{"id":"https://openalex.org/W4408017540","doi":"https://doi.org/10.1109/tpami.2025.3546223","title":"MOVE: Effective and Harmless Ownership Verification via Embedded External Features","display_name":"MOVE: Effective and Harmless Ownership Verification via Embedded External Features","publication_year":2025,"publication_date":"2025-02-27","ids":{"openalex":"https://openalex.org/W4408017540","doi":"https://doi.org/10.1109/tpami.2025.3546223","pmid":"https://pubmed.ncbi.nlm.nih.gov/40031569"},"language":"en","primary_location":{"id":"doi:10.1109/tpami.2025.3546223","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tpami.2025.3546223","pdf_url":null,"source":{"id":"https://openalex.org/S199944782","display_name":"IEEE Transactions on Pattern Analysis and Machine Intelligence","issn_l":"0162-8828","issn":["0162-8828","1939-3539","2160-9292"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Pattern Analysis and Machine Intelligence","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","pubmed"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100346332","display_name":"Yiming Li","orcid":"https://orcid.org/0000-0002-2258-265X"},"institutions":[{"id":"https://openalex.org/I4210114105","display_name":"Tsinghua\u2013Berkeley Shenzhen Institute","ror":"https://ror.org/02hhwwz98","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210114105","https://openalex.org/I95457486","https://openalex.org/I99065089"]},{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]},{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yiming Li","raw_affiliation_strings":["State Key Laboratory of Blockchain and Data Security, Zhejiang University, Hangzhou, China","Tsinghua Shenzhen International Graduate School, Tsinghua University, Shenzhen, China"],"raw_orcid":"https://orcid.org/0000-0002-2258-265X","affiliations":[{"raw_affiliation_string":"State Key Laboratory of Blockchain and Data Security, Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]},{"raw_affiliation_string":"Tsinghua Shenzhen International Graduate School, Tsinghua University, Shenzhen, China","institution_ids":["https://openalex.org/I4210114105","https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101824364","display_name":"Linghui Zhu","orcid":"https://orcid.org/0000-0002-6476-7943"},"institutions":[{"id":"https://openalex.org/I4210114105","display_name":"Tsinghua\u2013Berkeley Shenzhen Institute","ror":"https://ror.org/02hhwwz98","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210114105","https://openalex.org/I95457486","https://openalex.org/I99065089"]},{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Linghui Zhu","raw_affiliation_strings":["Tsinghua Shenzhen International Graduate School, Tsinghua University, Shenzhen, China"],"raw_orcid":"https://orcid.org/0000-0002-6476-7943","affiliations":[{"raw_affiliation_string":"Tsinghua Shenzhen International Graduate School, Tsinghua University, Shenzhen, China","institution_ids":["https://openalex.org/I4210114105","https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101188934","display_name":"Xiaojun Jia","orcid":null},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]},{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN","SG"],"is_corresponding":false,"raw_author_name":"Xiaojun Jia","raw_affiliation_strings":["College of Computing and Data Science, Nanyang Technological University, Singapore","Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-2018-9344","affiliations":[{"raw_affiliation_string":"College of Computing and Data Science, Nanyang Technological University, Singapore","institution_ids":["https://openalex.org/I172675005"]},{"raw_affiliation_string":"Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I19820366"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5044963450","display_name":"Yang Bai","orcid":"https://orcid.org/0000-0003-1918-0462"},"institutions":[{"id":"https://openalex.org/I4210114105","display_name":"Tsinghua\u2013Berkeley Shenzhen Institute","ror":"https://ror.org/02hhwwz98","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210114105","https://openalex.org/I95457486","https://openalex.org/I99065089"]},{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yang Bai","raw_affiliation_strings":["ByteDance Inc, San Jose, CA, USA","Tsinghua Shenzhen International Graduate School, Tsinghua University, Shenzhen, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"ByteDance Inc, San Jose, CA, USA","institution_ids":[]},{"raw_affiliation_string":"Tsinghua Shenzhen International Graduate School, Tsinghua University, Shenzhen, China","institution_ids":["https://openalex.org/I4210114105","https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Yong Jiang","orcid":"https://orcid.org/0000-0002-4260-1395"},"institutions":[{"id":"https://openalex.org/I4210114105","display_name":"Tsinghua\u2013Berkeley Shenzhen Institute","ror":"https://ror.org/02hhwwz98","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210114105","https://openalex.org/I95457486","https://openalex.org/I99065089"]},{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yong Jiang","raw_affiliation_strings":["Tsinghua Shenzhen International Graduate School, Tsinghua University, Shenzhen, China","Tsinghua Shenzhen International Graduate School, Tsinghua University, China"],"raw_orcid":"https://orcid.org/0000-0002-4260-1395","affiliations":[{"raw_affiliation_string":"Tsinghua Shenzhen International Graduate School, Tsinghua University, Shenzhen, China","institution_ids":["https://openalex.org/I4210114105","https://openalex.org/I99065089"]},{"raw_affiliation_string":"Tsinghua Shenzhen International Graduate School, Tsinghua University, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5034104790","display_name":"Shu\u2010Tao Xia","orcid":"https://orcid.org/0000-0002-8639-982X"},"institutions":[{"id":"https://openalex.org/I4210114105","display_name":"Tsinghua\u2013Berkeley Shenzhen Institute","ror":"https://ror.org/02hhwwz98","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210114105","https://openalex.org/I95457486","https://openalex.org/I99065089"]},{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shu-Tao Xia","raw_affiliation_strings":["Tsinghua Shenzhen International Graduate School, Tsinghua University, Shenzhen, China","Tsinghua Shenzhen International Graduate School, Tsinghua University, China"],"raw_orcid":"https://orcid.org/0000-0002-8639-982X","affiliations":[{"raw_affiliation_string":"Tsinghua Shenzhen International Graduate School, Tsinghua University, Shenzhen, China","institution_ids":["https://openalex.org/I4210114105","https://openalex.org/I99065089"]},{"raw_affiliation_string":"Tsinghua Shenzhen International Graduate School, Tsinghua University, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5068837264","display_name":"Xiaochun Cao","orcid":"https://orcid.org/0000-0001-7141-708X"},"institutions":[{"id":"https://openalex.org/I157773358","display_name":"Sun Yat-sen University","ror":"https://ror.org/0064kty71","country_code":"CN","type":"education","lineage":["https://openalex.org/I157773358"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaochun Cao","raw_affiliation_strings":["School of Cyber Science and Technology, Sun Yat-sen University, Shenzhen, China"],"raw_orcid":"https://orcid.org/0000-0001-7141-708X","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Technology, Sun Yat-sen University, Shenzhen, China","institution_ids":["https://openalex.org/I157773358"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5105297718","display_name":"Kui Ren","orcid":"https://orcid.org/0000-0002-1969-2591"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Kui Ren","raw_affiliation_strings":["State Key Laboratory of Blockchain and Data Security, Zhejiang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-1969-2591","affiliations":[{"raw_affiliation_string":"State Key Laboratory of Blockchain and Data Security, Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":7,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":18.162,"has_fulltext":false,"cited_by_count":9,"citation_normalized_percentile":{"value":0.98955761,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":100},"biblio":{"volume":"47","issue":"6","first_page":"4734","last_page":"4751"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T13999","display_name":"Digital Rights Management and Security","score":0.9492999911308289,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T13999","display_name":"Digital Rights Management and Security","score":0.9492999911308289,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6626690030097961},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4661504030227661},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3710785508155823},{"id":"https://openalex.org/keywords/computer-vision","display_name":"Computer vision","score":0.35693180561065674}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6626690030097961},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4661504030227661},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3710785508155823},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.35693180561065674}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/tpami.2025.3546223","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tpami.2025.3546223","pdf_url":null,"source":{"id":"https://openalex.org/S199944782","display_name":"IEEE Transactions on Pattern Analysis and Machine Intelligence","issn_l":"0162-8828","issn":["0162-8828","1939-3539","2160-9292"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Pattern Analysis and Machine Intelligence","raw_type":"journal-article"},{"id":"pmid:40031569","is_oa":false,"landing_page_url":"https://pubmed.ncbi.nlm.nih.gov/40031569","pdf_url":null,"source":{"id":"https://openalex.org/S4306525036","display_name":"PubMed","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1299303238","host_organization_name":"National Institutes of Health","host_organization_lineage":["https://openalex.org/I1299303238"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE transactions on pattern analysis and machine intelligence","raw_type":null},{"id":"pmh:oai:dr.ntu.edu.sg:10356/218180","is_oa":false,"landing_page_url":"https://hdl.handle.net/10356/218180","pdf_url":null,"source":{"id":"https://openalex.org/S4306402609","display_name":"DR-NTU (Nanyang Technological University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I172675005","host_organization_name":"Nanyang Technological University","host_organization_lineage":["https://openalex.org/I172675005"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Journal Article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2471551971","display_name":null,"funder_award_id":"62441619","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G2802018518","display_name":null,"funder_award_id":"62171248","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G3489595043","display_name":null,"funder_award_id":"62032021","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G5786452238","display_name":null,"funder_award_id":"U23A20306","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G8569679628","display_name":null,"funder_award_id":"2023YFB2904000","funder_id":"https://openalex.org/F4320335777","funder_display_name":"National Key Research and Development Program of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320335777","display_name":"National Key Research and Development Program of China","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":59,"referenced_works":["https://openalex.org/W2108598243","https://openalex.org/W2194775991","https://openalex.org/W2535690855","https://openalex.org/W2543927648","https://openalex.org/W2560647685","https://openalex.org/W2603766943","https://openalex.org/W2603777577","https://openalex.org/W2618530766","https://openalex.org/W2916086000","https://openalex.org/W2919115771","https://openalex.org/W2934843808","https://openalex.org/W2942091739","https://openalex.org/W2950689937","https://openalex.org/W2963303354","https://openalex.org/W2963465081","https://openalex.org/W2964137095","https://openalex.org/W2969695741","https://openalex.org/W2971661634","https://openalex.org/W2973414778","https://openalex.org/W3023529621","https://openalex.org/W3035379805","https://openalex.org/W3035447895","https://openalex.org/W3041830731","https://openalex.org/W3042368254","https://openalex.org/W3114686421","https://openalex.org/W3114838227","https://openalex.org/W3119746452","https://openalex.org/W3128663834","https://openalex.org/W3132455321","https://openalex.org/W3141043040","https://openalex.org/W3179216274","https://openalex.org/W4214680449","https://openalex.org/W4230172274","https://openalex.org/W4285603108","https://openalex.org/W4313172341","https://openalex.org/W4362714395","https://openalex.org/W4388186067","https://openalex.org/W4390873717","https://openalex.org/W4398757423","https://openalex.org/W4399487370","https://openalex.org/W4402816792","https://openalex.org/W4403791716","https://openalex.org/W4408750139","https://openalex.org/W6637373629","https://openalex.org/W6638523607","https://openalex.org/W6726497184","https://openalex.org/W6747838042","https://openalex.org/W6756444276","https://openalex.org/W6760237559","https://openalex.org/W6770411749","https://openalex.org/W6772674396","https://openalex.org/W6774150056","https://openalex.org/W6775078712","https://openalex.org/W6782718173","https://openalex.org/W6787972765","https://openalex.org/W6789730115","https://openalex.org/W6790544463","https://openalex.org/W6791353385","https://openalex.org/W6849049410"],"related_works":["https://openalex.org/W2772917594","https://openalex.org/W2036807459","https://openalex.org/W2058170566","https://openalex.org/W2755342338","https://openalex.org/W2166024367","https://openalex.org/W3116076068","https://openalex.org/W2229312674","https://openalex.org/W2951359407","https://openalex.org/W2079911747","https://openalex.org/W1969923398"],"abstract_inverted_index":{"Currently,":[0],"deep":[1],"neural":[2],"networks":[3],"(DNNs)":[4],"are":[5],"widely":[6],"adopted":[7],"in":[8],"different":[9,77],"applications.":[10],"Despite":[11],"its":[12,30,174,194],"commercial":[13],"values,":[14],"training":[15,118],"a":[16,46,98,116,126,131],"well-performing":[17],"DNN":[18],"is":[19,25,133,140],"resource-consuming.":[20],"Accordingly,":[21],"the":[22,36,42,50,59,92,102,111,136,143,146,151,157,188],"well-trained":[23],"model":[24,39,70,80,100,132,180],"valuable":[26],"intellectual":[27],"property":[28],"for":[29],"owner.":[31],"However,":[32],"recent":[33],"studies":[34],"revealed":[35],"threats":[37],"of":[38,49,79,104,153,190],"stealing,":[40],"where":[41],"adversaries":[43],"can":[44,56],"obtain":[45],"function-similar":[47],"copy":[48],"victim":[51,158],"model,":[52],"even":[53],"when":[54],"they":[55],"only":[57],"query":[58],"model.":[60,159],"In":[61,88,160],"this":[62],"paper,":[63],"we":[64,90,109,162],"propose":[65],"an":[66],"effective":[67],"and":[68,172,193],"harmless":[69],"ownership":[71,93],"verification":[72,94],"(MOVE)":[73],"to":[74,128,177,196],"defend":[75],"against":[76],"types":[78],"stealing":[81],"simultaneously,":[82],"without":[83],"introducing":[84],"new":[85],"security":[86],"risks.":[87],"general,":[89],"conduct":[91],"by":[95,114,142,156],"verifying":[96],"whether":[97,130],"suspicious":[99],"contains":[101],"knowledge":[103,152],"defender-specified":[105],"external":[106,112],"features.":[107],"Specifically,":[108],"embed":[110],"features":[113,154],"modifying":[115],"few":[117],"samples":[119],"with":[120],"style":[121],"transfer.":[122],"We":[123],"then":[124],"train":[125],"meta-classifier":[127],"determine":[129],"stolen":[134,147],"from":[135],"victim.":[137],"This":[138],"approach":[139],"inspired":[141],"understanding":[144],"that":[145],"models":[148],"should":[149],"contain":[150],"learned":[155],"particular,":[161],"develop":[163],"our":[164,191],"MOVE":[165],"method":[166,192],"under":[167],"both":[168],"glass-boxand":[169],"closed-box":[170],"settings":[171],"analyze":[173],"theoretical":[175],"foundation":[176],"provide":[178],"comprehensive":[179],"protection.":[181],"Extensive":[182],"experiments":[183],"on":[184],"benchmark":[185],"datasets":[186],"verify":[187],"effectiveness":[189],"resistance":[195],"potential":[197],"adaptive":[198],"attacks.":[199]},"counts_by_year":[{"year":2026,"cited_by_count":6},{"year":2025,"cited_by_count":3}],"updated_date":"2026-07-15T18:14:33.161393","created_date":"2025-10-10T00:00:00"}