{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,8,21]],"date-time":"2025-08-21T16:28:11Z","timestamp":1755793691303,"version":"3.44.0"},"reference-count":61,"publisher":"IEEE","license":[{"start":{"date-parts":[[2025,6,10]],"date-time":"2025-06-10T00:00:00Z","timestamp":1749513600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/2.zoppoz.workers.dev:443\/https\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,6,10]],"date-time":"2025-06-10T00:00:00Z","timestamp":1749513600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/2.zoppoz.workers.dev:443\/https\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100000923","name":"Australian Research Council","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100000923","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025,6,10]]},"DOI":"10.1109\/cvpr52734.2025.02856","type":"proceedings-article","created":{"date-parts":[[2025,8,13]],"date-time":"2025-08-13T17:26:42Z","timestamp":1755106002000},"page":"30671-30681","source":"Crossref","is-referenced-by-count":0,"title":["Jailbreaking the Non-Transferable Barrier via Test-Time Data Disguising"],"prefix":"10.1109","author":[{"given":"Yongli","family":"Xiang","sequence":"first","affiliation":[{"name":"The University of Sydney,Sydney AI Centre"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ziming","family":"Hong","sequence":"additional","affiliation":[{"name":"The University of Sydney,Sydney AI Centre"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Lina","family":"Yao","sequence":"additional","affiliation":[{"name":"Data61, CSIRO"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Dadong","family":"Wang","sequence":"additional","affiliation":[{"name":"Data61, CSIRO"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Tongliang","family":"Liu","sequence":"additional","affiliation":[{"name":"The University of Sydney,Sydney AI Centre"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","first-page":"1615","article-title":"Turning your weakness into a strength: Watermarking deep neural networks by backdooring","volume-title":"27th USENIX security symposium (USENIX Security 18)","author":"Adi"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/ICMLA.2018.00190"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2021.114820"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-01258-8_10"},{"volume-title":"Large scale gan training for high fidelity natural image synthesis","year":"2018","author":"Brock","key":"ref5"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/DAC18072.2020.9218651"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/3664647.3680694"},{"key":"ref8","first-page":"215","article-title":"An analysis of single-layer networks in unsupervised feature learning","volume-title":"Proceedings of the fourteenth international conference on artificial intelligence and statistics","author":"Coates"},{"key":"ref9","first-page":"32","article-title":"Addressing failure prediction by learning model confidence","author":"Corbi\u00e8re","year":"2019","journal-title":"Advances in neural information processing systems"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00949"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1007\/s10796-021-10186-w"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/3422622"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"journal-title":"Benchmarking neural network robustness to common corruptions and perturbations","year":"2019","author":"Hendrycks","key":"ref14"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.5194\/gmd-15-5481-2022"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2022\/134"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/cvpr52733.2024.02721"},{"article-title":"Improving non-transferable representation learning by harnessing content and style","volume-title":"The Twelfth International Conference on Learning Representations","author":"Hong","key":"ref18"},{"journal-title":"Toward robust non-transferable learning: A survey and benchmark","year":"2025","author":"Hong","key":"ref19"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52733.2024.02230"},{"key":"ref21","first-page":"13610","article-title":"Learning to learn from apis: black-box data-free meta-learning","volume-title":"International Conference on Machine Learning","author":"Hu"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.167"},{"journal-title":"Harnessing out-of-distribution examples via augmenting content and style","year":"2022","author":"Huang","key":"ref23"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/cvpr52729.2023.01552"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1007\/s11263-024-02075-x"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00157"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.632"},{"key":"ref28","first-page":"2427","article-title":"Test-time classifier adjustment module for model-agnostic domain generalization","volume":"34","author":"Iwasawa","year":"2021","journal-title":"Advances in Neural Information Processing Systems"},{"journal-title":"Test-time adaptation via self-training with nearest neighbor information","year":"2022","author":"Jang","key":"ref29"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.01360"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1016\/j.csbj.2014.11.005"},{"journal-title":"Learning multiple layers of features from tiny images","year":"2009","author":"Krizhevsky","key":"ref32"},{"article-title":"Understanding and enhancing the transferability of jailbreaking attacks","volume-title":"The Thirteenth International Conference on Learning Representations","author":"Lin","key":"ref33"},{"key":"ref34","first-page":"58556","article-title":"Cs-isolate: Extracting hard confident examples by content and style isolation","volume":"36","author":"Lin","year":"2023","journal-title":"Advances in Neural Information Processing Systems"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1002\/9781119556749"},{"journal-title":"Learning to adapt in dynamic, real-world environments through meta-reinforcement learning","year":"2018","author":"Nagabandi","key":"ref36"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58542-6_29"},{"key":"ref38","first-page":"16888","article-title":"Efficient test-time model adaptation without forgetting","volume-title":"International conference on machine learning","author":"Niu"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/JPROC.2008.917757"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52733.2024.02226"},{"journal-title":"Visda: The visual domain adaptation challenge","year":"2017","author":"Peng","key":"ref41"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/ICMLA.2015.152"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1007\/s42979-021-00592-x"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.74"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1002\/j.1538-7305.1948.tb01338.x"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.3048415"},{"journal-title":"Very deep convo-lutional networks for large-scale image recognition","year":"2014","author":"Simonyan","key":"ref47"},{"key":"ref48","first-page":"9229","article-title":"Test-time training with self-supervision for generalization under distribution shifts","volume-title":"International conference on machine learning","author":"Sun"},{"issue":"11","key":"ref49","article-title":"Visualizing data using t-sne","volume":"9","author":"Van der Maaten","year":"2008","journal-title":"Journal of machine learning research"},{"journal-title":"Tent: Fully test-time adaptation by entropy minimization","year":"2020","author":"Wang","key":"ref50"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51070.2023.00470"},{"journal-title":"Non-transferable learning: A new approach for model ownership verification and applicability authorization","year":"2021","author":"Wang","key":"ref52"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.01961"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2024.3460871"},{"key":"ref55","first-page":"4409","article-title":"Instance-dependent label-noise learning under a structural causal model","volume":"34","author":"Yao","year":"2021","journal-title":"Advances in Neural Information Processing Systems"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1016\/j.cviu.2023.103837"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2022.emnlp-main.685"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1145\/3196494.3196550"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2021.3064850"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2022.3195549"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.244"}],"event":{"name":"2025 IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR)","start":{"date-parts":[[2025,6,10]]},"location":"Nashville, TN, USA","end":{"date-parts":[[2025,6,17]]}},"container-title":["2025 IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR)"],"original-title":[],"link":[{"URL":"https:\/\/2.zoppoz.workers.dev:443\/http\/xplorestaging.ieee.org\/ielx8\/11091818\/11091608\/11094152.pdf?arnumber=11094152","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,15]],"date-time":"2025-08-15T04:55:58Z","timestamp":1755233758000},"score":1,"resource":{"primary":{"URL":"https:\/\/2.zoppoz.workers.dev:443\/https\/ieeexplore.ieee.org\/document\/11094152\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,6,10]]},"references-count":61,"URL":"https:\/\/2.zoppoz.workers.dev:443\/https\/doi.org\/10.1109\/cvpr52734.2025.02856","relation":{},"subject":[],"published":{"date-parts":[[2025,6,10]]}}}