{"total":88,"rows":[{"id":"2303.10137","title":"A Recipe for Watermarking Diffusion Models","created":"2023-03-17","cited_by_count":141,"area":"diffusion"},{"id":"2103.06922","title":"Towards Interpreting and Mitigating Shortcut Learning Behavior of NLU Models","created":"2021-03-11","cited_by_count":78,"area":null},{"id":"2103.04980","title":"Deep Model Intellectual Property Protection via Deep Watermarking","created":"2021-03-08","cited_by_count":54,"area":"safety"},{"id":"2106.06916","title":"Non-Transferable Learning: A New Approach for Model Ownership Verification and Applicability Authorization","created":"2021-06-13","cited_by_count":52,"area":"safety"},{"id":"2210.07543","title":"Watermarking Pre-trained Language Models with Backdooring","created":"2022-10-14","cited_by_count":50,"area":"safety"},{"id":"2102.04362","title":"Protecting Intellectual Property of Generative Adversarial Networks from Ambiguity Attack","created":"2021-02-08","cited_by_count":46,"area":null},{"id":"2112.05588","title":"Copy, Right? A Testing Framework for Copyright Protection of Deep Learning Models","created":"2021-12-10","cited_by_count":46,"area":"safety"},{"id":"2405.04825","title":"Explanation as a Watermark: Towards Harmless and Multi-bit Model Ownership Verification via Watermarking Feature Attribution","created":"2024-05-08","cited_by_count":40,"area":"safety"},{"id":"2105.07381","title":"Undistillable: Making A Nasty Teacher That CANNOT teach students","created":"2021-05-16","cited_by_count":36,"area":"distill"},{"id":"2109.13236","title":"FedIPR: Ownership Verification for Federated Deep Neural Network Models","created":"2021-09-27","cited_by_count":36,"area":"safety"},{"id":"2305.18339","title":"A Survey on ChatGPT: AI-Generated Contents, Challenges, and Solutions","created":"2023-05-25","cited_by_count":35,"area":null},{"id":"2312.04828","title":"HuRef: HUman-REadable Fingerprint for Large Language Models","created":"2023-12-08","cited_by_count":34,"area":null},{"id":"2106.08890","title":"ModelDiff: Testing-Based DNN Similarity Comparison for Model Reuse Detection","created":"2021-06-11","cited_by_count":33,"area":null},{"id":"2211.07160","title":"FedTracker: Furnishing Ownership Verification and Traceability for Federated Learning Model","created":"2022-11-14","cited_by_count":30,"area":"safety"},{"id":"2210.15427","title":"Are You Stealing My Model? Sample Correlation for Fingerprinting Deep Neural Networks","created":"2022-10-21","cited_by_count":21,"area":null},{"id":"2502.12176","title":"Ten Challenging Problems in Federated Foundation Models","created":"2025-02-14","cited_by_count":20,"area":"safety"},{"id":"2111.00162","title":"You are caught stealing my winning lottery ticket! Making a lottery ticket claim its ownership","created":"2021-10-30","cited_by_count":18,"area":null},{"id":"2304.06607","title":"False Claims against Model Ownership Resolution","created":"2023-04-13","cited_by_count":17,"area":null},{"id":"2305.00097","title":"NNSplitter: An Active Defense Solution for DNN Model via Automated Weight Obfuscation","created":"2023-04-28","cited_by_count":16,"area":"safety"},{"id":"2105.14756","title":"A Protection Method of Trained CNN Model with Secret Key from Unauthorized Access","created":"2021-05-31","cited_by_count":15,"area":null},{"id":"2310.11446","title":"Functional Invariants to Watermark Large Transformers","created":"2023-10-17","cited_by_count":15,"area":null},{"id":"2303.11078","title":"Model Barrier: A Compact Un-Transferable Isolation Domain for Model Intellectual Property Protection","created":"2023-03-20","cited_by_count":14,"area":null},{"id":"2306.00419","title":"Challenges and Remedies to Privacy and Security in AIGC: Exploring the Potential of Privacy Computing, Blockchain, and Beyond","created":"2023-06-01","cited_by_count":14,"area":null},{"id":"2407.10886","title":"SLIP: Securing LLMs IP Using Weights Decomposition","created":"2024-07-15","cited_by_count":14,"area":null},{"id":"2105.13697","title":"AdvParams: An Active DNN Intellectual Property Protection Technique via Adversarial Perturbation Based Parameter Encryption","created":"2021-05-28","cited_by_count":13,"area":"safety"},{"id":"2109.13012","title":"Federated Deep Learning with Bayesian Privacy","created":"2021-09-27","cited_by_count":13,"area":null},{"id":"2304.11285","title":"Identifying Appropriate Intellectual Property Protection Mechanisms for Machine Learning Models: A Systematization of Watermarking, Fingerprinting, Model Access, and Attacks","created":"2023-04-22","cited_by_count":12,"area":"safety"},{"id":"2306.01356","title":"FedCIP: Federated Client Intellectual Property Protection with Traitor Tracking","created":"2023-06-02","cited_by_count":12,"area":"safety"},{"id":"2201.08217","title":"Watermarking Pre-trained Encoders in Contrastive Learning","created":"2022-01-20","cited_by_count":11,"area":null},{"id":"2104.04241","title":"Piracy-Resistant DNN Watermarking by Block-Wise Image Transformation with Secret Key","created":"2021-04-09","cited_by_count":10,"area":null},{"id":"2209.03885","title":"A Framework for Evaluating Privacy-Utility Trade-off in Vertical Federated Learning","created":"2022-09-08","cited_by_count":10,"area":null},{"id":"2301.12623","title":"FedPass: Privacy-Preserving Vertical Federated Deep Learning with Adaptive Obfuscation","created":"2023-01-30","cited_by_count":10,"area":null},{"id":"2307.15860","title":"What can Discriminator do? Towards Box-free Ownership Verification of Generative Adversarial Network","created":"2023-07-29","cited_by_count":10,"area":null},{"id":"2309.04777","title":"Towards Robust Model Watermark via Reducing Parametric Vulnerability","created":"2023-09-09","cited_by_count":10,"area":"safety"},{"id":"2310.16919","title":"Wide Flat Minimum Watermarking for Robust Ownership Verification of GANs","created":"2023-10-25","cited_by_count":10,"area":null},{"id":"2312.03205","title":"Who Leaked the Model? Tracking IP Infringers in Accountable Federated Learning","created":"2023-12-06","cited_by_count":10,"area":"safety"},{"id":"2501.15509","title":"FIT-Print: Towards False-claim-resistant Model Ownership Verification via Targeted Fingerprint","created":"2025-01-26","cited_by_count":10,"area":null},{"id":"2305.04507","title":"FedZKP: Federated Model Ownership Verification with Zero-knowledge Proof","created":"2023-05-08","cited_by_count":9,"area":null},{"id":"2308.03573","title":"When Federated Learning meets Watermarking: A Comprehensive Overview of Techniques for Intellectual Property Protection","created":"2023-08-07","cited_by_count":7,"area":null},{"id":"2408.13161","title":"Say No to Freeloader: Protecting Intellectual Property of Your Deep Model","created":"2024-08-23","cited_by_count":7,"area":null},{"id":"2103.05590","title":"Robust Black-box Watermarking for Deep NeuralNetwork using Inverse Document Frequency","created":"2021-03-09","cited_by_count":6,"area":null},{"id":"2106.10147","title":"Evaluating the Robustness of Trigger Set-Based Watermarks Embedded in Deep Neural Networks","created":"2021-06-18","cited_by_count":6,"area":null},{"id":"2205.04145","title":"Verifying Integrity of Deep Ensemble Models by Lossless Black-box Watermarking with Sensitive Samples","created":"2022-05-09","cited_by_count":6,"area":"safety"},{"id":"2511.18772","title":"Re-Key-Free, Risky-Free: Adaptable Model Usage Control","created":"2025-11-24","cited_by_count":6,"area":null},{"id":"2208.10973","title":"Robust and Large-Payload DNN Watermarking via Fixed, Distribution-Optimized, Weights","created":"2022-08-23","cited_by_count":5,"area":null},{"id":"2309.11013","title":"ModelGiF: Gradient Fields for Model Functional Distance","created":"2023-09-20","cited_by_count":5,"area":null},{"id":"2509.18886","title":"Confidential LLM Inference: Performance and Cost Across CPU and GPU TEEs","created":"2025-09-23","cited_by_count":5,"area":null},{"id":"2103.13628","title":"HufuNet: Embedding the Left Piece as Watermark and Keeping the Right Piece for Ownership Verification in Deep Neural Networks","created":"2021-03-25","cited_by_count":4,"area":null},{"id":"2109.00224","title":"A Protection Method of Trained CNN Model Using Feature Maps Transformed With Secret Key From Unauthorized Access","created":"2021-09-01","cited_by_count":4,"area":null},{"id":"2109.01332","title":"Access Control Using Spatially Invariant Permutation of Feature Maps for Semantic Segmentation Models","created":"2021-09-03","cited_by_count":4,"area":null},{"id":"2208.03948","title":"AWEncoder: Adversarial Watermarking Pre-trained Encoders in Contrastive Learning","created":"2022-08-08","cited_by_count":4,"area":null},{"id":"2210.11728","title":"Distilling the Undistillable: Learning from a Nasty Teacher","created":"2022-10-21","cited_by_count":4,"area":"distill"},{"id":"2305.06085","title":"FedSOV: Federated Model Secure Ownership Verification with Unforgeable Signature","created":"2023-05-10","cited_by_count":4,"area":null},{"id":"2202.06091","title":"TATTOOED: A Robust Deep Neural Network Watermarking Scheme based on Spread-Spectrum Channel Coding","created":"2022-02-12","cited_by_count":3,"area":null},{"id":"2206.05422","title":"Access Control of Semantic Segmentation Models Using Encrypted Feature Maps","created":"2022-06-11","cited_by_count":3,"area":null},{"id":"2307.02140","title":"Towards Open Federated Learning Platforms: Survey and Vision from Technical and Legal Perspectives","created":"2023-07-05","cited_by_count":3,"area":null},{"id":"2511.04711","title":"SWAP: Towards Copyright Auditing of Soft Prompts via Sequential Watermarking","created":"2025-11-05","cited_by_count":3,"area":"mllm"},{"id":"2206.02541","title":"PCPT and ACPT: Copyright Protection and Traceability Scheme for DNN Models","created":"2022-06-06","cited_by_count":2,"area":"safety"},{"id":"2305.09684","title":"Decision-based iterative fragile watermarking for model integrity verification","created":"2023-05-13","cited_by_count":2,"area":"safety"},{"id":"2305.12391","title":"Generative Model Watermarking Suppressing High-Frequency Artifacts","created":"2023-05-21","cited_by_count":2,"area":"safety"},{"id":"2403.05181","title":"Adversarial Sparse Teacher: Defense Against Distillation-Based Model Stealing Attacks Using Adversarial Examples","created":"2024-03-08","cited_by_count":2,"area":null},{"id":"2409.16491","title":"Proactive Schemes: A Survey of Adversarial Attacks for Social Good","created":"2024-09-24","cited_by_count":2,"area":null},{"id":"2507.11137","title":"Hashed Watermark as a Filter: Defeating Forging and Overwriting Attacks in Weight-based Neural Network Watermarking","created":"2025-07-15","cited_by_count":2,"area":null},{"id":"2603.21411","title":"Fingerprinting Deep Neural Networks for Ownership Protection: An Analytical Approach","created":"2026-03-22","cited_by_count":2,"area":null},{"id":"2103.01527","title":"ActiveGuard: An Active DNN IP Protection Technique via Adversarial Examples","created":"2021-03-02","cited_by_count":1,"area":"safety"},{"id":"2103.03525","title":"Transfer Learning-Based Model Protection With Secret Key","created":"2021-03-05","cited_by_count":1,"area":null},{"id":"2105.07078","title":"High-Robustness, Low-Transferability Fingerprinting of Neural Networks","created":"2021-05-14","cited_by_count":1,"area":null},{"id":"2202.00265","title":"Access Control of Object Detection Models Using Encrypted Feature Maps","created":"2022-02-01","cited_by_count":1,"area":null},{"id":"2208.05477","title":"Customized Watermarking for Deep Neural Networks via Label Distribution Perturbation","created":"2022-08-10","cited_by_count":1,"area":null},{"id":"2209.14831","title":"Access Control with Encrypted Feature Maps for Object Detection Models","created":"2022-09-29","cited_by_count":1,"area":null},{"id":"2302.10296","title":"On Function-Coupled Watermarks for Deep Neural Networks","created":"2023-02-08","cited_by_count":1,"area":null},{"id":"2501.01194","title":"A Game Between the Defender and the Attacker for Trigger-based Black-box Model Watermarking","created":"2025-01-02","cited_by_count":1,"area":"safety"},{"id":"2502.05931","title":"Protecting Intellectual Property of EEG-based Neural Networks with Watermarking","created":"2025-02-09","cited_by_count":1,"area":null},{"id":"2509.25613","title":"SMS: Self-supervised Model Seeding for Verification of Machine Unlearning","created":"2025-09-30","cited_by_count":1,"area":"safety"},{"id":"2603.12089","title":"EmbTracker: Traceable Black-box Watermarking for Federated Language Models","created":"2026-03-12","cited_by_count":1,"area":"safety"},{"id":"2111.08927","title":"Protection of SVM Model with Secret Key from Unauthorized Access","created":"2021-11-17","cited_by_count":0,"area":null},{"id":"2211.13644","title":"Seeds Don't Lie: An Adaptive Watermarking Framework for Computer Vision Models","created":"2022-11-24","cited_by_count":0,"area":"safety"},{"id":"2303.12397","title":"Edge Deep Learning Model Protection via Neuron Authorization","created":"2023-03-22","cited_by_count":0,"area":null},{"id":"2306.13215","title":"OVLA: Neural Network Ownership Verification using Latent Watermarks","created":"2023-06-15","cited_by_count":0,"area":null},{"id":"2308.11235","title":"Adaptive White-Box Watermarking with Self-Mutual Check Parameters in Deep Neural Networks","created":"2023-08-22","cited_by_count":0,"area":null},{"id":"2406.01085","title":"FedAdOb: Privacy-Preserving Federated Deep Learning with Adaptive Obfuscation","created":"2024-06-03","cited_by_count":0,"area":null},{"id":"2411.00380","title":"DeepCore: Simple Fingerprint Construction for Differentiating Homologous and Piracy Models","created":"2024-11-01","cited_by_count":0,"area":null},{"id":"2505.24536","title":"CHIP: Chameleon Hash-based Irreversible Passport for Robust Deep Model Ownership Verification and Active Usage Control","created":"2025-05-30","cited_by_count":0,"area":"safety"},{"id":"2507.18036","title":"NWaaS: A Non-Intrusive and Privacy-Preserving Watermarking-as-a-Service System with Adaptive Resource Scheduling","created":"2025-07-24","cited_by_count":0,"area":null},{"id":"2510.08925","title":"Defense against Unauthorized Distillation in Image Restoration via Feature Space Perturbation","created":"2025-10-10","cited_by_count":0,"area":"distill"},{"id":"2606.17122","title":"TrustErase: Auditable Instant Machine Unlearning with Passport-Embedded Representations","created":"2026-06-15","cited_by_count":0,"area":"safety"},{"id":"2606.17123","title":"LineageMark: Multi-user White-box Watermarking for Contribution Tracing in Model Derivation Chains","created":"2026-06-15","cited_by_count":0,"area":"safety"},{"id":"2609.24084","title":"From Bits to Beliefs: Recoverable Semantic Fingerprints for Black-Box Verification of Large Language Models","created":"2026-09-21","cited_by_count":0,"area":null}],"next_cursor":null}