[28],"model":[31,102],"when":[32],"is":[35,133,151],"fed":[36],"with":[37,182],"specific":[39],"set":[40],"key":[42,129],"input":[43],"images":[44],"(black-box":[45],"watermarking).":[46],"In":[47],"this":[48],"letter,":[49],"we":[50,89,114],"propose":[51],"black-box":[53],"multi-bit":[54],"algorithm,":[57],"suitable":[58],"multiclass":[60],"classification":[61],"networks,":[62],"whereby":[63],"presence":[65],"watermark":[68,117,174],"can":[69],"be":[70],"retrieved":[71],"from":[72,106],"output":[74,98,122,177],"network":[77,158],"in":[78],"correspondence":[79],"<italic":[81],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[82],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">any</i>":[83],"input.":[84],"To":[85],"read":[86],"watermark,":[88],"first":[90],"apply":[91],"power":[93],"function":[94],"softmax":[97],"map":[104],"it":[105,155],"an":[107],"impulse-like":[108],"smooth":[111],"distibution.":[112],"Then,":[113],"extract":[115],"bits":[118],"by":[119,135,153],"projecting":[120],"onto":[126],"pseudorandom":[128],"vector.":[130],"Watermark":[131],"embedding":[132],"achieved":[134],"adding":[136],"proper":[138],"regularizer":[139],"term":[140],"training":[143],"loss.":[144],"The":[145,164],"effectiveness":[146],"proposed":[149],"method":[150],"demonstrated":[152],"applying":[154],"various":[157],"architectures":[159],"working":[160],"different":[162],"datasets.":[163],"experimental":[165],"results":[166],"demonstrate":[167],"possibility":[169],"embed":[171],"robust":[173],"into":[175],"host":[180],"negligible":[184],"impact":[185],"accuracy":[188],"original":[191],"task.":[192]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":11},{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":2}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}