{"total":49,"rows":[{"id":"2211.02408","title":"Rickrolling the Artist: Injecting Backdoors into Text Encoders for Text-to-Image Synthesis","created":"2022-11-04","cited_by_count":59,"area":"safety"},{"id":"2103.04980","title":"Deep Model Intellectual Property Protection via Deep Watermarking","created":"2021-03-08","cited_by_count":54,"area":"safety"},{"id":"2409.19732","title":"Unified Gradient-Based Machine Unlearning with Remain Geometry Enhancement","created":"2024-09-29","cited_by_count":45,"area":"safety"},{"id":"2210.15127","title":"Rethinking the Reverse-engineering of Trojan Triggers","created":"2022-10-27","cited_by_count":39,"area":"safety"},{"id":"2307.16489","title":"BAGM: A Backdoor Attack for Manipulating Text-to-Image Generative Models","created":"2023-07-31","cited_by_count":37,"area":"safety"},{"id":"2204.01960","title":"FaceSigns: Semi-Fragile Neural Watermarks for Media Authentication and Countering Deepfakes","created":"2022-04-05","cited_by_count":18,"area":"safety"},{"id":"2504.15512","title":"T2VShield: Model-Agnostic Jailbreak Defense for Text-to-Video Models","created":"2025-04-22","cited_by_count":18,"area":"safety"},{"id":"2401.17523","title":"Game-Theoretic Unlearnable Example Generator","created":"2024-01-31","cited_by_count":12,"area":"safety"},{"id":"2309.05940","title":"Catch You Everything Everywhere: Guarding Textual Inversion via Concept Watermarking","created":"2023-09-12","cited_by_count":8,"area":"safety"},{"id":"2402.12626","title":"Indiscriminate Data Poisoning Attacks on Pre-trained Feature Extractors","created":"2024-02-20","cited_by_count":8,"area":"safety"},{"id":"2310.00626","title":"GhostEncoder: Stealthy Backdoor Attacks with Dynamic Triggers to Pre-trained Encoders in Self-supervised Learning","created":"2023-10-01","cited_by_count":6,"area":"safety"},{"id":"2405.09863","title":"Box-Free Model Watermarks Are Prone to Black-Box Removal Attacks","created":"2024-05-16","cited_by_count":6,"area":"safety"},{"id":"2504.15827","title":"DualOptim: Enhancing Efficacy and Stability in Machine Unlearning with Dual Optimizers","created":"2025-04-22","cited_by_count":6,"area":"safety"},{"id":"2309.03815","title":"T2IW: Joint Text to Image & Watermark Generation","created":"2023-09-07","cited_by_count":5,"area":"safety"},{"id":"2510.02384","title":"Secure and Robust Watermarking for AI-generated Images: A Comprehensive Survey","created":"2025-09-30","cited_by_count":5,"area":"safety"},{"id":"2401.00996","title":"Safety and Performance, Why Not Both? Bi-Objective Optimized Model Compression against Heterogeneous Attacks Toward AI Software Deployment","created":"2024-01-02","cited_by_count":4,"area":"safety"},{"id":"2503.11324","title":"Safe-VAR: Safe Visual Autoregressive Model for Text-to-Image Generative Watermarking","created":"2025-03-14","cited_by_count":4,"area":"safety"},{"id":"2602.15364","title":"MarkSweep: A No-box Removal Attack on AI-Generated Image Watermarking via Noise Intensification and Frequency-aware Denoising","created":"2026-02-17","cited_by_count":4,"area":"safety"},{"id":"2409.15781","title":"Training Data Attribution: Was Your Model Secretly Trained On Data Created By Mine?","created":"2024-09-24","cited_by_count":3,"area":"safety"},{"id":"2412.07249","title":"Buster: Implanting Semantic Backdoor into Text Encoder to Mitigate NSFW Content Generation","created":"2024-12-10","cited_by_count":3,"area":"safety"},{"id":"2412.08156","title":"Antelope: Potent and Concealed Jailbreak Attack Strategy","created":"2024-12-11","cited_by_count":3,"area":"safety"},{"id":"2601.08623","title":"SafeRedir: Prompt Embedding Redirection for Robust Unlearning in Image Generation Models","created":"2026-01-13","cited_by_count":3,"area":"safety"},{"id":"2305.12391","title":"Generative Model Watermarking Suppressing High-Frequency Artifacts","created":"2023-05-21","cited_by_count":2,"area":"safety"},{"id":"2505.08255","title":"Where the Devil Hides: Deepfake Detectors Can No Longer Be Trusted","created":"2025-05-13","cited_by_count":2,"area":"safety"},{"id":"2512.09654","title":"Membership and Dataset Inference Attacks on Large Audio Generative Models","created":"2025-12-10","cited_by_count":2,"area":"safety"},{"id":"2108.02360","title":"Exploring Structure Consistency for Deep Model Watermarking","created":"2021-08-05","cited_by_count":1,"area":"safety"},{"id":"2301.00435","title":"Trojaning semi-supervised learning model via poisoning wild images on the web","created":"2023-01-01","cited_by_count":1,"area":"safety"},{"id":"2512.06562","title":"SUGAR: A Sweeter Spot for Generative Unlearning of Many Identities","created":"2025-12-06","cited_by_count":1,"area":"safety"},{"id":"2602.09284","title":"X-Mark: Saliency-Guided Robust Dataset Ownership Verification for Medical Imaging","created":"2026-02-10","cited_by_count":1,"area":"safety"},{"id":"2603.00587","title":"Unlearning Evaluation through Subset Statistical Independence","created":"2026-02-28","cited_by_count":1,"area":"safety"},{"id":"2603.22870","title":"Designing to Forget: Deep Semi-parametric Models for Unlearning","created":"2026-03-24","cited_by_count":1,"area":"safety"},{"id":"2603.24857","title":"AI Security in the Foundation Model Era: A Comprehensive Survey from a Unified Perspective","created":"2026-03-25","cited_by_count":1,"area":"safety"},{"id":"2605.19227","title":"Token by Token, Compromised: Backdoor Vulnerabilities in Unified Autoregressive Models","created":"2026-05-19","cited_by_count":1,"area":"safety"},{"id":"2110.12948","title":"Generating Watermarked Adversarial Texts","created":"2021-10-25","cited_by_count":0,"area":"safety"},{"id":"2404.02530","title":"Manipulating and Mitigating Generative Model Biases without Retraining","created":"2024-04-03","cited_by_count":0,"area":"safety"},{"id":"2409.01541","title":"Agentic Copyright Watermarking against Adversarial Evidence Forgery with Purification-Agnostic Curriculum Proxy Learning","created":"2024-09-03","cited_by_count":0,"area":"safety"},{"id":"2409.19442","title":"Trigger-Based Fragile Model Watermarking for Image Transformation Networks","created":"2024-09-28","cited_by_count":0,"area":"safety"},{"id":"2507.19905","title":"ConSeg: Contextual Backdoor Attack Against Semantic Segmentation","created":"2025-07-26","cited_by_count":0,"area":"safety"},{"id":"2508.02476","title":"PoseGuard: Pose-Guided Generation with Safety Guardrails","created":"2025-08-04","cited_by_count":0,"area":"safety"},{"id":"2510.00293","title":"MOLM: Mixture of LoRA Markers","created":"2025-09-30","cited_by_count":0,"area":"safety"},{"id":"2510.19226","title":"Controllable Machine Unlearning via Gradient Pivoting","created":"2025-10-22","cited_by_count":0,"area":"safety"},{"id":"2511.16574","title":"Erase to Retain: Low Rank Adaptation Guided Selective Unlearning in Medical Segmentation Networks","created":"2025-11-20","cited_by_count":0,"area":"safety"},{"id":"2604.19891","title":"A Data-Free Membership Inference Attack on Federated Learning in Hardware Assurance","created":"2026-04-21","cited_by_count":0,"area":"safety"},{"id":"2605.15737","title":"BARRIER: Bounded Activation Regions for Robust Information Erasure","created":"2026-05-15","cited_by_count":0,"area":"safety"},{"id":"2606.16180","title":"To forget is to preserve: Machine Unlearning for 3D medical image segmentation","created":"2026-06-15","cited_by_count":0,"area":"safety"},{"id":"2606.23872","title":"MGI: Member vs Generated Inference","created":"2026-06-22","cited_by_count":0,"area":"safety"},{"id":"2608.01094","title":"Lethe: How Hard Is It to Forget? A Benchmark for Federated Unlearning in Medical Imaging","created":"2026-08-02","cited_by_count":0,"area":"safety"},{"id":"2609.23586","title":"An Efficient and Effective Watermarking Scheme for the Protection of the Intellectual Property Rights of Video Generative Models","created":"2026-09-20","cited_by_count":0,"area":"safety"},{"id":"2609.27620","title":"InGuard: Towards Generalized Inner Guardrail for Safe Text-to-Image Generation","created":"2026-09-23","cited_by_count":0,"area":"safety"}],"next_cursor":null}