{"id":"https://openalex.org/W4415250771","doi":"https://doi.org/10.1109/tdsc.2025.3622253","title":"Performance-Lossless Black-Box Model Watermarking","display_name":"Performance-Lossless Black-Box Model Watermarking","publication_year":2025,"publication_date":"2025-10-16","ids":{"openalex":"https://openalex.org/W4415250771","doi":"https://doi.org/10.1109/tdsc.2025.3622253"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2025.3622253","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2025.3622253","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Na Zhao","orcid":"https://orcid.org/0009-0001-0588-1674"},"institutions":[{"id":"https://openalex.org/I126520041","display_name":"University of Science and Technology of China","ror":"https://ror.org/04c4dkn09","country_code":"CN","type":"education","lineage":["https://openalex.org/I126520041","https://openalex.org/I19820366"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Na Zhao","raw_affiliation_strings":["CAS Key Laboratory of Electro-Magnetic Space Information, University of Science and Technology of China, Hefei, China"],"raw_orcid":"https://orcid.org/0009-0001-0588-1674","affiliations":[{"raw_affiliation_string":"CAS Key Laboratory of Electro-Magnetic Space Information, University of Science and Technology of China, Hefei, China","institution_ids":["https://openalex.org/I126520041"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5045121980","display_name":"Kejiang Chen","orcid":"https://orcid.org/0000-0002-9868-3414"},"institutions":[{"id":"https://openalex.org/I126520041","display_name":"University of Science and Technology of China","ror":"https://ror.org/04c4dkn09","country_code":"CN","type":"education","lineage":["https://openalex.org/I126520041","https://openalex.org/I19820366"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Kejiang Chen","raw_affiliation_strings":["CAS Key Laboratory of Electro-Magnetic Space Information, University of Science and Technology of China, Hefei, China"],"raw_orcid":"https://orcid.org/0000-0002-9868-3414","affiliations":[{"raw_affiliation_string":"CAS Key Laboratory of Electro-Magnetic Space Information, University of Science and Technology of China, Hefei, China","institution_ids":["https://openalex.org/I126520041"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5067689180","display_name":"Weiming Zhang","orcid":"https://orcid.org/0000-0001-5576-6108"},"institutions":[{"id":"https://openalex.org/I126520041","display_name":"University of Science and Technology of China","ror":"https://ror.org/04c4dkn09","country_code":"CN","type":"education","lineage":["https://openalex.org/I126520041","https://openalex.org/I19820366"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Weiming Zhang","raw_affiliation_strings":["CAS Key Laboratory of Electro-Magnetic Space Information, University of Science and Technology of China, Hefei, China"],"raw_orcid":"https://orcid.org/0000-0001-5576-6108","affiliations":[{"raw_affiliation_string":"CAS Key Laboratory of Electro-Magnetic Space Information, University of Science and Technology of China, Hefei, China","institution_ids":["https://openalex.org/I126520041"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5064573190","display_name":"Nenghai Yu","orcid":"https://orcid.org/0000-0003-4417-9316"},"institutions":[{"id":"https://openalex.org/I126520041","display_name":"University of Science and Technology of China","ror":"https://ror.org/04c4dkn09","country_code":"CN","type":"education","lineage":["https://openalex.org/I126520041","https://openalex.org/I19820366"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Nenghai Yu","raw_affiliation_strings":["CAS Key Laboratory of Electro-Magnetic Space Information, University of Science and Technology of China, Hefei, China"],"raw_orcid":"https://orcid.org/0000-0003-4417-9316","affiliations":[{"raw_affiliation_string":"CAS Key Laboratory of Electro-Magnetic Space Information, University of Science and Technology of China, Hefei, China","institution_ids":["https://openalex.org/I126520041"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I126520041"],"apc_list":{"value":2645,"currency":"USD","value_usd":2645},"apc_paid":null,"fwci":0.923,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.76127594,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":97},"biblio":{"volume":"23","issue":"2","first_page":"1955","last_page":"1970"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10388","display_name":"Advanced Steganography and Watermarking Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10388","display_name":"Advanced Steganography and Watermarking Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.98089998960495,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.9775000214576721,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/digital-watermarking","display_name":"Digital watermarking","score":0.8715999722480774},{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.7321000099182129},{"id":"https://openalex.org/keywords/protocol","display_name":"Protocol (science)","score":0.6972000002861023},{"id":"https://openalex.org/keywords/cryptographic-protocol","display_name":"Cryptographic protocol","score":0.5759999752044678},{"id":"https://openalex.org/keywords/authentication","display_name":"Authentication (law)","score":0.5625},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.545199990272522},{"id":"https://openalex.org/keywords/intellectual-property","display_name":"Intellectual property","score":0.5156999826431274},{"id":"https://openalex.org/keywords/lossless-compression","display_name":"Lossless compression","score":0.5115000009536743},{"id":"https://openalex.org/keywords/scheme","display_name":"Scheme (mathematics)","score":0.49050000309944153}],"concepts":[{"id":"https://openalex.org/C150817343","wikidata":"https://www.wikidata.org/wiki/Q875932","display_name":"Digital watermarking","level":3,"score":0.8715999722480774},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8086000084877014},{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.7321000099182129},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.6972000002861023},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5809000134468079},{"id":"https://openalex.org/C33884865","wikidata":"https://www.wikidata.org/wiki/Q1254335","display_name":"Cryptographic protocol","level":3,"score":0.5759999752044678},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.5625},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.545199990272522},{"id":"https://openalex.org/C34974158","wikidata":"https://www.wikidata.org/wiki/Q131257","display_name":"Intellectual property","level":2,"score":0.5156999826431274},{"id":"https://openalex.org/C81081738","wikidata":"https://www.wikidata.org/wiki/Q55542","display_name":"Lossless compression","level":3,"score":0.5115000009536743},{"id":"https://openalex.org/C77618280","wikidata":"https://www.wikidata.org/wiki/Q1155772","display_name":"Scheme (mathematics)","level":2,"score":0.49050000309944153},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.4772000014781952},{"id":"https://openalex.org/C189950617","wikidata":"https://www.wikidata.org/wiki/Q937228","display_name":"Property (philosophy)","level":2,"score":0.4763999879360199},{"id":"https://openalex.org/C15927051","wikidata":"https://www.wikidata.org/wiki/Q246593","display_name":"Cryptographic primitive","level":4,"score":0.4025999903678894},{"id":"https://openalex.org/C21564112","wikidata":"https://www.wikidata.org/wiki/Q4825885","display_name":"Authentication protocol","level":3,"score":0.3801000118255615},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.3621000051498413},{"id":"https://openalex.org/C203062551","wikidata":"https://www.wikidata.org/wiki/Q201339","display_name":"Public-key cryptography","level":3,"score":0.3538999855518341},{"id":"https://openalex.org/C193470923","wikidata":"https://www.wikidata.org/wiki/Q5276026","display_name":"Digital Watermarking Alliance","level":4,"score":0.29910001158714294},{"id":"https://openalex.org/C38369872","wikidata":"https://www.wikidata.org/wiki/Q7445009","display_name":"Security analysis","level":2,"score":0.2962999939918518},{"id":"https://openalex.org/C141492731","wikidata":"https://www.wikidata.org/wiki/Q1052621","display_name":"Message authentication code","level":3,"score":0.27970001101493835},{"id":"https://openalex.org/C2780581891","wikidata":"https://www.wikidata.org/wiki/Q15738686","display_name":"Copy protection","level":4,"score":0.27810001373291016},{"id":"https://openalex.org/C85847156","wikidata":"https://www.wikidata.org/wiki/Q59015987","display_name":"Verifiable secret sharing","level":3,"score":0.27639999985694885},{"id":"https://openalex.org/C118463975","wikidata":"https://www.wikidata.org/wiki/Q220849","display_name":"Digital signature","level":3,"score":0.27399998903274536},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.2630999982357025},{"id":"https://openalex.org/C165021410","wikidata":"https://www.wikidata.org/wiki/Q55564","display_name":"Lossy compression","level":2,"score":0.25}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2025.3622253","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2025.3622253","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2561957227","display_name":null,"funder_award_id":"62402469","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G3061771244","display_name":null,"funder_award_id":"62472398","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G4538375728","display_name":null,"funder_award_id":"U2336206","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G6347247583","display_name":null,"funder_award_id":"U2436601","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":57,"referenced_works":["https://openalex.org/W1710476689","https://openalex.org/W2230451675","https://openalex.org/W2768064608","https://openalex.org/W2806082141","https://openalex.org/W2883233582","https://openalex.org/W2899585792","https://openalex.org/W2935349488","https://openalex.org/W2937447982","https://openalex.org/W2952608669","https://openalex.org/W2964128659","https://openalex.org/W2990980946","https://openalex.org/W2996800219","https://openalex.org/W3022293880","https://openalex.org/W3053555102","https://openalex.org/W3083615244","https://openalex.org/W3087931608","https://openalex.org/W3096810773","https://openalex.org/W3132481243","https://openalex.org/W3133747496","https://openalex.org/W3135872251","https://openalex.org/W3156011647","https://openalex.org/W3156309620","https://openalex.org/W3168768313","https://openalex.org/W3173922709","https://openalex.org/W3174408347","https://openalex.org/W3196798104","https://openalex.org/W3203430276","https://openalex.org/W3206880386","https://openalex.org/W4224919626","https://openalex.org/W4225999490","https://openalex.org/W4226014375","https://openalex.org/W4280643662","https://openalex.org/W4283803103","https://openalex.org/W4288391584","https://openalex.org/W4289533844","https://openalex.org/W4311731280","https://openalex.org/W4312933868","https://openalex.org/W4313227190","https://openalex.org/W4320005719","https://openalex.org/W4328007269","https://openalex.org/W4375869159","https://openalex.org/W4382317564","https://openalex.org/W4385572007","https://openalex.org/W4385815557","https://openalex.org/W4386072370","https://openalex.org/W4390481384","https://openalex.org/W4390872921","https://openalex.org/W4393160247","https://openalex.org/W4402264472","https://openalex.org/W4402671641","https://openalex.org/W4402727205","https://openalex.org/W4402774093","https://openalex.org/W4402916165","https://openalex.org/W4408017540","https://openalex.org/W4408352571","https://openalex.org/W7133200867","https://openalex.org/W7133218093"],"related_works":[],"abstract_inverted_index":{"With":[0],"the":[1,60,64,78,92,96,107,126],"development":[2],"of":[3,63,95,125],"deep":[4],"learning,":[5],"high-value":[6],"and":[7,14,109,113,132],"high-cost":[8],"models":[9],"have":[10,20],"become":[11,21],"valuable":[12],"assets,":[13],"related":[15],"intellectual":[16,61],"property":[17,62],"protection":[18],"technologies":[19],"a":[22,50,69,73,82,111],"hot":[23],"topic.":[24],"However,":[25],"existing":[26],"model":[27,53],"watermarking":[28,54,115],"work":[29],"in":[30],"black-box":[31],"scenarios":[32],"originates":[33],"mainly":[34],"from":[35],"training-based":[36],"backdoor":[37],"methods,":[38],"which":[39],"probably":[40],"degrade":[41],"primary":[42],"task":[43],"performance.":[44],"To":[45],"address":[46],"this,":[47],"we":[48,102],"propose":[49],"branch":[51,79],"backdoor-based":[52],"protocol":[55,67,97,108],"named":[56],"BranchWM":[57],"to":[58,106],"protect":[59],"model.":[65],"This":[66],"adopts":[68],"construction":[70],"based":[71],"on":[72],"message":[74],"authentication":[75],"scheme":[76],"as":[77],"indicator,":[80],"following":[81],"comparative":[83],"analysis":[84],"with":[85],"other":[86],"secure":[87,112],"cryptographic":[88],"primitives.":[89],"We":[90,120],"prove":[91],"lossless":[93],"performance":[94],"by":[98],"reduction.":[99],"In":[100],"addition,":[101],"analyze":[103],"potential":[104],"threats":[105],"present":[110],"feasible":[114],"instantiation":[116],"for":[117,134],"language":[118],"models.":[119],"further":[121],"conduct":[122],"empirical":[123],"evaluations":[124],"instantiated":[127],"BranchWM,":[128],"demonstrating":[129],"its":[130],"effectiveness":[131],"security":[133],"ownership":[135],"verification.":[136]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":1}],"updated_date":"2026-08-21T09:56:20.448147","created_date":"2025-10-16T00:00:00"}