{"total":66,"rows":[{"id":"2303.10137","title":"A Recipe for Watermarking Diffusion Models","created":"2023-03-17","cited_by_count":141,"area":"diffusion"},{"id":"2310.10669","title":"Unbiased Watermark for Large Language Models","created":"2023-09-22","cited_by_count":111,"area":"safety"},{"id":"2210.00968","title":"Membership Inference Attacks Against Text-to-image Generation Models","created":"2022-10-03","cited_by_count":69,"area":"safety"},{"id":"2109.08045","title":"Membership Inference Attacks Against Recommender Systems","created":"2021-09-16","cited_by_count":57,"area":"safety"},{"id":"2106.06916","title":"Non-Transferable Learning: A New Approach for Model Ownership Verification and Applicability Authorization","created":"2021-06-13","cited_by_count":52,"area":"safety"},{"id":"2201.11692","title":"SSLGuard: A Watermarking Scheme for Self-supervised Learning Pre-trained Encoders","created":"2022-01-27","cited_by_count":45,"area":null},{"id":"2410.14273","title":"REEF: Representation Encoding Fingerprints for Large Language Models","created":"2024-10-18","cited_by_count":36,"area":null},{"id":"2305.18339","title":"A Survey on ChatGPT: AI-Generated Contents, Challenges, and Solutions","created":"2023-05-25","cited_by_count":35,"area":null},{"id":"2211.07160","title":"FedTracker: Furnishing Ownership Verification and Traceability for Federated Learning Model","created":"2022-11-14","cited_by_count":30,"area":"safety"},{"id":"2208.11180","title":"Auditing Membership Leakages of Multi-Exit Networks","created":"2022-08-23","cited_by_count":27,"area":null},{"id":"2407.15098","title":"SeqMIA: Sequential-Metric Based Membership Inference Attack","created":"2024-07-21","cited_by_count":23,"area":"safety"},{"id":"2306.03436","title":"Intellectual Property Protection of Diffusion Models via the Watermark Diffusion Process","created":"2023-06-06","cited_by_count":19,"area":"diffusion"},{"id":"2211.07138","title":"Watermarking in Secure Federated Learning: A Verification Framework Based on Client-Side Backdooring","created":"2022-11-14","cited_by_count":17,"area":null},{"id":"2304.06607","title":"False Claims against Model Ownership Resolution","created":"2023-04-13","cited_by_count":17,"area":null},{"id":"2401.15239","title":"MEA-Defender: A Robust Watermark against Model Extraction Attack","created":"2024-01-26","cited_by_count":17,"area":"safety"},{"id":"2106.12478","title":"Teacher Model Fingerprinting Attacks Against Transfer Learning","created":"2021-06-23","cited_by_count":16,"area":null},{"id":"2202.12506","title":"On the Effectiveness of Dataset Watermarking in Adversarial Settings","created":"2022-02-25","cited_by_count":12,"area":null},{"id":"2304.11285","title":"Identifying Appropriate Intellectual Property Protection Mechanisms for Machine Learning Models: A Systematization of Watermarking, Fingerprinting, Model Access, and Attacks","created":"2023-04-22","cited_by_count":12,"area":"safety"},{"id":"2306.01356","title":"FedCIP: Federated Client Intellectual Property Protection with Traitor Tracking","created":"2023-06-02","cited_by_count":12,"area":"safety"},{"id":"2407.13188","title":"Safe-SD: Safe and Traceable Stable Diffusion with Text Prompt Trigger for Invisible Generative Watermarking","created":"2024-07-18","cited_by_count":12,"area":"diffusion"},{"id":"2509.09703","title":"CTCC: A Robust and Stealthy Fingerprinting Framework for Large Language Models via Cross-Turn Contextual Correlation Backdoor","created":"2025-09-05","cited_by_count":12,"area":"safety"},{"id":"2201.08217","title":"Watermarking Pre-trained Encoders in Contrastive Learning","created":"2022-01-20","cited_by_count":11,"area":null},{"id":"2310.16919","title":"Wide Flat Minimum Watermarking for Robust Ownership Verification of GANs","created":"2023-10-25","cited_by_count":10,"area":null},{"id":"2311.09535","title":"Turning Your Strength into Watermark: Watermarking Large Language Model via Knowledge Injection","created":"2023-11-16","cited_by_count":10,"area":"safety"},{"id":"2501.15509","title":"FIT-Print: Towards False-claim-resistant Model Ownership Verification via Targeted Fingerprint","created":"2025-01-26","cited_by_count":10,"area":null},{"id":"2509.26404","title":"SeedPrints: Fingerprints Can Even Tell Which Seed Your Large Language Model Was Trained From","created":"2025-09-30","cited_by_count":10,"area":null},{"id":"2209.03563","title":"SSL-WM: A Black-Box Watermarking Approach for Encoders Pre-trained by Self-supervised Learning","created":"2022-09-08","cited_by_count":9,"area":null},{"id":"2306.02368","title":"Revisiting Data-Free Knowledge Distillation with Poisoned Teachers","created":"2023-06-04","cited_by_count":9,"area":"safety"},{"id":"2303.10399","title":"FedRight: An Effective Model Copyright Protection for Federated Learning","created":"2023-03-18","cited_by_count":8,"area":null},{"id":"2404.05783","title":"A Survey on Responsible Generative AI: What to Generate and What Not","created":"2024-04-08","cited_by_count":8,"area":null},{"id":"2308.03573","title":"When Federated Learning meets Watermarking: A Comprehensive Overview of Techniques for Intellectual Property Protection","created":"2023-08-07","cited_by_count":7,"area":null},{"id":"2401.08261","title":"Probabilistically Robust Watermarking of Neural Networks","created":"2024-01-16","cited_by_count":7,"area":null},{"id":"2106.10147","title":"Evaluating the Robustness of Trigger Set-Based Watermarks Embedded in Deep Neural Networks","created":"2021-06-18","cited_by_count":6,"area":null},{"id":"2112.14108","title":"Fostering the Robustness of White-Box Deep Neural Network Watermarks by Neuron Alignment","created":"2021-12-28","cited_by_count":5,"area":null},{"id":"2403.03590","title":"DeepEclipse: How to Break White-Box DNN-Watermarking Schemes","created":"2024-03-06","cited_by_count":5,"area":null},{"id":"2407.11100","title":"Building Intelligence Identification System via Large Language Model Watermarking: A Survey and Beyond","created":"2024-07-15","cited_by_count":5,"area":"safety"},{"id":"2103.13628","title":"HufuNet: Embedding the Left Piece as Watermark and Keeping the Right Piece for Ownership Verification in Deep Neural Networks","created":"2021-03-25","cited_by_count":4,"area":null},{"id":"2403.04149","title":"MAP: MAsk-Pruning for Source-Free Model Intellectual Property Protection","created":"2024-03-07","cited_by_count":4,"area":null},{"id":"2510.16367","title":"EditMark: Watermarking Large Language Models based on Model Editing","created":"2025-10-18","cited_by_count":4,"area":"safety"},{"id":"2102.03523","title":"Ownership Verification of DNN Architectures via Hardware Cache Side Channels","created":"2021-02-06","cited_by_count":3,"area":"safety"},{"id":"2106.07303","title":"iNNformant: Boundary Samples as Telltale Watermarks","created":"2021-06-14","cited_by_count":3,"area":null},{"id":"2212.11133","title":"Device-Bind Key-Storageless Hardware AI Model IP Protection: A PUF and Permute-Diffusion Encryption-Enabled Approach","created":"2022-12-21","cited_by_count":3,"area":"safety"},{"id":"2312.06488","title":"Performance-lossless Black-box Model Watermarking","created":"2023-12-11","cited_by_count":3,"area":"safety"},{"id":"2602.20418","title":"CITED: A Decision Boundary-Aware Signature for GNNs Towards Model Extraction Defense","created":"2026-02-23","cited_by_count":3,"area":null},{"id":"2206.02541","title":"PCPT and ACPT: Copyright Protection and Traceability Scheme for DNN Models","created":"2022-06-06","cited_by_count":2,"area":"safety"},{"id":"2305.12391","title":"Generative Model Watermarking Suppressing High-Frequency Artifacts","created":"2023-05-21","cited_by_count":2,"area":"safety"},{"id":"2309.03466","title":"Neural Dehydration: Effective Erasure of Black-box Watermarks from DNNs with Limited Data","created":"2023-09-07","cited_by_count":2,"area":null},{"id":"2310.10124","title":"A Comprehensive Study of Privacy Risks in Curriculum Learning","created":"2023-10-16","cited_by_count":2,"area":null},{"id":"2403.10663","title":"Not Just Change the Labels, Learn the Features: Watermarking Deep Neural Networks with Multi-View Data","created":"2024-03-15","cited_by_count":2,"area":null},{"id":"2410.08015","title":"Non-transferable Pruning","created":"2024-10-10","cited_by_count":2,"area":null},{"id":"2503.23748","title":"THEMIS: Towards Practical Intellectual Property Protection for Post-Deployment On-Device Deep Learning Models","created":"2025-03-31","cited_by_count":2,"area":"safety"},{"id":"2106.11760","title":"Fingerprinting Image-to-Image Generative Adversarial Networks","created":"2021-06-19","cited_by_count":1,"area":null},{"id":"2110.09814","title":"Speech Pattern based Black-box Model Watermarking for Automatic Speech Recognition","created":"2021-10-19","cited_by_count":1,"area":"safety"},{"id":"2208.04676","title":"DeepHider: A Covert NLP Watermarking Framework Based on Multi-task Learning","created":"2022-08-09","cited_by_count":1,"area":"safety"},{"id":"2302.10296","title":"On Function-Coupled Watermarks for Deep Neural Networks","created":"2023-02-08","cited_by_count":1,"area":null},{"id":"2306.05233","title":"Ownership Protection of Generative Adversarial Networks","created":"2023-06-08","cited_by_count":1,"area":null},{"id":"2410.20202","title":"An Efficient Watermarking Method for Latent Diffusion Models via Low-Rank Adaptation and Dynamic Loss Weighting","created":"2024-10-26","cited_by_count":1,"area":"diffusion"},{"id":"2506.08602","title":"WGLE:Backdoor-free and Multi-bit Black-box Watermarking for Graph Neural Networks","created":"2025-06-10","cited_by_count":1,"area":null},{"id":"2507.22000","title":"Staining and locking computer vision models without retraining","created":"2025-07-29","cited_by_count":1,"area":null},{"id":"2211.13644","title":"Seeds Don't Lie: An Adaptive Watermarking Framework for Computer Vision Models","created":"2022-11-24","cited_by_count":0,"area":"safety"},{"id":"2301.03596","title":"Membership Inference Attacks Against Latent Factor Model","created":"2022-12-15","cited_by_count":0,"area":"safety"},{"id":"2310.16453","title":"ClearMark: Intuitive and Robust Model Watermarking via Transposed Model Training","created":"2023-10-25","cited_by_count":0,"area":"safety"},{"id":"2405.04108","title":"A2-DIDM: Privacy-preserving Accumulator-enabled Auditing for Distributed Identity of DNN Model","created":"2024-05-07","cited_by_count":0,"area":null},{"id":"2407.21034","title":"Watermarking Recommender Systems","created":"2024-07-17","cited_by_count":0,"area":null},{"id":"2508.06676","title":"Watermarking Kolmogorov-Arnold Networks for Emerging Networked Applications via Activation Perturbation","created":"2025-08-08","cited_by_count":0,"area":null},{"id":"2601.22692","title":"FNF: Functional Network Fingerprint for Large Language Models","created":"2026-01-30","cited_by_count":0,"area":null}],"next_cursor":null}