{"total":100,"rows":[{"id":"2301.10226","title":"A Watermark for Large Language Models","created":"2023-01-24","cited_by_count":725,"area":"safety"},{"id":"2104.10706","title":"Dataset Inference: Ownership Resolution in Machine Learning","created":"2021-04-21","cited_by_count":116,"area":"safety"},{"id":"2310.10669","title":"Unbiased Watermark for Large Language Models","created":"2023-09-22","cited_by_count":111,"area":"safety"},{"id":"2302.03162","title":"Protecting Language Generation Models via Invisible Watermarking","created":"2023-02-06","cited_by_count":90,"area":"safety"},{"id":"2106.06361","title":"Turn the Combination Lock: Learnable Textual Backdoor Attacks via Word Substitution","created":"2021-06-11","cited_by_count":89,"area":"safety"},{"id":"2112.02701","title":"Protecting Intellectual Property of Language Generation APIs with Lexical Watermark","created":"2021-12-05","cited_by_count":84,"area":"safety"},{"id":"2210.00968","title":"Membership Inference Attacks Against Text-to-image Generation Models","created":"2022-10-03","cited_by_count":69,"area":"safety"},{"id":"2305.10036","title":"Are You Copying My Model? Protecting the Copyright of Large Language Models for EaaS via Backdoor Watermark","created":"2023-05-17","cited_by_count":67,"area":"safety"},{"id":"2103.04980","title":"Deep Model Intellectual Property Protection via Deep Watermarking","created":"2021-03-08","cited_by_count":54,"area":"safety"},{"id":"2106.06916","title":"Non-Transferable Learning: A New Approach for Model Ownership Verification and Applicability Authorization","created":"2021-06-13","cited_by_count":52,"area":"safety"},{"id":"2210.07543","title":"Watermarking Pre-trained Language Models with Backdooring","created":"2022-10-14","cited_by_count":50,"area":"safety"},{"id":"2112.05588","title":"Copy, Right? A Testing Framework for Copyright Protection of Deep Learning Models","created":"2021-12-10","cited_by_count":46,"area":"safety"},{"id":"2405.04825","title":"Explanation as a Watermark: Towards Harmless and Multi-bit Model Ownership Verification via Watermarking Feature Attribution","created":"2024-05-08","cited_by_count":40,"area":"safety"},{"id":"2304.07361","title":"PTW: Pivotal Tuning Watermarking for Pre-Trained Image Generators","created":"2023-04-14","cited_by_count":37,"area":"safety"},{"id":"2109.13236","title":"FedIPR: Ownership Verification for Federated Deep Neural Network Models","created":"2021-09-27","cited_by_count":36,"area":"safety"},{"id":"2308.14401","title":"CodeMark: Imperceptible Watermarking for Code Datasets against Neural Code Completion Models","created":"2023-08-28","cited_by_count":34,"area":"safety"},{"id":"2210.03312","title":"Distillation-Resistant Watermarking for Model Protection in NLP","created":"2022-10-07","cited_by_count":30,"area":"safety"},{"id":"2211.07160","title":"FedTracker: Furnishing Ownership Verification and Traceability for Federated Learning Model","created":"2022-11-14","cited_by_count":30,"area":"safety"},{"id":"2505.11541","title":"MorphMark: Flexible Adaptive Watermarking for Large Language Models","created":"2025-05-14","cited_by_count":24,"area":"safety"},{"id":"2402.14883","title":"Double-I Watermark: Protecting Model Copyright for LLM Fine-tuning","created":"2024-02-22","cited_by_count":21,"area":"safety"},{"id":"2303.09732","title":"Rethinking White-Box Watermarks on Deep Learning Models under Neural Structural Obfuscation","created":"2023-03-17","cited_by_count":20,"area":"safety"},{"id":"2502.12176","title":"Ten Challenging Problems in Federated Foundation Models","created":"2025-02-14","cited_by_count":20,"area":"safety"},{"id":"2508.11548","title":"Copyright Protection for Large Language Models: A Survey of Methods, Challenges, and Trends","created":"2025-08-15","cited_by_count":20,"area":"safety"},{"id":"2404.05188","title":"Have You Merged My Model? On The Robustness of Large Language Model IP Protection Methods Against Model Merging","created":"2024-04-08","cited_by_count":19,"area":"safety"},{"id":"2401.15239","title":"MEA-Defender: A Robust Watermark against Model Extraction Attack","created":"2024-01-26","cited_by_count":17,"area":"safety"},{"id":"2305.00097","title":"NNSplitter: An Active Defense Solution for DNN Model via Automated Weight Obfuscation","created":"2023-04-28","cited_by_count":16,"area":"safety"},{"id":"2410.03537","title":"Ward: Provable RAG Dataset Inference via LLM Watermarks","created":"2024-10-04","cited_by_count":16,"area":"safety"},{"id":"2307.10163","title":"Rethinking Backdoor Attacks","created":"2023-07-19","cited_by_count":14,"area":"safety"},{"id":"2411.11478","title":"SoK: On the Role and Future of AIGC Watermarking in the Era of Gen-AI","created":"2024-11-18","cited_by_count":14,"area":"safety"},{"id":"2105.13697","title":"AdvParams: An Active DNN Intellectual Property Protection Technique via Adversarial Perturbation Based Parameter Encryption","created":"2021-05-28","cited_by_count":13,"area":"safety"},{"id":"2203.02777","title":"Cosine Model Watermarking Against Ensemble Distillation","created":"2022-03-05","cited_by_count":13,"area":"safety"},{"id":"2304.11285","title":"Identifying Appropriate Intellectual Property Protection Mechanisms for Machine Learning Models: A Systematization of Watermarking, Fingerprinting, Model Access, and Attacks","created":"2023-04-22","cited_by_count":12,"area":"safety"},{"id":"2306.01356","title":"FedCIP: Federated Client Intellectual Property Protection with Traitor Tracking","created":"2023-06-02","cited_by_count":12,"area":"safety"},{"id":"2509.09703","title":"CTCC: A Robust and Stealthy Fingerprinting Framework for Large Language Models via Cross-Turn Contextual Correlation Backdoor","created":"2025-09-05","cited_by_count":12,"area":"safety"},{"id":"2309.04777","title":"Towards Robust Model Watermark via Reducing Parametric Vulnerability","created":"2023-09-09","cited_by_count":10,"area":"safety"},{"id":"2311.09535","title":"Turning Your Strength into Watermark: Watermarking Large Language Model via Knowledge Injection","created":"2023-11-16","cited_by_count":10,"area":"safety"},{"id":"2312.03205","title":"Who Leaked the Model? Tracking IP Infringers in Accountable Federated Learning","created":"2023-12-06","cited_by_count":10,"area":"safety"},{"id":"2404.13518","title":"Reliable Model Watermarking: Defending Against Theft without Compromising on Evasion","created":"2024-04-21","cited_by_count":9,"area":"safety"},{"id":"2403.18774","title":"RAW: A Robust and Agile Plug-and-Play Watermark Framework for AI-Generated Images with Provable Guarantees","created":"2024-01-23","cited_by_count":8,"area":"safety"},{"id":"2410.09101","title":"Data Taggants: Dataset Ownership Verification via Harmless Targeted Data Poisoning","created":"2024-10-09","cited_by_count":8,"area":"safety"},{"id":"2503.17198","title":"Jailbreaking the Non-Transferable Barrier via Test-Time Data Disguising","created":"2025-03-21","cited_by_count":8,"area":"safety"},{"id":"2106.08104","title":"Detect and remove watermark in deep neural networks via generative adversarial networks","created":"2021-06-15","cited_by_count":6,"area":"safety"},{"id":"2205.04145","title":"Verifying Integrity of Deep Ensemble Models by Lossless Black-box Watermarking with Sensitive Samples","created":"2022-05-09","cited_by_count":6,"area":"safety"},{"id":"2309.06779","title":"ZKROWNN: Zero Knowledge Right of Ownership for Neural Networks","created":"2023-09-13","cited_by_count":6,"area":"safety"},{"id":"2311.09668","title":"Improving the Generation Quality of Watermarked Large Language Models via Word Importance Scoring","created":"2023-11-16","cited_by_count":6,"area":"safety"},{"id":"2405.09863","title":"Box-Free Model Watermarks Are Prone to Black-Box Removal Attacks","created":"2024-05-16","cited_by_count":6,"area":"safety"},{"id":"2104.09203","title":"Protecting the Intellectual Properties of Deep Neural Networks with an Additional Class and Steganographic Images","created":"2021-04-19","cited_by_count":5,"area":"safety"},{"id":"2207.13321","title":"DynaMarks: Defending Against Deep Learning Model Extraction Using Dynamic Watermarking","created":"2022-07-27","cited_by_count":4,"area":"safety"},{"id":"2407.04794","title":"On Evaluating The Performance of Watermarked Machine-Generated Texts Under Adversarial Attacks","created":"2024-07-05","cited_by_count":4,"area":"safety"},{"id":"2411.06611","title":"vTune: Verifiable Fine-Tuning for LLMs Through Backdooring","created":"2024-11-10","cited_by_count":4,"area":"safety"},{"id":"2510.16367","title":"EditMark: Watermarking Large Language Models based on Model Editing","created":"2025-10-18","cited_by_count":4,"area":"safety"},{"id":"2102.03523","title":"Ownership Verification of DNN Architectures via Hardware Cache Side Channels","created":"2021-02-06","cited_by_count":3,"area":"safety"},{"id":"2212.11133","title":"Device-Bind Key-Storageless Hardware AI Model IP Protection: A PUF and Permute-Diffusion Encryption-Enabled Approach","created":"2022-12-21","cited_by_count":3,"area":"safety"},{"id":"2312.06488","title":"Performance-lossless Black-box Model Watermarking","created":"2023-12-11","cited_by_count":3,"area":"safety"},{"id":"2405.16596","title":"Protect-Your-IP: Scalable Source-Tracing and Attribution against Personalized Generation","created":"2024-05-26","cited_by_count":3,"area":"safety"},{"id":"2409.06130","title":"Revisiting Black-Box Model Ownership Verification through Information Theory","created":"2024-09-10","cited_by_count":3,"area":"safety"},{"id":"2409.15781","title":"Training Data Attribution: Was Your Model Secretly Trained On Data Created By Mine?","created":"2024-09-24","cited_by_count":3,"area":"safety"},{"id":"2103.03701","title":"Don't Forget to Sign the Gradients!","created":"2021-03-05","cited_by_count":2,"area":"safety"},{"id":"2108.09065","title":"Regulating Ownership Verification for Deep Neural Networks: Scenarios, Protocols, and Prospects","created":"2021-08-20","cited_by_count":2,"area":"safety"},{"id":"2206.02541","title":"PCPT and ACPT: Copyright Protection and Traceability Scheme for DNN Models","created":"2022-06-06","cited_by_count":2,"area":"safety"},{"id":"2209.04113","title":"Robust and Lossless Fingerprinting of Deep Neural Networks via Pooled Membership Inference","created":"2022-09-09","cited_by_count":2,"area":"safety"},{"id":"2210.07481","title":"InFIP: An Explainable DNN Intellectual Property Protection Method based on Intrinsic Features","created":"2022-10-14","cited_by_count":2,"area":"safety"},{"id":"2211.13535","title":"DeepTaster: Adversarial Perturbation-Based Fingerprinting to Identify Proprietary Dataset Use in Deep Neural Networks","created":"2022-11-24","cited_by_count":2,"area":"safety"},{"id":"2305.09684","title":"Decision-based iterative fragile watermarking for model integrity verification","created":"2023-05-13","cited_by_count":2,"area":"safety"},{"id":"2305.12391","title":"Generative Model Watermarking Suppressing High-Frequency Artifacts","created":"2023-05-21","cited_by_count":2,"area":"safety"},{"id":"2503.23748","title":"THEMIS: Towards Practical Intellectual Property Protection for Post-Deployment On-Device Deep Learning Models","created":"2025-03-31","cited_by_count":2,"area":"safety"},{"id":"2103.01527","title":"ActiveGuard: An Active DNN IP Protection Technique via Adversarial Examples","created":"2021-03-02","cited_by_count":1,"area":"safety"},{"id":"2108.02360","title":"Exploring Structure Consistency for Deep Model Watermarking","created":"2021-08-05","cited_by_count":1,"area":"safety"},{"id":"2110.09814","title":"Speech Pattern based Black-box Model Watermarking for Automatic Speech Recognition","created":"2021-10-19","cited_by_count":1,"area":"safety"},{"id":"2208.04676","title":"DeepHider: A Covert NLP Watermarking Framework Based on Multi-task Learning","created":"2022-08-09","cited_by_count":1,"area":"safety"},{"id":"2310.09479","title":"Unified High-binding Watermark for Unconditional Image Generation Models","created":"2023-10-14","cited_by_count":1,"area":"safety"},{"id":"2312.14182","title":"Find the Lady: Permutation and Re-Synchronization of Deep Neural Networks","created":"2023-12-19","cited_by_count":1,"area":"safety"},{"id":"2403.05842","title":"TokenMark: A Modality-Agnostic Watermark for Pre-trained Transformers","created":"2024-03-09","cited_by_count":1,"area":"safety"},{"id":"2412.12563","title":"Task-Agnostic Language Model Watermarking via High Entropy Passthrough Layers","created":"2024-12-17","cited_by_count":1,"area":"safety"},{"id":"2501.01194","title":"A Game Between the Defender and the Attacker for Trigger-based Black-box Model Watermarking","created":"2025-01-02","cited_by_count":1,"area":"safety"},{"id":"2502.01634","title":"Online Gradient Boosting Decision Tree: In-Place Updates for Efficient Adding/Deleting Data","created":"2025-02-03","cited_by_count":1,"area":"safety"},{"id":"2506.13494","title":"Watermarking LLM-Generated Datasets in Downstream Tasks","created":"2025-06-16","cited_by_count":1,"area":"safety"},{"id":"2507.08288","title":"Invariant-based Robust Weights Watermark for Large Language Models","created":"2025-07-11","cited_by_count":1,"area":"safety"},{"id":"2602.09284","title":"X-Mark: Saliency-Guided Robust Dataset Ownership Verification for Medical Imaging","created":"2026-02-10","cited_by_count":1,"area":"safety"},{"id":"2602.23587","title":"PDF: PUF-based DNN Fingerprinting for Knowledge Distillation Traceability","created":"2026-02-27","cited_by_count":1,"area":"safety"},{"id":"2603.24857","title":"AI Security in the Foundation Model Era: A Comprehensive Survey from a Unified Perspective","created":"2026-03-25","cited_by_count":1,"area":"safety"},{"id":"2202.10309","title":"HoneyModels: Machine Learning Honeypots","created":"2022-02-21","cited_by_count":0,"area":"safety"},{"id":"2207.04668","title":"A Secure Fingerprinting Framework for Distributed Image Classification","created":"2022-07-11","cited_by_count":0,"area":"safety"},{"id":"2211.13644","title":"Seeds Don't Lie: An Adaptive Watermarking Framework for Computer Vision Models","created":"2022-11-24","cited_by_count":0,"area":"safety"},{"id":"2310.16453","title":"ClearMark: Intuitive and Robust Model Watermarking via Transposed Model Training","created":"2023-10-25","cited_by_count":0,"area":"safety"},{"id":"2312.00048","title":"Tokenized Model: A Blockchain-Empowered Decentralized Model Ownership Verification Platform","created":"2023-11-27","cited_by_count":0,"area":"safety"},{"id":"2409.01541","title":"Agentic Copyright Watermarking against Adversarial Evidence Forgery with Purification-Agnostic Curriculum Proxy Learning","created":"2024-09-03","cited_by_count":0,"area":"safety"},{"id":"2409.19442","title":"Trigger-Based Fragile Model Watermarking for Image Transformation Networks","created":"2024-09-28","cited_by_count":0,"area":"safety"},{"id":"2411.13047","title":"Bounding-box Watermarking: Defense against Model Extraction Attacks on Object Detectors","created":"2024-11-20","cited_by_count":0,"area":"safety"},{"id":"2503.20802","title":"CEFW: A Comprehensive Evaluation Framework for Watermark in Large Language Models","created":"2025-03-24","cited_by_count":0,"area":"safety"},{"id":"2505.24536","title":"CHIP: Chameleon Hash-based Irreversible Passport for Robust Deep Model Ownership Verification and Active Usage Control","created":"2025-05-30","cited_by_count":0,"area":"safety"},{"id":"2507.20650","title":"Hot-Swap MarkBoard: An Efficient Black-box Watermarking Approach for Large-scale Model Distribution","created":"2025-07-28","cited_by_count":0,"area":"safety"},{"id":"2603.07452","title":"Backdoor4Good: Benchmarking Beneficial Uses of Backdoors in LLMs","created":"2026-03-08","cited_by_count":0,"area":"safety"},{"id":"2603.18793","title":"Functional Subspace Watermarking for Large Language Models","created":"2026-03-19","cited_by_count":0,"area":"safety"},{"id":"2604.25247","title":"R-CoT: A Reasoning-Layer Watermark via Redundant Chain-of-Thought in Large Language Models","created":"2026-04-28","cited_by_count":0,"area":"safety"},{"id":"2606.11698","title":"T2S: A Rehearsal-Based Approach for Extraction-Resistant Model Watermarking","created":"2026-06-10","cited_by_count":0,"area":"safety"},{"id":"2606.17123","title":"LineageMark: Multi-user White-box Watermarking for Contribution Tracing in Model Derivation Chains","created":"2026-06-15","cited_by_count":0,"area":"safety"},{"id":"2609.22981","title":"Dual-Locking Learned AI Models: A PIN-Based Sparse QIM Watermarking and Adaptive Index Permutation Approach","created":"2026-09-19","cited_by_count":0,"area":"safety"},{"id":"2609.39024","title":"Persistent Watermarking of Text-to-Image Models","created":"2026-09-30","cited_by_count":0,"area":"safety"},{"id":"2609.39768","title":"Security Properties of Neural Networks as Decision Problems","created":"2026-09-30","cited_by_count":0,"area":"safety"}],"next_cursor":null}