{"total":248,"rows":[{"id":"2303.15435","title":"The Stable Signature: Rooting Watermarks in Latent Diffusion Models","created":"2023-03-27","cited_by_count":304,"area":"diffusion"},{"id":"2305.20030","title":"Tree-Ring Watermarks: Fingerprints for Diffusion Images that are Invisible and Robust","created":"2023-05-31","cited_by_count":187,"area":"diffusion"},{"id":"2303.10137","title":"A Recipe for Watermarking Diffusion Models","created":"2023-03-17","cited_by_count":141,"area":"diffusion"},{"id":"2104.10706","title":"Dataset Inference: Ownership Resolution in Machine Learning","created":"2021-04-21","cited_by_count":116,"area":"safety"},{"id":"2312.07913","title":"A Survey of Text Watermarking in the Era of Large Language Models","created":"2023-12-13","cited_by_count":112,"area":"safety"},{"id":"2106.08970","title":"Sleeper Agent: Scalable Hidden Trigger Backdoors for Neural Networks Trained from Scratch","created":"2021-06-16","cited_by_count":102,"area":"safety"},{"id":"2404.14055","title":"RingID: Rethinking Tree-Ring Watermarking for Enhanced Multi-Key Identification","created":"2024-04-22","cited_by_count":91,"area":null},{"id":"2311.04378","title":"Watermarks in the Sand: Impossibility of Strong Watermarking for Generative Models","created":"2023-11-07","cited_by_count":87,"area":"safety"},{"id":"2112.02701","title":"Protecting Intellectual Property of Language Generation APIs with Lexical Watermark","created":"2021-12-05","cited_by_count":84,"area":"safety"},{"id":"2103.06922","title":"Towards Interpreting and Mitigating Shortcut Learning Behavior of NLU Models","created":"2021-03-11","cited_by_count":78,"area":null},{"id":"2209.08773","title":"CATER: Intellectual Property Protection on Text Generation APIs via Conditional Watermarks","created":"2022-09-19","cited_by_count":76,"area":"safety"},{"id":"2108.04974","title":"SoK: How Robust is Image Classification Deep Neural Network Watermarking? (Extended Version)","created":"2021-08-11","cited_by_count":69,"area":null},{"id":"2210.00968","title":"Membership Inference Attacks Against Text-to-image Generation Models","created":"2022-10-03","cited_by_count":69,"area":"safety"},{"id":"2305.10036","title":"Are You Copying My Model? Protecting the Copyright of Large Language Models for EaaS via Backdoor Watermark","created":"2023-05-17","cited_by_count":67,"area":"safety"},{"id":"2103.04980","title":"Deep Model Intellectual Property Protection via Deep Watermarking","created":"2021-03-08","cited_by_count":54,"area":"safety"},{"id":"2306.04744","title":"WOUAF: Weight Modulation for User Attribution and Fingerprinting in Text-to-Image Diffusion Models","created":"2023-06-07","cited_by_count":53,"area":"diffusion"},{"id":"2106.06916","title":"Non-Transferable Learning: A New Approach for Model Ownership Verification and Applicability Authorization","created":"2021-06-13","cited_by_count":52,"area":"safety"},{"id":"2309.16952","title":"Leveraging Optimization for Adaptive Attacks on Image Watermarks","created":"2023-09-29","cited_by_count":52,"area":null},{"id":"2210.07543","title":"Watermarking Pre-trained Language Models with Backdooring","created":"2022-10-14","cited_by_count":50,"area":"safety"},{"id":"2102.04362","title":"Protecting Intellectual Property of Generative Adversarial Networks from Ambiguity Attack","created":"2021-02-08","cited_by_count":46,"area":null},{"id":"2112.05588","title":"Copy, Right? A Testing Framework for Copyright Protection of Deep Learning Models","created":"2021-12-10","cited_by_count":46,"area":"safety"},{"id":"2205.12709","title":"VeriFi: Towards Verifiable Federated Unlearning","created":"2022-05-25","cited_by_count":46,"area":"safety"},{"id":"2201.11692","title":"SSLGuard: A Watermarking Scheme for Self-supervised Learning Pre-trained Encoders","created":"2022-01-27","cited_by_count":45,"area":null},{"id":"2207.07972","title":"Certified Neural Network Watermarks with Randomized Smoothing","created":"2022-07-16","cited_by_count":41,"area":null},{"id":"2209.03466","title":"Supervised GAN Watermarking for Intellectual Property Protection","created":"2022-09-07","cited_by_count":40,"area":null},{"id":"2402.02333","title":"Copyright Protection in Generative AI: A Technical Perspective","created":"2024-02-04","cited_by_count":38,"area":null},{"id":"2304.07361","title":"PTW: Pivotal Tuning Watermarking for Pre-Trained Image Generators","created":"2023-04-14","cited_by_count":37,"area":"safety"},{"id":"2305.12502","title":"Watermarking Diffusion Model","created":"2023-05-21","cited_by_count":37,"area":"diffusion"},{"id":"2105.07381","title":"Undistillable: Making A Nasty Teacher That CANNOT teach students","created":"2021-05-16","cited_by_count":36,"area":"distill"},{"id":"2109.13236","title":"FedIPR: Ownership Verification for Federated Deep Neural Network Models","created":"2021-09-27","cited_by_count":36,"area":"safety"},{"id":"2103.02683","title":"Preventing Unauthorized Use of Proprietary Data: Poisoning for Secure Dataset Release","created":"2021-02-16","cited_by_count":35,"area":null},{"id":"2305.18339","title":"A Survey on ChatGPT: AI-Generated Contents, Challenges, and Solutions","created":"2023-05-25","cited_by_count":35,"area":null},{"id":"2312.04828","title":"HuRef: HUman-REadable Fingerprint for Large Language Models","created":"2023-12-08","cited_by_count":34,"area":null},{"id":"2106.08890","title":"ModelDiff: Testing-Based DNN Similarity Comparison for Model Reuse Detection","created":"2021-06-11","cited_by_count":33,"area":null},{"id":"2210.03312","title":"Distillation-Resistant Watermarking for Model Protection in NLP","created":"2022-10-07","cited_by_count":30,"area":"safety"},{"id":"2211.07160","title":"FedTracker: Furnishing Ownership Verification and Traceability for Federated Learning Model","created":"2022-11-14","cited_by_count":30,"area":"safety"},{"id":"2201.11006","title":"An Overview of Compressible and Learnable Image Transformation with Secret Key and Its Applications","created":"2022-01-26","cited_by_count":29,"area":null},{"id":"2408.05868","title":"LaWa: Using Latent Space for In-Generation Image Watermarking","created":"2024-08-11","cited_by_count":28,"area":"safety"},{"id":"2110.11024","title":"Watermarking Graph Neural Networks based on Backdoor Attacks","created":"2021-10-21","cited_by_count":25,"area":null},{"id":"2409.00089","title":"Watermarking Techniques for Large Language Models: A Survey","created":"2024-08-26","cited_by_count":23,"area":"safety"},{"id":"2210.15427","title":"Are You Stealing My Model? Sample Correlation for Fingerprinting Deep Neural Networks","created":"2022-10-21","cited_by_count":21,"area":null},{"id":"2303.09732","title":"Rethinking White-Box Watermarks on Deep Learning Models under Neural Structural Obfuscation","created":"2023-03-17","cited_by_count":20,"area":"safety"},{"id":"2502.12176","title":"Ten Challenging Problems in Federated Foundation Models","created":"2025-02-14","cited_by_count":20,"area":"safety"},{"id":"2508.11548","title":"Copyright Protection for Large Language Models: A Survey of Methods, Challenges, and Trends","created":"2025-08-15","cited_by_count":20,"area":"safety"},{"id":"2306.03436","title":"Intellectual Property Protection of Diffusion Models via the Watermark Diffusion Process","created":"2023-06-06","cited_by_count":19,"area":"diffusion"},{"id":"2111.00162","title":"You are caught stealing my winning lottery ticket! Making a lottery ticket claim its ownership","created":"2021-10-30","cited_by_count":18,"area":null},{"id":"2104.04268","title":"Reversible Watermarking in Deep Convolutional Neural Networks for Integrity Authentication","created":"2021-04-09","cited_by_count":17,"area":null},{"id":"2211.07138","title":"Watermarking in Secure Federated Learning: A Verification Framework Based on Client-Side Backdooring","created":"2022-11-14","cited_by_count":17,"area":null},{"id":"2304.06607","title":"False Claims against Model Ownership Resolution","created":"2023-04-13","cited_by_count":17,"area":null},{"id":"2401.15239","title":"MEA-Defender: A Robust Watermark against Model Extraction Attack","created":"2024-01-26","cited_by_count":17,"area":"safety"},{"id":"2304.08566","title":"GrOVe: Ownership Verification of Graph Neural Networks using Embeddings","created":"2023-04-17","cited_by_count":16,"area":null},{"id":"2405.02466","title":"ProFLingo: A Fingerprinting-based Intellectual Property Protection Scheme for Large Language Models","created":"2024-05-03","cited_by_count":16,"area":null},{"id":"2105.14756","title":"A Protection Method of Trained CNN Model with Secret Key from Unauthorized Access","created":"2021-05-31","cited_by_count":15,"area":null},{"id":"2310.11446","title":"Functional Invariants to Watermark Large Transformers","created":"2023-10-17","cited_by_count":15,"area":null},{"id":"2204.04513","title":"On the Exploitation of Deepfake Model Recognition","created":"2022-04-09","cited_by_count":14,"area":null},{"id":"2407.10886","title":"SLIP: Securing LLMs IP Using Weights Decomposition","created":"2024-07-15","cited_by_count":14,"area":null},{"id":"2105.13697","title":"AdvParams: An Active DNN Intellectual Property Protection Technique via Adversarial Perturbation Based Parameter Encryption","created":"2021-05-28","cited_by_count":13,"area":"safety"},{"id":"2203.02777","title":"Cosine Model Watermarking Against Ensemble Distillation","created":"2022-03-05","cited_by_count":13,"area":"safety"},{"id":"2202.12506","title":"On the Effectiveness of Dataset Watermarking in Adversarial Settings","created":"2022-02-25","cited_by_count":12,"area":null},{"id":"2207.01991","title":"Conflicting Interactions Among Protection Mechanisms for Machine Learning Models","created":"2022-07-05","cited_by_count":12,"area":null},{"id":"2207.05366","title":"Image and Model Transformation with Secret Key for Vision Transformer","created":"2022-07-12","cited_by_count":12,"area":null},{"id":"2304.11285","title":"Identifying Appropriate Intellectual Property Protection Mechanisms for Machine Learning Models: A Systematization of Watermarking, Fingerprinting, Model Access, and Attacks","created":"2023-04-22","cited_by_count":12,"area":"safety"},{"id":"2306.01356","title":"FedCIP: Federated Client Intellectual Property Protection with Traitor Tracking","created":"2023-06-02","cited_by_count":12,"area":"safety"},{"id":"2403.01472","title":"WARDEN: Multi-Directional Backdoor Watermarks for Embedding-as-a-Service Copyright Protection","created":"2024-03-03","cited_by_count":12,"area":null},{"id":"2407.13188","title":"Safe-SD: Safe and Traceable Stable Diffusion with Text Prompt Trigger for Invisible Generative Watermarking","created":"2024-07-18","cited_by_count":12,"area":"diffusion"},{"id":"2201.08217","title":"Watermarking Pre-trained Encoders in Contrastive Learning","created":"2022-01-20","cited_by_count":11,"area":null},{"id":"2311.05863","title":"Watermarking Vision-Language Pre-trained Models for Multi-modal Embedding as a Service","created":"2023-11-10","cited_by_count":11,"area":"mllm"},{"id":"2104.04241","title":"Piracy-Resistant DNN Watermarking by Block-Wise Image Transformation with Secret Key","created":"2021-04-09","cited_by_count":10,"area":null},{"id":"2307.15860","title":"What can Discriminator do? Towards Box-free Ownership Verification of Generative Adversarial Network","created":"2023-07-29","cited_by_count":10,"area":null},{"id":"2309.04777","title":"Towards Robust Model Watermark via Reducing Parametric Vulnerability","created":"2023-09-09","cited_by_count":10,"area":"safety"},{"id":"2312.03205","title":"Who Leaked the Model? Tracking IP Infringers in Accountable Federated Learning","created":"2023-12-06","cited_by_count":10,"area":"safety"},{"id":"2501.15509","title":"FIT-Print: Towards False-claim-resistant Model Ownership Verification via Targeted Fingerprint","created":"2025-01-26","cited_by_count":10,"area":null},{"id":"2209.03563","title":"SSL-WM: A Black-Box Watermarking Approach for Encoders Pre-trained by Self-supervised Learning","created":"2022-09-08","cited_by_count":9,"area":null},{"id":"2305.04507","title":"FedZKP: Federated Model Ownership Verification with Zero-knowledge Proof","created":"2023-05-08","cited_by_count":9,"area":null},{"id":"2311.16065","title":"A Survey on Vulnerability of Federated Learning: A Learning Algorithm Perspective","created":"2023-11-27","cited_by_count":9,"area":null},{"id":"2404.13518","title":"Reliable Model Watermarking: Defending Against Theft without Compromising on Evasion","created":"2024-04-21","cited_by_count":9,"area":"safety"},{"id":"2406.11129","title":"Neural Lineage","created":"2024-06-17","cited_by_count":9,"area":null},{"id":"2210.13631","title":"On the Robustness of Dataset Inference","created":"2022-10-24","cited_by_count":8,"area":null},{"id":"2303.10399","title":"FedRight: An Effective Model Copyright Protection for Federated Learning","created":"2023-03-18","cited_by_count":8,"area":null},{"id":"2310.08571","title":"Bucks for Buckets (B4B): Active Defenses Against Stealing Encoders","created":"2023-10-12","cited_by_count":8,"area":null},{"id":"2403.18774","title":"RAW: A Robust and Agile Plug-and-Play Watermark Framework for AI-Generated Images with Provable Guarantees","created":"2024-01-23","cited_by_count":8,"area":"safety"},{"id":"2505.16530","title":"DuFFin: A Dual-Level Fingerprinting Framework for LLMs IP Protection","created":"2025-05-22","cited_by_count":8,"area":"safety"},{"id":"2308.03573","title":"When Federated Learning meets Watermarking: A Comprehensive Overview of Techniques for Intellectual Property Protection","created":"2023-08-07","cited_by_count":7,"area":null},{"id":"2103.05590","title":"Robust Black-box Watermarking for Deep NeuralNetwork using Inverse Document Frequency","created":"2021-03-09","cited_by_count":6,"area":null},{"id":"2106.08104","title":"Detect and remove watermark in deep neural networks via generative adversarial networks","created":"2021-06-15","cited_by_count":6,"area":"safety"},{"id":"2106.10147","title":"Evaluating the Robustness of Trigger Set-Based Watermarks Embedded in Deep Neural Networks","created":"2021-06-18","cited_by_count":6,"area":null},{"id":"2205.00199","title":"Cracking White-box DNN Watermarks via Invariant Neuron Transforms","created":"2022-04-30","cited_by_count":6,"area":null},{"id":"2205.04145","title":"Verifying Integrity of Deep Ensemble Models by Lossless Black-box Watermarking with Sensitive Samples","created":"2022-05-09","cited_by_count":6,"area":"safety"},{"id":"2306.09308","title":"Matching Pairs: Attributing Fine-Tuned Models to their Pre-Trained Large Language Models","created":"2023-06-15","cited_by_count":6,"area":null},{"id":"2309.06779","title":"ZKROWNN: Zero Knowledge Right of Ownership for Neural Networks","created":"2023-09-13","cited_by_count":6,"area":"safety"},{"id":"2405.09863","title":"Box-Free Model Watermarks Are Prone to Black-Box Removal Attacks","created":"2024-05-16","cited_by_count":6,"area":"safety"},{"id":"2405.16285","title":"ModelLock: Locking Your Model With a Spell","created":"2024-05-25","cited_by_count":6,"area":null},{"id":"2411.17461","title":"SoK: Blockchain-Based Decentralized AI (DeAI)","created":"2024-11-26","cited_by_count":6,"area":null},{"id":"2504.14871","title":"Natural Fingerprints of Large Language Models","created":"2025-04-21","cited_by_count":6,"area":null},{"id":"2511.18772","title":"Re-Key-Free, Risky-Free: Adaptable Model Usage Control","created":"2025-11-24","cited_by_count":6,"area":null},{"id":"2104.09203","title":"Protecting the Intellectual Properties of Deep Neural Networks with an Additional Class and Steganographic Images","created":"2021-04-19","cited_by_count":5,"area":"safety"},{"id":"2112.14108","title":"Fostering the Robustness of White-Box Deep Neural Network Watermarks by Neuron Alignment","created":"2021-12-28","cited_by_count":5,"area":null},{"id":"2208.10973","title":"Robust and Large-Payload DNN Watermarking via Fixed, Distribution-Optimized, Weights","created":"2022-08-23","cited_by_count":5,"area":null},{"id":"2210.02257","title":"Hiding Images in Deep Probabilistic Models","created":"2022-10-05","cited_by_count":5,"area":null},{"id":"2309.11013","title":"ModelGiF: Gradient Fields for Model Functional Distance","created":"2023-09-20","cited_by_count":5,"area":null}],"next_cursor":"100"}