L. Charette, L. Chu, Y. Chen, J. Pei, L. Wang, and Y. Zhang, “Cosine Model Watermarking against Ensemble Distillation”, AAAI, vol. 36, no. 9, pp. 9512-9520, Jun. 2022.