Linear Functionality Equivalence Attack Against Deep Neural Network Watermarks and a Defense Method by Neuron Mapping | IEEE Journals & Magazine | IEEE Xplore