{"total":77,"rows":[{"id":"2104.10706","title":"Dataset Inference: Ownership Resolution in Machine Learning","created":"2021-04-21","cited_by_count":116,"area":"safety"},{"id":"2312.07913","title":"A Survey of Text Watermarking in the Era of Large Language Models","created":"2023-12-13","cited_by_count":112,"area":"safety"},{"id":"2106.08970","title":"Sleeper Agent: Scalable Hidden Trigger Backdoors for Neural Networks Trained from Scratch","created":"2021-06-16","cited_by_count":102,"area":"safety"},{"id":"2311.04378","title":"Watermarks in the Sand: Impossibility of Strong Watermarking for Generative Models","created":"2023-11-07","cited_by_count":87,"area":"safety"},{"id":"2112.02701","title":"Protecting Intellectual Property of Language Generation APIs with Lexical Watermark","created":"2021-12-05","cited_by_count":84,"area":"safety"},{"id":"2209.08773","title":"CATER: Intellectual Property Protection on Text Generation APIs via Conditional Watermarks","created":"2022-09-19","cited_by_count":76,"area":"safety"},{"id":"2210.00968","title":"Membership Inference Attacks Against Text-to-image Generation Models","created":"2022-10-03","cited_by_count":69,"area":"safety"},{"id":"2305.10036","title":"Are You Copying My Model? Protecting the Copyright of Large Language Models for EaaS via Backdoor Watermark","created":"2023-05-17","cited_by_count":67,"area":"safety"},{"id":"2103.04980","title":"Deep Model Intellectual Property Protection via Deep Watermarking","created":"2021-03-08","cited_by_count":54,"area":"safety"},{"id":"2106.06916","title":"Non-Transferable Learning: A New Approach for Model Ownership Verification and Applicability Authorization","created":"2021-06-13","cited_by_count":52,"area":"safety"},{"id":"2210.07543","title":"Watermarking Pre-trained Language Models with Backdooring","created":"2022-10-14","cited_by_count":50,"area":"safety"},{"id":"2112.05588","title":"Copy, Right? A Testing Framework for Copyright Protection of Deep Learning Models","created":"2021-12-10","cited_by_count":46,"area":"safety"},{"id":"2205.12709","title":"VeriFi: Towards Verifiable Federated Unlearning","created":"2022-05-25","cited_by_count":46,"area":"safety"},{"id":"2304.07361","title":"PTW: Pivotal Tuning Watermarking for Pre-Trained Image Generators","created":"2023-04-14","cited_by_count":37,"area":"safety"},{"id":"2109.13236","title":"FedIPR: Ownership Verification for Federated Deep Neural Network Models","created":"2021-09-27","cited_by_count":36,"area":"safety"},{"id":"2210.03312","title":"Distillation-Resistant Watermarking for Model Protection in NLP","created":"2022-10-07","cited_by_count":30,"area":"safety"},{"id":"2211.07160","title":"FedTracker: Furnishing Ownership Verification and Traceability for Federated Learning Model","created":"2022-11-14","cited_by_count":30,"area":"safety"},{"id":"2408.05868","title":"LaWa: Using Latent Space for In-Generation Image Watermarking","created":"2024-08-11","cited_by_count":28,"area":"safety"},{"id":"2409.00089","title":"Watermarking Techniques for Large Language Models: A Survey","created":"2024-08-26","cited_by_count":23,"area":"safety"},{"id":"2303.09732","title":"Rethinking White-Box Watermarks on Deep Learning Models under Neural Structural Obfuscation","created":"2023-03-17","cited_by_count":20,"area":"safety"},{"id":"2502.12176","title":"Ten Challenging Problems in Federated Foundation Models","created":"2025-02-14","cited_by_count":20,"area":"safety"},{"id":"2508.11548","title":"Copyright Protection for Large Language Models: A Survey of Methods, Challenges, and Trends","created":"2025-08-15","cited_by_count":20,"area":"safety"},{"id":"2401.15239","title":"MEA-Defender: A Robust Watermark against Model Extraction Attack","created":"2024-01-26","cited_by_count":17,"area":"safety"},{"id":"2105.13697","title":"AdvParams: An Active DNN Intellectual Property Protection Technique via Adversarial Perturbation Based Parameter Encryption","created":"2021-05-28","cited_by_count":13,"area":"safety"},{"id":"2203.02777","title":"Cosine Model Watermarking Against Ensemble Distillation","created":"2022-03-05","cited_by_count":13,"area":"safety"},{"id":"2304.11285","title":"Identifying Appropriate Intellectual Property Protection Mechanisms for Machine Learning Models: A Systematization of Watermarking, Fingerprinting, Model Access, and Attacks","created":"2023-04-22","cited_by_count":12,"area":"safety"},{"id":"2306.01356","title":"FedCIP: Federated Client Intellectual Property Protection with Traitor Tracking","created":"2023-06-02","cited_by_count":12,"area":"safety"},{"id":"2309.04777","title":"Towards Robust Model Watermark via Reducing Parametric Vulnerability","created":"2023-09-09","cited_by_count":10,"area":"safety"},{"id":"2312.03205","title":"Who Leaked the Model? Tracking IP Infringers in Accountable Federated Learning","created":"2023-12-06","cited_by_count":10,"area":"safety"},{"id":"2404.13518","title":"Reliable Model Watermarking: Defending Against Theft without Compromising on Evasion","created":"2024-04-21","cited_by_count":9,"area":"safety"},{"id":"2403.18774","title":"RAW: A Robust and Agile Plug-and-Play Watermark Framework for AI-Generated Images with Provable Guarantees","created":"2024-01-23","cited_by_count":8,"area":"safety"},{"id":"2505.16530","title":"DuFFin: A Dual-Level Fingerprinting Framework for LLMs IP Protection","created":"2025-05-22","cited_by_count":8,"area":"safety"},{"id":"2106.08104","title":"Detect and remove watermark in deep neural networks via generative adversarial networks","created":"2021-06-15","cited_by_count":6,"area":"safety"},{"id":"2205.04145","title":"Verifying Integrity of Deep Ensemble Models by Lossless Black-box Watermarking with Sensitive Samples","created":"2022-05-09","cited_by_count":6,"area":"safety"},{"id":"2309.06779","title":"ZKROWNN: Zero Knowledge Right of Ownership for Neural Networks","created":"2023-09-13","cited_by_count":6,"area":"safety"},{"id":"2405.09863","title":"Box-Free Model Watermarks Are Prone to Black-Box Removal Attacks","created":"2024-05-16","cited_by_count":6,"area":"safety"},{"id":"2104.09203","title":"Protecting the Intellectual Properties of Deep Neural Networks with an Additional Class and Steganographic Images","created":"2021-04-19","cited_by_count":5,"area":"safety"},{"id":"2207.13321","title":"DynaMarks: Defending Against Deep Learning Model Extraction Using Dynamic Watermarking","created":"2022-07-27","cited_by_count":4,"area":"safety"},{"id":"2402.19054","title":"RobWE: Robust Watermark Embedding for Personalized Federated Learning Model Ownership Protection","created":"2024-02-29","cited_by_count":4,"area":"safety"},{"id":"2102.03523","title":"Ownership Verification of DNN Architectures via Hardware Cache Side Channels","created":"2021-02-06","cited_by_count":3,"area":"safety"},{"id":"2212.11133","title":"Device-Bind Key-Storageless Hardware AI Model IP Protection: A PUF and Permute-Diffusion Encryption-Enabled Approach","created":"2022-12-21","cited_by_count":3,"area":"safety"},{"id":"2312.14260","title":"Elevating Defenses: Bridging Adversarial Training and Watermarking for Model Resilience","created":"2023-12-21","cited_by_count":3,"area":"safety"},{"id":"2405.16596","title":"Protect-Your-IP: Scalable Source-Tracing and Attribution against Personalized Generation","created":"2024-05-26","cited_by_count":3,"area":"safety"},{"id":"2103.03701","title":"Don't Forget to Sign the Gradients!","created":"2021-03-05","cited_by_count":2,"area":"safety"},{"id":"2108.09065","title":"Regulating Ownership Verification for Deep Neural Networks: Scenarios, Protocols, and Prospects","created":"2021-08-20","cited_by_count":2,"area":"safety"},{"id":"2206.02541","title":"PCPT and ACPT: Copyright Protection and Traceability Scheme for DNN Models","created":"2022-06-06","cited_by_count":2,"area":"safety"},{"id":"2209.04113","title":"Robust and Lossless Fingerprinting of Deep Neural Networks via Pooled Membership Inference","created":"2022-09-09","cited_by_count":2,"area":"safety"},{"id":"2210.07481","title":"InFIP: An Explainable DNN Intellectual Property Protection Method based on Intrinsic Features","created":"2022-10-14","cited_by_count":2,"area":"safety"},{"id":"2211.13535","title":"DeepTaster: Adversarial Perturbation-Based Fingerprinting to Identify Proprietary Dataset Use in Deep Neural Networks","created":"2022-11-24","cited_by_count":2,"area":"safety"},{"id":"2305.09684","title":"Decision-based iterative fragile watermarking for model integrity verification","created":"2023-05-13","cited_by_count":2,"area":"safety"},{"id":"2305.12391","title":"Generative Model Watermarking Suppressing High-Frequency Artifacts","created":"2023-05-21","cited_by_count":2,"area":"safety"},{"id":"2410.14102","title":"Beyond Dataset Watermarking: Model-Level Copyright Protection for Code Summarization Models","created":"2024-10-18","cited_by_count":2,"area":"safety"},{"id":"2503.23748","title":"THEMIS: Towards Practical Intellectual Property Protection for Post-Deployment On-Device Deep Learning Models","created":"2025-03-31","cited_by_count":2,"area":"safety"},{"id":"2602.23523","title":"All in One: Unifying Deepfake Detection, Tampering Localization, and Source Tracing with a Robust Landmark-Identity Watermark","created":"2026-02-26","cited_by_count":2,"area":"safety"},{"id":"2103.01527","title":"ActiveGuard: An Active DNN IP Protection Technique via Adversarial Examples","created":"2021-03-02","cited_by_count":1,"area":"safety"},{"id":"2108.02360","title":"Exploring Structure Consistency for Deep Model Watermarking","created":"2021-08-05","cited_by_count":1,"area":"safety"},{"id":"2110.09814","title":"Speech Pattern based Black-box Model Watermarking for Automatic Speech Recognition","created":"2021-10-19","cited_by_count":1,"area":"safety"},{"id":"2208.04676","title":"DeepHider: A Covert NLP Watermarking Framework Based on Multi-task Learning","created":"2022-08-09","cited_by_count":1,"area":"safety"},{"id":"2312.14182","title":"Find the Lady: Permutation and Re-Synchronization of Deep Neural Networks","created":"2023-12-19","cited_by_count":1,"area":"safety"},{"id":"2406.04809","title":"A Survey of Fragile Model Watermarking","created":"2024-06-07","cited_by_count":1,"area":"safety"},{"id":"2501.01194","title":"A Game Between the Defender and the Attacker for Trigger-based Black-box Model Watermarking","created":"2025-01-02","cited_by_count":1,"area":"safety"},{"id":"2505.19364","title":"RADEP: A Resilient Adaptive Defense Framework Against Model Extraction Attacks","created":"2025-05-25","cited_by_count":1,"area":"safety"},{"id":"2506.13494","title":"Watermarking LLM-Generated Datasets in Downstream Tasks","created":"2025-06-16","cited_by_count":1,"area":"safety"},{"id":"2507.08288","title":"Invariant-based Robust Weights Watermark for Large Language Models","created":"2025-07-11","cited_by_count":1,"area":"safety"},{"id":"2510.04966","title":"ActiveMark: on watermarking of visual foundation models via massive activations","created":"2025-10-06","cited_by_count":1,"area":"safety"},{"id":"2601.01296","title":"Aggressive Compression Enables LLM Weight Theft","created":"2026-01-03","cited_by_count":1,"area":"safety"},{"id":"2207.04668","title":"A Secure Fingerprinting Framework for Distributed Image Classification","created":"2022-07-11","cited_by_count":0,"area":"safety"},{"id":"2301.12333","title":"Deep Learning model integrity checking mechanism using watermarking technique","created":"2023-01-29","cited_by_count":0,"area":"safety"},{"id":"2310.16453","title":"ClearMark: Intuitive and Robust Model Watermarking via Transposed Model Training","created":"2023-10-25","cited_by_count":0,"area":"safety"},{"id":"2409.10570","title":"Protecting Copyright of Medical Pre-trained Language Models: Training-Free Backdoor Model Watermarking","created":"2024-09-14","cited_by_count":0,"area":"safety"},{"id":"2409.19442","title":"Trigger-Based Fragile Model Watermarking for Image Transformation Networks","created":"2024-09-28","cited_by_count":0,"area":"safety"},{"id":"2411.13047","title":"Bounding-box Watermarking: Defense against Model Extraction Attacks on Object Detectors","created":"2024-11-20","cited_by_count":0,"area":"safety"},{"id":"2507.20650","title":"Hot-Swap MarkBoard: An Efficient Black-box Watermarking Approach for Large-scale Model Distribution","created":"2025-07-28","cited_by_count":0,"area":"safety"},{"id":"2510.16706","title":"Rotation, Scale, and Translation Resilient Black-box Fingerprinting for Intellectual Property Protection of EaaS Models","created":"2025-10-19","cited_by_count":0,"area":"safety"},{"id":"2603.10695","title":"RandMark: On Random Watermarking of Visual Foundation Models","created":"2026-03-11","cited_by_count":0,"area":"safety"},{"id":"2606.11698","title":"T2S: A Rehearsal-Based Approach for Extraction-Resistant Model Watermarking","created":"2026-06-10","cited_by_count":0,"area":"safety"},{"id":"2607.25222","title":"Ciphertext-Native Watermarking for RLWE-Based Homomorphic Encryption","created":"2026-07-28","cited_by_count":0,"area":"safety"}],"next_cursor":null}