{"total":109,"rows":[{"id":"2401.08573","title":"WAVES: Benchmarking the Robustness of Image Watermarks","created":"2024-01-16","cited_by_count":97,"area":null},{"id":"2210.00875","title":"Untargeted Backdoor Watermark: Towards Harmless and Stealthy Dataset Copyright Protection","created":"2022-09-27","cited_by_count":86,"area":null},{"id":"2103.05633","title":"Proof-of-Learning: Definitions and Practice","created":"2021-03-09","cited_by_count":84,"area":null},{"id":"2206.08451","title":"I Know What You Trained Last Summer: A Survey on Stealing Machine Learning Models and Defences","created":"2022-06-16","cited_by_count":75,"area":null},{"id":"2108.04974","title":"SoK: How Robust is Image Classification Deep Neural Network Watermarking? (Extended Version)","created":"2021-08-11","cited_by_count":69,"area":null},{"id":"2401.05778","title":"Risk Taxonomy, Mitigation, and Assessment Benchmarks of Large Language Model Systems","created":"2024-01-11","cited_by_count":66,"area":null},{"id":"2209.06015","title":"Black-box Dataset Ownership Verification via Backdoor Watermarking","created":"2022-08-04","cited_by_count":65,"area":null},{"id":"2202.08602","title":"Fingerprinting Deep Neural Networks Globally via Universal Adversarial Perturbations","created":"2022-02-17","cited_by_count":61,"area":null},{"id":"2212.14315","title":"\"Real Attackers Don't Compute Gradients\": Bridging the Gap Between Adversarial ML Research and Practice","created":"2022-12-29","cited_by_count":56,"area":null},{"id":"2410.05470","title":"Image Watermarks are Removable Using Controllable Regeneration from Clean Noise","created":"2024-10-07","cited_by_count":50,"area":null},{"id":"2112.03476","title":"Defending against Model Stealing via Verifying Embedded External Features","created":"2021-12-07","cited_by_count":46,"area":null},{"id":"2201.11692","title":"SSLGuard: A Watermarking Scheme for Self-supervised Learning Pre-trained Encoders","created":"2022-01-27","cited_by_count":45,"area":null},{"id":"2106.15764","title":"The Threat of Offensive AI to Organizations","created":"2021-06-30","cited_by_count":38,"area":null},{"id":"2209.09024","title":"Dataset Inference for Self-Supervised Models","created":"2022-09-16","cited_by_count":36,"area":null},{"id":"2108.09187","title":"Quantization Backdoors to Deep Learning Commercial Frameworks","created":"2021-08-20","cited_by_count":29,"area":null},{"id":"2110.11024","title":"Watermarking Graph Neural Networks based on Backdoor Attacks","created":"2021-10-21","cited_by_count":25,"area":null},{"id":"2107.09287","title":"Data Hiding with Deep Learning: A Survey Unifying Digital Watermarking and Steganography","created":"2021-07-20","cited_by_count":24,"area":null},{"id":"2201.05889","title":"StolenEncoder: Stealing Pre-trained Encoders in Self-supervised Learning","created":"2022-01-15","cited_by_count":23,"area":null},{"id":"2205.07890","title":"On the Difficulty of Defending Self-Supervised Learning against Model Extraction","created":"2022-05-16","cited_by_count":22,"area":null},{"id":"2201.09243","title":"Increasing the Cost of Model Extraction with Calibrated Proof of Work","created":"2022-01-23","cited_by_count":21,"area":null},{"id":"2208.02820","title":"MOVE: Effective and Harmless Ownership Verification via Embedded External Features","created":"2022-08-04","cited_by_count":21,"area":null},{"id":"2210.15427","title":"Are You Stealing My Model? Sample Correlation for Fingerprinting Deep Neural Networks","created":"2022-10-21","cited_by_count":21,"area":null},{"id":"2304.06607","title":"False Claims against Model Ownership Resolution","created":"2023-04-13","cited_by_count":17,"area":null},{"id":"2502.00706","title":"Model Provenance Testing for Large Language Models","created":"2025-02-02","cited_by_count":15,"area":null},{"id":"2402.01096","title":"Trustworthy Distributed AI Systems: Robustness, Privacy, and Governance","created":"2024-02-02","cited_by_count":14,"area":null},{"id":"2202.12506","title":"On the Effectiveness of Dataset Watermarking in Adversarial Settings","created":"2022-02-25","cited_by_count":12,"area":null},{"id":"2207.01991","title":"Conflicting Interactions Among Protection Mechanisms for Machine Learning Models","created":"2022-07-05","cited_by_count":12,"area":null},{"id":"2212.04687","title":"Selective Amnesia: On Efficient, High-Fidelity and Blind Suppression of Backdoor Effects in Trojaned Machine Learning Models","created":"2022-12-09","cited_by_count":11,"area":null},{"id":"2109.10870","title":"SoK: Machine Learning Governance","created":"2021-09-20","cited_by_count":10,"area":null},{"id":"2212.05428","title":"ezDPS: An Efficient and Zero-Knowledge Machine Learning Inference Pipeline","created":"2022-12-11","cited_by_count":10,"area":null},{"id":"2307.15860","title":"What can Discriminator do? Towards Box-free Ownership Verification of Generative Adversarial Network","created":"2023-07-29","cited_by_count":10,"area":null},{"id":"2308.00958","title":"Isolation and Induction: Training Robust Deep Neural Networks against Model Stealing Attacks","created":"2023-08-02","cited_by_count":10,"area":null},{"id":"2310.16919","title":"Wide Flat Minimum Watermarking for Robust Ownership Verification of GANs","created":"2023-10-25","cited_by_count":10,"area":null},{"id":"2209.03563","title":"SSL-WM: A Black-Box Watermarking Approach for Encoders Pre-trained by Self-supervised Learning","created":"2022-09-08","cited_by_count":9,"area":null},{"id":"2210.00108","title":"ImpNet: Imperceptible and blackbox-undetectable backdoors in compiled neural networks","created":"2022-09-30","cited_by_count":9,"area":null},{"id":"2406.11129","title":"Neural Lineage","created":"2024-06-17","cited_by_count":9,"area":null},{"id":"2101.02069","title":"Model Extraction and Defenses on Generative Adversarial Networks","created":"2021-01-06","cited_by_count":8,"area":null},{"id":"2210.13631","title":"On the Robustness of Dataset Inference","created":"2022-10-24","cited_by_count":8,"area":null},{"id":"2303.10399","title":"FedRight: An Effective Model Copyright Protection for Federated Learning","created":"2023-03-18","cited_by_count":8,"area":null},{"id":"2310.08571","title":"Bucks for Buckets (B4B): Active Defenses Against Stealing Encoders","created":"2023-10-12","cited_by_count":8,"area":null},{"id":"2401.08261","title":"Probabilistically Robust Watermarking of Neural Networks","created":"2024-01-16","cited_by_count":7,"area":null},{"id":"2403.10790","title":"QuantumLeak: Stealing Quantum Neural Networks from Cloud-based NISQ Machines","created":"2024-03-16","cited_by_count":7,"area":null},{"id":"2103.05590","title":"Robust Black-box Watermarking for Deep NeuralNetwork using Inverse Document Frequency","created":"2021-03-09","cited_by_count":6,"area":null},{"id":"2106.10147","title":"Evaluating the Robustness of Trigger Set-Based Watermarks Embedded in Deep Neural Networks","created":"2021-06-18","cited_by_count":6,"area":null},{"id":"2110.15444","title":"10 Security and Privacy Problems in Large Foundation Models","created":"2021-10-28","cited_by_count":6,"area":null},{"id":"2112.09305","title":"Gaussian RBF Centered Kernel Alignment (CKA) in the Large Bandwidth Limit","created":"2021-12-17","cited_by_count":6,"area":null},{"id":"2205.00199","title":"Cracking White-box DNN Watermarks via Invariant Neuron Transforms","created":"2022-04-30","cited_by_count":6,"area":null},{"id":"2207.10561","title":"Careful What You Wish For: on the Extraction of Adversarially Trained Models","created":"2022-07-21","cited_by_count":6,"area":null},{"id":"2405.16285","title":"ModelLock: Locking Your Model With a Spell","created":"2024-05-25","cited_by_count":6,"area":null},{"id":"2501.01090","title":"HoneypotNet: Backdoor Attacks Against Model Extraction","created":"2025-01-02","cited_by_count":6,"area":null},{"id":"2302.11982","title":"A Plot is Worth a Thousand Words: Model Information Stealing Attacks via Scientific Plots","created":"2023-02-23","cited_by_count":5,"area":null},{"id":"2309.11013","title":"ModelGiF: Gradient Fields for Model Functional Distance","created":"2023-09-20","cited_by_count":5,"area":null},{"id":"2403.03590","title":"DeepEclipse: How to Break White-Box DNN-Watermarking Schemes","created":"2024-03-06","cited_by_count":5,"area":null},{"id":"2404.02889","title":"Steganographic Passport: An Owner and User Verifiable Credential for Deep Model IP Protection Without Retraining","created":"2024-04-03","cited_by_count":5,"area":null},{"id":"2409.02718","title":"\"Yes, My LoRD.\" Guiding Language Model Extraction with Locality Reinforced Distillation","created":"2024-09-04","cited_by_count":5,"area":null},{"id":"2410.13903","title":"CoreGuard: Safeguarding Foundational Capabilities of LLMs Against Model Stealing in Edge Deployment","created":"2024-10-16","cited_by_count":5,"area":null},{"id":"2602.20419","title":"CREDIT: Certified Ownership Verification of Deep Neural Networks Against Model Extraction Attacks","created":"2026-02-23","cited_by_count":5,"area":null},{"id":"2105.06300","title":"Privacy Inference Attacks and Defenses in Cloud-based Deep Neural Network: A Survey","created":"2021-05-13","cited_by_count":4,"area":null},{"id":"2208.03948","title":"AWEncoder: Adversarial Watermarking Pre-trained Encoders in Contrastive Learning","created":"2022-08-08","cited_by_count":4,"area":null},{"id":"2310.01959","title":"Beyond Labeling Oracles: What does it mean to steal ML models?","created":"2023-10-03","cited_by_count":4,"area":null},{"id":"2406.10573","title":"Graph Neural Backdoor: Fundamentals, Methodologies, Applications, and Future Directions","created":"2024-06-15","cited_by_count":4,"area":null},{"id":"2104.12623","title":"Good Artists Copy, Great Artists Steal: Model Extraction Attacks Against Image Translation Models","created":"2021-04-26","cited_by_count":3,"area":null},{"id":"2106.11424","title":"HODA: Hardness-Oriented Detection of Model Extraction Attacks","created":"2021-06-21","cited_by_count":3,"area":null},{"id":"2202.06091","title":"TATTOOED: A Robust Deep Neural Network Watermarking Scheme based on Spread-Spectrum Channel Coding","created":"2022-02-12","cited_by_count":3,"area":null},{"id":"2306.11338","title":"FDINet: Protecting against DNN Model Extraction via Feature Distortion Index","created":"2023-06-20","cited_by_count":3,"area":null},{"id":"2309.01786","title":"Safe and Robust Watermark Injection with a Single OoD Image","created":"2023-09-04","cited_by_count":3,"area":null},{"id":"2402.12720","title":"Revisiting the Information Capacity of Neural Network Watermarks: Upper Bound Estimation and Beyond","created":"2024-02-20","cited_by_count":3,"area":null},{"id":"2606.15810","title":"Let Them Steal: Trapping Large Language Model Extraction Attacks with Knowledge Honeypot","created":"2026-06-14","cited_by_count":3,"area":null},{"id":"2106.07860","title":"Evading Malware Classifiers via Monte Carlo Mutant Feature Discovery","created":"2021-06-15","cited_by_count":2,"area":null},{"id":"2305.03963","title":"Beyond the Model: Data Pre-processing Attack to Deep Learning Models in Android Apps","created":"2023-05-06","cited_by_count":2,"area":null},{"id":"2307.01292","title":"Pareto-Secure Machine Learning (PSML): Fingerprinting and Securing Inference Serving Systems","created":"2023-07-03","cited_by_count":2,"area":null},{"id":"2310.10124","title":"A Comprehensive Study of Privacy Risks in Curriculum Learning","created":"2023-10-16","cited_by_count":2,"area":null},{"id":"2403.10663","title":"Not Just Change the Labels, Learn the Features: Watermarking Deep Neural Networks with Multi-View Data","created":"2024-03-15","cited_by_count":2,"area":null},{"id":"2406.02027","title":"Inference Attacks: A Taxonomy, Survey, and Promising Directions","created":"2024-06-04","cited_by_count":2,"area":null},{"id":"2411.09776","title":"Combining Machine Learning Defenses without Conflicts","created":"2024-11-14","cited_by_count":2,"area":null},{"id":"2412.20768","title":"Sample Correlation for Fingerprinting Deep Face Recognition","created":"2024-12-30","cited_by_count":2,"area":null},{"id":"2501.02704","title":"Persistence of Backdoor-based Watermarks for Neural Networks: A Comprehensive Evaluation","created":"2025-01-06","cited_by_count":2,"area":null},{"id":"2503.00065","title":"ADAGE: Active Defenses Against GNN Extraction","created":"2025-02-27","cited_by_count":2,"area":null},{"id":"2506.04556","title":"BESA: Boosting Encoder Stealing Attack with Perturbation Recovery","created":"2025-06-05","cited_by_count":2,"area":null},{"id":"2507.00724","title":"Holmes: Towards Effective and Harmless Model Ownership Verification to Personalized Large Vision Models via Decoupling Common Features","created":"2025-06-24","cited_by_count":2,"area":null},{"id":"2508.01074","title":"Evading Data Provenance in Deep Neural Networks","created":"2025-08-01","cited_by_count":2,"area":null},{"id":"2509.20714","title":"Cryptographic Backdoor for Neural Networks: Boon and Bane","created":"2025-09-25","cited_by_count":2,"area":null},{"id":"2511.10712","title":"Do Not Merge My Model! Safeguarding Open-Source LLMs Against Unauthorized Model Merging","created":"2025-11-13","cited_by_count":2,"area":null},{"id":"2106.11760","title":"Fingerprinting Image-to-Image Generative Adversarial Networks","created":"2021-06-19","cited_by_count":1,"area":null},{"id":"2202.10582","title":"Debiasing Backdoor Attack: A Benign Application of Backdoor Attack in Eliminating Data Bias","created":"2022-02-18","cited_by_count":1,"area":null},{"id":"2204.06241","title":"Stealing and Evading Malware Classifiers and Antivirus at Low False Positive Conditions","created":"2022-04-13","cited_by_count":1,"area":null},{"id":"2302.10296","title":"On Function-Coupled Watermarks for Deep Neural Networks","created":"2023-02-08","cited_by_count":1,"area":null},{"id":"2306.05233","title":"Ownership Protection of Generative Adversarial Networks","created":"2023-06-08","cited_by_count":1,"area":null},{"id":"2309.01838","title":"Efficient Defense Against Model Stealing Attacks on Convolutional Neural Networks","created":"2023-09-04","cited_by_count":1,"area":null},{"id":"2506.08602","title":"WGLE:Backdoor-free and Multi-bit Black-box Watermarking for Graph Neural Networks","created":"2025-06-10","cited_by_count":1,"area":null},{"id":"2605.18829","title":"Lossless Anti-Distillation Sampling","created":"2026-05-12","cited_by_count":1,"area":null},{"id":"2312.00855","title":"Refine, Discriminate and Align: Stealing Encoders via Sample-Wise Prototypes and Multi-Relational Extraction","created":"2023-12-01","cited_by_count":0,"area":null},{"id":"2312.10943","title":"Model Stealing Attack against Graph Classification with Authenticity, Uncertainty and Diversity","created":"2023-12-18","cited_by_count":0,"area":null},{"id":"2405.04108","title":"A2-DIDM: Privacy-preserving Accumulator-enabled Auditing for Distributed Identity of DNN Model","created":"2024-05-07","cited_by_count":0,"area":null},{"id":"2405.18671","title":"Watermarking Counterfactual Explanations","created":"2024-05-29","cited_by_count":0,"area":null},{"id":"2407.21034","title":"Watermarking Recommender Systems","created":"2024-07-17","cited_by_count":0,"area":null},{"id":"2411.00380","title":"DeepCore: Simple Fingerprint Construction for Differentiating Homologous and Piracy Models","created":"2024-11-01","cited_by_count":0,"area":null},{"id":"2411.07468","title":"Privacy-Preserving Verifiable Neural Network Inference Service","created":"2024-11-12","cited_by_count":0,"area":null},{"id":"2507.18036","title":"NWaaS: A Non-Intrusive and Privacy-Preserving Watermarking-as-a-Service System with Adaptive Resource Scheduling","created":"2025-07-24","cited_by_count":0,"area":null},{"id":"2509.11159","title":"Stabilizing Data-Free Model Extraction","created":"2025-09-14","cited_by_count":0,"area":null}],"next_cursor":"100"}