{"id":"https://openalex.org/W4416164761","doi":"https://doi.org/10.1145/3733821.3763024","title":"Providing Certified Triggers in Trigger Set-Based Watermarking for Ownership Validation against Image Transformation","display_name":"Providing Certified Triggers in Trigger Set-Based Watermarking for Ownership Validation against Image Transformation","publication_year":2025,"publication_date":"2025-10-13","ids":{"openalex":"https://openalex.org/W4416164761","doi":"https://doi.org/10.1145/3733821.3763024"},"language":null,"primary_location":{"id":"doi:10.1145/3733821.3763024","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3733821.3763024","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3733821.3763024","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2025 Workshop on Recent Advances in Resilient and Trustworthy MAchine learning-driveN systems","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3733821.3763024","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5037566773","display_name":"Jingyang Li","orcid":"https://orcid.org/0000-0002-3707-4623"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jingyang Li","raw_affiliation_strings":["Shanghai Jiao Tong University, Shanghai, China"],"raw_orcid":"https://orcid.org/0000-0002-3707-4623","affiliations":[{"raw_affiliation_string":"Shanghai Jiao Tong University, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5005502304","display_name":"Minyu Chen","orcid":"https://orcid.org/0009-0006-3406-7520"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Minyu Chen","raw_affiliation_strings":["Shanghai Jiao Tong University, Shanghai, China"],"raw_orcid":"https://orcid.org/0009-0006-3406-7520","affiliations":[{"raw_affiliation_string":"Shanghai Jiao Tong University, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100354142","display_name":"Guoqiang Li","orcid":"https://orcid.org/0000-0001-9005-7112"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Guoqiang Li","raw_affiliation_strings":["Shanghai Jiao Tong University, Shanghai, China"],"raw_orcid":"https://orcid.org/0000-0001-9005-7112","affiliations":[{"raw_affiliation_string":"Shanghai Jiao Tong University, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I183067930"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"13","last_page":"23"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9850000143051147,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9850000143051147,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10775","display_name":"Generative Adversarial Networks and Image Synthesis","score":0.0019000000320374966,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.0017000000225380063,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/digital-watermarking","display_name":"Digital watermarking","score":0.9452000260353088},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.8680999875068665},{"id":"https://openalex.org/keywords/watermark","display_name":"Watermark","score":0.7361000180244446},{"id":"https://openalex.org/keywords/property","display_name":"Property (philosophy)","score":0.4203000068664551},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.4075999855995178},{"id":"https://openalex.org/keywords/convolutional-neural-network","display_name":"Convolutional neural network","score":0.35679998993873596},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.3522999882698059},{"id":"https://openalex.org/keywords/intellectual-property","display_name":"Intellectual property","score":0.3490000069141388}],"concepts":[{"id":"https://openalex.org/C150817343","wikidata":"https://www.wikidata.org/wiki/Q875932","display_name":"Digital watermarking","level":3,"score":0.9452000260353088},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.8680999875068665},{"id":"https://openalex.org/C164112704","wikidata":"https://www.wikidata.org/wiki/Q7974348","display_name":"Watermark","level":3,"score":0.7361000180244446},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6898000240325928},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5688999891281128},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.48559999465942383},{"id":"https://openalex.org/C189950617","wikidata":"https://www.wikidata.org/wiki/Q937228","display_name":"Property (philosophy)","level":2,"score":0.4203000068664551},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.4075999855995178},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.37400001287460327},{"id":"https://openalex.org/C81363708","wikidata":"https://www.wikidata.org/wiki/Q17084460","display_name":"Convolutional neural network","level":2,"score":0.35679998993873596},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.3522999882698059},{"id":"https://openalex.org/C34974158","wikidata":"https://www.wikidata.org/wiki/Q131257","display_name":"Intellectual property","level":2,"score":0.3490000069141388},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.3246999979019165},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.31299999356269836},{"id":"https://openalex.org/C46304622","wikidata":"https://www.wikidata.org/wiki/Q374814","display_name":"Certification","level":2,"score":0.3061000108718872},{"id":"https://openalex.org/C193470923","wikidata":"https://www.wikidata.org/wiki/Q5276026","display_name":"Digital Watermarking Alliance","level":4,"score":0.30550000071525574},{"id":"https://openalex.org/C122760801","wikidata":"https://www.wikidata.org/wiki/Q2552011","display_name":"Watermarking attack","level":5,"score":0.30090001225471497},{"id":"https://openalex.org/C204241405","wikidata":"https://www.wikidata.org/wiki/Q461499","display_name":"Transformation (genetics)","level":3,"score":0.2994000017642975},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.29600000381469727},{"id":"https://openalex.org/C190502265","wikidata":"https://www.wikidata.org/wiki/Q17069496","display_name":"MNIST database","level":3,"score":0.29170000553131104},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.28060001134872437},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.27489998936653137},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.26840001344680786},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.25589999556541443},{"id":"https://openalex.org/C192209626","wikidata":"https://www.wikidata.org/wiki/Q190909","display_name":"Focus (optics)","level":2,"score":0.25450000166893005}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3733821.3763024","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3733821.3763024","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3733821.3763024","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2025 Workshop on Recent Advances in Resilient and Trustworthy MAchine learning-driveN systems","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3733821.3763024","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3733821.3763024","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3733821.3763024","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2025 Workshop on Recent Advances in Resilient and Trustworthy MAchine learning-driveN systems","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G6956063465","display_name":null,"funder_award_id":"62161146001","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320322252","display_name":"Israel Science Foundation","ror":"https://ror.org/04sazxf24"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4416164761.pdf","grobid_xml":"https://content.openalex.org/works/W4416164761.grobid-xml"},"referenced_works_count":4,"referenced_works":["https://openalex.org/W2243397390","https://openalex.org/W2807363941","https://openalex.org/W3174961728","https://openalex.org/W4403680773"],"related_works":[],"abstract_inverted_index":{"Deep":[0],"Neural":[1],"Network":[2],"(DNN)":[3],"watermarking":[4,18,68,84,164,201,221,229],"techniques":[5,97],"are":[6],"extensively":[7],"utilized":[8],"to":[9,28,166,227],"safeguard":[10],"the":[11,32,62,65,107,118,129,139,171,183,199,217],"intellectual":[12],"property":[13],"of":[14,46,67,91,141,148,174,192,198,210,220],"neural":[15,142],"networks.":[16],"Numerous":[17],"schemes":[19,50,69,165,202,230],"based":[20],"on":[21,103],"trigger":[22],"sets":[23],"have":[24],"been":[25],"proposed,":[26],"claiming":[27,92],"possess":[29],"robustness.":[30,205],"However,":[31,115],"claimed":[33],"robustness":[34,66,140,175],"is":[35,180,225],"typically":[36],"validated":[37],"only":[38],"against":[39,145],"watermark":[40,99],"removal":[41,100],"attacks":[42,104,215],"that":[43,82,105,120,196],"involve":[44],"manipulation":[45],"network":[47,143],"weights.":[48],"These":[49],"lack":[51,209],"systematic":[52],"evaluation":[53,179],"and":[54,74,112,154,185],"formal":[55,168,232],"guarantees":[56,169,233],"for":[57,98,212],"perturbed":[58],"input-based":[59,214],"attacks.":[60,157],"Consequently,":[61],"uncertainty":[63],"surrounding":[64],"hinders":[70],"their":[71,89,235],"practical":[72,204,238],"deployment":[73],"trustworthiness.":[75],"In":[76],"this":[77,134],"research":[78],"paper,":[79],"we":[80,136,159],"contend":[81],"existing":[83],"algorithms":[85],"may":[86],"not":[87],"fulfill":[88],"objective":[90],"ownership.":[93],"The":[94,190],"current":[95],"defense":[96],"primarily":[101],"focus":[102],"modify":[106],"network,":[108],"such":[109],"as":[110],"parameter":[111],"structure":[113],"changes.":[114],"they":[116],"disregard":[117],"fact":[119],"adversaries":[121],"can":[122],"undermine":[123],"ownership":[124],"verification":[125],"by":[126],"simply":[127],"distorting":[128],"watermarked":[130],"image.":[131],"To":[132],"address":[133],"oversight,":[135],"formally":[137],"define":[138],"watermarks":[144],"three":[146,172],"types":[147,173],"attacks:":[149],"adversarial":[150],"attacks,":[151,153],"positional":[152],"alpha":[155],"channel":[156],"Furthermore,":[158],"comprehensively":[160],"evaluate":[161],"four":[162],"representative":[163],"provide":[167,228],"regarding":[170],"mentioned":[176],"above.":[177],"Our":[178],"conducted":[181],"using":[182],"CIFAR-10":[184],"MNIST":[186],"image":[187],"classification":[188],"datasets.":[189],"results":[191],"our":[193],"study":[194],"demonstrate":[195],"none":[197],"surveyed":[200],"exhibit":[203],"This":[206],"highlights":[207],"a":[208],"consideration":[211],"simple":[213],"during":[216],"training":[218],"process":[219],"schemes.":[222],"Therefore,":[223],"it":[224],"imperative":[226],"with":[231],"before":[234],"implementation":[236],"in":[237],"settings.":[239]},"counts_by_year":[],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-11-13T00:00:00"}