{"id":"https://openalex.org/W7123359745","doi":"https://doi.org/10.1109/tdsc.2026.3652488","title":"Enjoy Without Payment: Model Parasitic Attacks Against Transfer Learning Models","display_name":"Enjoy Without Payment: Model Parasitic Attacks Against Transfer Learning Models","publication_year":2026,"publication_date":"2026-01-12","ids":{"openalex":"https://openalex.org/W7123359745","doi":"https://doi.org/10.1109/tdsc.2026.3652488"},"language":null,"primary_location":{"id":"doi:10.1109/tdsc.2026.3652488","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2026.3652488","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5031412262","display_name":"Jiafei Zhao","orcid":"https://orcid.org/0000-0001-8401-4204"},"institutions":[{"id":"https://openalex.org/I158842170","display_name":"Chongqing University","ror":"https://ror.org/023rhb549","country_code":"CN","type":"education","lineage":["https://openalex.org/I158842170"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jinxue Zhao","raw_affiliation_strings":["College of Computer Science, Chongqing University, Chongqing, China"],"raw_orcid":"https://orcid.org/0009-0007-3449-8563","affiliations":[{"raw_affiliation_string":"College of Computer Science, Chongqing University, Chongqing, China","institution_ids":["https://openalex.org/I158842170"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5013666525","display_name":"Xinyu Lei","orcid":"https://orcid.org/0000-0001-8799-7875"},"institutions":[{"id":"https://openalex.org/I11957088","display_name":"Michigan Technological University","ror":"https://ror.org/0036rpn28","country_code":"US","type":"education","lineage":["https://openalex.org/I11957088"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Xinyu Lei","raw_affiliation_strings":["Department of Computer Science, Michigan Technological University, Houghton, USA"],"raw_orcid":"https://orcid.org/0000-0001-8799-7875","affiliations":[{"raw_affiliation_string":"Department of Computer Science, Michigan Technological University, Houghton, USA","institution_ids":["https://openalex.org/I11957088"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Hongyu Huang","orcid":"https://orcid.org/0000-0001-9052-4868"},"institutions":[{"id":"https://openalex.org/I158842170","display_name":"Chongqing University","ror":"https://ror.org/023rhb549","country_code":"CN","type":"education","lineage":["https://openalex.org/I158842170"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hongyu Huang","raw_affiliation_strings":["College of Computer Science, Chongqing University, Chongqing, China"],"raw_orcid":"https://orcid.org/0000-0001-9052-4868","affiliations":[{"raw_affiliation_string":"College of Computer Science, Chongqing University, Chongqing, China","institution_ids":["https://openalex.org/I158842170"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5114416565","display_name":"NanKun Mu","orcid":"https://orcid.org/0000-0001-9713-4416"},"institutions":[{"id":"https://openalex.org/I158842170","display_name":"Chongqing University","ror":"https://ror.org/023rhb549","country_code":"CN","type":"education","lineage":["https://openalex.org/I158842170"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Nankun Mu","raw_affiliation_strings":["College of Computer Science, Chongqing University, Chongqing, China"],"raw_orcid":"https://orcid.org/0000-0002-8126-8126","affiliations":[{"raw_affiliation_string":"College of Computer Science, Chongqing University, Chongqing, China","institution_ids":["https://openalex.org/I158842170"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Chao Chen","orcid":"https://orcid.org/0000-0003-2094-9734"},"institutions":[{"id":"https://openalex.org/I158842170","display_name":"Chongqing University","ror":"https://ror.org/023rhb549","country_code":"CN","type":"education","lineage":["https://openalex.org/I158842170"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chao Chen","raw_affiliation_strings":["State Key Laboratory of Mechanical Transmi-ssion for Advanced Equipment Chongqing University, Chongqing, China"],"raw_orcid":"https://orcid.org/0000-0003-2094-9734","affiliations":[{"raw_affiliation_string":"State Key Laboratory of Mechanical Transmi-ssion for Advanced Equipment Chongqing University, Chongqing, China","institution_ids":["https://openalex.org/I158842170"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100320874","display_name":"Xiao Zhang","orcid":"https://orcid.org/0000-0002-3318-5318"},"institutions":[{"id":"https://openalex.org/I4210130704","display_name":"University of Michigan\u2013Dearborn","ror":"https://ror.org/035wtm547","country_code":"US","type":"education","lineage":["https://openalex.org/I4210130704"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Xiao Zhang","raw_affiliation_strings":["College of Engineering and Computer Science, University of Michigan-Dearborn, Dearborn, USA"],"raw_orcid":"https://orcid.org/0000-0002-7392-3477","affiliations":[{"raw_affiliation_string":"College of Engineering and Computer Science, University of Michigan-Dearborn, Dearborn, USA","institution_ids":["https://openalex.org/I4210130704"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.05891753,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"23","issue":"3","first_page":"5271","last_page":"5286"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9362999796867371,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9362999796867371,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.00839999970048666,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.007799999788403511,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/task","display_name":"Task (project management)","score":0.6150000095367432},{"id":"https://openalex.org/keywords/transfer-of-learning","display_name":"Transfer of learning","score":0.5393999814987183},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.4496999979019165},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.43970000743865967},{"id":"https://openalex.org/keywords/task-analysis","display_name":"Task analysis","score":0.43299999833106995},{"id":"https://openalex.org/keywords/data-modeling","display_name":"Data modeling","score":0.3986000120639801},{"id":"https://openalex.org/keywords/federated-learning","display_name":"Federated learning","score":0.3801000118255615},{"id":"https://openalex.org/keywords/training-set","display_name":"Training set","score":0.3449999988079071}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.9049000144004822},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.6150000095367432},{"id":"https://openalex.org/C150899416","wikidata":"https://www.wikidata.org/wiki/Q1820378","display_name":"Transfer of learning","level":2,"score":0.5393999814987183},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4756999909877777},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.4496999979019165},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.43970000743865967},{"id":"https://openalex.org/C175154964","wikidata":"https://www.wikidata.org/wiki/Q380077","display_name":"Task analysis","level":3,"score":0.43299999833106995},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.41429999470710754},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.3986000120639801},{"id":"https://openalex.org/C2992525071","wikidata":"https://www.wikidata.org/wiki/Q50818671","display_name":"Federated learning","level":2,"score":0.3801000118255615},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3628999888896942},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.3449999988079071},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.33709999918937683},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.2791000008583069},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.2768000066280365},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.27639999985694885},{"id":"https://openalex.org/C59404180","wikidata":"https://www.wikidata.org/wiki/Q17013334","display_name":"Feature learning","level":2,"score":0.26930001378059387},{"id":"https://openalex.org/C2776175482","wikidata":"https://www.wikidata.org/wiki/Q1195816","display_name":"Transfer (computing)","level":2,"score":0.26840001344680786},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.2644999921321869},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.25940001010894775},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.2590999901294708},{"id":"https://openalex.org/C75684735","wikidata":"https://www.wikidata.org/wiki/Q858810","display_name":"Big data","level":2,"score":0.2515000104904175}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/tdsc.2026.3652488","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2026.3652488","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},{"id":"pmh:oai:digitalcommons.mtu.edu:michigantech-p2-3401","is_oa":false,"landing_page_url":"https://digitalcommons.mtu.edu/michigantech-p2/2340","pdf_url":null,"source":{"id":"https://openalex.org/S4377196391","display_name":"Digital Commons - Michigan Tech (Michigan Technological University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I11957088","host_organization_name":"Michigan Technological University","host_organization_lineage":["https://openalex.org/I11957088"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Michigan Tech Publications","raw_type":"text"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.7485576272010803}],"awards":[{"id":"https://openalex.org/G1169459699","display_name":null,"funder_award_id":"62272073","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G4407733110","display_name":null,"funder_award_id":"62322601","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G6620178191","display_name":null,"funder_award_id":"2025CDJGF-001","funder_id":"https://openalex.org/F4320335787","funder_display_name":"Fundamental Research Funds for the Central Universities"},{"id":"https://openalex.org/G8263025627","display_name":null,"funder_award_id":"2024IAIS-QN01","funder_id":"https://openalex.org/F4320335787","funder_display_name":"Fundamental Research Funds for the Central Universities"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320335787","display_name":"Fundamental Research Funds for the Central Universities","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Transfer":[0],"learning":[1,99],"(TL)":[2],"by":[3,67],"fine-tuning":[4],"(FT)":[5],"has":[6],"become":[7],"a":[8,35,62],"popular":[9],"paradigm":[10,31],"to":[11,34,56,74,85],"address":[12],"the":[13,45,53,68,76,80,92,96,103,106,118,121,127,142,146],"challenges":[14],"of":[15,105],"limited":[16],"training":[17],"data":[18],"and":[19,126],"computing":[20],"resources":[21],"encountered":[22],"in":[23],"model":[24,39,55,83],"training.":[25],"This":[26],"study":[27],"reveals":[28],"that":[29,79,144],"this":[30],"is":[32,165],"susceptible":[33],"new":[36],"threat":[37],"called":[38],"parasitic":[40],"(MP)":[41],"attack.":[42],"By":[43],"poisoning":[44],"dataset":[46],"used":[47],"for":[48],"fine-tuning,":[49],"MP":[50,90,110,147],"attacks":[51],"enable":[52],"finetuned":[54],"execute":[57,75],"an":[58],"additional":[59],"task":[60,78],"(e.g.,":[61],"specific":[63],"classification":[64],"task)":[65],"designated":[66],"attacker":[69,93],"while":[70],"still":[71],"being":[72],"able":[73],"original":[77],"victim's":[81,97],"fine-tuned":[82],"aims":[84],"offer.":[86],"In":[87],"addition,":[88],"through":[89],"attacks,":[91,111],"can":[94],"free-ride":[95],"machine":[98],"(ML)":[100],"services":[101],"at":[102,167],"cost":[104],"victim.":[107],"To":[108],"design":[109],"we":[112,139,151],"innovatively":[113],"propose":[114],"multiple":[115],"strategies":[116],"including":[117],"dual-cluster":[119],"strategy,":[120,125],"benign-to-poisoned":[122],"example":[123],"generation":[124],"feature":[128],"assignment":[129],"loss":[130],"(FAL)-guided":[131],"controllable":[132],"perturbation":[133],"search":[134],"strategy.":[135],"Through":[136],"intensive":[137],"experiments,":[138],"precisely":[140],"identify":[141],"factors":[143],"influence":[145],"attack":[148],"performance.":[149],"Finally,":[150],"investigate":[152],"three":[153],"possible":[154],"defenses,":[155],"shedding":[156],"light":[157],"on":[158],"more":[159],"effective":[160],"defense":[161],"design.":[162],"Our":[163],"code":[164],"available":[166],"GitHub":[168]},"counts_by_year":[],"updated_date":"2026-05-15T06:05:50.897203","created_date":"2026-01-14T00:00:00"}