{"total":235,"rows":[{"id":"2210.00875","title":"Untargeted Backdoor Watermark: Towards Harmless and Stealthy Dataset Copyright Protection","created":"2022-09-27","cited_by_count":86,"area":null},{"id":"2103.05633","title":"Proof-of-Learning: Definitions and Practice","created":"2021-03-09","cited_by_count":84,"area":null},{"id":"2108.04974","title":"SoK: How Robust is Image Classification Deep Neural Network Watermarking? (Extended Version)","created":"2021-08-11","cited_by_count":69,"area":null},{"id":"2202.08602","title":"Fingerprinting Deep Neural Networks Globally via Universal Adversarial Perturbations","created":"2022-02-17","cited_by_count":61,"area":null},{"id":"2204.06974","title":"Planting Undetectable Backdoors in Machine Learning Models","created":"2022-04-14","cited_by_count":59,"area":null},{"id":"2309.16952","title":"Leveraging Optimization for Adaptive Attacks on Image Watermarks","created":"2023-09-29","cited_by_count":52,"area":null},{"id":"2102.04362","title":"Protecting Intellectual Property of Generative Adversarial Networks from Ambiguity Attack","created":"2021-02-08","cited_by_count":46,"area":null},{"id":"2112.03476","title":"Defending against Model Stealing via Verifying Embedded External Features","created":"2021-12-07","cited_by_count":46,"area":null},{"id":"2201.11692","title":"SSLGuard: A Watermarking Scheme for Self-supervised Learning Pre-trained Encoders","created":"2022-01-27","cited_by_count":45,"area":null},{"id":"2111.08429","title":"An Overview of Backdoor Attacks Against Deep Neural Networks and Possible Defences","created":"2021-11-16","cited_by_count":42,"area":null},{"id":"2207.07972","title":"Certified Neural Network Watermarks with Randomized Smoothing","created":"2022-07-16","cited_by_count":41,"area":null},{"id":"2209.03466","title":"Supervised GAN Watermarking for Intellectual Property Protection","created":"2022-09-07","cited_by_count":40,"area":null},{"id":"2303.11470","title":"Did You Train on My Dataset? Towards Public Dataset Protection with Clean-Label Backdoor Watermarking","created":"2023-03-20","cited_by_count":37,"area":null},{"id":"2410.14273","title":"REEF: Representation Encoding Fingerprints for Large Language Models","created":"2024-10-18","cited_by_count":36,"area":null},{"id":"2104.14235","title":"Inspect, Understand, Overcome: A Survey of Practical Methods for AI Safety","created":"2021-04-29","cited_by_count":35,"area":null},{"id":"2305.18339","title":"A Survey on ChatGPT: AI-Generated Contents, Challenges, and Solutions","created":"2023-05-25","cited_by_count":35,"area":null},{"id":"2312.04828","title":"HuRef: HUman-REadable Fingerprint for Large Language Models","created":"2023-12-08","cited_by_count":34,"area":null},{"id":"2106.08890","title":"ModelDiff: Testing-Based DNN Similarity Comparison for Model Reuse Detection","created":"2021-06-11","cited_by_count":33,"area":null},{"id":"2306.04719","title":"Don't trust your eyes: on the (un)reliability of feature visualizations","created":"2023-06-07","cited_by_count":32,"area":null},{"id":"2201.07513","title":"Can't Steal? Cont-Steal! Contrastive Stealing Attacks Against Image Encoders","created":"2022-01-19","cited_by_count":31,"area":null},{"id":"2510.09263","title":"SynthID-Image: Image watermarking at internet scale","created":"2025-10-10","cited_by_count":31,"area":null},{"id":"2108.09187","title":"Quantization Backdoors to Deep Learning Commercial Frameworks","created":"2021-08-20","cited_by_count":29,"area":null},{"id":"2201.11006","title":"An Overview of Compressible and Learnable Image Transformation with Secret Key and Its Applications","created":"2022-01-26","cited_by_count":29,"area":null},{"id":"2208.11180","title":"Auditing Membership Leakages of Multi-Exit Networks","created":"2022-08-23","cited_by_count":27,"area":null},{"id":"2311.09832","title":"WatME: Towards Lossless Watermarking Through Lexical Redundancy","created":"2023-11-16","cited_by_count":27,"area":null},{"id":"2110.11024","title":"Watermarking Graph Neural Networks based on Backdoor Attacks","created":"2021-10-21","cited_by_count":25,"area":null},{"id":"2109.00685","title":"Excess Capacity and Backdoor Poisoning","created":"2021-09-02","cited_by_count":24,"area":null},{"id":"2201.05889","title":"StolenEncoder: Stealing Pre-trained Encoders in Self-supervised Learning","created":"2022-01-15","cited_by_count":23,"area":null},{"id":"2406.05392","title":"Deconstructing The Ethics of Large Language Models from Long-standing Issues to New-emerging Dilemmas: A Survey","created":"2024-06-08","cited_by_count":23,"area":null},{"id":"2201.09243","title":"Increasing the Cost of Model Extraction with Calibrated Proof of Work","created":"2022-01-23","cited_by_count":21,"area":null},{"id":"2206.14157","title":"How to Steer Your Adversary: Targeted and Efficient Model Stealing Defenses with Gradient Redirection","created":"2022-06-28","cited_by_count":21,"area":null},{"id":"2208.02820","title":"MOVE: Effective and Harmless Ownership Verification via Embedded External Features","created":"2022-08-04","cited_by_count":21,"area":null},{"id":"2210.15427","title":"Are You Stealing My Model? Sample Correlation for Fingerprinting Deep Neural Networks","created":"2022-10-21","cited_by_count":21,"area":null},{"id":"2302.09457","title":"Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective","created":"2023-02-19","cited_by_count":20,"area":null},{"id":"2111.00162","title":"You are caught stealing my winning lottery ticket! Making a lottery ticket claim its ownership","created":"2021-10-30","cited_by_count":18,"area":null},{"id":"2204.09975","title":"Eliminating Backdoor Triggers for Deep Neural Networks Using Attention Relation Graph Distillation","created":"2022-04-21","cited_by_count":18,"area":null},{"id":"2405.12725","title":"Nearest is Not Dearest: Towards Practical Defense against Quantization-conditioned Backdoor Attacks","created":"2024-05-21","cited_by_count":18,"area":null},{"id":"2104.04268","title":"Reversible Watermarking in Deep Convolutional Neural Networks for Integrity Authentication","created":"2021-04-09","cited_by_count":17,"area":null},{"id":"2202.07183","title":"A Survey of Neural Trojan Attacks and Defenses in Deep Learning","created":"2022-02-15","cited_by_count":17,"area":null},{"id":"2211.07138","title":"Watermarking in Secure Federated Learning: A Verification Framework Based on Client-Side Backdooring","created":"2022-11-14","cited_by_count":17,"area":null},{"id":"2304.06607","title":"False Claims against Model Ownership Resolution","created":"2023-04-13","cited_by_count":17,"area":null},{"id":"2106.12478","title":"Teacher Model Fingerprinting Attacks Against Transfer Learning","created":"2021-06-23","cited_by_count":16,"area":null},{"id":"2302.01677","title":"Revisiting Personalized Federated Learning: Robustness Against Backdoor Attacks","created":"2023-02-03","cited_by_count":16,"area":null},{"id":"2304.08566","title":"GrOVe: Ownership Verification of Graph Neural Networks using Embeddings","created":"2023-04-17","cited_by_count":16,"area":null},{"id":"2405.02466","title":"ProFLingo: A Fingerprinting-based Intellectual Property Protection Scheme for Large Language Models","created":"2024-05-03","cited_by_count":16,"area":null},{"id":"2105.14756","title":"A Protection Method of Trained CNN Model with Secret Key from Unauthorized Access","created":"2021-05-31","cited_by_count":15,"area":null},{"id":"2310.11446","title":"Functional Invariants to Watermark Large Transformers","created":"2023-10-17","cited_by_count":15,"area":null},{"id":"2303.11078","title":"Model Barrier: A Compact Un-Transferable Isolation Domain for Model Intellectual Property Protection","created":"2023-03-20","cited_by_count":14,"area":null},{"id":"2406.12844","title":"Synergizing Foundation Models and Federated Learning: A Survey","created":"2024-06-18","cited_by_count":14,"area":null},{"id":"2407.10886","title":"SLIP: Securing LLMs IP Using Weights Decomposition","created":"2024-07-15","cited_by_count":14,"area":null},{"id":"2502.07760","title":"Scalable Fingerprinting of Large Language Models","created":"2025-02-11","cited_by_count":14,"area":null},{"id":"2110.07682","title":"Sound and Complete Neural Network Repair with Minimality and Locality Guarantees","created":"2021-10-14","cited_by_count":13,"area":null},{"id":"2202.12506","title":"On the Effectiveness of Dataset Watermarking in Adversarial Settings","created":"2022-02-25","cited_by_count":12,"area":null},{"id":"2207.01991","title":"Conflicting Interactions Among Protection Mechanisms for Machine Learning Models","created":"2022-07-05","cited_by_count":12,"area":null},{"id":"2207.05366","title":"Image and Model Transformation with Secret Key for Vision Transformer","created":"2022-07-12","cited_by_count":12,"area":null},{"id":"2211.14952","title":"Federated Learning Attacks and Defenses: A Survey","created":"2022-11-27","cited_by_count":12,"area":null},{"id":"2201.08217","title":"Watermarking Pre-trained Encoders in Contrastive Learning","created":"2022-01-20","cited_by_count":11,"area":null},{"id":"2307.15539","title":"Beating Backdoor Attack at Its Own Game","created":"2023-07-28","cited_by_count":11,"area":null},{"id":"2404.11121","title":"TransLinkGuard: Safeguarding Transformer Models Against Model Stealing in Edge Deployment","created":"2024-04-17","cited_by_count":11,"area":null},{"id":"2104.04241","title":"Piracy-Resistant DNN Watermarking by Block-Wise Image Transformation with Secret Key","created":"2021-04-09","cited_by_count":10,"area":null},{"id":"2109.10870","title":"SoK: Machine Learning Governance","created":"2021-09-20","cited_by_count":10,"area":null},{"id":"2112.02230","title":"SHAPr: An Efficient and Versatile Membership Privacy Risk Metric for Machine Learning","created":"2021-12-04","cited_by_count":10,"area":null},{"id":"2212.05428","title":"ezDPS: An Efficient and Zero-Knowledge Machine Learning Inference Pipeline","created":"2022-12-11","cited_by_count":10,"area":null},{"id":"2306.06210","title":"Single-Model Attribution of Generative Models Through Final-Layer Inversion","created":"2023-05-26","cited_by_count":10,"area":null},{"id":"2307.15860","title":"What can Discriminator do? Towards Box-free Ownership Verification of Generative Adversarial Network","created":"2023-07-29","cited_by_count":10,"area":null},{"id":"2310.16919","title":"Wide Flat Minimum Watermarking for Robust Ownership Verification of GANs","created":"2023-10-25","cited_by_count":10,"area":null},{"id":"2312.09665","title":"FlowMur: A Stealthy and Practical Audio Backdoor Attack with Limited Knowledge","created":"2023-12-15","cited_by_count":10,"area":null},{"id":"2501.15509","title":"FIT-Print: Towards False-claim-resistant Model Ownership Verification via Targeted Fingerprint","created":"2025-01-26","cited_by_count":10,"area":null},{"id":"2509.26404","title":"SeedPrints: Fingerprints Can Even Tell Which Seed Your Large Language Model Was Trained From","created":"2025-09-30","cited_by_count":10,"area":null},{"id":"2203.03711","title":"Algorithmic audits of algorithms, and the law","created":"2022-02-15","cited_by_count":9,"area":null},{"id":"2209.03563","title":"SSL-WM: A Black-Box Watermarking Approach for Encoders Pre-trained by Self-supervised Learning","created":"2022-09-08","cited_by_count":9,"area":null},{"id":"2305.04507","title":"FedZKP: Federated Model Ownership Verification with Zero-knowledge Proof","created":"2023-05-08","cited_by_count":9,"area":null},{"id":"2311.16065","title":"A Survey on Vulnerability of Federated Learning: A Learning Algorithm Perspective","created":"2023-11-27","cited_by_count":9,"area":null},{"id":"2406.11129","title":"Neural Lineage","created":"2024-06-17","cited_by_count":9,"area":null},{"id":"2210.13631","title":"On the Robustness of Dataset Inference","created":"2022-10-24","cited_by_count":8,"area":null},{"id":"2310.08571","title":"Bucks for Buckets (B4B): Active Defenses Against Stealing Encoders","created":"2023-10-12","cited_by_count":8,"area":null},{"id":"2404.05783","title":"A Survey on Responsible Generative AI: What to Generate and What Not","created":"2024-04-08","cited_by_count":8,"area":null},{"id":"2506.02362","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","created":"2025-06-03","cited_by_count":8,"area":null},{"id":"2205.03824","title":"A Survey on AI Sustainability: Emerging Trends on Learning Algorithms and Research Challenges","created":"2022-05-08","cited_by_count":7,"area":null},{"id":"2308.03573","title":"When Federated Learning meets Watermarking: A Comprehensive Overview of Techniques for Intellectual Property Protection","created":"2023-08-07","cited_by_count":7,"area":null},{"id":"2401.08261","title":"Probabilistically Robust Watermarking of Neural Networks","created":"2024-01-16","cited_by_count":7,"area":null},{"id":"2408.13161","title":"Say No to Freeloader: Protecting Intellectual Property of Your Deep Model","created":"2024-08-23","cited_by_count":7,"area":null},{"id":"2103.05590","title":"Robust Black-box Watermarking for Deep NeuralNetwork using Inverse Document Frequency","created":"2021-03-09","cited_by_count":6,"area":null},{"id":"2106.10147","title":"Evaluating the Robustness of Trigger Set-Based Watermarks Embedded in Deep Neural Networks","created":"2021-06-18","cited_by_count":6,"area":null},{"id":"2110.07683","title":"Don't Knock! Rowhammer at the Backdoor of DNN Models","created":"2021-10-14","cited_by_count":6,"area":null},{"id":"2205.00199","title":"Cracking White-box DNN Watermarks via Invariant Neuron Transforms","created":"2022-04-30","cited_by_count":6,"area":null},{"id":"2210.12651","title":"Unsupervised Non-transferable Text Classification","created":"2022-10-23","cited_by_count":6,"area":null},{"id":"2312.04542","title":"SoK: Unintended Interactions among Machine Learning Defenses and Risks","created":"2023-12-07","cited_by_count":6,"area":null},{"id":"2405.16285","title":"ModelLock: Locking Your Model With a Spell","created":"2024-05-25","cited_by_count":6,"area":null},{"id":"2509.01548","title":"Model Unmerging: Making Your Models Unmergeable for Secure Model Sharing","created":"2025-09-01","cited_by_count":6,"area":null},{"id":"2105.03692","title":"Incompatibility Clustering as a Defense Against Backdoor Poisoning Attacks","created":"2021-05-08","cited_by_count":5,"area":null},{"id":"2203.10902","title":"PublicCheck: Public Integrity Verification for Services of Run-time Deep Models","created":"2022-03-21","cited_by_count":5,"area":null},{"id":"2208.10973","title":"Robust and Large-Payload DNN Watermarking via Fixed, Distribution-Optimized, Weights","created":"2022-08-23","cited_by_count":5,"area":null},{"id":"2210.02257","title":"Hiding Images in Deep Probabilistic Models","created":"2022-10-05","cited_by_count":5,"area":null},{"id":"2309.11013","title":"ModelGiF: Gradient Fields for Model Functional Distance","created":"2023-09-20","cited_by_count":5,"area":null},{"id":"2403.03590","title":"DeepEclipse: How to Break White-Box DNN-Watermarking Schemes","created":"2024-03-06","cited_by_count":5,"area":null},{"id":"2410.13903","title":"CoreGuard: Safeguarding Foundational Capabilities of LLMs Against Model Stealing in Edge Deployment","created":"2024-10-16","cited_by_count":5,"area":null},{"id":"2411.03279","title":"Oblivious Defense in ML Models: Backdoor Removal without Detection","created":"2024-11-05","cited_by_count":5,"area":null},{"id":"2502.20924","title":"Decoder Gradient Shield: Provable and High-Fidelity Prevention of Gradient-Based Box-Free Watermark Removal","created":"2025-02-28","cited_by_count":5,"area":null},{"id":"2602.20419","title":"CREDIT: Certified Ownership Verification of Deep Neural Networks Against Model Extraction Attacks","created":"2026-02-23","cited_by_count":5,"area":null}],"next_cursor":"100"}