{"total":77,"rows":[{"id":"2108.04974","title":"SoK: How Robust is Image Classification Deep Neural Network Watermarking? (Extended Version)","created":"2021-08-11","cited_by_count":69,"area":null},{"id":"2202.08602","title":"Fingerprinting Deep Neural Networks Globally via Universal Adversarial Perturbations","created":"2022-02-17","cited_by_count":61,"area":null},{"id":"2102.04362","title":"Protecting Intellectual Property of Generative Adversarial Networks from Ambiguity Attack","created":"2021-02-08","cited_by_count":46,"area":null},{"id":"2201.11692","title":"SSLGuard: A Watermarking Scheme for Self-supervised Learning Pre-trained Encoders","created":"2022-01-27","cited_by_count":45,"area":null},{"id":"2312.04828","title":"HuRef: HUman-REadable Fingerprint for Large Language Models","created":"2023-12-08","cited_by_count":34,"area":null},{"id":"2201.11006","title":"An Overview of Compressible and Learnable Image Transformation with Secret Key and Its Applications","created":"2022-01-26","cited_by_count":29,"area":null},{"id":"2111.00162","title":"You are caught stealing my winning lottery ticket! Making a lottery ticket claim its ownership","created":"2021-10-30","cited_by_count":18,"area":null},{"id":"2211.07138","title":"Watermarking in Secure Federated Learning: A Verification Framework Based on Client-Side Backdooring","created":"2022-11-14","cited_by_count":17,"area":null},{"id":"2304.06607","title":"False Claims against Model Ownership Resolution","created":"2023-04-13","cited_by_count":17,"area":null},{"id":"2106.12478","title":"Teacher Model Fingerprinting Attacks Against Transfer Learning","created":"2021-06-23","cited_by_count":16,"area":null},{"id":"2304.08566","title":"GrOVe: Ownership Verification of Graph Neural Networks using Embeddings","created":"2023-04-17","cited_by_count":16,"area":null},{"id":"2405.02466","title":"ProFLingo: A Fingerprinting-based Intellectual Property Protection Scheme for Large Language Models","created":"2024-05-03","cited_by_count":16,"area":null},{"id":"2105.14756","title":"A Protection Method of Trained CNN Model with Secret Key from Unauthorized Access","created":"2021-05-31","cited_by_count":15,"area":null},{"id":"2303.11078","title":"Model Barrier: A Compact Un-Transferable Isolation Domain for Model Intellectual Property Protection","created":"2023-03-20","cited_by_count":14,"area":null},{"id":"2207.05366","title":"Image and Model Transformation with Secret Key for Vision Transformer","created":"2022-07-12","cited_by_count":12,"area":null},{"id":"2201.08217","title":"Watermarking Pre-trained Encoders in Contrastive Learning","created":"2022-01-20","cited_by_count":11,"area":null},{"id":"2104.04241","title":"Piracy-Resistant DNN Watermarking by Block-Wise Image Transformation with Secret Key","created":"2021-04-09","cited_by_count":10,"area":null},{"id":"2307.15860","title":"What can Discriminator do? Towards Box-free Ownership Verification of Generative Adversarial Network","created":"2023-07-29","cited_by_count":10,"area":null},{"id":"2310.16919","title":"Wide Flat Minimum Watermarking for Robust Ownership Verification of GANs","created":"2023-10-25","cited_by_count":10,"area":null},{"id":"2404.14016","title":"Ungeneralizable Examples","created":"2024-04-22","cited_by_count":9,"area":null},{"id":"2308.03573","title":"When Federated Learning meets Watermarking: A Comprehensive Overview of Techniques for Intellectual Property Protection","created":"2023-08-07","cited_by_count":7,"area":null},{"id":"2401.08261","title":"Probabilistically Robust Watermarking of Neural Networks","created":"2024-01-16","cited_by_count":7,"area":null},{"id":"2408.13161","title":"Say No to Freeloader: Protecting Intellectual Property of Your Deep Model","created":"2024-08-23","cited_by_count":7,"area":null},{"id":"2103.05590","title":"Robust Black-box Watermarking for Deep NeuralNetwork using Inverse Document Frequency","created":"2021-03-09","cited_by_count":6,"area":null},{"id":"2106.10147","title":"Evaluating the Robustness of Trigger Set-Based Watermarks Embedded in Deep Neural Networks","created":"2021-06-18","cited_by_count":6,"area":null},{"id":"2306.09308","title":"Matching Pairs: Attributing Fine-Tuned Models to their Pre-Trained Large Language Models","created":"2023-06-15","cited_by_count":6,"area":null},{"id":"2112.14108","title":"Fostering the Robustness of White-Box Deep Neural Network Watermarks by Neuron Alignment","created":"2021-12-28","cited_by_count":5,"area":null},{"id":"2203.10902","title":"PublicCheck: Public Integrity Verification for Services of Run-time Deep Models","created":"2022-03-21","cited_by_count":5,"area":null},{"id":"2403.03590","title":"DeepEclipse: How to Break White-Box DNN-Watermarking Schemes","created":"2024-03-06","cited_by_count":5,"area":null},{"id":"2101.04319","title":"DeepiSign: Invisible Fragile Watermark to Protect the Integrityand Authenticity of CNN","created":"2021-01-12","cited_by_count":4,"area":null},{"id":"2103.13628","title":"HufuNet: Embedding the Left Piece as Watermark and Keeping the Right Piece for Ownership Verification in Deep Neural Networks","created":"2021-03-25","cited_by_count":4,"area":null},{"id":"2109.00224","title":"A Protection Method of Trained CNN Model Using Feature Maps Transformed With Secret Key From Unauthorized Access","created":"2021-09-01","cited_by_count":4,"area":null},{"id":"2109.01332","title":"Access Control Using Spatially Invariant Permutation of Feature Maps for Semantic Segmentation Models","created":"2021-09-03","cited_by_count":4,"area":null},{"id":"2208.03948","title":"AWEncoder: Adversarial Watermarking Pre-trained Encoders in Contrastive Learning","created":"2022-08-08","cited_by_count":4,"area":null},{"id":"2106.07303","title":"iNNformant: Boundary Samples as Telltale Watermarks","created":"2021-06-14","cited_by_count":3,"area":null},{"id":"2201.06093","title":"Adversarial Machine Learning Threat Analysis and Remediation in Open Radio Access Network (O-RAN)","created":"2022-01-16","cited_by_count":3,"area":null},{"id":"2201.08786","title":"FedComm: Federated Learning as a Medium for Covert Communication","created":"2022-01-21","cited_by_count":3,"area":null},{"id":"2202.06091","title":"TATTOOED: A Robust Deep Neural Network Watermarking Scheme based on Spread-Spectrum Channel Coding","created":"2022-02-12","cited_by_count":3,"area":null},{"id":"2206.05422","title":"Access Control of Semantic Segmentation Models Using Encrypted Feature Maps","created":"2022-06-11","cited_by_count":3,"area":null},{"id":"2206.11024","title":"ROSE: A RObust and SEcure DNN Watermarking","created":"2022-06-22","cited_by_count":3,"area":null},{"id":"2212.02814","title":"Mixer: DNN Watermarking using Image Mixup","created":"2022-12-06","cited_by_count":3,"area":null},{"id":"2309.01786","title":"Safe and Robust Watermark Injection with a Single OoD Image","created":"2023-09-04","cited_by_count":3,"area":null},{"id":"2312.12049","title":"EncryIP: A Practical Encryption-Based Framework for Model Intellectual Property Protection","created":"2023-12-19","cited_by_count":3,"area":null},{"id":"2402.12720","title":"Revisiting the Information Capacity of Neural Network Watermarks: Upper Bound Estimation and Beyond","created":"2024-02-20","cited_by_count":3,"area":null},{"id":"2501.05614","title":"Watermarking Graph Neural Networks via Explanations for Ownership Protection","created":"2025-01-09","cited_by_count":3,"area":null},{"id":"2510.06738","title":"AWM: Accurate Weight-Matrix Fingerprint for Large Language Models","created":"2025-10-08","cited_by_count":3,"area":null},{"id":"2309.03466","title":"Neural Dehydration: Effective Erasure of Black-box Watermarks from DNNs with Limited Data","created":"2023-09-07","cited_by_count":2,"area":null},{"id":"2405.04049","title":"Watermarking Neuromorphic Brains: Intellectual Property Protection in Spiking Neural Networks","created":"2024-05-07","cited_by_count":2,"area":null},{"id":"2409.10338","title":"The 20 questions game to distinguish large language models","created":"2024-09-16","cited_by_count":2,"area":null},{"id":"2409.16491","title":"Proactive Schemes: A Survey of Adversarial Attacks for Social Good","created":"2024-09-24","cited_by_count":2,"area":null},{"id":"2410.00059","title":"IDEA: An Inverse Domain Expert Adaptation Based Active DNN IP Protection Method","created":"2024-09-29","cited_by_count":2,"area":null},{"id":"2501.02704","title":"Persistence of Backdoor-based Watermarks for Neural Networks: A Comprehensive Evaluation","created":"2025-01-06","cited_by_count":2,"area":null},{"id":"2507.11137","title":"Hashed Watermark as a Filter: Defeating Forging and Overwriting Attacks in Weight-based Neural Network Watermarking","created":"2025-07-15","cited_by_count":2,"area":null},{"id":"2103.03525","title":"Transfer Learning-Based Model Protection With Secret Key","created":"2021-03-05","cited_by_count":1,"area":null},{"id":"2105.07078","title":"High-Robustness, Low-Transferability Fingerprinting of Neural Networks","created":"2021-05-14","cited_by_count":1,"area":null},{"id":"2106.11760","title":"Fingerprinting Image-to-Image Generative Adversarial Networks","created":"2021-06-19","cited_by_count":1,"area":null},{"id":"2208.03169","title":"FBI: Fingerprinting models with Benign Inputs","created":"2022-08-05","cited_by_count":1,"area":null},{"id":"2209.14831","title":"Access Control with Encrypted Feature Maps for Object Detection Models","created":"2022-09-29","cited_by_count":1,"area":null},{"id":"2210.00743","title":"An Embarrassingly Simple Approach for Intellectual Property Rights Protection on Recurrent Neural Networks","created":"2022-10-03","cited_by_count":1,"area":null},{"id":"2302.10296","title":"On Function-Coupled Watermarks for Deep Neural Networks","created":"2023-02-08","cited_by_count":1,"area":null},{"id":"2502.05931","title":"Protecting Intellectual Property of EEG-based Neural Networks with Watermarking","created":"2025-02-09","cited_by_count":1,"area":null},{"id":"2505.04977","title":"ChainMarks: Securing DNN Watermark with Cryptographic Chain","created":"2025-05-08","cited_by_count":1,"area":null},{"id":"2507.22000","title":"Staining and locking computer vision models without retraining","created":"2025-07-29","cited_by_count":1,"area":null},{"id":"2608.08195","title":"Targeted Counterfactual Fingerprinting for Black-Box LLM Ownership Verification","created":"2026-08-08","cited_by_count":1,"area":null},{"id":"2103.08472","title":"Automatically Lock Your Neural Networks When You're Away","created":"2021-03-15","cited_by_count":0,"area":null},{"id":"2202.06250","title":"Privacy protection based on mask template","created":"2022-02-13","cited_by_count":0,"area":null},{"id":"2306.13215","title":"OVLA: Neural Network Ownership Verification using Latent Watermarks","created":"2023-06-15","cited_by_count":0,"area":null},{"id":"2307.08811","title":"Co(ve)rtex: ML Models as storage channels and their (mis-)applications","created":"2023-07-17","cited_by_count":0,"area":null},{"id":"2310.04145","title":"From Zero to Hero: Detecting Leaked Data through Synthetic Data Injection and Model Querying","created":"2023-10-06","cited_by_count":0,"area":null},{"id":"2312.05262","title":"Model Copyright Protection in Buyer-seller Environment","created":"2023-12-05","cited_by_count":0,"area":null},{"id":"2403.10476","title":"Approximate Nullspace Augmented Finetuning for Robust Vision Transformers","created":"2024-03-15","cited_by_count":0,"area":null},{"id":"2407.21034","title":"Watermarking Recommender Systems","created":"2024-07-17","cited_by_count":0,"area":null},{"id":"2510.25934","title":"Robust GNN Watermarking via Implicit Perception of Topological Invariants","created":"2025-10-29","cited_by_count":0,"area":null},{"id":"2608.02656","title":"Secure AI Watermarking Framework for IP Protection in Multi-Tenant Cloud Platforms","created":"2026-08-01","cited_by_count":0,"area":null},{"id":"2608.14929","title":"Training Leaves Traces: Centered Residual Signatures for Language Model Lineage Verification","created":"2026-08-14","cited_by_count":0,"area":null},{"id":"2609.29233","title":"Post-Training Leaves Behavioral Shadows on Unrelated Decisions","created":"2026-09-24","cited_by_count":0,"area":null},{"id":"2609.29264","title":"TP-CRIV: A Framework for Third-Party Challenge-Response Identity Verification of AI Models","created":"2026-09-24","cited_by_count":0,"area":null}],"next_cursor":null}