{"id":"https://openalex.org/W7127199451","doi":"https://doi.org/10.1109/trustcom66490.2025.00225","title":"High-fidelity Dual-layer Backdoor Watermarking Scheme based on Private Model Embedding","display_name":"High-fidelity Dual-layer Backdoor Watermarking Scheme based on Private Model Embedding","publication_year":2025,"publication_date":"2025-11-14","ids":{"openalex":"https://openalex.org/W7127199451","doi":"https://doi.org/10.1109/trustcom66490.2025.00225"},"language":null,"primary_location":{"id":"doi:10.1109/trustcom66490.2025.00225","is_oa":false,"landing_page_url":"https://doi.org/10.1109/trustcom66490.2025.00225","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE 24th International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5112481573","display_name":"Lingyun Xiang","orcid":null},"institutions":[{"id":"https://openalex.org/I56934997","display_name":"Changsha University of Science and Technology","ror":"https://ror.org/03yph8055","country_code":"CN","type":"education","lineage":["https://openalex.org/I56934997"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lingyun Xiang","raw_affiliation_strings":["Changsha University of Science and Technology,School of Computer Science and Technology,Changsha,China,410114"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Changsha University of Science and Technology,School of Computer Science and Technology,Changsha,China,410114","institution_ids":["https://openalex.org/I56934997"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5081788234","display_name":"Fangbo Luo","orcid":null},"institutions":[{"id":"https://openalex.org/I56934997","display_name":"Changsha University of Science and Technology","ror":"https://ror.org/03yph8055","country_code":"CN","type":"education","lineage":["https://openalex.org/I56934997"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Fangbo Luo","raw_affiliation_strings":["Changsha University of Science and Technology,School of Computer Science and Technology,Changsha,China,410114"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Changsha University of Science and Technology,School of Computer Science and Technology,Changsha,China,410114","institution_ids":["https://openalex.org/I56934997"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5124781365","display_name":"Xiangli Jin","orcid":null},"institutions":[{"id":"https://openalex.org/I56934997","display_name":"Changsha University of Science and Technology","ror":"https://ror.org/03yph8055","country_code":"CN","type":"education","lineage":["https://openalex.org/I56934997"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiangli Jin","raw_affiliation_strings":["Changsha University of Science and Technology,School of Computer Science and Technology,Changsha,China,410114"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Changsha University of Science and Technology,School of Computer Science and Technology,Changsha,China,410114","institution_ids":["https://openalex.org/I56934997"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I56934997"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1944","last_page":"1951"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.4607999920845032,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.4607999920845032,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10388","display_name":"Advanced Steganography and Watermarking Techniques","score":0.29089999198913574,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.027899999171495438,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/digital-watermarking","display_name":"Digital watermarking","score":0.9354000091552734},{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.913100004196167},{"id":"https://openalex.org/keywords/watermark","display_name":"Watermark","score":0.6712999939918518},{"id":"https://openalex.org/keywords/task","display_name":"Task (project management)","score":0.6322000026702881},{"id":"https://openalex.org/keywords/embedding","display_name":"Embedding","score":0.5932999849319458},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.527400016784668},{"id":"https://openalex.org/keywords/scheme","display_name":"Scheme (mathematics)","score":0.522599995136261},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.48429998755455017},{"id":"https://openalex.org/keywords/ambiguity","display_name":"Ambiguity","score":0.46959999203681946}],"concepts":[{"id":"https://openalex.org/C150817343","wikidata":"https://www.wikidata.org/wiki/Q875932","display_name":"Digital watermarking","level":3,"score":0.9354000091552734},{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.913100004196167},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.680400013923645},{"id":"https://openalex.org/C164112704","wikidata":"https://www.wikidata.org/wiki/Q7974348","display_name":"Watermark","level":3,"score":0.6712999939918518},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.6322000026702881},{"id":"https://openalex.org/C41608201","wikidata":"https://www.wikidata.org/wiki/Q980509","display_name":"Embedding","level":2,"score":0.5932999849319458},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.527400016784668},{"id":"https://openalex.org/C77618280","wikidata":"https://www.wikidata.org/wiki/Q1155772","display_name":"Scheme (mathematics)","level":2,"score":0.522599995136261},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.48429998755455017},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.46959999203681946},{"id":"https://openalex.org/C2780522230","wikidata":"https://www.wikidata.org/wiki/Q1140419","display_name":"Ambiguity","level":2,"score":0.46959999203681946},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.37599998712539673},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.36550000309944153},{"id":"https://openalex.org/C2779227376","wikidata":"https://www.wikidata.org/wiki/Q6505497","display_name":"Layer (electronics)","level":2,"score":0.3562000095844269},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.33219999074935913},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.328900009393692},{"id":"https://openalex.org/C2779696439","wikidata":"https://www.wikidata.org/wiki/Q7512811","display_name":"Signature (topology)","level":2,"score":0.32690000534057617},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3118000030517578},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.30630001425743103},{"id":"https://openalex.org/C203062551","wikidata":"https://www.wikidata.org/wiki/Q201339","display_name":"Public-key cryptography","level":3,"score":0.289000004529953},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.28769999742507935},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.28690001368522644},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.27900001406669617},{"id":"https://openalex.org/C182365436","wikidata":"https://www.wikidata.org/wiki/Q50701","display_name":"Variable (mathematics)","level":2,"score":0.27320000529289246},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.27250000834465027},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.2718999981880188},{"id":"https://openalex.org/C126780896","wikidata":"https://www.wikidata.org/wiki/Q899871","display_name":"Distortion (music)","level":4,"score":0.26440000534057617},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.2587999999523163},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.25360000133514404}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/trustcom66490.2025.00225","is_oa":false,"landing_page_url":"https://doi.org/10.1109/trustcom66490.2025.00225","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE 24th International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.6539341807365417}],"awards":[],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":19,"referenced_works":["https://openalex.org/W2052678124","https://openalex.org/W2112796928","https://openalex.org/W2148756848","https://openalex.org/W2577325523","https://openalex.org/W2579318729","https://openalex.org/W2806082141","https://openalex.org/W2899585792","https://openalex.org/W2913340405","https://openalex.org/W2990980946","https://openalex.org/W3022293880","https://openalex.org/W3087931608","https://openalex.org/W3125725375","https://openalex.org/W3185271965","https://openalex.org/W3203430276","https://openalex.org/W4229015109","https://openalex.org/W4323345707","https://openalex.org/W4401568505","https://openalex.org/W4407736977","https://openalex.org/W4410605704"],"related_works":[],"abstract_inverted_index":{"Traditional":[0],"backdoor":[1,44],"watermarking":[2,45,76,94,131],"techniques":[3],"typically":[4],"rely":[5],"on":[6],"injecting":[7],"trigger":[8],"samples":[9],"into":[10,57],"the":[11,29,32,58,70,75,79,87,128],"training":[12],"process,":[13],"which":[14],"can":[15],"lead":[16],"to":[17,125],"model":[18,50,66,154],"overfitting,":[19],"distort":[20],"feature":[21],"distributions,":[22],"and":[23,82,115,130,156],"compromise":[24],"decision":[25],"boundaries,":[26],"ultimately":[27],"degrading":[28],"performance":[30],"of":[31,53],"primary":[33],"task.":[34],"To":[35],"address":[36],"these":[37],"limitations,":[38],"we":[39,90],"propose":[40],"DualPrivMark,":[41],"a":[42,63,92,98,105,119],"dual-layer":[43],"scheme":[46],"that":[47,67,96],"leverages":[48],"private":[49,65,88],"embedding.":[51],"Instead":[52],"directly":[54],"embedding":[55,114,150],"watermark":[56,149],"protected":[59],"model,":[60,72,89],"Dual-PrivMark":[61],"constructs":[62],"dedicated":[64],"cooperates":[68],"with":[69,104,143],"target":[71],"thereby":[73],"isolating":[74],"task":[77,81,84],"from":[78],"original":[80,129],"preserving":[83],"fidelity.":[85],"Within":[86],"design":[91],"two-layer":[93],"architecture":[95],"combines":[97],"label":[99],"layer":[100,107],"for":[101,108],"trigger-based":[102],"verification":[103],"signature":[106],"image-based":[109],"authentication,":[110],"enabling":[111],"both":[112],"high-fidelity":[113],"enhanced":[116],"robustness.":[117],"Furthermore,":[118],"multi-task":[120],"learning":[121],"strategy":[122],"is":[123],"employed":[124],"jointly":[126],"optimize":[127],"tasks,":[132],"ensuring":[133],"high":[134],"accuracy":[135],"across":[136],"both.":[137],"Experimental":[138],"results":[139],"demonstrate":[140],"that,":[141],"compared":[142],"existing":[144],"methods,":[145],"DualPrivMark":[146],"achieves":[147],"reliable":[148],"while":[151],"substantially":[152],"improving":[153],"fidelity,":[155],"providing":[157],"strong":[158],"resistance":[159],"against":[160],"ambiguity":[161],"attacks.":[162]},"counts_by_year":[],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2026-02-03T00:00:00"}