{"id":"https://openalex.org/W7164937205","doi":"https://doi.org/10.1145/3785353.3815095","title":"Turning Distillation against Obfuscation: A Recovery Framework for DNN White-Box Watermarks","display_name":"Turning Distillation against Obfuscation: A Recovery Framework for DNN White-Box Watermarks","publication_year":2026,"publication_date":"2026-06-16","ids":{"openalex":"https://openalex.org/W7164937205","doi":"https://doi.org/10.1145/3785353.3815095"},"language":null,"primary_location":{"id":"doi:10.1145/3785353.3815095","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3785353.3815095","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2026 ACM Workshop on Information Hiding and Multimedia Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3785353.3815095","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5118706964","display_name":"Mahdieh Pouresmaeil","orcid":null},"institutions":[{"id":"https://openalex.org/I4210127572","display_name":"IMT Atlantique","ror":"https://ror.org/030hj3061","country_code":"FR","type":"education","lineage":["https://openalex.org/I205703379","https://openalex.org/I4210127572"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Mahdieh Pouresmaeil","raw_affiliation_strings":["data science departemant-Latim, IMT Atlantique, Brest, France"],"raw_orcid":"https://orcid.org/0009-0004-7183-435X","affiliations":[{"raw_affiliation_string":"data science departemant-Latim, IMT Atlantique, Brest, France","institution_ids":["https://openalex.org/I4210127572"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5069264855","display_name":"Reda Bellafqira","orcid":"https://orcid.org/0000-0002-1131-4115"},"institutions":[{"id":"https://openalex.org/I4210127572","display_name":"IMT Atlantique","ror":"https://ror.org/030hj3061","country_code":"FR","type":"education","lineage":["https://openalex.org/I205703379","https://openalex.org/I4210127572"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Reda Bellafqira","raw_affiliation_strings":["data science departement-latim, IMT Atlantique, brest, France"],"raw_orcid":"https://orcid.org/0000-0002-1131-4115","affiliations":[{"raw_affiliation_string":"data science departement-latim, IMT Atlantique, brest, France","institution_ids":["https://openalex.org/I4210127572"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5046279472","display_name":"Kassem Kallas","orcid":"https://orcid.org/0000-0001-7689-4125"},"institutions":[{"id":"https://openalex.org/I154526488","display_name":"Inserm","ror":"https://ror.org/02vjkv261","country_code":"FR","type":"government","lineage":["https://openalex.org/I154526488"]},{"id":"https://openalex.org/I4210161065","display_name":"Laboratoire de Traitement de l'Information M\u00e9dicale","ror":"https://ror.org/05mqemx33","country_code":"FR","type":"facility","lineage":["https://openalex.org/I154526488","https://openalex.org/I4210105774","https://openalex.org/I4210161065"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Kassem Kallas","raw_affiliation_strings":["latim, Inserm, brest, France"],"raw_orcid":"https://orcid.org/0000-0001-7689-4125","affiliations":[{"raw_affiliation_string":"latim, Inserm, brest, France","institution_ids":["https://openalex.org/I154526488","https://openalex.org/I4210161065"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5028479581","display_name":"Gwenol\u00e9 Quellec","orcid":"https://orcid.org/0000-0003-1669-7140"},"institutions":[{"id":"https://openalex.org/I154526488","display_name":"Inserm","ror":"https://ror.org/02vjkv261","country_code":"FR","type":"government","lineage":["https://openalex.org/I154526488"]},{"id":"https://openalex.org/I4210161065","display_name":"Laboratoire de Traitement de l'Information M\u00e9dicale","ror":"https://ror.org/05mqemx33","country_code":"FR","type":"facility","lineage":["https://openalex.org/I154526488","https://openalex.org/I4210105774","https://openalex.org/I4210161065"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Gw\u00e9nol\u00e9 Quellec","raw_affiliation_strings":["latim, Inserm, brest, France"],"raw_orcid":"https://orcid.org/0000-0003-1669-7140","affiliations":[{"raw_affiliation_string":"latim, Inserm, brest, France","institution_ids":["https://openalex.org/I154526488","https://openalex.org/I4210161065"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5062289182","display_name":"Gouenou Coatrieux","orcid":"https://orcid.org/0000-0002-5643-0224"},"institutions":[{"id":"https://openalex.org/I4210127572","display_name":"IMT Atlantique","ror":"https://ror.org/030hj3061","country_code":"FR","type":"education","lineage":["https://openalex.org/I205703379","https://openalex.org/I4210127572"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Gouenou Coatrieux","raw_affiliation_strings":["data science departement-latim, IMT Atlantique, brest, France"],"raw_orcid":"https://orcid.org/0000-0002-5643-0224","affiliations":[{"raw_affiliation_string":"data science departement-latim, IMT Atlantique, brest, France","institution_ids":["https://openalex.org/I4210127572"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"201","last_page":"212"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.6678000092506409,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.6678000092506409,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.11500000208616257,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10388","display_name":"Advanced Steganography and Watermarking Techniques","score":0.053599998354911804,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/watermark","display_name":"Watermark","score":0.8981000185012817},{"id":"https://openalex.org/keywords/digital-watermarking","display_name":"Digital watermarking","score":0.8822000026702881},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.7649000287055969},{"id":"https://openalex.org/keywords/representation","display_name":"Representation (politics)","score":0.5774000287055969},{"id":"https://openalex.org/keywords/distillation","display_name":"Distillation","score":0.5102999806404114},{"id":"https://openalex.org/keywords/verifiable-secret-sharing","display_name":"Verifiable secret sharing","score":0.5034999847412109},{"id":"https://openalex.org/keywords/generative-grammar","display_name":"Generative grammar","score":0.48010000586509705}],"concepts":[{"id":"https://openalex.org/C164112704","wikidata":"https://www.wikidata.org/wiki/Q7974348","display_name":"Watermark","level":3,"score":0.8981000185012817},{"id":"https://openalex.org/C150817343","wikidata":"https://www.wikidata.org/wiki/Q875932","display_name":"Digital watermarking","level":3,"score":0.8822000026702881},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.7649000287055969},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7099999785423279},{"id":"https://openalex.org/C2776359362","wikidata":"https://www.wikidata.org/wiki/Q2145286","display_name":"Representation (politics)","level":3,"score":0.5774000287055969},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5286999940872192},{"id":"https://openalex.org/C204030448","wikidata":"https://www.wikidata.org/wiki/Q101017","display_name":"Distillation","level":2,"score":0.5102999806404114},{"id":"https://openalex.org/C85847156","wikidata":"https://www.wikidata.org/wiki/Q59015987","display_name":"Verifiable secret sharing","level":3,"score":0.5034999847412109},{"id":"https://openalex.org/C39890363","wikidata":"https://www.wikidata.org/wiki/Q36108","display_name":"Generative grammar","level":2,"score":0.48010000586509705},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.4235999882221222},{"id":"https://openalex.org/C197115733","wikidata":"https://www.wikidata.org/wiki/Q1003136","display_name":"Forcing (mathematics)","level":2,"score":0.38510000705718994},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.35089999437332153},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.29499998688697815},{"id":"https://openalex.org/C2777402240","wikidata":"https://www.wikidata.org/wiki/Q6783436","display_name":"Masking (illustration)","level":2,"score":0.27730000019073486},{"id":"https://openalex.org/C2781085045","wikidata":"https://www.wikidata.org/wiki/Q7318308","display_name":"Reversing","level":2,"score":0.27079999446868896},{"id":"https://openalex.org/C167966045","wikidata":"https://www.wikidata.org/wiki/Q5532625","display_name":"Generative model","level":3,"score":0.26910001039505005},{"id":"https://openalex.org/C2779356469","wikidata":"https://www.wikidata.org/wiki/Q502918","display_name":"Counterfeit","level":2,"score":0.26759999990463257},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.25609999895095825},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.2515000104904175}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3785353.3815095","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3785353.3815095","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2026 ACM Workshop on Information Hiding and Multimedia Security","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3785353.3815095","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3785353.3815095","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2026 ACM Workshop on Information Hiding and Multimedia Security","raw_type":"proceedings-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/11","score":0.45022767782211304,"display_name":"Sustainable cities and communities"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":29,"referenced_works":["https://openalex.org/W2251939518","https://openalex.org/W2579318729","https://openalex.org/W2768064608","https://openalex.org/W2806082141","https://openalex.org/W2935349488","https://openalex.org/W2964128659","https://openalex.org/W3022293880","https://openalex.org/W3105966348","https://openalex.org/W3156011647","https://openalex.org/W3173922709","https://openalex.org/W3202586005","https://openalex.org/W3205572447","https://openalex.org/W4311737082","https://openalex.org/W4320005719","https://openalex.org/W4323345707","https://openalex.org/W4380362772","https://openalex.org/W4385382984","https://openalex.org/W4385567795","https://openalex.org/W4391725280","https://openalex.org/W4392375226","https://openalex.org/W4400121015","https://openalex.org/W4400579044","https://openalex.org/W4401450512","https://openalex.org/W4404643622","https://openalex.org/W4405810598","https://openalex.org/W4406462614","https://openalex.org/W4416422026","https://openalex.org/W7118169410","https://openalex.org/W7133195854"],"related_works":[],"abstract_inverted_index":{"White-box":[0],"watermarking":[1,91],"embeds":[2],"ownership":[3],"signatures":[4],"directly":[5],"into":[6,71],"DNN":[7],"parameters,":[8],"yet":[9],"it":[10,79],"faces":[11],"a":[12,20,72,149,153,163],"critical":[13],"blind":[14],"spot:":[15],"topology-altering":[16,158],"obfuscation.":[17],"By":[18],"modifying":[19],"model\u2019s":[21],"internal":[22,124],"structure":[23],"while":[24,114],"preserving":[25],"its":[26,36],"input-output":[27],"behavior,":[28],"an":[29],"attacker":[30],"can":[31],"misalign":[32],"the":[33,63,67,75,82],"watermark":[34,84,155],"from":[35],"expected":[37],"parameter":[38],"locations,":[39],"causing":[40],"standard":[41],"white-box":[42,50,90,132,154],"extractors":[43],"to":[44,80,123,146,156],"fail.":[45],"We":[46,86,142],"investigate":[47],"whether":[48],"existing":[49],"watermarks":[51,109],"remain":[52],"verifiable":[53],"after":[54],"such":[55],"attacks":[56],"by":[57],"introducing":[58],"Distillation-as-Defense:":[59],"rather":[60],"than":[61],"reversing":[62],"obfuscation,":[64,159],"we":[65,161],"distill":[66],"obfuscated":[68],"model":[69],"(Teacher)":[70],"student":[73],"with":[74,137],"original":[76],"architecture,":[77],"forcing":[78],"reconstruct":[81],"functional":[83],"representation.":[85],"systematically":[87],"evaluate":[88],"ten":[89],"schemes\u2014eight":[92],"static":[93,116],"(weight-based)":[94],"and":[95,102,160],"two":[96],"dynamic":[97],"(activation-based)\u2014across":[98],"classifiers,":[99],"generative":[100],"models,":[101],"transformers.":[103],"Dynamic":[104],"methods":[105,117],"consistently":[106],"recover":[107],"their":[108],"under":[110],"feature-map":[111],"alignment":[112],"distillation,":[113],"most":[115],"fail":[118],"on":[119],"deep":[120],"architectures":[121],"due":[122],"representation":[125],"redundancy.":[126],"These":[127],"findings":[128],"reveal":[129],"that":[130,144],"current":[131],"schemes":[133],"were":[134],"not":[135],"designed":[136],"distillation":[138,147],"robustness":[139],"in":[140],"mind.":[141],"conclude":[143],"resistance":[145],"is":[148],"necessary":[150],"condition":[151],"for":[152],"withstand":[157],"discuss":[162],"concrete":[164],"design":[165],"guidelines":[166],"toward":[167],"this":[168],"goal.":[169]},"counts_by_year":[],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2026-06-17T00:00:00"}