@inproceedings {287178,
	author = {Yifan Yan and Xudong Pan and Mi Zhang and Min Yang},
	title = {Rethinking {White-Box} Watermarks on Deep Learning Models under Neural Structural Obfuscation},
	booktitle = {32nd USENIX Security Symposium (USENIX Security 23)},
	year = {2023},
	isbn = {978-1-939133-37-3},
	address = {Anaheim, CA},
	pages = {2347--2364},
	url = {https://www.usenix.org/conference/usenixsecurity23/presentation/yan},
	publisher = {USENIX Association},
	month = aug
}
