{"total":70,"rows":[{"id":"2206.08451","title":"I Know What You Trained Last Summer: A Survey on Stealing Machine Learning Models and Defences","created":"2022-06-16","cited_by_count":75,"area":null},{"id":"2108.04974","title":"SoK: How Robust is Image Classification Deep Neural Network Watermarking? (Extended Version)","created":"2021-08-11","cited_by_count":69,"area":null},{"id":"2209.06015","title":"Black-box Dataset Ownership Verification via Backdoor Watermarking","created":"2022-08-04","cited_by_count":65,"area":null},{"id":"2202.08602","title":"Fingerprinting Deep Neural Networks Globally via Universal Adversarial Perturbations","created":"2022-02-17","cited_by_count":61,"area":null},{"id":"2207.07972","title":"Certified Neural Network Watermarks with Randomized Smoothing","created":"2022-07-16","cited_by_count":41,"area":null},{"id":"2312.04828","title":"HuRef: HUman-REadable Fingerprint for Large Language Models","created":"2023-12-08","cited_by_count":34,"area":null},{"id":"2106.08890","title":"ModelDiff: Testing-Based DNN Similarity Comparison for Model Reuse Detection","created":"2021-06-11","cited_by_count":33,"area":null},{"id":"2201.05889","title":"StolenEncoder: Stealing Pre-trained Encoders in Self-supervised Learning","created":"2022-01-15","cited_by_count":23,"area":null},{"id":"2208.02820","title":"MOVE: Effective and Harmless Ownership Verification via Embedded External Features","created":"2022-08-04","cited_by_count":21,"area":null},{"id":"2210.15427","title":"Are You Stealing My Model? Sample Correlation for Fingerprinting Deep Neural Networks","created":"2022-10-21","cited_by_count":21,"area":null},{"id":"2304.06607","title":"False Claims against Model Ownership Resolution","created":"2023-04-13","cited_by_count":17,"area":null},{"id":"2304.08566","title":"GrOVe: Ownership Verification of Graph Neural Networks using Embeddings","created":"2023-04-17","cited_by_count":16,"area":null},{"id":"2405.02466","title":"ProFLingo: A Fingerprinting-based Intellectual Property Protection Scheme for Large Language Models","created":"2024-05-03","cited_by_count":16,"area":null},{"id":"2502.00706","title":"Model Provenance Testing for Large Language Models","created":"2025-02-02","cited_by_count":15,"area":null},{"id":"2202.12506","title":"On the Effectiveness of Dataset Watermarking in Adversarial Settings","created":"2022-02-25","cited_by_count":12,"area":null},{"id":"2201.08217","title":"Watermarking Pre-trained Encoders in Contrastive Learning","created":"2022-01-20","cited_by_count":11,"area":null},{"id":"2307.15860","title":"What can Discriminator do? Towards Box-free Ownership Verification of Generative Adversarial Network","created":"2023-07-29","cited_by_count":10,"area":null},{"id":"2405.10295","title":"Societal Adaptation to Advanced AI","created":"2024-05-16","cited_by_count":10,"area":null},{"id":"2501.15509","title":"FIT-Print: Towards False-claim-resistant Model Ownership Verification via Targeted Fingerprint","created":"2025-01-26","cited_by_count":10,"area":null},{"id":"2302.02162","title":"AUTOLYCUS: Exploiting Explainable AI (XAI) for Model Extraction Attacks against Interpretable Models","created":"2023-02-04","cited_by_count":9,"area":null},{"id":"2305.04507","title":"FedZKP: Federated Model Ownership Verification with Zero-knowledge Proof","created":"2023-05-08","cited_by_count":9,"area":null},{"id":"2406.11129","title":"Neural Lineage","created":"2024-06-17","cited_by_count":9,"area":null},{"id":"2210.13631","title":"On the Robustness of Dataset Inference","created":"2022-10-24","cited_by_count":8,"area":null},{"id":"2303.10399","title":"FedRight: An Effective Model Copyright Protection for Federated Learning","created":"2023-03-18","cited_by_count":8,"area":null},{"id":"2503.16693","title":"ATOM: A Framework of Detecting Query-Based Model Extraction Attacks for Graph Neural Networks","created":"2025-03-20","cited_by_count":8,"area":null},{"id":"2505.12682","title":"RAFP: Identifying LLM Lineages via Rare-Region Fingerprints","created":"2025-05-19","cited_by_count":8,"area":null},{"id":"2509.26598","title":"Are Robust LLM Fingerprints Adversarially Robust?","created":"2025-09-30","cited_by_count":8,"area":null},{"id":"2103.05590","title":"Robust Black-box Watermarking for Deep NeuralNetwork using Inverse Document Frequency","created":"2021-03-09","cited_by_count":6,"area":null},{"id":"2312.04542","title":"SoK: Unintended Interactions among Machine Learning Defenses and Risks","created":"2023-12-07","cited_by_count":6,"area":null},{"id":"2405.16285","title":"ModelLock: Locking Your Model With a Spell","created":"2024-05-25","cited_by_count":6,"area":null},{"id":"2203.10902","title":"PublicCheck: Public Integrity Verification for Services of Run-time Deep Models","created":"2022-03-21","cited_by_count":5,"area":null},{"id":"2309.11013","title":"ModelGiF: Gradient Fields for Model Functional Distance","created":"2023-09-20","cited_by_count":5,"area":null},{"id":"2110.03175","title":"Fingerprinting Multi-exit Deep Neural Network Models via Inference Time","created":"2021-10-07","cited_by_count":4,"area":null},{"id":"2305.06085","title":"FedSOV: Federated Model Secure Ownership Verification with Unforgeable Signature","created":"2023-05-10","cited_by_count":4,"area":null},{"id":"2308.12319","title":"RemovalNet: DNN Fingerprint Removal Attacks","created":"2023-08-23","cited_by_count":4,"area":null},{"id":"2112.04720","title":"Amicable Aid: Perturbing Images to Improve Classification Performance","created":"2021-12-09","cited_by_count":3,"area":null},{"id":"2306.11338","title":"FDINet: Protecting against DNN Model Extraction via Feature Distortion Index","created":"2023-06-20","cited_by_count":3,"area":null},{"id":"2312.12049","title":"EncryIP: A Practical Encryption-Based Framework for Model Intellectual Property Protection","created":"2023-12-19","cited_by_count":3,"area":null},{"id":"2312.15617","title":"GanFinger: GAN-Based Fingerprint Generation for Deep Neural Network Ownership Verification","created":"2023-12-25","cited_by_count":3,"area":null},{"id":"2510.06738","title":"AWM: Accurate Weight-Matrix Fingerprint for Large Language Models","created":"2025-10-08","cited_by_count":3,"area":null},{"id":"2107.10882","title":"Size doesn't matter: predicting physico- or biochemical properties based on dozens of molecules","created":"2021-07-22","cited_by_count":2,"area":null},{"id":"2305.17868","title":"NaturalFinger: Generating Natural Fingerprint with Generative Adversarial Networks","created":"2023-05-29","cited_by_count":2,"area":null},{"id":"2307.14751","title":"FLARE: Fingerprinting Deep Reinforcement Learning Agents using Universal Adversarial Masks","created":"2023-07-27","cited_by_count":2,"area":null},{"id":"2405.04049","title":"Watermarking Neuromorphic Brains: Intellectual Property Protection in Spiking Neural Networks","created":"2024-05-07","cited_by_count":2,"area":null},{"id":"2410.04397","title":"Towards Understanding and Enhancing Security of Proof-of-Training for DNN Model Ownership Verification","created":"2024-10-06","cited_by_count":2,"area":null},{"id":"2411.09776","title":"Combining Machine Learning Defenses without Conflicts","created":"2024-11-14","cited_by_count":2,"area":null},{"id":"2412.20768","title":"Sample Correlation for Fingerprinting Deep Face Recognition","created":"2024-12-30","cited_by_count":2,"area":null},{"id":"2505.01007","title":"Towards the Resistance of Neural Network Watermarking to Fine-tuning","created":"2025-05-02","cited_by_count":2,"area":null},{"id":"2509.20714","title":"Cryptographic Backdoor for Neural Networks: Boon and Bane","created":"2025-09-25","cited_by_count":2,"area":null},{"id":"2603.21411","title":"Fingerprinting Deep Neural Networks for Ownership Protection: An Analytical Approach","created":"2026-03-22","cited_by_count":2,"area":null},{"id":"2105.07078","title":"High-Robustness, Low-Transferability Fingerprinting of Neural Networks","created":"2021-05-14","cited_by_count":1,"area":null},{"id":"2106.11760","title":"Fingerprinting Image-to-Image Generative Adversarial Networks","created":"2021-06-19","cited_by_count":1,"area":null},{"id":"2208.03169","title":"FBI: Fingerprinting models with Benign Inputs","created":"2022-08-05","cited_by_count":1,"area":null},{"id":"2208.05477","title":"Customized Watermarking for Deep Neural Networks via Label Distribution Perturbation","created":"2022-08-10","cited_by_count":1,"area":null},{"id":"2302.10296","title":"On Function-Coupled Watermarks for Deep Neural Networks","created":"2023-02-08","cited_by_count":1,"area":null},{"id":"2304.02312","title":"How to choose your best allies for a transferable attack?","created":"2023-04-05","cited_by_count":1,"area":null},{"id":"2306.05233","title":"Ownership Protection of Generative Adversarial Networks","created":"2023-06-08","cited_by_count":1,"area":null},{"id":"2407.03883","title":"Protecting Deep Learning Model Copyrights with Adversarial Example-Free Reuse Detection","created":"2024-07-04","cited_by_count":1,"area":null},{"id":"2509.12386","title":"Amulet: a Python Library for Assessing Interactions Among ML Defenses and Risks","created":"2025-09-15","cited_by_count":1,"area":null},{"id":"2604.09688","title":"Immunizing 3D Gaussian Generative Models Against Unauthorized Fine-Tuning via Attribute-Space Traps","created":"2026-04-06","cited_by_count":1,"area":null},{"id":"2608.08195","title":"Targeted Counterfactual Fingerprinting for Black-Box LLM Ownership Verification","created":"2026-08-08","cited_by_count":1,"area":null},{"id":"2307.08811","title":"Co(ve)rtex: ML Models as storage channels and their (mis-)applications","created":"2023-07-17","cited_by_count":0,"area":null},{"id":"2310.10656","title":"VeriDIP: Verifying Ownership of Deep Neural Networks through Privacy Leakage Fingerprints","created":"2023-09-07","cited_by_count":0,"area":null},{"id":"2409.09996","title":"FreeMark: A Non-Invasive White-Box Watermarking for Deep Neural Networks","created":"2024-09-16","cited_by_count":0,"area":null},{"id":"2411.00380","title":"DeepCore: Simple Fingerprint Construction for Differentiating Homologous and Piracy Models","created":"2024-11-01","cited_by_count":0,"area":null},{"id":"2507.18036","title":"NWaaS: A Non-Intrusive and Privacy-Preserving Watermarking-as-a-Service System with Adaptive Resource Scheduling","created":"2025-07-24","cited_by_count":0,"area":null},{"id":"2605.05360","title":"COPYCOP: Ownership Verification for Graph Neural Networks","created":"2026-05-06","cited_by_count":0,"area":null},{"id":"2607.13046","title":"What Your Model Threw Away and Why You'll Want It Back: Masking, Fingerprinting, and Privacy from Discarded Geometry","created":"2026-06-17","cited_by_count":0,"area":null},{"id":"2608.02656","title":"Secure AI Watermarking Framework for IP Protection in Multi-Tenant Cloud Platforms","created":"2026-08-01","cited_by_count":0,"area":null},{"id":"2609.29264","title":"TP-CRIV: A Framework for Third-Party Challenge-Response Identity Verification of AI Models","created":"2026-09-24","cited_by_count":0,"area":null}],"next_cursor":null}