{"id":"https://openalex.org/W4292993844","doi":"https://doi.org/10.1109/tifs.2022.3198267","title":"A DNN Fingerprint for Non-Repudiable Model Ownership Identification and Piracy Detection","display_name":"A DNN Fingerprint for Non-Repudiable Model Ownership Identification and Piracy Detection","publication_year":2022,"publication_date":"2022-01-01","ids":{"openalex":"https://openalex.org/W4292993844","doi":"https://doi.org/10.1109/tifs.2022.3198267"},"language":"en","primary_location":{"id":"doi:10.1109/tifs.2022.3198267","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2022.3198267","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://dr.ntu.edu.sg/bitstream/10356/162779/2/dnn_ip.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5061840305","display_name":"Yue Zheng","orcid":"https://orcid.org/0000-0002-4992-6475"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Yue Zheng","raw_affiliation_strings":["School of Electrical and Electronic Engineering, Nanyang Technological University, Jurong West, Singapore"],"raw_orcid":"https://orcid.org/0000-0002-4992-6475","affiliations":[{"raw_affiliation_string":"School of Electrical and Electronic Engineering, Nanyang Technological University, Jurong West, Singapore","institution_ids":["https://openalex.org/I172675005"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100651867","display_name":"Si Wang","orcid":"https://orcid.org/0000-0003-2431-0612"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Si Wang","raw_affiliation_strings":["School of Electrical and Electronic Engineering, Nanyang Technological University, Jurong West, Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Electrical and Electronic Engineering, Nanyang Technological University, Jurong West, Singapore","institution_ids":["https://openalex.org/I172675005"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5029335324","display_name":"Chip-Hong Chang","orcid":"https://orcid.org/0000-0002-8897-6176"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Chip-Hong Chang","raw_affiliation_strings":["School of Electrical and Electronic Engineering, Nanyang Technological University, Jurong West, Singapore"],"raw_orcid":"https://orcid.org/0000-0002-8897-6176","affiliations":[{"raw_affiliation_string":"School of Electrical and Electronic Engineering, Nanyang Technological University, Jurong West, Singapore","institution_ids":["https://openalex.org/I172675005"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I172675005"],"apc_list":null,"apc_paid":null,"fwci":3.718,"has_fulltext":true,"cited_by_count":37,"citation_normalized_percentile":{"value":0.93874642,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":100},"biblio":{"volume":"17","issue":null,"first_page":"2977","last_page":"2989"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.9958999752998352,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10036","display_name":"Advanced Neural Network Applications","score":0.9919000267982483,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8322497606277466},{"id":"https://openalex.org/keywords/fingerprint","display_name":"Fingerprint (computing)","score":0.6572895050048828},{"id":"https://openalex.org/keywords/discriminative-model","display_name":"Discriminative model","score":0.6090496778488159},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.491044282913208},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4653189182281494},{"id":"https://openalex.org/keywords/fingerprint-recognition","display_name":"Fingerprint recognition","score":0.4275437593460083},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.39546746015548706}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8322497606277466},{"id":"https://openalex.org/C2777826928","wikidata":"https://www.wikidata.org/wiki/Q3745713","display_name":"Fingerprint (computing)","level":2,"score":0.6572895050048828},{"id":"https://openalex.org/C97931131","wikidata":"https://www.wikidata.org/wiki/Q5282087","display_name":"Discriminative model","level":2,"score":0.6090496778488159},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.491044282913208},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4653189182281494},{"id":"https://openalex.org/C168406668","wikidata":"https://www.wikidata.org/wiki/Q178022","display_name":"Fingerprint recognition","level":3,"score":0.4275437593460083},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.39546746015548706}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/tifs.2022.3198267","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2022.3198267","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},{"id":"pmh:oai:dr.ntu.edu.sg:10356/162779","is_oa":true,"landing_page_url":"https://hdl.handle.net/10356/162779","pdf_url":"https://dr.ntu.edu.sg/bitstream/10356/162779/2/dnn_ip.pdf","source":{"id":"https://openalex.org/S4306402609","display_name":"DR-NTU (Nanyang Technological University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I172675005","host_organization_name":"Nanyang Technological University","host_organization_lineage":["https://openalex.org/I172675005"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Journal Article"}],"best_oa_location":{"id":"pmh:oai:dr.ntu.edu.sg:10356/162779","is_oa":true,"landing_page_url":"https://hdl.handle.net/10356/162779","pdf_url":"https://dr.ntu.edu.sg/bitstream/10356/162779/2/dnn_ip.pdf","source":{"id":"https://openalex.org/S4306402609","display_name":"DR-NTU (Nanyang Technological University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I172675005","host_organization_name":"Nanyang Technological University","host_organization_lineage":["https://openalex.org/I172675005"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Journal Article"},"sustainable_development_goals":[{"display_name":"Reduced inequalities","score":0.6200000047683716,"id":"https://metadata.un.org/sdg/10"}],"awards":[{"id":"https://openalex.org/G982644696","display_name":null,"funder_award_id":"CHFA-GC1-AW01","funder_id":"https://openalex.org/F4320320709","funder_display_name":"National Research Foundation Singapore"}],"funders":[{"id":"https://openalex.org/F4320320709","display_name":"National Research Foundation Singapore","ror":"https://ror.org/03cpyc314"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4292993844.pdf","grobid_xml":"https://content.openalex.org/works/W4292993844.grobid-xml"},"referenced_works_count":38,"referenced_works":["https://openalex.org/W134629238","https://openalex.org/W1686810756","https://openalex.org/W2088658556","https://openalex.org/W2194775991","https://openalex.org/W2461943168","https://openalex.org/W2579318729","https://openalex.org/W2746314669","https://openalex.org/W2768064608","https://openalex.org/W2913864106","https://openalex.org/W2946635188","https://openalex.org/W2955060354","https://openalex.org/W2963446712","https://openalex.org/W2964318098","https://openalex.org/W2965565691","https://openalex.org/W2981860227","https://openalex.org/W2994624247","https://openalex.org/W3049152512","https://openalex.org/W3092411267","https://openalex.org/W3102733833","https://openalex.org/W3114482311","https://openalex.org/W3129226328","https://openalex.org/W3131700981","https://openalex.org/W3159771755","https://openalex.org/W3164111940","https://openalex.org/W3183164172","https://openalex.org/W4246001895","https://openalex.org/W4294506858","https://openalex.org/W4299518610","https://openalex.org/W6605354117","https://openalex.org/W6637373629","https://openalex.org/W6682132143","https://openalex.org/W6743428213","https://openalex.org/W6747838042","https://openalex.org/W6752265895","https://openalex.org/W6753937820","https://openalex.org/W6766787143","https://openalex.org/W6770411749","https://openalex.org/W6798219119"],"related_works":["https://openalex.org/W2107624769","https://openalex.org/W2110182821","https://openalex.org/W1126458069","https://openalex.org/W2904811908","https://openalex.org/W2170038768","https://openalex.org/W2140519175","https://openalex.org/W4221054779","https://openalex.org/W3171093228","https://openalex.org/W2364411142","https://openalex.org/W2058535273"],"abstract_inverted_index":{"A":[0],"high-performance":[1],"Deep":[2],"Neural":[3],"Network":[4],"(DNN)":[5],"model":[6,19,88,129,190],"is":[7,22,77,151,165],"a":[8,18,54,68,81,87,96,112],"valuable":[9],"intellectual":[10],"property":[11],"(IP)":[12],"since":[13],"designing":[14],"and":[15,29,66,70,125,132,139,162,185,188],"training":[16],"such":[17],"from":[20,79,115],"scratch":[21],"very":[23],"costly.":[24],"Model":[25],"transfer":[26],"learning,":[27],"compression":[28],"retraining":[30,138],"are":[31,103],"commonly":[32],"used":[33,104],"by":[34],"pirates":[35],"to":[36,94,98,143,167],"evade":[37],"detection":[38],"or":[39,109],"even":[40],"redeploy":[41],"the":[42,106,144,169,183],"pirated":[43,64,100,179],"models":[44,65,101,157,180],"for":[45,111,182],"new":[46],"applications":[47],"without":[48],"compromising":[49],"performance.":[50],"This":[51],"paper":[52],"presents":[53],"novel":[55],"non-intrusive":[56],"DNN":[57,118,156],"IP":[58,130,191],"fingerprinting":[59,149,175],"method":[60,122,150],"that":[61,102],"can":[62],"detect":[63],"provide":[67],"non-repudiable":[69],"irrevocable":[71,126],"ownership":[72,133,192],"proof":[73],"simultaneously.":[74],"The":[75,120,147],"fingerprint":[76],"derived":[78],"projecting":[80],"subset":[82],"of":[83],"front-layer":[84],"weights":[85],"onto":[86],"owner":[89],"identity":[90],"defined":[91],"random":[92],"space":[93],"enable":[95],"distinguisher":[97],"differentiate":[99],"in":[105,177],"same":[107,184],"application":[108],"retrained":[110],"different":[113,186],"task":[114],"originally":[116],"designed":[117],"models.":[119],"proposed":[121,148],"generates":[123],"compact":[124],"fingerprints":[127],"against":[128],"misappropriation":[131],"fraud.":[134],"It":[135,164],"requires":[136],"no":[137,141],"makes":[140],"modification":[142],"original":[145,155],"model.":[146],"evaluated":[152],"on":[153,159],"nine":[154],"trained":[158],"CIFAR-10,":[160],"CIFAR-100,":[161],"ImageNet-10.":[163],"demonstrated":[166],"have":[168],"highest":[170],"discriminative":[171],"power":[172],"among":[173],"existing":[174],"methods":[176],"detecting":[178],"deployed":[181],"applications,":[187],"fraudulent":[189],"claims.":[193]},"counts_by_year":[{"year":2026,"cited_by_count":5},{"year":2025,"cited_by_count":15},{"year":2024,"cited_by_count":12},{"year":2023,"cited_by_count":4},{"year":2022,"cited_by_count":1}],"updated_date":"2026-08-01T09:00:35.917206","created_date":"2025-10-10T00:00:00"}