{"total":154,"rows":[{"id":"2404.14055","title":"RingID: Rethinking Tree-Ring Watermarking for Enhanced Multi-Key Identification","created":"2024-04-22","cited_by_count":91,"area":null},{"id":"2103.06922","title":"Towards Interpreting and Mitigating Shortcut Learning Behavior of NLU Models","created":"2021-03-11","cited_by_count":78,"area":null},{"id":"2108.04974","title":"SoK: How Robust is Image Classification Deep Neural Network Watermarking? (Extended Version)","created":"2021-08-11","cited_by_count":69,"area":null},{"id":"2309.16952","title":"Leveraging Optimization for Adaptive Attacks on Image Watermarks","created":"2023-09-29","cited_by_count":52,"area":null},{"id":"2102.04362","title":"Protecting Intellectual Property of Generative Adversarial Networks from Ambiguity Attack","created":"2021-02-08","cited_by_count":46,"area":null},{"id":"2201.11692","title":"SSLGuard: A Watermarking Scheme for Self-supervised Learning Pre-trained Encoders","created":"2022-01-27","cited_by_count":45,"area":null},{"id":"2207.07972","title":"Certified Neural Network Watermarks with Randomized Smoothing","created":"2022-07-16","cited_by_count":41,"area":null},{"id":"2209.03466","title":"Supervised GAN Watermarking for Intellectual Property Protection","created":"2022-09-07","cited_by_count":40,"area":null},{"id":"2402.02333","title":"Copyright Protection in Generative AI: A Technical Perspective","created":"2024-02-04","cited_by_count":38,"area":null},{"id":"2103.02683","title":"Preventing Unauthorized Use of Proprietary Data: Poisoning for Secure Dataset Release","created":"2021-02-16","cited_by_count":35,"area":null},{"id":"2305.18339","title":"A Survey on ChatGPT: AI-Generated Contents, Challenges, and Solutions","created":"2023-05-25","cited_by_count":35,"area":null},{"id":"2312.04828","title":"HuRef: HUman-REadable Fingerprint for Large Language Models","created":"2023-12-08","cited_by_count":34,"area":null},{"id":"2106.08890","title":"ModelDiff: Testing-Based DNN Similarity Comparison for Model Reuse Detection","created":"2021-06-11","cited_by_count":33,"area":null},{"id":"2201.11006","title":"An Overview of Compressible and Learnable Image Transformation with Secret Key and Its Applications","created":"2022-01-26","cited_by_count":29,"area":null},{"id":"2110.11024","title":"Watermarking Graph Neural Networks based on Backdoor Attacks","created":"2021-10-21","cited_by_count":25,"area":null},{"id":"2210.15427","title":"Are You Stealing My Model? Sample Correlation for Fingerprinting Deep Neural Networks","created":"2022-10-21","cited_by_count":21,"area":null},{"id":"2111.00162","title":"You are caught stealing my winning lottery ticket! Making a lottery ticket claim its ownership","created":"2021-10-30","cited_by_count":18,"area":null},{"id":"2104.04268","title":"Reversible Watermarking in Deep Convolutional Neural Networks for Integrity Authentication","created":"2021-04-09","cited_by_count":17,"area":null},{"id":"2211.07138","title":"Watermarking in Secure Federated Learning: A Verification Framework Based on Client-Side Backdooring","created":"2022-11-14","cited_by_count":17,"area":null},{"id":"2304.06607","title":"False Claims against Model Ownership Resolution","created":"2023-04-13","cited_by_count":17,"area":null},{"id":"2304.08566","title":"GrOVe: Ownership Verification of Graph Neural Networks using Embeddings","created":"2023-04-17","cited_by_count":16,"area":null},{"id":"2405.02466","title":"ProFLingo: A Fingerprinting-based Intellectual Property Protection Scheme for Large Language Models","created":"2024-05-03","cited_by_count":16,"area":null},{"id":"2105.14756","title":"A Protection Method of Trained CNN Model with Secret Key from Unauthorized Access","created":"2021-05-31","cited_by_count":15,"area":null},{"id":"2310.11446","title":"Functional Invariants to Watermark Large Transformers","created":"2023-10-17","cited_by_count":15,"area":null},{"id":"2204.04513","title":"On the Exploitation of Deepfake Model Recognition","created":"2022-04-09","cited_by_count":14,"area":null},{"id":"2407.10886","title":"SLIP: Securing LLMs IP Using Weights Decomposition","created":"2024-07-15","cited_by_count":14,"area":null},{"id":"2202.12506","title":"On the Effectiveness of Dataset Watermarking in Adversarial Settings","created":"2022-02-25","cited_by_count":12,"area":null},{"id":"2207.01991","title":"Conflicting Interactions Among Protection Mechanisms for Machine Learning Models","created":"2022-07-05","cited_by_count":12,"area":null},{"id":"2207.05366","title":"Image and Model Transformation with Secret Key for Vision Transformer","created":"2022-07-12","cited_by_count":12,"area":null},{"id":"2403.01472","title":"WARDEN: Multi-Directional Backdoor Watermarks for Embedding-as-a-Service Copyright Protection","created":"2024-03-03","cited_by_count":12,"area":null},{"id":"2201.08217","title":"Watermarking Pre-trained Encoders in Contrastive Learning","created":"2022-01-20","cited_by_count":11,"area":null},{"id":"2104.04241","title":"Piracy-Resistant DNN Watermarking by Block-Wise Image Transformation with Secret Key","created":"2021-04-09","cited_by_count":10,"area":null},{"id":"2307.15860","title":"What can Discriminator do? Towards Box-free Ownership Verification of Generative Adversarial Network","created":"2023-07-29","cited_by_count":10,"area":null},{"id":"2501.15509","title":"FIT-Print: Towards False-claim-resistant Model Ownership Verification via Targeted Fingerprint","created":"2025-01-26","cited_by_count":10,"area":null},{"id":"2209.03563","title":"SSL-WM: A Black-Box Watermarking Approach for Encoders Pre-trained by Self-supervised Learning","created":"2022-09-08","cited_by_count":9,"area":null},{"id":"2305.04507","title":"FedZKP: Federated Model Ownership Verification with Zero-knowledge Proof","created":"2023-05-08","cited_by_count":9,"area":null},{"id":"2311.16065","title":"A Survey on Vulnerability of Federated Learning: A Learning Algorithm Perspective","created":"2023-11-27","cited_by_count":9,"area":null},{"id":"2406.11129","title":"Neural Lineage","created":"2024-06-17","cited_by_count":9,"area":null},{"id":"2210.13631","title":"On the Robustness of Dataset Inference","created":"2022-10-24","cited_by_count":8,"area":null},{"id":"2303.10399","title":"FedRight: An Effective Model Copyright Protection for Federated Learning","created":"2023-03-18","cited_by_count":8,"area":null},{"id":"2310.08571","title":"Bucks for Buckets (B4B): Active Defenses Against Stealing Encoders","created":"2023-10-12","cited_by_count":8,"area":null},{"id":"2308.03573","title":"When Federated Learning meets Watermarking: A Comprehensive Overview of Techniques for Intellectual Property Protection","created":"2023-08-07","cited_by_count":7,"area":null},{"id":"2103.05590","title":"Robust Black-box Watermarking for Deep NeuralNetwork using Inverse Document Frequency","created":"2021-03-09","cited_by_count":6,"area":null},{"id":"2106.10147","title":"Evaluating the Robustness of Trigger Set-Based Watermarks Embedded in Deep Neural Networks","created":"2021-06-18","cited_by_count":6,"area":null},{"id":"2205.00199","title":"Cracking White-box DNN Watermarks via Invariant Neuron Transforms","created":"2022-04-30","cited_by_count":6,"area":null},{"id":"2306.09308","title":"Matching Pairs: Attributing Fine-Tuned Models to their Pre-Trained Large Language Models","created":"2023-06-15","cited_by_count":6,"area":null},{"id":"2405.16285","title":"ModelLock: Locking Your Model With a Spell","created":"2024-05-25","cited_by_count":6,"area":null},{"id":"2411.17461","title":"SoK: Blockchain-Based Decentralized AI (DeAI)","created":"2024-11-26","cited_by_count":6,"area":null},{"id":"2504.14871","title":"Natural Fingerprints of Large Language Models","created":"2025-04-21","cited_by_count":6,"area":null},{"id":"2511.18772","title":"Re-Key-Free, Risky-Free: Adaptable Model Usage Control","created":"2025-11-24","cited_by_count":6,"area":null},{"id":"2112.14108","title":"Fostering the Robustness of White-Box Deep Neural Network Watermarks by Neuron Alignment","created":"2021-12-28","cited_by_count":5,"area":null},{"id":"2208.10973","title":"Robust and Large-Payload DNN Watermarking via Fixed, Distribution-Optimized, Weights","created":"2022-08-23","cited_by_count":5,"area":null},{"id":"2210.02257","title":"Hiding Images in Deep Probabilistic Models","created":"2022-10-05","cited_by_count":5,"area":null},{"id":"2309.11013","title":"ModelGiF: Gradient Fields for Model Functional Distance","created":"2023-09-20","cited_by_count":5,"area":null},{"id":"2403.03590","title":"DeepEclipse: How to Break White-Box DNN-Watermarking Schemes","created":"2024-03-06","cited_by_count":5,"area":null},{"id":"2404.02889","title":"Steganographic Passport: An Owner and User Verifiable Credential for Deep Model IP Protection Without Retraining","created":"2024-04-03","cited_by_count":5,"area":null},{"id":"2502.20924","title":"Decoder Gradient Shield: Provable and High-Fidelity Prevention of Gradient-Based Box-Free Watermark Removal","created":"2025-02-28","cited_by_count":5,"area":null},{"id":"2506.18932","title":"AI Safety vs. AI Security: Demystifying the Distinction and Boundaries","created":"2025-06-21","cited_by_count":5,"area":null},{"id":"2101.04319","title":"DeepiSign: Invisible Fragile Watermark to Protect the Integrityand Authenticity of CNN","created":"2021-01-12","cited_by_count":4,"area":null},{"id":"2103.13628","title":"HufuNet: Embedding the Left Piece as Watermark and Keeping the Right Piece for Ownership Verification in Deep Neural Networks","created":"2021-03-25","cited_by_count":4,"area":null},{"id":"2109.00224","title":"A Protection Method of Trained CNN Model Using Feature Maps Transformed With Secret Key From Unauthorized Access","created":"2021-09-01","cited_by_count":4,"area":null},{"id":"2109.01332","title":"Access Control Using Spatially Invariant Permutation of Feature Maps for Semantic Segmentation Models","created":"2021-09-03","cited_by_count":4,"area":null},{"id":"2208.03948","title":"AWEncoder: Adversarial Watermarking Pre-trained Encoders in Contrastive Learning","created":"2022-08-08","cited_by_count":4,"area":null},{"id":"2305.06085","title":"FedSOV: Federated Model Secure Ownership Verification with Unforgeable Signature","created":"2023-05-10","cited_by_count":4,"area":null},{"id":"2308.12319","title":"RemovalNet: DNN Fingerprint Removal Attacks","created":"2023-08-23","cited_by_count":4,"area":null},{"id":"2405.15161","title":"Are You Copying My Prompt? Protecting the Copyright of Vision Prompt for VPaaS via Watermark","created":"2024-05-24","cited_by_count":4,"area":null},{"id":"2410.17552","title":"Robust and Minimally Invasive Watermarking for EaaS","created":"2024-10-23","cited_by_count":4,"area":null},{"id":"2603.19022","title":"Behavioral Fingerprints for LLM Endpoint Stability and Identity","created":"2026-03-19","cited_by_count":4,"area":null},{"id":"2106.07303","title":"iNNformant: Boundary Samples as Telltale Watermarks","created":"2021-06-14","cited_by_count":3,"area":null},{"id":"2202.06091","title":"TATTOOED: A Robust Deep Neural Network Watermarking Scheme based on Spread-Spectrum Channel Coding","created":"2022-02-12","cited_by_count":3,"area":null},{"id":"2203.11849","title":"A Girl Has A Name, And It's ... Adversarial Authorship Attribution for Deobfuscation","created":"2022-03-22","cited_by_count":3,"area":null},{"id":"2204.01934","title":"Attention Distraction: Watermark Removal Through Continual Learning with Selective Forgetting","created":"2022-04-05","cited_by_count":3,"area":null},{"id":"2206.05422","title":"Access Control of Semantic Segmentation Models Using Encrypted Feature Maps","created":"2022-06-11","cited_by_count":3,"area":null},{"id":"2206.11024","title":"ROSE: A RObust and SEcure DNN Watermarking","created":"2022-06-22","cited_by_count":3,"area":null},{"id":"2209.15268","title":"Generative Model Watermarking Based on Human Visual System","created":"2022-09-30","cited_by_count":3,"area":null},{"id":"2212.02814","title":"Mixer: DNN Watermarking using Image Mixup","created":"2022-12-06","cited_by_count":3,"area":null},{"id":"2307.02140","title":"Towards Open Federated Learning Platforms: Survey and Vision from Technical and Legal Perspectives","created":"2023-07-05","cited_by_count":3,"area":null},{"id":"2308.04603","title":"A Brief Yet In-Depth Survey of Deep Learning-Based Image Watermarking","created":"2023-08-08","cited_by_count":3,"area":null},{"id":"2309.01786","title":"Safe and Robust Watermark Injection with a Single OoD Image","created":"2023-09-04","cited_by_count":3,"area":null},{"id":"2312.12049","title":"EncryIP: A Practical Encryption-Based Framework for Model Intellectual Property Protection","created":"2023-12-19","cited_by_count":3,"area":null},{"id":"2312.15617","title":"GanFinger: GAN-Based Fingerprint Generation for Deep Neural Network Ownership Verification","created":"2023-12-25","cited_by_count":3,"area":null},{"id":"2402.04435","title":"PreGIP: Watermarking the Pretraining of Graph Neural Networks for Deep Intellectual Property Protection","created":"2024-02-06","cited_by_count":3,"area":null},{"id":"2402.16397","title":"Investigating Deep Watermark Security: An Adversarial Transferability Perspective","created":"2024-02-26","cited_by_count":3,"area":null},{"id":"2406.03728","title":"Evaluating Durability: Benchmark Insights into Multimodal Watermarking","created":"2024-06-06","cited_by_count":3,"area":null},{"id":"2412.03824","title":"Towards Data Governance of Frontier AI Models","created":"2024-12-05","cited_by_count":3,"area":null},{"id":"2510.06738","title":"AWM: Accurate Weight-Matrix Fingerprint for Large Language Models","created":"2025-10-08","cited_by_count":3,"area":null},{"id":"2309.03466","title":"Neural Dehydration: Effective Erasure of Black-box Watermarks from DNNs with Limited Data","created":"2023-09-07","cited_by_count":2,"area":null},{"id":"2310.09822","title":"Turn Passive to Active: A Survey on Active Intellectual Property Protection of Deep Learning Models","created":"2023-10-15","cited_by_count":2,"area":null},{"id":"2310.10124","title":"A Comprehensive Study of Privacy Risks in Curriculum Learning","created":"2023-10-16","cited_by_count":2,"area":null},{"id":"2403.05181","title":"Adversarial Sparse Teacher: Defense Against Distillation-Based Model Stealing Attacks Using Adversarial Examples","created":"2024-03-08","cited_by_count":2,"area":null},{"id":"2403.10663","title":"Not Just Change the Labels, Learn the Features: Watermarking Deep Neural Networks with Multi-View Data","created":"2024-03-15","cited_by_count":2,"area":null},{"id":"2405.04049","title":"Watermarking Neuromorphic Brains: Intellectual Property Protection in Spiking Neural Networks","created":"2024-05-07","cited_by_count":2,"area":null},{"id":"2409.16491","title":"Proactive Schemes: A Survey of Adversarial Attacks for Social Good","created":"2024-09-24","cited_by_count":2,"area":null},{"id":"2410.04397","title":"Towards Understanding and Enhancing Security of Proof-of-Training for DNN Model Ownership Verification","created":"2024-10-06","cited_by_count":2,"area":null},{"id":"2411.09776","title":"Combining Machine Learning Defenses without Conflicts","created":"2024-11-14","cited_by_count":2,"area":null},{"id":"2412.20768","title":"Sample Correlation for Fingerprinting Deep Face Recognition","created":"2024-12-30","cited_by_count":2,"area":null},{"id":"2501.02704","title":"Persistence of Backdoor-based Watermarks for Neural Networks: A Comprehensive Evaluation","created":"2025-01-06","cited_by_count":2,"area":null},{"id":"2505.01007","title":"Towards the Resistance of Neural Network Watermarking to Fine-tuning","created":"2025-05-02","cited_by_count":2,"area":null},{"id":"2505.13651","title":"Traceable Black-box Watermarks for Federated Learning","created":"2025-05-19","cited_by_count":2,"area":null},{"id":"2507.11137","title":"Hashed Watermark as a Filter: Defeating Forging and Overwriting Attacks in Weight-based Neural Network Watermarking","created":"2025-07-15","cited_by_count":2,"area":null}],"next_cursor":"100"}