{"id":"https://openalex.org/W4414321886","doi":"https://doi.org/10.1109/tdsc.2025.3611654","title":"AttMark: Attention Based Model Watermarking Against Stealing Attacks","display_name":"AttMark: Attention Based Model Watermarking Against Stealing Attacks","publication_year":2025,"publication_date":"2025-09-18","ids":{"openalex":"https://openalex.org/W4414321886","doi":"https://doi.org/10.1109/tdsc.2025.3611654"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2025.3611654","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2025.3611654","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5010848802","display_name":"Xinjing Liu","orcid":"https://orcid.org/0000-0003-0159-0594"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xinjing Liu","raw_affiliation_strings":["School of Cyber Engineering, Xidian University, Xi’an, China","School of Cyber Engineering, Xidian University, Xian, China"],"raw_orcid":"https://orcid.org/0000-0003-0159-0594","affiliations":[{"raw_affiliation_string":"School of Cyber Engineering, Xidian University, Xi’an, China","institution_ids":["https://openalex.org/I149594827"]},{"raw_affiliation_string":"School of Cyber Engineering, Xidian University, Xian, China","institution_ids":["https://openalex.org/I149594827"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5015787649","display_name":"Zhuo Ma","orcid":"https://orcid.org/0000-0001-6023-2864"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhuo Ma","raw_affiliation_strings":["School of Cyber Engineering, Xidian University, Xi’an, China","School of Cyber Engineering, Xidian University, Xian, China"],"raw_orcid":"https://orcid.org/0000-0001-6023-2864","affiliations":[{"raw_affiliation_string":"School of Cyber Engineering, Xidian University, Xi’an, China","institution_ids":["https://openalex.org/I149594827"]},{"raw_affiliation_string":"School of Cyber Engineering, Xidian University, Xian, China","institution_ids":["https://openalex.org/I149594827"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Yang Liu","orcid":"https://orcid.org/0000-0002-6276-1468"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yang Liu","raw_affiliation_strings":["School of Cyber Engineering, Xidian University, Xi’an, China","School of Cyber Engineering, Xidian University, Xian, China"],"raw_orcid":"https://orcid.org/0000-0002-6276-1468","affiliations":[{"raw_affiliation_string":"School of Cyber Engineering, Xidian University, Xi’an, China","institution_ids":["https://openalex.org/I149594827"]},{"raw_affiliation_string":"School of Cyber Engineering, Xidian University, Xian, China","institution_ids":["https://openalex.org/I149594827"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5080540971","display_name":"Taifeng Liu","orcid":"https://orcid.org/0000-0003-0843-165X"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Taifeng Liu","raw_affiliation_strings":["School of Cyber Engineering, Xidian University, Xi’an, China","School of Cyber Engineering, Xidian University, Xian, China"],"raw_orcid":"https://orcid.org/0000-0003-0843-165X","affiliations":[{"raw_affiliation_string":"School of Cyber Engineering, Xidian University, Xi’an, China","institution_ids":["https://openalex.org/I149594827"]},{"raw_affiliation_string":"School of Cyber Engineering, Xidian University, Xian, China","institution_ids":["https://openalex.org/I149594827"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5040562611","display_name":"Hao Yang","orcid":"https://orcid.org/0009-0009-0174-7660"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hao Yang","raw_affiliation_strings":["School of Cyber Engineering, Xidian University, Xi’an, China","School of Cyber Engineering, Xidian University, Xian, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyber Engineering, Xidian University, Xi’an, China","institution_ids":["https://openalex.org/I149594827"]},{"raw_affiliation_string":"School of Cyber Engineering, Xidian University, Xian, China","institution_ids":["https://openalex.org/I149594827"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5043524348","display_name":"Zhan Qin","orcid":"https://orcid.org/0000-0001-7872-6969"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhan Qin","raw_affiliation_strings":["Institute of Cyberspace Research, Zhejiang University, Hangzhou, China","Institute of Cyberspace Research, Zhejiang University, Zhejiang, China"],"raw_orcid":"https://orcid.org/0000-0001-7872-6969","affiliations":[{"raw_affiliation_string":"Institute of Cyberspace Research, Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]},{"raw_affiliation_string":"Institute of Cyberspace Research, Zhejiang University, Zhejiang, China","institution_ids":["https://openalex.org/I76130692"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":2645,"currency":"USD","value_usd":2645},"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.17705368,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"23","issue":"1","first_page":"814","last_page":"826"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10388","display_name":"Advanced Steganography and Watermarking Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10388","display_name":"Advanced Steganography and Watermarking Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10775","display_name":"Generative Adversarial Networks and Image Synthesis","score":0.9958999752998352,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/digital-watermarking","display_name":"Digital watermarking","score":0.7343000173568726},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.3944000005722046},{"id":"https://openalex.org/keywords/copy-protection","display_name":"Copy protection","score":0.3384000062942505},{"id":"https://openalex.org/keywords/electronic-mail","display_name":"Electronic mail","score":0.3174000084400177},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.299699991941452},{"id":"https://openalex.org/keywords/algorithm-design","display_name":"Algorithm design","score":0.2978000044822693},{"id":"https://openalex.org/keywords/threat-model","display_name":"Threat model","score":0.2924000024795532}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8165000081062317},{"id":"https://openalex.org/C150817343","wikidata":"https://www.wikidata.org/wiki/Q875932","display_name":"Digital watermarking","level":3,"score":0.7343000173568726},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5864999890327454},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.3944000005722046},{"id":"https://openalex.org/C2780581891","wikidata":"https://www.wikidata.org/wiki/Q15738686","display_name":"Copy protection","level":4,"score":0.3384000062942505},{"id":"https://openalex.org/C3020028006","wikidata":"https://www.wikidata.org/wiki/Q9158","display_name":"Electronic mail","level":2,"score":0.3174000084400177},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.299699991941452},{"id":"https://openalex.org/C106516650","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm design","level":2,"score":0.2978000044822693},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.2924000024795532},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.2919999957084656},{"id":"https://openalex.org/C193470923","wikidata":"https://www.wikidata.org/wiki/Q5276026","display_name":"Digital Watermarking Alliance","level":4,"score":0.2888999879360199},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.28369998931884766},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.2768999934196472},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.2736999988555908},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.2732999920845032},{"id":"https://openalex.org/C36464697","wikidata":"https://www.wikidata.org/wiki/Q451553","display_name":"Visualization","level":2,"score":0.2678000032901764},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.2669999897480011},{"id":"https://openalex.org/C108801101","wikidata":"https://www.wikidata.org/wiki/Q15032","display_name":"Steganography","level":3,"score":0.26460000872612}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2025.3611654","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2025.3611654","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1323945101","display_name":null,"funder_award_id":"62261160651","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G2215088380","display_name":null,"funder_award_id":"U23A20307","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G3848079773","display_name":null,"funder_award_id":"U21A20464","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G5579457432","display_name":null,"funder_award_id":"B16037","funder_id":"https://openalex.org/F4320321543","funder_display_name":"China Postdoctoral Science Foundation"},{"id":"https://openalex.org/G7077580569","display_name":null,"funder_award_id":"62436002","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G7214301996","display_name":null,"funder_award_id":"2023M742739","funder_id":"https://openalex.org/F4320321543","funder_display_name":"China Postdoctoral Science Foundation"},{"id":"https://openalex.org/G7531761133","display_name":null,"funder_award_id":"62406239","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G875455441","display_name":null,"funder_award_id":"U2436206","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320321543","display_name":"China Postdoctoral Science Foundation","ror":"https://ror.org/0426zh255"},{"id":"https://openalex.org/F4320335787","display_name":"Fundamental Research Funds for the Central Universities","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":28,"referenced_works":["https://openalex.org/W2062118960","https://openalex.org/W2579318729","https://openalex.org/W2603766943","https://openalex.org/W2757528734","https://openalex.org/W2768064608","https://openalex.org/W2798820905","https://openalex.org/W2807363941","https://openalex.org/W2808195004","https://openalex.org/W2894906112","https://openalex.org/W2934843808","https://openalex.org/W2962858109","https://openalex.org/W2963303354","https://openalex.org/W2964128659","https://openalex.org/W2969695741","https://openalex.org/W2990980946","https://openalex.org/W2997146418","https://openalex.org/W3034856584","https://openalex.org/W3035379805","https://openalex.org/W3087931608","https://openalex.org/W3156011647","https://openalex.org/W3174136778","https://openalex.org/W3206880386","https://openalex.org/W3215453688","https://openalex.org/W4200182258","https://openalex.org/W4214680449","https://openalex.org/W4225750584","https://openalex.org/W4283803103","https://openalex.org/W4283815101"],"related_works":[],"abstract_inverted_index":{"Model":[0],"watermarking":[1],"is":[2,25,182,194],"a":[3,26,34,38,48,75,89],"technique":[4],"that":[5,148,204],"embeds":[6],"identification":[7],"information":[8],"as":[9],"watermarks":[10,59,139,147,175],"to":[11,37,44,47,61,99,129,137,140,173,217],"verify":[12],"model":[13,17,20,35,172],"ownership":[14],"and":[15,189,198,212],"protect":[16],"priority":[18],"against":[19,196],"stealing":[21],"(MS)":[22],"attacks.":[23,157,200],"Watermark":[24],"type":[27],"of":[28,55,91,95,115,119,152],"external":[29],"knowledge":[30],"which":[31,80],"typically":[32],"make":[33],"sensitive":[36],"specific":[39],"trigger":[40,56,100,123,166],"pattern,":[41],"causing":[42],"it":[43,111,133],"misclassify":[45],"patterns":[46,84,101,124],"targeted":[49],"class.":[50],"However,":[51],"current":[52],"fixed":[53],"form":[54],"pattern":[57],"makes":[58],"easy":[60],"be":[62,130,208,223],"recovered":[63,209],"by":[64,102,164,210],"adversaries,":[65],"thus":[66],"compromising":[67],"their":[68],"secrecy.":[69],"In":[70],"this":[71],"paper,":[72],"we":[73,144,168],"propose":[74],"new":[76],"approach,":[77],"named":[78],"AttMark,":[79],"can":[81],"generate":[82],"unique":[83],"for":[85],"each":[86],"input":[87],"via":[88],"group":[90],"generators.":[92],"The":[93,201],"application":[94],"generators":[96],"adds":[97],"randomness":[98],"embedding":[103],"characters":[104],"into":[105],"samples":[106],"in":[107,155],"various":[108],"ways.":[109],"Therefore,":[110],"challenges":[112],"the":[113,150,160,170,178,190],"convergence":[114],"watermark":[116,191,206],"recovering":[117,197],"algorithms":[118],"adversaries.":[120],"Nevertheless,":[121],"random":[122,165],"render":[125],"them":[126],"more":[127,135],"difficult":[128],"embedded,":[131],"making":[132],"even":[134],"challenging":[136],"transfer":[138],"stolen":[141,171],"models.":[142],"Thus,":[143],"design":[145],"attention-based":[146],"leverage":[149],"characteristic":[151],"attention":[153,161],"transferring":[154],"MS":[156,187],"By":[158],"minimizing":[159],"deviation":[162],"caused":[163],"patterns,":[167],"enable":[169],"learn":[174],"simultaneously":[176],"with":[177],"primary":[179],"task.":[180],"AttMark":[181],"evaluated":[183],"on":[184],"three":[185],"major":[186],"attacks":[188],"validation":[192],"rate":[193],"tested":[195],"removal":[199],"results":[202],"show":[203],"our":[205],"cannot":[207],"adversaries":[211],"has":[213],"a$30\\%$stronger":[214],"transferability":[215],"compared":[216],"prior":[218],"works.":[219],"Our":[220],"code":[221],"will":[222],"available11https://github.com/LiuJingjinga/AttMark.git.":[224]},"counts_by_year":[],"updated_date":"2026-08-21T09:56:20.448147","created_date":"2025-10-10T00:00:00"}