{"id":"https://openalex.org/W7136123003","doi":"https://doi.org/10.48550/arxiv.2603.12679","title":"Why Neural Structural Obfuscation Can't Kill White-Box Watermarks for Good!","display_name":"Why Neural Structural Obfuscation Can't Kill White-Box Watermarks for Good!","publication_year":2026,"publication_date":"2026-03-13","ids":{"openalex":"https://openalex.org/W7136123003","doi":"https://doi.org/10.48550/arxiv.2603.12679"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2603.12679","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.12679","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2603.12679","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5129417553","display_name":"Yanna Jiang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jiang, Yanna","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5121101243","display_name":"Guangsheng Yu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yu, Guangsheng","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5129517335","display_name":"Qingyuan Yu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yu, Qingyuan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":null,"display_name":"Chen, Yi","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chen, Yi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5129414868","display_name":"Qin Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Qin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.8334000110626221,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.8334000110626221,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.04800000041723251,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10775","display_name":"Generative Adversarial Networks and Image Synthesis","score":0.016499999910593033,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/obfuscation","display_name":"Obfuscation","score":0.8026999831199646},{"id":"https://openalex.org/keywords/digital-watermarking","display_name":"Digital watermarking","score":0.48190000653266907},{"id":"https://openalex.org/keywords/consistency","display_name":"Consistency (knowledge bases)","score":0.46959999203681946},{"id":"https://openalex.org/keywords/permutation","display_name":"Permutation (music)","score":0.4431999921798706},{"id":"https://openalex.org/keywords/synchronizing","display_name":"Synchronizing","score":0.43790000677108765},{"id":"https://openalex.org/keywords/rewriting","display_name":"Rewriting","score":0.4372999966144562},{"id":"https://openalex.org/keywords/watermark","display_name":"Watermark","score":0.4309999942779541},{"id":"https://openalex.org/keywords/reliability","display_name":"Reliability (semiconductor)","score":0.3944000005722046},{"id":"https://openalex.org/keywords/node","display_name":"Node (physics)","score":0.38760000467300415}],"concepts":[{"id":"https://openalex.org/C40305131","wikidata":"https://www.wikidata.org/wiki/Q2616305","display_name":"Obfuscation","level":2,"score":0.8026999831199646},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.666100025177002},{"id":"https://openalex.org/C150817343","wikidata":"https://www.wikidata.org/wiki/Q875932","display_name":"Digital watermarking","level":3,"score":0.48190000653266907},{"id":"https://openalex.org/C2776436953","wikidata":"https://www.wikidata.org/wiki/Q5163215","display_name":"Consistency (knowledge bases)","level":2,"score":0.46959999203681946},{"id":"https://openalex.org/C21308566","wikidata":"https://www.wikidata.org/wiki/Q7169365","display_name":"Permutation (music)","level":2,"score":0.4431999921798706},{"id":"https://openalex.org/C162932704","wikidata":"https://www.wikidata.org/wiki/Q1058791","display_name":"Synchronizing","level":3,"score":0.43790000677108765},{"id":"https://openalex.org/C154690210","wikidata":"https://www.wikidata.org/wiki/Q1668499","display_name":"Rewriting","level":2,"score":0.4372999966144562},{"id":"https://openalex.org/C164112704","wikidata":"https://www.wikidata.org/wiki/Q7974348","display_name":"Watermark","level":3,"score":0.4309999942779541},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.4293999969959259},{"id":"https://openalex.org/C43214815","wikidata":"https://www.wikidata.org/wiki/Q7310987","display_name":"Reliability (semiconductor)","level":3,"score":0.3944000005722046},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.39329999685287476},{"id":"https://openalex.org/C62611344","wikidata":"https://www.wikidata.org/wiki/Q1062658","display_name":"Node (physics)","level":2,"score":0.38760000467300415},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.385699987411499},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.3686999976634979},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.36550000309944153},{"id":"https://openalex.org/C2776207758","wikidata":"https://www.wikidata.org/wiki/Q5303302","display_name":"Downstream (manufacturing)","level":2,"score":0.351500004529953},{"id":"https://openalex.org/C127705205","wikidata":"https://www.wikidata.org/wiki/Q5748245","display_name":"Heuristics","level":2,"score":0.3483999967575073},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.33640000224113464},{"id":"https://openalex.org/C152124472","wikidata":"https://www.wikidata.org/wiki/Q1204361","display_name":"Redundancy (engineering)","level":2,"score":0.3160000145435333},{"id":"https://openalex.org/C125411270","wikidata":"https://www.wikidata.org/wiki/Q18653","display_name":"Encoding (memory)","level":2,"score":0.301800012588501},{"id":"https://openalex.org/C2780310539","wikidata":"https://www.wikidata.org/wiki/Q12547192","display_name":"Imperfect","level":2,"score":0.3000999987125397},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.2971999943256378},{"id":"https://openalex.org/C57273362","wikidata":"https://www.wikidata.org/wiki/Q576722","display_name":"Decoding methods","level":2,"score":0.2838999927043915},{"id":"https://openalex.org/C99498987","wikidata":"https://www.wikidata.org/wiki/Q2210247","display_name":"Noise (video)","level":3,"score":0.28220000863075256},{"id":"https://openalex.org/C71901391","wikidata":"https://www.wikidata.org/wiki/Q7126699","display_name":"Upload","level":2,"score":0.28130000829696655},{"id":"https://openalex.org/C165064840","wikidata":"https://www.wikidata.org/wiki/Q1321061","display_name":"Matching (statistics)","level":2,"score":0.27090001106262207},{"id":"https://openalex.org/C2778112365","wikidata":"https://www.wikidata.org/wiki/Q3511065","display_name":"Sequence (biology)","level":2,"score":0.25839999318122864}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2603.12679","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.12679","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2603.12679","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.12679","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Neural":[0],"Structural":[1],"Obfuscation":[2],"(NSO)":[3],"(USENIX":[4],"Security'23)":[5],"is":[6,184],"a":[7,30,53,84,89,99,103,126],"family":[8],"of":[9,59,98],"``zero":[10],"cost''":[11],"structure-editing":[12],"transforms":[13],"(\\texttt{nso\\_zero},":[14],"\\texttt{nso\\_clique},":[15],"\\texttt{nso\\_split})":[16],"that":[17,95,129],"inject":[18],"dummy":[19],"neurons.":[20],"By":[21],"combining":[22],"neuron":[23],"permutation":[24],"and":[25,37,138,156,166],"parameter":[26],"scaling,":[27],"NSO":[28,66,82,168],"makes":[29],"radical":[31],"modification":[32],"to":[33,56,111,134],"the":[34,57,69,75,131,142],"network":[35,143],"structure":[36],"parameters":[38],"while":[39,178],"strictly":[40],"preserving":[41,179],"functional":[42],"equivalence,":[43],"thereby":[44],"disrupting":[45],"white-box":[46,61],"watermark":[47,176],"verification.":[48],"This":[49,92],"capability":[50],"has":[51,78],"been":[52],"fundamental":[54],"challenge":[55],"reliability":[58],"existing":[60],"watermarking":[62],"schemes.":[63],"We":[64,80],"rethink":[65],"and,":[67],"for":[68],"first":[70],"time,":[71],"fully":[72],"recover":[73],"from":[74],"damage":[76],"it":[77],"caused.":[79],"redefine":[81],"as":[83],"graph-consistent":[85],"threat":[86],"model":[87,133],"within":[88],"\\textit{producer--consumer}":[90],"paradigm.":[91],"formulation":[93],"posits":[94],"any":[96],"obfuscation":[97],"producer":[100],"node":[101],"necessitates":[102],"compatible":[104],"layout":[105],"update":[106],"in":[107],"all":[108],"downstream":[109,147],"consumers":[110,148],"maintain":[112],"structural":[113],"integrity.":[114],"Building":[115],"on":[116,120],"these":[117],"consistency":[118],"constraints":[119],"signal":[121],"propagation,":[122],"we":[123],"present":[124],"\\textsc{Canon},":[125],"recovery":[127,173],"framework":[128],"probes":[130],"attacked":[132],"identify":[135],"redundancy/dummy":[136],"channels":[137],"then":[139],"\\textit{globally}":[140],"canonicalizes":[141],"by":[144,149],"rewriting":[145],"\\textit{all}":[146],"construction,":[150],"synchronizing":[151],"layouts":[152],"across":[153],"\\texttt{fan-out},":[154],"\\texttt{add},":[155],"\\texttt{cat}.":[157],"Extensive":[158],"experiments":[159],"demonstrate":[160],"that,":[161],"even":[162],"under":[163],"strong":[164],"composed":[165],"extended":[167],"attacks,":[169],"\\textsc{Canon}":[170],"achieves":[171],"\\textbf{100\\%}":[172],"success,":[174],"restoring":[175],"verifiability":[177],"task":[180],"utility.":[181],"Our":[182],"code":[183],"available":[185],"at":[186],"https://anonymous.4open.science/r/anti-NSO-9874.":[187]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-03-17T00:00:00"}