{"id":"https://openalex.org/W4367047423","doi":"https://doi.org/10.1145/3543507.3583198","title":"Provenance of Training without Training Data: Towards Privacy-Preserving DNN Model Ownership Verification","display_name":"Provenance of Training without Training Data: Towards Privacy-Preserving DNN Model Ownership Verification","publication_year":2023,"publication_date":"2023-04-26","ids":{"openalex":"https://openalex.org/W4367047423","doi":"https://doi.org/10.1145/3543507.3583198"},"language":"en","primary_location":{"id":"doi:10.1145/3543507.3583198","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3543507.3583198","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3543507.3583198","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Web Conference 2023","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3543507.3583198","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5032121242","display_name":"Yunpeng Liu","orcid":"https://orcid.org/0000-0003-3395-2772"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yunpeng Liu","raw_affiliation_strings":["Tsinghua University, China"],"raw_orcid":"https://orcid.org/0000-0003-3395-2772","affiliations":[{"raw_affiliation_string":"Tsinghua University, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5062390768","display_name":"Kexin Li","orcid":"https://orcid.org/0000-0002-7911-3731"},"institutions":[{"id":"https://openalex.org/I185261750","display_name":"University of Toronto","ror":"https://ror.org/03dbr7087","country_code":"CA","type":"education","lineage":["https://openalex.org/I185261750"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Kexin Li","raw_affiliation_strings":["University of Toronto, Canada"],"raw_orcid":"https://orcid.org/0000-0002-7911-3731","affiliations":[{"raw_affiliation_string":"University of Toronto, Canada","institution_ids":["https://openalex.org/I185261750"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5045206037","display_name":"Zhuotao Liu","orcid":"https://orcid.org/0000-0002-7532-0434"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhuotao Liu","raw_affiliation_strings":["Tsinghua University, China and Zhongguancun Laboratory, China"],"raw_orcid":"https://orcid.org/0000-0002-7532-0434","affiliations":[{"raw_affiliation_string":"Tsinghua University, China and Zhongguancun Laboratory, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5024709593","display_name":"Bihan Wen","orcid":"https://orcid.org/0000-0002-6874-6453"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Bihan Wen","raw_affiliation_strings":["Nanyang Technological University, Singapore"],"raw_orcid":"https://orcid.org/0000-0002-6874-6453","affiliations":[{"raw_affiliation_string":"Nanyang Technological University, Singapore","institution_ids":["https://openalex.org/I172675005"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100665814","display_name":"Ke Xu","orcid":"https://orcid.org/0000-0003-2587-8517"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ke Xu","raw_affiliation_strings":["Tsinghua University, China and Zhongguancun Laboratory, China"],"raw_orcid":"https://orcid.org/0000-0003-2587-8517","affiliations":[{"raw_affiliation_string":"Tsinghua University, China and Zhongguancun Laboratory, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5080477405","display_name":"Weiqiang Wang","orcid":"https://orcid.org/0000-0002-6159-619X"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Weiqiang Wang","raw_affiliation_strings":["Ant Group, China"],"raw_orcid":"https://orcid.org/0000-0002-6159-619X","affiliations":[{"raw_affiliation_string":"Ant Group, China","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100744241","display_name":"Wenbiao Zhao","orcid":"https://orcid.org/0000-0002-2438-979X"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wenbiao Zhao","raw_affiliation_strings":["Ant Group, China"],"raw_orcid":"https://orcid.org/0000-0002-2438-979X","affiliations":[{"raw_affiliation_string":"Ant Group, China","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100350165","display_name":"Qi Li","orcid":"https://orcid.org/0000-0001-8776-8730"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qi Li","raw_affiliation_strings":["Tsinghua University, China and Zhongguancun Laboratory, China"],"raw_orcid":"https://orcid.org/0000-0001-8776-8730","affiliations":[{"raw_affiliation_string":"Tsinghua University, China and Zhongguancun Laboratory, China","institution_ids":["https://openalex.org/I99065089"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":6,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1980","last_page":"1990"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9961000084877014,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9961000084877014,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11614","display_name":"Cloud Data Security Solutions","score":0.9939000010490417,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11719","display_name":"Data Quality and Management","score":0.9853000044822693,"subfield":{"id":"https://openalex.org/subfields/1803","display_name":"Management Science and Operations Research"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/training","display_name":"Training (meteorology)","score":0.7890721559524536},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6522946357727051},{"id":"https://openalex.org/keywords/training-set","display_name":"Training set","score":0.487533301115036},{"id":"https://openalex.org/keywords/provenance","display_name":"Provenance","score":0.4645158350467682},{"id":"https://openalex.org/keywords/information-privacy","display_name":"Information privacy","score":0.4427972137928009},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.4262217879295349},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.2713804841041565}],"concepts":[{"id":"https://openalex.org/C2777211547","wikidata":"https://www.wikidata.org/wiki/Q17141490","display_name":"Training (meteorology)","level":2,"score":0.7890721559524536},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6522946357727051},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.487533301115036},{"id":"https://openalex.org/C2780049196","wikidata":"https://www.wikidata.org/wiki/Q23582628","display_name":"Provenance","level":2,"score":0.4645158350467682},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.4427972137928009},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.4262217879295349},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2713804841041565},{"id":"https://openalex.org/C153294291","wikidata":"https://www.wikidata.org/wiki/Q25261","display_name":"Meteorology","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C5900021","wikidata":"https://www.wikidata.org/wiki/Q163082","display_name":"Petrology","level":1,"score":0.0},{"id":"https://openalex.org/C127313418","wikidata":"https://www.wikidata.org/wiki/Q1069","display_name":"Geology","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3543507.3583198","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3543507.3583198","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3543507.3583198","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Web Conference 2023","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3543507.3583198","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3543507.3583198","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3543507.3583198","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Web Conference 2023","raw_type":"proceedings-article"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.5799999833106995}],"awards":[{"id":"https://openalex.org/G1973678120","display_name":null,"funder_award_id":"2021ZD0110502","funder_id":"https://openalex.org/F4320335777","funder_display_name":"National Key Research and Development Program of China"},{"id":"https://openalex.org/G4826051140","display_name":null,"funder_award_id":"61825204","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G5283734374","display_name":null,"funder_award_id":"62132011,61825204","funder_id":"https://openalex.org/F4320334062","funder_display_name":"National Natural Science Foundation of China-Liaoning Joint Fund"},{"id":"https://openalex.org/G7155321176","display_name":null,"funder_award_id":"62132011","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320318398","display_name":"Ant Group","ror":null},{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320334062","display_name":"National Natural Science Foundation of China-Liaoning Joint Fund","ror":null},{"id":"https://openalex.org/F4320335777","display_name":"National Key Research and Development Program of China","ror":null}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4367047423.pdf","grobid_xml":"https://content.openalex.org/works/W4367047423.grobid-xml"},"referenced_works_count":30,"referenced_works":["https://openalex.org/W1503398984","https://openalex.org/W1677182931","https://openalex.org/W1806891645","https://openalex.org/W2137243801","https://openalex.org/W2579318729","https://openalex.org/W2747329762","https://openalex.org/W2768064608","https://openalex.org/W2788728386","https://openalex.org/W2806082141","https://openalex.org/W2913668833","https://openalex.org/W2921980263","https://openalex.org/W2937447982","https://openalex.org/W2952608669","https://openalex.org/W2964128659","https://openalex.org/W2970971581","https://openalex.org/W2985954225","https://openalex.org/W2994624247","https://openalex.org/W2997717738","https://openalex.org/W3037032032","https://openalex.org/W3102733833","https://openalex.org/W3154581591","https://openalex.org/W3156793535","https://openalex.org/W3159771755","https://openalex.org/W3164111940","https://openalex.org/W3206604724","https://openalex.org/W4231057059","https://openalex.org/W6600402904","https://openalex.org/W6602046083","https://openalex.org/W6713134421","https://openalex.org/W6819060087"],"related_works":["https://openalex.org/W4394050964","https://openalex.org/W2584827882","https://openalex.org/W2538581760","https://openalex.org/W3195097297","https://openalex.org/W4225340788","https://openalex.org/W3038106605","https://openalex.org/W2513267613","https://openalex.org/W3049084372","https://openalex.org/W2528109871","https://openalex.org/W2551249631"],"abstract_inverted_index":{"In":[0,58,135],"the":[1,11,42,52,55,70,102,112,141,167,174],"era":[2],"of":[3,14,54,66,119,177],"deep":[4,16],"learning,":[5],"it":[6,137],"is":[7,138],"critical":[8],"to":[9,26,41,109,143,186],"protect":[10],"intellectual":[12],"property":[13],"high-performance":[15],"neural":[17],"network":[18],"(DNN)":[19],"models.":[20],"Existing":[21],"proposals,":[22],"however,":[23],"are":[24,171],"subject":[25],"adversarial":[27],"ownership":[28,47,78,113],"forgery":[29],"(e.g.,":[30,49],"methods":[31,50],"based":[32],"on":[33,95],"watermarks":[34],"or":[35,37],"fingerprints)":[36],"require":[38],"full":[39,175],"access":[40],"original":[43,82],"training":[44,108],"dataset":[45,83],"for":[46,140],"verification":[48],"requiring":[51],"replay":[53],"learning":[56],"process).":[57],"this":[59],"paper,":[60],"we":[61,122],"propose":[62,123],"a":[63,96,128,145],"novel":[64],"Provenance":[65],"Training":[67],"(PoT)":[68],"scheme,":[69],"first":[71],"empirical":[72,184],"study":[73],"towards":[74],"verifying":[75],"DNN":[76],"model":[77,98,107,120,130,146],"without":[79,153],"accessing":[80],"any":[81],"while":[84],"being":[85],"robust":[86],"against":[87,162],"existing":[88],"attacks.":[89],"At":[90],"its":[91],"core,":[92],"PoT":[93],"relies":[94],"coherent":[97],"chain":[99,131,147],"built":[100],"from":[101],"intermediate":[103],"checkpoints":[104],"saved":[105],"during":[106],"serve":[110],"as":[111],"certificate.":[114],"Through":[115],"an":[116],"in-depth":[117],"analysis":[118],"training,":[121],"six":[124],"key":[125],"properties":[126,151],"that":[127,148,170],"legitimate":[129],"shall":[132],"naturally":[133],"hold.":[134],"contrast,":[136],"difficult":[139],"adversary":[142],"forge":[144],"satisfies":[149],"these":[150],"simultaneously":[152],"performing":[154],"actual":[155],"training.":[156],"We":[157],"systematically":[158],"analyze":[159],"PoT\u2019s":[160,178],"robustness":[161],"various":[163],"possible":[164],"attacks,":[165],"including":[166],"adaptive":[168],"attacks":[169],"designed":[172],"given":[173],"knowledge":[176],"design,":[179],"and":[180],"further":[181],"perform":[182],"extensive":[183],"experiments":[185],"demonstrate":[187],"our":[188],"security":[189],"analysis.":[190]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}