{"total":118,"rows":[{"id":"2303.10137","title":"A Recipe for Watermarking Diffusion Models","created":"2023-03-17","cited_by_count":141,"area":"diffusion"},{"id":"2302.03162","title":"Protecting Language Generation Models via Invisible Watermarking","created":"2023-02-06","cited_by_count":90,"area":"safety"},{"id":"2112.02701","title":"Protecting Intellectual Property of Language Generation APIs with Lexical Watermark","created":"2021-12-05","cited_by_count":84,"area":"safety"},{"id":"2108.04974","title":"SoK: How Robust is Image Classification Deep Neural Network Watermarking? (Extended Version)","created":"2021-08-11","cited_by_count":69,"area":null},{"id":"2305.10036","title":"Are You Copying My Model? Protecting the Copyright of Large Language Models for EaaS via Backdoor Watermark","created":"2023-05-17","cited_by_count":67,"area":"safety"},{"id":"2202.08602","title":"Fingerprinting Deep Neural Networks Globally via Universal Adversarial Perturbations","created":"2022-02-17","cited_by_count":61,"area":null},{"id":"2103.04980","title":"Deep Model Intellectual Property Protection via Deep Watermarking","created":"2021-03-08","cited_by_count":54,"area":"safety"},{"id":"2106.06916","title":"Non-Transferable Learning: A New Approach for Model Ownership Verification and Applicability Authorization","created":"2021-06-13","cited_by_count":52,"area":"safety"},{"id":"2210.07543","title":"Watermarking Pre-trained Language Models with Backdooring","created":"2022-10-14","cited_by_count":50,"area":"safety"},{"id":"2102.04362","title":"Protecting Intellectual Property of Generative Adversarial Networks from Ambiguity Attack","created":"2021-02-08","cited_by_count":46,"area":null},{"id":"2112.05588","title":"Copy, Right? A Testing Framework for Copyright Protection of Deep Learning Models","created":"2021-12-10","cited_by_count":46,"area":"safety"},{"id":"2201.11692","title":"SSLGuard: A Watermarking Scheme for Self-supervised Learning Pre-trained Encoders","created":"2022-01-27","cited_by_count":45,"area":null},{"id":"2305.12502","title":"Watermarking Diffusion Model","created":"2023-05-21","cited_by_count":37,"area":"diffusion"},{"id":"2312.04828","title":"HuRef: HUman-REadable Fingerprint for Large Language Models","created":"2023-12-08","cited_by_count":34,"area":null},{"id":"2210.03312","title":"Distillation-Resistant Watermarking for Model Protection in NLP","created":"2022-10-07","cited_by_count":30,"area":"safety"},{"id":"2201.11006","title":"An Overview of Compressible and Learnable Image Transformation with Secret Key and Its Applications","created":"2022-01-26","cited_by_count":29,"area":null},{"id":"2409.00089","title":"Watermarking Techniques for Large Language Models: A Survey","created":"2024-08-26","cited_by_count":23,"area":"safety"},{"id":"2306.03436","title":"Intellectual Property Protection of Diffusion Models via the Watermark Diffusion Process","created":"2023-06-06","cited_by_count":19,"area":"diffusion"},{"id":"2111.00162","title":"You are caught stealing my winning lottery ticket! Making a lottery ticket claim its ownership","created":"2021-10-30","cited_by_count":18,"area":null},{"id":"2211.07138","title":"Watermarking in Secure Federated Learning: A Verification Framework Based on Client-Side Backdooring","created":"2022-11-14","cited_by_count":17,"area":null},{"id":"2304.06607","title":"False Claims against Model Ownership Resolution","created":"2023-04-13","cited_by_count":17,"area":null},{"id":"2106.12478","title":"Teacher Model Fingerprinting Attacks Against Transfer Learning","created":"2021-06-23","cited_by_count":16,"area":null},{"id":"2304.08566","title":"GrOVe: Ownership Verification of Graph Neural Networks using Embeddings","created":"2023-04-17","cited_by_count":16,"area":null},{"id":"2405.02466","title":"ProFLingo: A Fingerprinting-based Intellectual Property Protection Scheme for Large Language Models","created":"2024-05-03","cited_by_count":16,"area":null},{"id":"2105.14756","title":"A Protection Method of Trained CNN Model with Secret Key from Unauthorized Access","created":"2021-05-31","cited_by_count":15,"area":null},{"id":"2303.11078","title":"Model Barrier: A Compact Un-Transferable Isolation Domain for Model Intellectual Property Protection","created":"2023-03-20","cited_by_count":14,"area":null},{"id":"2105.13697","title":"AdvParams: An Active DNN Intellectual Property Protection Technique via Adversarial Perturbation Based Parameter Encryption","created":"2021-05-28","cited_by_count":13,"area":"safety"},{"id":"2203.02777","title":"Cosine Model Watermarking Against Ensemble Distillation","created":"2022-03-05","cited_by_count":13,"area":"safety"},{"id":"2207.05366","title":"Image and Model Transformation with Secret Key for Vision Transformer","created":"2022-07-12","cited_by_count":12,"area":null},{"id":"2304.11285","title":"Identifying Appropriate Intellectual Property Protection Mechanisms for Machine Learning Models: A Systematization of Watermarking, Fingerprinting, Model Access, and Attacks","created":"2023-04-22","cited_by_count":12,"area":"safety"},{"id":"2201.08217","title":"Watermarking Pre-trained Encoders in Contrastive Learning","created":"2022-01-20","cited_by_count":11,"area":null},{"id":"2311.05863","title":"Watermarking Vision-Language Pre-trained Models for Multi-modal Embedding as a Service","created":"2023-11-10","cited_by_count":11,"area":"mllm"},{"id":"2104.04241","title":"Piracy-Resistant DNN Watermarking by Block-Wise Image Transformation with Secret Key","created":"2021-04-09","cited_by_count":10,"area":null},{"id":"2307.15860","title":"What can Discriminator do? Towards Box-free Ownership Verification of Generative Adversarial Network","created":"2023-07-29","cited_by_count":10,"area":null},{"id":"2309.04777","title":"Towards Robust Model Watermark via Reducing Parametric Vulnerability","created":"2023-09-09","cited_by_count":10,"area":"safety"},{"id":"2310.16919","title":"Wide Flat Minimum Watermarking for Robust Ownership Verification of GANs","created":"2023-10-25","cited_by_count":10,"area":null},{"id":"2312.03205","title":"Who Leaked the Model? Tracking IP Infringers in Accountable Federated Learning","created":"2023-12-06","cited_by_count":10,"area":"safety"},{"id":"2112.03695","title":"Safe Distillation Box","created":"2021-12-05","cited_by_count":9,"area":"distill"},{"id":"2404.14016","title":"Ungeneralizable Examples","created":"2024-04-22","cited_by_count":9,"area":null},{"id":"2403.18774","title":"RAW: A Robust and Agile Plug-and-Play Watermark Framework for AI-Generated Images with Provable Guarantees","created":"2024-01-23","cited_by_count":8,"area":"safety"},{"id":"2308.03573","title":"When Federated Learning meets Watermarking: A Comprehensive Overview of Techniques for Intellectual Property Protection","created":"2023-08-07","cited_by_count":7,"area":null},{"id":"2401.08261","title":"Probabilistically Robust Watermarking of Neural Networks","created":"2024-01-16","cited_by_count":7,"area":null},{"id":"2408.13161","title":"Say No to Freeloader: Protecting Intellectual Property of Your Deep Model","created":"2024-08-23","cited_by_count":7,"area":null},{"id":"2103.05590","title":"Robust Black-box Watermarking for Deep NeuralNetwork using Inverse Document Frequency","created":"2021-03-09","cited_by_count":6,"area":null},{"id":"2106.08104","title":"Detect and remove watermark in deep neural networks via generative adversarial networks","created":"2021-06-15","cited_by_count":6,"area":"safety"},{"id":"2106.10147","title":"Evaluating the Robustness of Trigger Set-Based Watermarks Embedded in Deep Neural Networks","created":"2021-06-18","cited_by_count":6,"area":null},{"id":"2306.09308","title":"Matching Pairs: Attributing Fine-Tuned Models to their Pre-Trained Large Language Models","created":"2023-06-15","cited_by_count":6,"area":null},{"id":"2405.09863","title":"Box-Free Model Watermarks Are Prone to Black-Box Removal Attacks","created":"2024-05-16","cited_by_count":6,"area":"safety"},{"id":"2104.09203","title":"Protecting the Intellectual Properties of Deep Neural Networks with an Additional Class and Steganographic Images","created":"2021-04-19","cited_by_count":5,"area":"safety"},{"id":"2112.14108","title":"Fostering the Robustness of White-Box Deep Neural Network Watermarks by Neuron Alignment","created":"2021-12-28","cited_by_count":5,"area":null},{"id":"2203.10902","title":"PublicCheck: Public Integrity Verification for Services of Run-time Deep Models","created":"2022-03-21","cited_by_count":5,"area":null},{"id":"2403.03590","title":"DeepEclipse: How to Break White-Box DNN-Watermarking Schemes","created":"2024-03-06","cited_by_count":5,"area":null},{"id":"2101.04319","title":"DeepiSign: Invisible Fragile Watermark to Protect the Integrityand Authenticity of CNN","created":"2021-01-12","cited_by_count":4,"area":null},{"id":"2103.13628","title":"HufuNet: Embedding the Left Piece as Watermark and Keeping the Right Piece for Ownership Verification in Deep Neural Networks","created":"2021-03-25","cited_by_count":4,"area":null},{"id":"2109.00224","title":"A Protection Method of Trained CNN Model Using Feature Maps Transformed With Secret Key From Unauthorized Access","created":"2021-09-01","cited_by_count":4,"area":null},{"id":"2109.01332","title":"Access Control Using Spatially Invariant Permutation of Feature Maps for Semantic Segmentation Models","created":"2021-09-03","cited_by_count":4,"area":null},{"id":"2207.13321","title":"DynaMarks: Defending Against Deep Learning Model Extraction Using Dynamic Watermarking","created":"2022-07-27","cited_by_count":4,"area":"safety"},{"id":"2208.03948","title":"AWEncoder: Adversarial Watermarking Pre-trained Encoders in Contrastive Learning","created":"2022-08-08","cited_by_count":4,"area":null},{"id":"2102.03523","title":"Ownership Verification of DNN Architectures via Hardware Cache Side Channels","created":"2021-02-06","cited_by_count":3,"area":"safety"},{"id":"2106.07303","title":"iNNformant: Boundary Samples as Telltale Watermarks","created":"2021-06-14","cited_by_count":3,"area":null},{"id":"2201.06093","title":"Adversarial Machine Learning Threat Analysis and Remediation in Open Radio Access Network (O-RAN)","created":"2022-01-16","cited_by_count":3,"area":null},{"id":"2201.08786","title":"FedComm: Federated Learning as a Medium for Covert Communication","created":"2022-01-21","cited_by_count":3,"area":null},{"id":"2202.06091","title":"TATTOOED: A Robust Deep Neural Network Watermarking Scheme based on Spread-Spectrum Channel Coding","created":"2022-02-12","cited_by_count":3,"area":null},{"id":"2206.05422","title":"Access Control of Semantic Segmentation Models Using Encrypted Feature Maps","created":"2022-06-11","cited_by_count":3,"area":null},{"id":"2206.11024","title":"ROSE: A RObust and SEcure DNN Watermarking","created":"2022-06-22","cited_by_count":3,"area":null},{"id":"2212.02814","title":"Mixer: DNN Watermarking using Image Mixup","created":"2022-12-06","cited_by_count":3,"area":null},{"id":"2309.01786","title":"Safe and Robust Watermark Injection with a Single OoD Image","created":"2023-09-04","cited_by_count":3,"area":null},{"id":"2312.06488","title":"Performance-lossless Black-box Model Watermarking","created":"2023-12-11","cited_by_count":3,"area":"safety"},{"id":"2312.12049","title":"EncryIP: A Practical Encryption-Based Framework for Model Intellectual Property Protection","created":"2023-12-19","cited_by_count":3,"area":null},{"id":"2312.14260","title":"Elevating Defenses: Bridging Adversarial Training and Watermarking for Model Resilience","created":"2023-12-21","cited_by_count":3,"area":"safety"},{"id":"2402.12720","title":"Revisiting the Information Capacity of Neural Network Watermarks: Upper Bound Estimation and Beyond","created":"2024-02-20","cited_by_count":3,"area":null},{"id":"2501.05614","title":"Watermarking Graph Neural Networks via Explanations for Ownership Protection","created":"2025-01-09","cited_by_count":3,"area":null},{"id":"2503.02393","title":"Vision-Language Model IP Protection via Prompt-based Learning","created":"2025-03-04","cited_by_count":3,"area":"mllm"},{"id":"2510.06738","title":"AWM: Accurate Weight-Matrix Fingerprint for Large Language Models","created":"2025-10-08","cited_by_count":3,"area":null},{"id":"2103.03701","title":"Don't Forget to Sign the Gradients!","created":"2021-03-05","cited_by_count":2,"area":"safety"},{"id":"2210.07481","title":"InFIP: An Explainable DNN Intellectual Property Protection Method based on Intrinsic Features","created":"2022-10-14","cited_by_count":2,"area":"safety"},{"id":"2211.13535","title":"DeepTaster: Adversarial Perturbation-Based Fingerprinting to Identify Proprietary Dataset Use in Deep Neural Networks","created":"2022-11-24","cited_by_count":2,"area":"safety"},{"id":"2305.09684","title":"Decision-based iterative fragile watermarking for model integrity verification","created":"2023-05-13","cited_by_count":2,"area":"safety"},{"id":"2309.03466","title":"Neural Dehydration: Effective Erasure of Black-box Watermarks from DNNs with Limited Data","created":"2023-09-07","cited_by_count":2,"area":null},{"id":"2405.04049","title":"Watermarking Neuromorphic Brains: Intellectual Property Protection in Spiking Neural Networks","created":"2024-05-07","cited_by_count":2,"area":null},{"id":"2409.10338","title":"The 20 questions game to distinguish large language models","created":"2024-09-16","cited_by_count":2,"area":null},{"id":"2409.16491","title":"Proactive Schemes: A Survey of Adversarial Attacks for Social Good","created":"2024-09-24","cited_by_count":2,"area":null},{"id":"2410.00059","title":"IDEA: An Inverse Domain Expert Adaptation Based Active DNN IP Protection Method","created":"2024-09-29","cited_by_count":2,"area":null},{"id":"2501.02704","title":"Persistence of Backdoor-based Watermarks for Neural Networks: A Comprehensive Evaluation","created":"2025-01-06","cited_by_count":2,"area":null},{"id":"2507.11137","title":"Hashed Watermark as a Filter: Defeating Forging and Overwriting Attacks in Weight-based Neural Network Watermarking","created":"2025-07-15","cited_by_count":2,"area":null},{"id":"2103.01527","title":"ActiveGuard: An Active DNN IP Protection Technique via Adversarial Examples","created":"2021-03-02","cited_by_count":1,"area":"safety"},{"id":"2103.03525","title":"Transfer Learning-Based Model Protection With Secret Key","created":"2021-03-05","cited_by_count":1,"area":null},{"id":"2105.07078","title":"High-Robustness, Low-Transferability Fingerprinting of Neural Networks","created":"2021-05-14","cited_by_count":1,"area":null},{"id":"2106.11760","title":"Fingerprinting Image-to-Image Generative Adversarial Networks","created":"2021-06-19","cited_by_count":1,"area":null},{"id":"2110.09814","title":"Speech Pattern based Black-box Model Watermarking for Automatic Speech Recognition","created":"2021-10-19","cited_by_count":1,"area":"safety"},{"id":"2208.03169","title":"FBI: Fingerprinting models with Benign Inputs","created":"2022-08-05","cited_by_count":1,"area":null},{"id":"2209.14831","title":"Access Control with Encrypted Feature Maps for Object Detection Models","created":"2022-09-29","cited_by_count":1,"area":null},{"id":"2210.00743","title":"An Embarrassingly Simple Approach for Intellectual Property Rights Protection on Recurrent Neural Networks","created":"2022-10-03","cited_by_count":1,"area":null},{"id":"2302.10296","title":"On Function-Coupled Watermarks for Deep Neural Networks","created":"2023-02-08","cited_by_count":1,"area":null},{"id":"2403.05842","title":"TokenMark: A Modality-Agnostic Watermark for Pre-trained Transformers","created":"2024-03-09","cited_by_count":1,"area":"safety"},{"id":"2502.05931","title":"Protecting Intellectual Property of EEG-based Neural Networks with Watermarking","created":"2025-02-09","cited_by_count":1,"area":null},{"id":"2505.04977","title":"ChainMarks: Securing DNN Watermark with Cryptographic Chain","created":"2025-05-08","cited_by_count":1,"area":null},{"id":"2506.13494","title":"Watermarking LLM-Generated Datasets in Downstream Tasks","created":"2025-06-16","cited_by_count":1,"area":"safety"},{"id":"2507.22000","title":"Staining and locking computer vision models without retraining","created":"2025-07-29","cited_by_count":1,"area":null},{"id":"2608.08195","title":"Targeted Counterfactual Fingerprinting for Black-Box LLM Ownership Verification","created":"2026-08-08","cited_by_count":1,"area":null}],"next_cursor":"100"}