{"total":397,"rows":[{"id":"2301.10226","title":"A Watermark for Large Language Models","created":"2023-01-24","cited_by_count":725,"area":"safety"},{"id":"2410.00037","title":"Moshi: a speech-text foundation model for real-time dialogue","created":"2024-09-17","cited_by_count":568,"area":null},{"id":"2303.15435","title":"The Stable Signature: Rooting Watermarks in Latent Diffusion Models","created":"2023-03-27","cited_by_count":304,"area":"diffusion"},{"id":"2305.20030","title":"Tree-Ring Watermarks: Fingerprints for Diffusion Images that are Invisible and Robust","created":"2023-05-31","cited_by_count":187,"area":"diffusion"},{"id":"2202.10261","title":"A Self-Supervised Descriptor for Image Copy Detection","created":"2022-02-21","cited_by_count":176,"area":null},{"id":"2404.04956","title":"Gaussian Shading: Provable Performance-Lossless Image Watermarking for Diffusion Models","created":"2024-04-07","cited_by_count":142,"area":"diffusion"},{"id":"2306.01953","title":"Invisible Image Watermarks Are Provably Removable Using Generative AI","created":"2023-06-02","cited_by_count":134,"area":"safety"},{"id":"2312.08883","title":"EditGuard: Versatile Image Watermarking for Tamper Localization and Copyright Protection","created":"2023-12-12","cited_by_count":111,"area":null},{"id":"2108.08211","title":"MBRS : Enhancing Robustness of DNN-based Watermarking by Mini-Batch of Real and Simulated JPEG Compression","created":"2021-08-18","cited_by_count":110,"area":null},{"id":"2410.18775","title":"Robust Watermarking Using Generative Priors Against Image Editing: From Benchmarking to Advances","created":"2024-10-24","cited_by_count":110,"area":"safety"},{"id":"2401.08573","title":"WAVES: Benchmarking the Robustness of Image Watermarks","created":"2024-01-16","cited_by_count":97,"area":null},{"id":"2112.09581","title":"Watermarking Images in Self-Supervised Latent Spaces","created":"2021-12-17","cited_by_count":94,"area":null},{"id":"2404.14055","title":"RingID: Rethinking Tree-Ring Watermarking for Enhanced Multi-Key Identification","created":"2024-04-22","cited_by_count":91,"area":null},{"id":"2311.04378","title":"Watermarks in the Sand: Impossibility of Strong Watermarking for Generative Models","created":"2023-11-07","cited_by_count":87,"area":"safety"},{"id":"2305.01904","title":"Robust Multi-bit Natural Language Watermarking through Invariant Features","created":"2023-05-03","cited_by_count":82,"area":"safety"},{"id":"2305.03807","title":"Evading Watermark based Detection of AI-Generated Content","created":"2023-05-05","cited_by_count":78,"area":"safety"},{"id":"2212.12678","title":"Towards Blind Watermarking: Combining Invertible and Non-invertible Mechanisms","created":"2022-12-24","cited_by_count":61,"area":null},{"id":"2304.03400","title":"RoSteALS: Robust Steganography using Autoencoder Latent Space","created":"2023-04-06","cited_by_count":57,"area":"safety"},{"id":"2308.00221","title":"Advancing Beyond Identification: Multi-bit Watermark for Large Language Models","created":"2023-08-01","cited_by_count":57,"area":"safety"},{"id":"2103.04980","title":"Deep Model Intellectual Property Protection via Deep Watermarking","created":"2021-03-08","cited_by_count":54,"area":"safety"},{"id":"2306.04744","title":"WOUAF: Weight Modulation for User Attribution and Fingerprinting in Text-to-Image Diffusion Models","created":"2023-06-07","cited_by_count":53,"area":"diffusion"},{"id":"2411.07231","title":"Watermark Anything with Localized Messages","created":"2024-11-11","cited_by_count":53,"area":null},{"id":"2412.03283","title":"Black-Box Forgery Attacks on Semantic Watermarks for Diffusion Models","created":"2024-12-04","cited_by_count":52,"area":"diffusion"},{"id":"2311.18297","title":"TrustMark: Universal Watermarking for Arbitrary Resolution Images","created":"2023-11-30","cited_by_count":51,"area":null},{"id":"2411.18479","title":"SoK: Watermarking for AI-Generated Content","created":"2024-11-27","cited_by_count":51,"area":"safety"},{"id":"2108.02488","title":"Poison Ink: Robust and Invisible Backdoor Attack","created":"2021-08-05","cited_by_count":50,"area":null},{"id":"2305.16936","title":"CRoSS: Diffusion Model Makes Controllable, Robust and Secure Image Steganography","created":"2023-05-26","cited_by_count":50,"area":"diffusion"},{"id":"2410.05470","title":"Image Watermarks are Removable Using Controllable Regeneration from Clean Noise","created":"2024-10-07","cited_by_count":50,"area":null},{"id":"2412.09492","title":"Video Seal: Open and Efficient Video Watermarking","created":"2024-12-12","cited_by_count":48,"area":null},{"id":"2102.04362","title":"Protecting Intellectual Property of Generative Adversarial Networks from Ambiguity Attack","created":"2021-02-08","cited_by_count":46,"area":null},{"id":"2405.11135","title":"AquaLoRA: Toward White-box Protection for Customized Stable Diffusion Models via Watermark LoRA","created":"2024-05-18","cited_by_count":46,"area":"diffusion"},{"id":"2411.03862","title":"ROBIN: Robust and Invisible Watermarks for Diffusion Models with Adversarial Optimization","created":"2024-11-06","cited_by_count":46,"area":"diffusion"},{"id":"2112.07873","title":"Tracing Text Provenance via Context-Aware Lexical Substitution","created":"2021-12-15","cited_by_count":45,"area":"safety"},{"id":"2305.06321","title":"SepMark: Deep Separable Watermarking for Unified Source Tracing and Deepfake Detection","created":"2023-05-10","cited_by_count":44,"area":"safety"},{"id":"2306.04642","title":"DiffusionShield: A Watermark for Copyright Protection against Generative Diffusion Models","created":"2023-05-25","cited_by_count":43,"area":"diffusion"},{"id":"2401.15859","title":"Diffusion Facial Forgery Detection","created":"2024-01-29","cited_by_count":41,"area":null},{"id":"2209.03466","title":"Supervised GAN Watermarking for Intellectual Property Protection","created":"2022-09-07","cited_by_count":40,"area":null},{"id":"2402.02333","title":"Copyright Protection in Generative AI: A Technical Perspective","created":"2024-02-04","cited_by_count":38,"area":null},{"id":"2504.01016","title":"GeometryCrafter: Consistent Geometry Estimation for Open-world Videos with Diffusion Priors","created":"2025-04-01","cited_by_count":37,"area":"diffusion"},{"id":"2203.15880","title":"Proactive Image Manipulation Detection","created":"2022-03-29","cited_by_count":35,"area":null},{"id":"2401.04247","title":"Attack-Resilient Image Watermarking Using Stable Diffusion","created":"2024-01-08","cited_by_count":35,"area":"diffusion"},{"id":"2403.10893","title":"A Watermark-Conditioned Diffusion Model for IP Protection","created":"2024-03-16","cited_by_count":35,"area":"diffusion"},{"id":"2412.01615","title":"OmniGuard: Hybrid Manipulation Localization via Augmented Versatile Deep Image Watermarking","created":"2024-12-02","cited_by_count":35,"area":null},{"id":"2307.11526","title":"CopyRNeRF: Protecting the CopyRight of Neural Radiance Fields","created":"2023-07-21","cited_by_count":34,"area":null},{"id":"2406.08337","title":"WMAdapter: Adding WaterMark Control to Latent Diffusion Models","created":"2024-06-12","cited_by_count":31,"area":"diffusion"},{"id":"2510.09263","title":"SynthID-Image: Image watermarking at internet scale","created":"2025-10-10","cited_by_count":31,"area":null},{"id":"2412.04852","title":"SleeperMark: Towards Robust Watermark against Fine-Tuning Text-to-image Diffusion Models","created":"2024-12-06","cited_by_count":29,"area":"diffusion"},{"id":"2404.16824","title":"V2A-Mark: Versatile Deep Visual-Audio Watermarking for Manipulation Localization and Copyright Protection","created":"2024-04-25","cited_by_count":28,"area":null},{"id":"2408.05868","title":"LaWa: Using Latent Space for In-Generation Image Watermarking","created":"2024-08-11","cited_by_count":28,"area":"safety"},{"id":"2403.15365","title":"A Transfer Attack to Image Watermarks","created":"2024-03-22","cited_by_count":27,"area":null},{"id":"2112.09151","title":"TAFIM: Targeted Adversarial Attacks against Facial Image Manipulations","created":"2021-12-16","cited_by_count":26,"area":null},{"id":"2405.02066","title":"WateRF: Robust Watermarks in Radiance Fields for Protection of Copyrights","created":"2024-05-03","cited_by_count":26,"area":null},{"id":"2405.13360","title":"How to Trace Latent Generative Model Generated Images without Artificial Watermark?","created":"2024-05-22","cited_by_count":26,"area":"diffusion"},{"id":"2405.15118","title":"GS-Hider: Hiding Messages into 3D Gaussian Splatting","created":"2024-05-24","cited_by_count":26,"area":null},{"id":"2107.09287","title":"Data Hiding with Deep Learning: A Survey Unifying Digital Watermarking and Steganography","created":"2021-07-20","cited_by_count":24,"area":null},{"id":"2405.08363","title":"UnMarker: A Universal Attack on Defensive Image Watermarking","created":"2024-05-14","cited_by_count":24,"area":null},{"id":"2104.13450","title":"Deep 3D-to-2D Watermarking: Embedding Messages in 3D Meshes and Extracting Them from 2D Renderings","created":"2021-04-27","cited_by_count":23,"area":null},{"id":"2306.07754","title":"Generative Watermarking Against Unauthorized Subject-Driven Image Synthesis","created":"2023-06-13","cited_by_count":23,"area":"safety"},{"id":"2404.09401","title":"Watermark-embedded Adversarial Examples for Copyright Protection against Diffusion Models","created":"2024-04-15","cited_by_count":23,"area":"diffusion"},{"id":"2411.07795","title":"InvisMark: Invisible and Robust Watermarking for AI-generated Image Provenance","created":"2024-11-10","cited_by_count":23,"area":"safety"},{"id":"2304.12300","title":"Large-capacity and Flexible Video Steganography via Invertible Neural Network","created":"2023-04-24","cited_by_count":21,"area":null},{"id":"2405.02696","title":"DiffuseTrace: A Transparent and Flexible Watermarking Scheme for Latent Diffusion Model","created":"2024-05-04","cited_by_count":21,"area":"diffusion"},{"id":"2410.23718","title":"GaussianMarker: Uncertainty-Aware Copyright Protection of 3D Gaussian Splatting","created":"2024-10-31","cited_by_count":21,"area":null},{"id":"2411.17209","title":"LampMark: Proactive Deepfake Detection via Training-Free Landmark Perceptual Watermarks","created":"2024-11-26","cited_by_count":21,"area":"safety"},{"id":"2412.04653","title":"Hidden in the Noise: Two-Stage Robust Watermarking for Images","created":"2024-12-05","cited_by_count":21,"area":null},{"id":"2310.02401","title":"FT-Shield: A Watermark Against Unauthorized Fine-tuning in Text-to-Image Diffusion Models","created":"2023-10-03","cited_by_count":20,"area":"diffusion"},{"id":"2405.07145","title":"Stable Signature is Unstable: Removing Image Watermark from Diffusion Models","created":"2024-05-12","cited_by_count":20,"area":"diffusion"},{"id":"2410.10437","title":"Towards Reliable Verification of Unauthorized Data Usage in Personalized Text-to-Image Diffusion Models","created":"2024-10-14","cited_by_count":20,"area":"diffusion"},{"id":"2210.15902","title":"Learning to Immunize Images for Tamper Localization and Self-Recovery","created":"2022-10-28","cited_by_count":19,"area":null},{"id":"2102.06479","title":"Universal Adversarial Perturbations Through the Lens of Deep Steganography: Towards A Fourier Perspective","created":"2021-02-12","cited_by_count":18,"area":null},{"id":"2204.01960","title":"FaceSigns: Semi-Fragile Neural Watermarks for Media Authentication and Countering Deepfakes","created":"2022-04-05","cited_by_count":18,"area":"safety"},{"id":"2211.16421","title":"RGB no more: Minimally-decoded JPEG Vision Transformers","created":"2022-11-29","cited_by_count":18,"area":null},{"id":"2405.11109","title":"Watermarking Language Models for Many Adaptive Users","created":"2024-05-17","cited_by_count":18,"area":"safety"},{"id":"2407.07735","title":"Protecting NeRFs' Copyright via Plug-And-Play Watermarking Base Model","created":"2024-07-10","cited_by_count":18,"area":"safety"},{"id":"2409.13222","title":"3D-GSW: 3D Gaussian Splatting for Robust Watermarking","created":"2024-09-20","cited_by_count":18,"area":null},{"id":"2411.19895","title":"GuardSplat: Efficient and Robust Watermarking for 3D Gaussian Splatting","created":"2024-11-29","cited_by_count":18,"area":null},{"id":"2311.01357","title":"Robust Identity Perceptual Watermark Against Deepfake Face Swapping","created":"2023-11-02","cited_by_count":17,"area":"safety"},{"id":"2109.05673","title":"FaceGuard: Proactive Deepfake Detection","created":"2021-09-13","cited_by_count":16,"area":null},{"id":"2407.15100","title":"A General Framework for Data-Use Auditing of ML Models","created":"2024-07-21","cited_by_count":16,"area":null},{"id":"2506.16349","title":"Watermarking Autoregressive Image Generation","created":"2025-06-19","cited_by_count":16,"area":"safety"},{"id":"2207.13867","title":"Generative Steganography Network","created":"2022-07-28","cited_by_count":15,"area":null},{"id":"2307.16680","title":"On the Trustworthiness Landscape of State-of-the-art Generative Models: A Survey and Outlook","created":"2023-07-31","cited_by_count":15,"area":"diffusion"},{"id":"2310.14532","title":"Practical Deep Dispersed Watermarking with Synchronization and Fusion","created":"2023-10-23","cited_by_count":15,"area":null},{"id":"2410.22705","title":"Geometry Cloak: Preventing TGS-based 3D Reconstruction from Copyrighted Images","created":"2024-10-30","cited_by_count":15,"area":null},{"id":"2503.12172","title":"SEAL: Semantic Aware Image Watermarking","created":"2025-03-15","cited_by_count":15,"area":null},{"id":"2512.16874","title":"Pixel Seal: Adversarial-only training for invisible image and video watermarking","created":"2025-12-18","cited_by_count":15,"area":null},{"id":"2306.00419","title":"Challenges and Remedies to Privacy and Security in AIGC: Exploring the Potential of Privacy Computing, Blockchain, and Beyond","created":"2023-06-01","cited_by_count":14,"area":null},{"id":"2503.06118","title":"SecureGS: Boosting the Security and Fidelity of 3D Gaussian Splatting Steganography","created":"2025-03-08","cited_by_count":14,"area":null},{"id":"2509.07647","title":"Semantic Watermarking Reinvented: Enhancing Robustness and Generation Quality with Fourier Integrity","created":"2025-09-09","cited_by_count":14,"area":"diffusion"},{"id":"2109.04242","title":"IICNet: A Generic Framework for Reversible Image Conversion","created":"2021-09-09","cited_by_count":13,"area":null},{"id":"2309.06978","title":"Differentiable JPEG: The Devil is in the Details","created":"2023-09-13","cited_by_count":13,"area":null},{"id":"2404.17867","title":"Are Watermarks Bugs for Deepfake Detectors? Rethinking Proactive Forensics","created":"2024-04-27","cited_by_count":13,"area":"safety"},{"id":"2407.13188","title":"Safe-SD: Safe and Traceable Stable Diffusion with Text Prompt Trigger for Invisible Generative Watermarking","created":"2024-07-18","cited_by_count":12,"area":"diffusion"},{"id":"2510.20468","title":"Transferable Black-Box One-Shot Forging of Watermarks via Image Preference Models","created":"2025-10-23","cited_by_count":12,"area":"safety"},{"id":"2110.14196","title":"From Image to Imuge: Immunized Image Generation","created":"2021-10-27","cited_by_count":11,"area":null},{"id":"2407.01301","title":"GaussianStego: A Generalizable Stenography Pipeline for Generative 3D Gaussians Splatting","created":"2024-07-01","cited_by_count":11,"area":null},{"id":"2108.13003","title":"Embedding Novel Views in a Single JPEG Image","created":"2021-08-30","cited_by_count":10,"area":null},{"id":"2310.16919","title":"Wide Flat Minimum Watermarking for Robust Ownership Verification of GANs","created":"2023-10-25","cited_by_count":10,"area":null},{"id":"2402.17210","title":"Purified and Unified Steganographic Network","created":"2024-02-27","cited_by_count":10,"area":null},{"id":"2406.09026","title":"Steganalysis on Digital Watermarking: Is Your Defense Truly Impervious?","created":"2024-06-13","cited_by_count":10,"area":null}],"next_cursor":"100"}