{"total":265,"rows":[{"id":"2306.01953","title":"Invisible Image Watermarks Are Provably Removable Using Generative AI","created":"2023-06-02","cited_by_count":134,"area":"safety"},{"id":"2108.08211","title":"MBRS : Enhancing Robustness of DNN-based Watermarking by Mini-Batch of Real and Simulated JPEG Compression","created":"2021-08-18","cited_by_count":110,"area":null},{"id":"2410.18775","title":"Robust Watermarking Using Generative Priors Against Image Editing: From Benchmarking to Advances","created":"2024-10-24","cited_by_count":110,"area":"safety"},{"id":"2401.08573","title":"WAVES: Benchmarking the Robustness of Image Watermarks","created":"2024-01-16","cited_by_count":97,"area":null},{"id":"2410.07971","title":"Generalizable and Animatable Gaussian Head Avatar","created":"2024-10-10","cited_by_count":97,"area":null},{"id":"2404.14055","title":"RingID: Rethinking Tree-Ring Watermarking for Enhanced Multi-Key Identification","created":"2024-04-22","cited_by_count":91,"area":null},{"id":"2311.04378","title":"Watermarks in the Sand: Impossibility of Strong Watermarking for Generative Models","created":"2023-11-07","cited_by_count":87,"area":"safety"},{"id":"2310.00076","title":"Robustness of AI-Image Detectors: Fundamental Limits and Practical Attacks","created":"2023-09-29","cited_by_count":81,"area":"safety"},{"id":"2410.07369","title":"An Undetectable Watermark for Generative Image Models","created":"2024-10-09","cited_by_count":81,"area":"diffusion"},{"id":"2305.03807","title":"Evading Watermark based Detection of AI-Generated Content","created":"2023-05-05","cited_by_count":78,"area":"safety"},{"id":"2209.11715","title":"The \"Beatrix'' Resurrections: Robust Backdoor Detection via Gram Matrices","created":"2022-09-23","cited_by_count":63,"area":null},{"id":"2209.03942","title":"Data Feedback Loops: Model-driven Amplification of Dataset Biases","created":"2022-09-08","cited_by_count":60,"area":null},{"id":"2304.03400","title":"RoSteALS: Robust Steganography using Autoencoder Latent Space","created":"2023-04-06","cited_by_count":57,"area":"safety"},{"id":"2103.04980","title":"Deep Model Intellectual Property Protection via Deep Watermarking","created":"2021-03-08","cited_by_count":54,"area":"safety"},{"id":"2306.04744","title":"WOUAF: Weight Modulation for User Attribution and Fingerprinting in Text-to-Image Diffusion Models","created":"2023-06-07","cited_by_count":53,"area":"diffusion"},{"id":"2411.07231","title":"Watermark Anything with Localized Messages","created":"2024-11-11","cited_by_count":53,"area":null},{"id":"2412.03283","title":"Black-Box Forgery Attacks on Semantic Watermarks for Diffusion Models","created":"2024-12-04","cited_by_count":52,"area":"diffusion"},{"id":"2311.18297","title":"TrustMark: Universal Watermarking for Arbitrary Resolution Images","created":"2023-11-30","cited_by_count":51,"area":null},{"id":"2411.18479","title":"SoK: Watermarking for AI-Generated Content","created":"2024-11-27","cited_by_count":51,"area":"safety"},{"id":"2410.05470","title":"Image Watermarks are Removable Using Controllable Regeneration from Clean Noise","created":"2024-10-07","cited_by_count":50,"area":null},{"id":"2112.07873","title":"Tracing Text Provenance via Context-Aware Lexical Substitution","created":"2021-12-15","cited_by_count":45,"area":"safety"},{"id":"2305.06321","title":"SepMark: Deep Separable Watermarking for Unified Source Tracing and Deepfake Detection","created":"2023-05-10","cited_by_count":44,"area":"safety"},{"id":"2306.04642","title":"DiffusionShield: A Watermark for Copyright Protection against Generative Diffusion Models","created":"2023-05-25","cited_by_count":43,"area":"diffusion"},{"id":"2209.03466","title":"Supervised GAN Watermarking for Intellectual Property Protection","created":"2022-09-07","cited_by_count":40,"area":null},{"id":"2402.02333","title":"Copyright Protection in Generative AI: A Technical Perspective","created":"2024-02-04","cited_by_count":38,"area":null},{"id":"2203.15880","title":"Proactive Image Manipulation Detection","created":"2022-03-29","cited_by_count":35,"area":null},{"id":"2401.04247","title":"Attack-Resilient Image Watermarking Using Stable Diffusion","created":"2024-01-08","cited_by_count":35,"area":"diffusion"},{"id":"2403.10893","title":"A Watermark-Conditioned Diffusion Model for IP Protection","created":"2024-03-16","cited_by_count":35,"area":"diffusion"},{"id":"2307.11526","title":"CopyRNeRF: Protecting the CopyRight of Neural Radiance Fields","created":"2023-07-21","cited_by_count":34,"area":null},{"id":"2212.01602","title":"StegaNeRF: Embedding Invisible Information within Neural Radiance Fields","created":"2022-12-03","cited_by_count":32,"area":null},{"id":"2406.08337","title":"WMAdapter: Adding WaterMark Control to Latent Diffusion Models","created":"2024-06-12","cited_by_count":31,"area":"diffusion"},{"id":"2412.04852","title":"SleeperMark: Towards Robust Watermark against Fine-Tuning Text-to-image Diffusion Models","created":"2024-12-06","cited_by_count":29,"area":"diffusion"},{"id":"2205.03190","title":"Imperceptible Backdoor Attack: From Input Space to Feature Representation","created":"2022-05-06","cited_by_count":27,"area":null},{"id":"2403.15365","title":"A Transfer Attack to Image Watermarks","created":"2024-03-22","cited_by_count":27,"area":null},{"id":"2112.09151","title":"TAFIM: Targeted Adversarial Attacks against Facial Image Manipulations","created":"2021-12-16","cited_by_count":26,"area":null},{"id":"2405.13360","title":"How to Trace Latent Generative Model Generated Images without Artificial Watermark?","created":"2024-05-22","cited_by_count":26,"area":"diffusion"},{"id":"2107.09287","title":"Data Hiding with Deep Learning: A Survey Unifying Digital Watermarking and Steganography","created":"2021-07-20","cited_by_count":24,"area":null},{"id":"2104.13450","title":"Deep 3D-to-2D Watermarking: Embedding Messages in 3D Meshes and Extracting Them from 2D Renderings","created":"2021-04-27","cited_by_count":23,"area":null},{"id":"2306.07754","title":"Generative Watermarking Against Unauthorized Subject-Driven Image Synthesis","created":"2023-06-13","cited_by_count":23,"area":"safety"},{"id":"2404.09401","title":"Watermark-embedded Adversarial Examples for Copyright Protection against Diffusion Models","created":"2024-04-15","cited_by_count":23,"area":"diffusion"},{"id":"2411.07795","title":"InvisMark: Invisible and Robust Watermarking for AI-generated Image Provenance","created":"2024-11-10","cited_by_count":23,"area":"safety"},{"id":"2207.00757","title":"PhotoScene: Photorealistic Material and Lighting Transfer for Indoor Scenes","created":"2022-07-02","cited_by_count":22,"area":null},{"id":"2304.12300","title":"Large-capacity and Flexible Video Steganography via Invertible Neural Network","created":"2023-04-24","cited_by_count":21,"area":null},{"id":"2405.02696","title":"DiffuseTrace: A Transparent and Flexible Watermarking Scheme for Latent Diffusion Model","created":"2024-05-04","cited_by_count":21,"area":"diffusion"},{"id":"2410.23718","title":"GaussianMarker: Uncertainty-Aware Copyright Protection of 3D Gaussian Splatting","created":"2024-10-31","cited_by_count":21,"area":null},{"id":"2302.09457","title":"Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective","created":"2023-02-19","cited_by_count":20,"area":null},{"id":"2405.07145","title":"Stable Signature is Unstable: Removing Image Watermark from Diffusion Models","created":"2024-05-12","cited_by_count":20,"area":"diffusion"},{"id":"2404.00230","title":"Latent Watermark: Inject and Detect Watermarks in Latent Diffusion Space","created":"2024-03-30","cited_by_count":19,"area":"diffusion"},{"id":"2204.01960","title":"FaceSigns: Semi-Fragile Neural Watermarks for Media Authentication and Countering Deepfakes","created":"2022-04-05","cited_by_count":18,"area":"safety"},{"id":"2407.07735","title":"Protecting NeRFs' Copyright via Plug-And-Play Watermarking Base Model","created":"2024-07-10","cited_by_count":18,"area":"safety"},{"id":"2411.19895","title":"GuardSplat: Efficient and Robust Watermarking for 3D Gaussian Splatting","created":"2024-11-29","cited_by_count":18,"area":null},{"id":"2311.01357","title":"Robust Identity Perceptual Watermark Against Deepfake Face Swapping","created":"2023-11-02","cited_by_count":17,"area":"safety"},{"id":"2404.02697","title":"Which Model Generated This Image? A Model-Agnostic Approach for Origin Attribution","created":"2024-04-03","cited_by_count":16,"area":null},{"id":"2407.15100","title":"A General Framework for Data-Use Auditing of ML Models","created":"2024-07-21","cited_by_count":16,"area":null},{"id":"2506.16349","title":"Watermarking Autoregressive Image Generation","created":"2025-06-19","cited_by_count":16,"area":"safety"},{"id":"2503.12172","title":"SEAL: Semantic Aware Image Watermarking","created":"2025-03-15","cited_by_count":15,"area":null},{"id":"2411.11478","title":"SoK: On the Role and Future of AIGC Watermarking in the Era of Gen-AI","created":"2024-11-18","cited_by_count":14,"area":"safety"},{"id":"2509.07647","title":"Semantic Watermarking Reinvented: Enhancing Robustness and Generation Quality with Fourier Integrity","created":"2025-09-09","cited_by_count":14,"area":"diffusion"},{"id":"2109.04242","title":"IICNet: A Generic Framework for Reversible Image Conversion","created":"2021-09-09","cited_by_count":13,"area":null},{"id":"2404.17867","title":"Are Watermarks Bugs for Deepfake Detectors? Rethinking Proactive Forensics","created":"2024-04-27","cited_by_count":13,"area":"safety"},{"id":"2504.20111","title":"Forging and Removing Latent-Noise Diffusion Watermarks Using a Single Image","created":"2025-04-27","cited_by_count":13,"area":"diffusion"},{"id":"2305.03713","title":"Avatar Fingerprinting for Authorized Use of Synthetic Talking-Head Videos","created":"2023-05-05","cited_by_count":11,"area":null},{"id":"2407.01301","title":"GaussianStego: A Generalizable Stenography Pipeline for Generative 3D Gaussians Splatting","created":"2024-07-01","cited_by_count":11,"area":null},{"id":"2108.13003","title":"Embedding Novel Views in a Single JPEG Image","created":"2021-08-30","cited_by_count":10,"area":null},{"id":"2310.16919","title":"Wide Flat Minimum Watermarking for Robust Ownership Verification of GANs","created":"2023-10-25","cited_by_count":10,"area":null},{"id":"2406.09026","title":"Steganalysis on Digital Watermarking: Is Your Defense Truly Impervious?","created":"2024-06-13","cited_by_count":10,"area":null},{"id":"2509.00757","title":"MarkSplatter: Generalizable Watermarking for 3D Gaussian Splatting Model via Splatter Image Structure","created":"2025-08-31","cited_by_count":10,"area":"safety"},{"id":"2103.01607","title":"A Brief Survey on Deep Learning Based Data Hiding","created":"2021-03-02","cited_by_count":9,"area":null},{"id":"2406.03720","title":"JIGMARK: A Black-Box Approach for Enhancing Image Watermarks against Diffusion Model Edits","created":"2024-06-06","cited_by_count":9,"area":"diffusion"},{"id":"2502.04901","title":"On the Difficulty of Constructing a Robust and Publicly-Detectable Watermark","created":"2025-02-07","cited_by_count":9,"area":null},{"id":"2504.12739","title":"Mask Image Watermarking","created":"2025-04-17","cited_by_count":9,"area":null},{"id":"2508.21072","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","created":"2025-08-28","cited_by_count":9,"area":null},{"id":"2309.05940","title":"Catch You Everything Everywhere: Guarding Textual Inversion via Concept Watermarking","created":"2023-09-12","cited_by_count":8,"area":"safety"},{"id":"2310.07726","title":"Warfare:Breaking the Watermark Protection of AI-Generated Content","created":"2023-09-27","cited_by_count":8,"area":"safety"},{"id":"2403.18774","title":"RAW: A Robust and Agile Plug-and-Play Watermark Framework for AI-Generated Images with Provable Guarantees","created":"2024-01-23","cited_by_count":8,"area":"safety"},{"id":"2404.04254","title":"Watermark-based Attribution of AI-Generated Content","created":"2024-04-05","cited_by_count":8,"area":"safety"},{"id":"2506.01011","title":"Autoregressive Images Watermarking through Lexical Biasing: An Approach Resistant to Regeneration Attack","created":"2025-06-01","cited_by_count":8,"area":"safety"},{"id":"2411.13553","title":"AI-generated Image Detection: Passive or Watermark?","created":"2024-11-20","cited_by_count":7,"area":"safety"},{"id":"2502.13998","title":"A Baseline Method for Removing Invisible Image Watermarks using Deep Image Prior","created":"2025-02-19","cited_by_count":7,"area":null},{"id":"2112.13491","title":"A Compact Neural Network-based Algorithm for Robust Image Watermarking","created":"2021-12-27","cited_by_count":6,"area":null},{"id":"2302.01740","title":"SoK: A Systematic Evaluation of Backdoor Trigger Characteristics in Image Classification","created":"2023-02-03","cited_by_count":6,"area":null},{"id":"2307.16176","title":"InvVis: Large-Scale Data Embedding for Invertible Visualization","created":"2023-07-30","cited_by_count":6,"area":null},{"id":"2310.00626","title":"GhostEncoder: Stealthy Backdoor Attacks with Dynamic Triggers to Pre-trained Encoders in Self-supervised Learning","created":"2023-10-01","cited_by_count":6,"area":"safety"},{"id":"2311.05478","title":"Robust Retraining-free GAN Fingerprinting via Personalized Normalization","created":"2023-11-09","cited_by_count":6,"area":"safety"},{"id":"2311.17177","title":"THInImg: Cross-modal Steganography for Presenting Talking Heads in Images","created":"2023-11-28","cited_by_count":6,"area":null},{"id":"2407.13390","title":"GeometrySticker: Enabling Ownership Claim of Recolorized Neural Radiance Fields","created":"2024-07-18","cited_by_count":6,"area":null},{"id":"2410.01906","title":"Social Media Authentication and Combating Deepfakes using Semi-fragile Invisible Image Watermarking","created":"2024-10-02","cited_by_count":6,"area":"safety"},{"id":"2503.18718","title":"GS-Marker: Generalizable and Robust Watermarking for 3D Gaussian Splatting","created":"2025-03-24","cited_by_count":6,"area":null},{"id":"2503.22330","title":"WMCopier: Forging Invisible Image Watermarks on Arbitrary Images","created":"2025-03-28","cited_by_count":6,"area":null},{"id":"2510.13793","title":"NoisePrints: Distortion-Free Watermarks for Authorship in Private Diffusion Models","created":"2025-10-15","cited_by_count":6,"area":"diffusion"},{"id":"2309.03815","title":"T2IW: Joint Text to Image & Watermark Generation","created":"2023-09-07","cited_by_count":5,"area":"safety"},{"id":"2403.06452","title":"Text2QR: Harmonizing Aesthetic Customization and Scanning Robustness for Text-Guided QR Code Generation","created":"2024-03-11","cited_by_count":5,"area":"diffusion"},{"id":"2404.05607","title":"MarkPlugger: Generalizable Watermark Framework for Latent Diffusion Models without Retraining","created":"2024-04-08","cited_by_count":5,"area":"diffusion"},{"id":"2405.10612","title":"Not All Prompts Are Secure: A Switchable Backdoor Attack Against Pre-trained Vision Transformers","created":"2024-05-17","cited_by_count":5,"area":"safety"},{"id":"2405.16414","title":"Robust Message Embedding via Attention Flow-Based Steganography","created":"2024-05-26","cited_by_count":5,"area":null},{"id":"2505.08614","title":"WaveGuard: Robust Deepfake Detection and Source Tracing via Dual-Tree Complex Wavelet and Graph Neural Networks","created":"2025-05-13","cited_by_count":5,"area":null},{"id":"2505.21620","title":"VideoMarkBench: Benchmarking Robustness of Video Watermarking","created":"2025-05-27","cited_by_count":5,"area":null},{"id":"2506.21209","title":"BitMark: Watermarking Bitwise Autoregressive Image Generative Models","created":"2025-06-26","cited_by_count":5,"area":"safety"},{"id":"2507.08983","title":"Exploiting Leaderboards for Large-Scale Distribution of Malicious Models","created":"2025-07-11","cited_by_count":5,"area":null},{"id":"2510.02384","title":"Secure and Robust Watermarking for AI-generated Images: A Comprehensive Survey","created":"2025-09-30","cited_by_count":5,"area":"safety"}],"next_cursor":"100"}