{"id":"https://openalex.org/W7134837889","doi":"https://doi.org/10.1109/tifs.2026.3672383","title":"Your Non-Transferable Learning is Fragile: Practical Breach of Protected Models","display_name":"Your Non-Transferable Learning is Fragile: Practical Breach of Protected Models","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W7134837889","doi":"https://doi.org/10.1109/tifs.2026.3672383"},"language":null,"primary_location":{"id":"doi:10.1109/tifs.2026.3672383","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2026.3672383","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5067313044","display_name":"Anli Yan","orcid":"https://orcid.org/0000-0002-2854-2931"},"institutions":[{"id":"https://openalex.org/I20942203","display_name":"Hainan University","ror":"https://ror.org/03q648j11","country_code":"CN","type":"education","lineage":["https://openalex.org/I20942203"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Anli Yan","raw_affiliation_strings":["School of Computer Science and Technology, Hainan University, Haikou, Hainan, China"],"raw_orcid":"https://orcid.org/0000-0002-2854-2931","affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Hainan University, Haikou, Hainan, China","institution_ids":["https://openalex.org/I20942203"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5128634649","display_name":"Huali Ren","orcid":null},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Huali Ren","raw_affiliation_strings":["School of Artificial Intelligence, Guangzhou University, Guangzhou, Guangdong, China"],"raw_orcid":"https://orcid.org/0009-0000-5823-8343","affiliations":[{"raw_affiliation_string":"School of Artificial Intelligence, Guangzhou University, Guangzhou, Guangdong, China","institution_ids":["https://openalex.org/I37987034"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5128678352","display_name":"Kanghua Mo","orcid":null},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Kanghua Mo","raw_affiliation_strings":["School of Artificial Intelligence, Guangzhou University, Guangzhou, Guangdong, China"],"raw_orcid":"https://orcid.org/0000-0002-3762-674X","affiliations":[{"raw_affiliation_string":"School of Artificial Intelligence, Guangzhou University, Guangzhou, Guangdong, China","institution_ids":["https://openalex.org/I37987034"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5128638096","display_name":"Peigen Ye","orcid":null},"institutions":[{"id":"https://openalex.org/I125839683","display_name":"Beijing Institute of Technology","ror":"https://ror.org/01skt4w74","country_code":"CN","type":"education","lineage":["https://openalex.org/I125839683","https://openalex.org/I890469752"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Peigen Ye","raw_affiliation_strings":["School of Cyberspace Science and Technology, Beijing Institute of Technology, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyberspace Science and Technology, Beijing Institute of Technology, Beijing, China","institution_ids":["https://openalex.org/I125839683"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5128656439","display_name":"Zhenxin Zhang","orcid":null},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhenxin Zhang","raw_affiliation_strings":["School of Cyber Engineering, Xidian University, Xi’an, Shaanxi, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyber Engineering, Xidian University, Xi’an, Shaanxi, China","institution_ids":["https://openalex.org/I149594827"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5128674359","display_name":"Hongyang Yan","orcid":null},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hongyang Yan","raw_affiliation_strings":["School of Artificial Intelligence, Guangzhou University, Guangzhou, Guangdong, China"],"raw_orcid":"https://orcid.org/0000-0002-1493-9671","affiliations":[{"raw_affiliation_string":"School of Artificial Intelligence, Guangzhou University, Guangzhou, Guangdong, China","institution_ids":["https://openalex.org/I37987034"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5128686287","display_name":"Jin Li","orcid":null},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jin Li","raw_affiliation_strings":["School of Artificial Intelligence, Guangzhou University, Guangzhou, Guangdong, China"],"raw_orcid":"https://orcid.org/0000-0003-0385-8793","affiliations":[{"raw_affiliation_string":"School of Artificial Intelligence, Guangzhou University, Guangzhou, Guangdong, China","institution_ids":["https://openalex.org/I37987034"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.23515264,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"21","issue":null,"first_page":"3498","last_page":"3512"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9787999987602234,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9787999987602234,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11307","display_name":"Domain Adaptation and Few-Shot Learning","score":0.004000000189989805,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.002899999963119626,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.6959999799728394},{"id":"https://openalex.org/keywords/regularization","display_name":"Regularization (linguistics)","score":0.4814999997615814},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.4771000146865845},{"id":"https://openalex.org/keywords/autoencoder","display_name":"Autoencoder","score":0.4609000086784363},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.4510999917984009},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.42309999465942383},{"id":"https://openalex.org/keywords/authorization","display_name":"Authorization","score":0.41359999775886536},{"id":"https://openalex.org/keywords/data-modeling","display_name":"Data modeling","score":0.4083999991416931},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.38519999384880066}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8442000150680542},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.6959999799728394},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4941999912261963},{"id":"https://openalex.org/C2776135515","wikidata":"https://www.wikidata.org/wiki/Q17143721","display_name":"Regularization (linguistics)","level":2,"score":0.4814999997615814},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.4771000146865845},{"id":"https://openalex.org/C101738243","wikidata":"https://www.wikidata.org/wiki/Q786435","display_name":"Autoencoder","level":3,"score":0.4609000086784363},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.4510999917984009},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.428600013256073},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.42309999465942383},{"id":"https://openalex.org/C108759981","wikidata":"https://www.wikidata.org/wiki/Q788590","display_name":"Authorization","level":2,"score":0.41359999775886536},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.4083999991416931},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.38519999384880066},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3386000096797943},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.319599986076355},{"id":"https://openalex.org/C152124472","wikidata":"https://www.wikidata.org/wiki/Q1204361","display_name":"Redundancy (engineering)","level":2,"score":0.31619998812675476},{"id":"https://openalex.org/C61272859","wikidata":"https://www.wikidata.org/wiki/Q7834031","display_name":"Transferability","level":3,"score":0.30390000343322754},{"id":"https://openalex.org/C34974158","wikidata":"https://www.wikidata.org/wiki/Q131257","display_name":"Intellectual property","level":2,"score":0.2996000051498413},{"id":"https://openalex.org/C2779582901","wikidata":"https://www.wikidata.org/wiki/Q21013010","display_name":"Distributed learning","level":2,"score":0.2971999943256378},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2969000041484833},{"id":"https://openalex.org/C26760741","wikidata":"https://www.wikidata.org/wiki/Q160402","display_name":"Perception","level":2,"score":0.2946999967098236},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.2874999940395355},{"id":"https://openalex.org/C2778156585","wikidata":"https://www.wikidata.org/wiki/Q174053","display_name":"Relay","level":3,"score":0.28290000557899475},{"id":"https://openalex.org/C107908354","wikidata":"https://www.wikidata.org/wiki/Q4781456","display_name":"Applicability domain","level":3,"score":0.2761000096797943},{"id":"https://openalex.org/C2780980858","wikidata":"https://www.wikidata.org/wiki/Q110022","display_name":"Dual (grammatical number)","level":2,"score":0.2741999924182892},{"id":"https://openalex.org/C114289077","wikidata":"https://www.wikidata.org/wiki/Q3284399","display_name":"Statistical model","level":2,"score":0.2703999876976013},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.26249998807907104},{"id":"https://openalex.org/C207685749","wikidata":"https://www.wikidata.org/wiki/Q2088941","display_name":"Domain knowledge","level":2,"score":0.26080000400543213},{"id":"https://openalex.org/C2988886741","wikidata":"https://www.wikidata.org/wiki/Q25304494","display_name":"Dictionary learning","level":3,"score":0.25060001015663147}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tifs.2026.3672383","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2026.3672383","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.4920015037059784,"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure"}],"awards":[{"id":"https://openalex.org/G1770965889","display_name":null,"funder_award_id":"62272118","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G2159116245","display_name":null,"funder_award_id":"62402131","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G2215088380","display_name":null,"funder_award_id":"U23A20307","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G5894582779","display_name":null,"funder_award_id":"62132018","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G7250102513","display_name":null,"funder_award_id":"62472116","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Non-transferable":[0],"learning":[1,16],"(NTL)":[2],"has":[3,33,192],"emerged":[4],"as":[5],"a":[6,47,113,143],"promising":[7],"method":[8],"to":[9,159,226],"protect":[10],"the":[11,24,79,88,91,95,106,152,156,195,198,204,207,220],"intellectual":[12],"property":[13],"of":[14,26,68,74,81,87,90,103,108,120,146,197,206],"deep":[15],"models":[17],"by":[18,63,123,169,210],"restricting":[19],"cross-domain":[20],"knowledge":[21],"transfer.":[22],"However,":[23],"robustness":[25],"its":[27],"transferability":[28],"constraints":[29],"against":[30,180],"potential":[31],"attacks":[32],"not":[34],"been":[35],"explored,":[36],"especially":[37],"in":[38,219,243],"practical":[39],"deployment":[40],"scenarios.":[41],"In":[42],"this":[43],"paper,":[44],"we":[45,188],"propose":[46],"novel":[48],"black-box":[49],"attack":[50],"framework":[51],"-":[52],"distribution":[53,93,122],"drift":[54],"learner":[55],"(DDL),":[56],"which":[57,84],"effectively":[58],"bypasses":[59],"NTL":[60,157,182,200,221],"protection":[61,241],"mechanisms":[62],"only":[64],"accessing":[65],"input-output":[66],"queries":[67],"protected":[69],"models.":[70],"The":[71,100,163],"theoretical":[72],"foundation":[73],"DDL":[75,104,135,141,164,191],"is":[76,105],"derived":[77],"from":[78,212],"concept":[80],"data":[82,121],"drift,":[83],"takes":[85],"advantage":[86],"variability":[89],"statistical":[92],"between":[94],"source":[96],"and":[97,130,150,174,186,202,229],"target":[98,147,208],"domains.":[99],"core":[101],"innovation":[102],"integration":[107],"distributed":[109,171],"perception":[110,128,172],"regularization":[111],"into":[112,155],"lightweight":[114],"autoencoder":[115],"architecture,":[116],"enabling":[117],"efficient":[118],"manipulation":[119],"optimizing":[124,170],"dual":[125],"objectives":[126],"(distributed":[127],"loss":[129,173],"reconstruction":[131,175],"loss).":[132],"Training":[133],"for":[134,236],"involves":[136],"two":[137],"key":[138],"steps:":[139],"First,":[140],"reconstructs":[142],"moderate":[144],"amount":[145],"domain":[148,209],"samples":[149],"feeds":[151],"reconstructed":[153],"images":[154],"model":[158,201,240],"obtain":[160],"prediction":[161],"labels.":[162],"parameters":[165],"are":[166],"then":[167],"updated":[168],"loss.":[176],"Through":[177],"extensive":[178],"experiments":[179],"standard":[181],"benchmarks":[183],"(Digits,":[184],"CIFAR10,":[185],"STL10),":[187],"demonstrate":[189],"that":[190],"successfully":[193],"overcome":[194],"barriers":[196],"transferable":[199],"improved":[203],"accuracy":[205],"81%":[211],"10%.":[213],"Our":[214],"work":[215],"reveals":[216],"critical":[217],"vulnerabilities":[218],"framework,":[222],"particularly":[223],"with":[224],"respect":[225],"ownership":[227],"verification":[228],"applicability":[230],"authorization":[231],"mechanisms,":[232],"providing":[233],"valuable":[234],"insights":[235],"developing":[237],"more":[238],"robust":[239],"strategies":[242],"real-world":[244],"applications.":[245]},"counts_by_year":[],"updated_date":"2026-07-14T08:27:34.040176","created_date":"2026-03-11T00:00:00"}