{"id":"https://openalex.org/W4386608606","doi":"https://doi.org/10.1109/tdsc.2023.3313577","title":"VeriDIP: Verifying Ownership of Deep Neural Networks Through Privacy Leakage Fingerprints","display_name":"VeriDIP: Verifying Ownership of Deep Neural Networks Through Privacy Leakage Fingerprints","publication_year":2023,"publication_date":"2023-09-11","ids":{"openalex":"https://openalex.org/W4386608606","doi":"https://doi.org/10.1109/tdsc.2023.3313577"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2023.3313577","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2023.3313577","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5013007403","display_name":"Aoting Hu","orcid":"https://orcid.org/0000-0002-9554-5817"},"institutions":[{"id":"https://openalex.org/I92178344","display_name":"Anhui University of Technology","ror":"https://ror.org/02qdtrq21","country_code":"CN","type":"education","lineage":["https://openalex.org/I92178344"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Aoting Hu","raw_affiliation_strings":["School of Electrical and Information Engineering, Anhui University of Technology, Ma&#x2019;anshan, China"],"raw_orcid":"https://orcid.org/0000-0002-9554-5817","affiliations":[{"raw_affiliation_string":"School of Electrical and Information Engineering, Anhui University of Technology, Ma&#x2019;anshan, China","institution_ids":["https://openalex.org/I92178344"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5012305916","display_name":"Zhigang L\u00fc","orcid":"https://orcid.org/0000-0001-5102-6217"},"institutions":[{"id":"https://openalex.org/I86467917","display_name":"James Cook University","ror":"https://ror.org/04gsp2c11","country_code":"AU","type":"education","lineage":["https://openalex.org/I86467917"]},{"id":"https://openalex.org/I99043593","display_name":"Macquarie University","ror":"https://ror.org/01sf06y89","country_code":"AU","type":"education","lineage":["https://openalex.org/I99043593"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Zhigang Lu","raw_affiliation_strings":["College of Science and Engineering, James Cook University, Douglas, QLD, Australia","postdoctoral research fellow at Macquarie University, Australia"],"raw_orcid":"https://orcid.org/0000-0001-5102-6217","affiliations":[{"raw_affiliation_string":"College of Science and Engineering, James Cook University, Douglas, QLD, Australia","institution_ids":["https://openalex.org/I86467917"]},{"raw_affiliation_string":"postdoctoral research fellow at Macquarie University, Australia","institution_ids":["https://openalex.org/I99043593"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5023822934","display_name":"Renjie Xie","orcid":"https://orcid.org/0000-0001-5619-9766"},"institutions":[{"id":"https://openalex.org/I76569877","display_name":"Southeast University","ror":"https://ror.org/04ct4d772","country_code":"CN","type":"education","lineage":["https://openalex.org/I76569877"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Renjie Xie","raw_affiliation_strings":["National Mobile Communications Research Laboratory, Southeast University, Nanjing, China"],"raw_orcid":"https://orcid.org/0000-0001-5619-9766","affiliations":[{"raw_affiliation_string":"National Mobile Communications Research Laboratory, Southeast University, Nanjing, China","institution_ids":["https://openalex.org/I76569877"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5009850797","display_name":"Minhui Xue","orcid":"https://orcid.org/0000-0002-9172-4252"},"institutions":[{"id":"https://openalex.org/I1292875679","display_name":"Commonwealth Scientific and Industrial Research Organisation","ror":"https://ror.org/03qn8fb07","country_code":"AU","type":"government","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Minhui Xue","raw_affiliation_strings":["CSIRO&#x0027;s Data61, Eveleigh, NSW, Australia"],"raw_orcid":"https://orcid.org/0000-0002-9172-4252","affiliations":[{"raw_affiliation_string":"CSIRO&#x0027;s Data61, Eveleigh, NSW, Australia","institution_ids":["https://openalex.org/I42894916","https://openalex.org/I1292875679"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.777,"has_fulltext":false,"cited_by_count":11,"citation_normalized_percentile":{"value":0.87974774,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":98,"max":99},"biblio":{"volume":"21","issue":"4","first_page":"2568","last_page":"2584"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10036","display_name":"Advanced Neural Network Applications","score":0.9498000144958496,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9230999946594238,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7003428936004639},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.6674988865852356},{"id":"https://openalex.org/keywords/overfitting","display_name":"Overfitting","score":0.6160296201705933},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.5668560266494751},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.5470800995826721},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.5033714175224304},{"id":"https://openalex.org/keywords/information-leakage","display_name":"Information leakage","score":0.4192313551902771},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.31302157044410706},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.21763646602630615}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7003428936004639},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6674988865852356},{"id":"https://openalex.org/C22019652","wikidata":"https://www.wikidata.org/wiki/Q331309","display_name":"Overfitting","level":3,"score":0.6160296201705933},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.5668560266494751},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5470800995826721},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.5033714175224304},{"id":"https://openalex.org/C2779201187","wikidata":"https://www.wikidata.org/wiki/Q2775060","display_name":"Information leakage","level":2,"score":0.4192313551902771},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.31302157044410706},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.21763646602630615},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2023.3313577","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2023.3313577","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W4362597605","https://openalex.org/W1574414179","https://openalex.org/W4297676672","https://openalex.org/W3009056573","https://openalex.org/W2922073769","https://openalex.org/W4281702477","https://openalex.org/W2490526372","https://openalex.org/W4376166922","https://openalex.org/W4378510483","https://openalex.org/W4221142204"],"abstract_inverted_index":{"Deploying":[0],"Machine":[1],"Learning":[2],"as":[3,37],"a":[4,53,65,103,125],"Service":[5],"gives":[6],"rise":[7],"to":[8,12,20,90,132,168,207],"model":[9,22],"plagiarism,":[10],"leading":[11],"copyright":[13],"infringement.":[14],"Ownership":[15],"testing":[16,56],"techniques":[17],"are":[18],"designed":[19],"identify":[21],"fingerprints":[23,109],"for":[24],"verifying":[25],"plagiarism.":[26],"However,":[27],"previous":[28],"works":[29],"often":[30],"rely":[31],"on":[32,45,158,171,187,193,201],"overfitting":[33],"or":[34],"robustness":[35],"features":[36],"fingerprints,":[38],"lacking":[39],"theoretical":[40],"guarantees":[41],"and":[42,147,161,178],"exhibiting":[43],"under-performance":[44],"generalized":[46,188],"models.":[47,195],"In":[48],"this":[49],"paper,":[50],"we":[51],"propose":[52],"novel":[54,126],"ownership":[55,137,152],"method":[57],"called":[58],"VeriDIP,":[59],"which":[60,98,115],"<underline":[61,66,71,75],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[62,67,72,76],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">veri</u>":[63],"fies":[64],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">D</u>":[68],"NN":[69],"model's":[70],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">i</u>":[73],"ntellectual":[74],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">p</u>":[77],"roperty.":[78],"VeriDIP":[79,144,164,182,197],"makes":[80],"two":[81],"major":[82],"contributions.":[83],"(1)":[84],"It":[85],"utilizes":[86],"membership":[87],"inference":[88],"attacks":[89],"estimate":[91],"the":[92,100,111,116,134,151],"lower":[93],"bound":[94],"of":[95,102,136,153],"privacy":[96,107],"leakage,":[97],"reflects":[99],"fingerprint":[101],"given":[104],"model.":[105],"The":[106],"leakage":[108],"highlight":[110],"unique":[112],"patterns":[113],"through":[114],"models":[117,156,205],"memorize":[118],"sensitive":[119],"training":[120],"datasets.":[121,163],"(2)":[122],"We":[123],"introduce":[124],"approach":[127],"using":[128],"less":[129],"private":[130,204,209],"samples":[131],"enhance":[133],"performance":[135,167,186],"testing.":[138],"Extensive":[139],"experimental":[140],"results":[141],"confirm":[142],"that":[143],"is":[145],"effective":[146],"efficient":[148],"in":[149],"validating":[150],"deep":[154,189],"learning":[155,190],"trained":[157],"both":[159],"image":[160,172],"tabular":[162],"achieves":[165],"comparable":[166],"state-of-the-art":[169],"methods":[170],"datasets":[173],"while":[174],"significantly":[175],"reducing":[176],"computation":[177],"communication":[179],"costs.":[180],"Enhanced":[181],"demonstrates":[183],"superior":[184],"verification":[185],"models,":[191],"particularly":[192],"table-trained":[194],"Additionally,":[196],"exhibits":[198],"similar":[199],"effectiveness":[200],"utility-preserving":[202],"differentially":[203],"compared":[206],"non-differentially":[208],"baselines.":[210]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":8}],"updated_date":"2026-06-24T13:16:06.693445","created_date":"2025-10-10T00:00:00"}