I Can Still Steal Your Encoder: A Defense-Penetrating Encoder-Stealing Attack. - Rongbin Xiao; Changyu Dong; Jie Zhang 008; Yan Pang; Zihan Xie; Han Wu (PRCV (18), 2025)