{"total":69,"rows":[{"id":"2309.16952","title":"Leveraging Optimization for Adaptive Attacks on Image Watermarks","created":"2023-09-29","cited_by_count":52,"area":null},{"id":"2201.11692","title":"SSLGuard: A Watermarking Scheme for Self-supervised Learning Pre-trained Encoders","created":"2022-01-27","cited_by_count":45,"area":null},{"id":"2207.07972","title":"Certified Neural Network Watermarks with Randomized Smoothing","created":"2022-07-16","cited_by_count":41,"area":null},{"id":"2405.04825","title":"Explanation as a Watermark: Towards Harmless and Multi-bit Model Ownership Verification via Watermarking Feature Attribution","created":"2024-05-08","cited_by_count":40,"area":"safety"},{"id":"2304.07361","title":"PTW: Pivotal Tuning Watermarking for Pre-Trained Image Generators","created":"2023-04-14","cited_by_count":37,"area":"safety"},{"id":"2110.11024","title":"Watermarking Graph Neural Networks based on Backdoor Attacks","created":"2021-10-21","cited_by_count":25,"area":null},{"id":"2201.05889","title":"StolenEncoder: Stealing Pre-trained Encoders in Self-supervised Learning","created":"2022-01-15","cited_by_count":23,"area":null},{"id":"2304.06607","title":"False Claims against Model Ownership Resolution","created":"2023-04-13","cited_by_count":17,"area":null},{"id":"2401.15239","title":"MEA-Defender: A Robust Watermark against Model Extraction Attack","created":"2024-01-26","cited_by_count":17,"area":"safety"},{"id":"2304.08566","title":"GrOVe: Ownership Verification of Graph Neural Networks using Embeddings","created":"2023-04-17","cited_by_count":16,"area":null},{"id":"2208.10134","title":"Machine Learning with Confidential Computing: A Systematization of Knowledge","created":"2022-08-22","cited_by_count":15,"area":null},{"id":"2508.19843","title":"SoK: Large Language Model Copyright Auditing via Fingerprinting","created":"2025-08-27","cited_by_count":15,"area":null},{"id":"2207.01991","title":"Conflicting Interactions Among Protection Mechanisms for Machine Learning Models","created":"2022-07-05","cited_by_count":12,"area":null},{"id":"2307.15860","title":"What can Discriminator do? Towards Box-free Ownership Verification of Generative Adversarial Network","created":"2023-07-29","cited_by_count":10,"area":null},{"id":"2309.04777","title":"Towards Robust Model Watermark via Reducing Parametric Vulnerability","created":"2023-09-09","cited_by_count":10,"area":"safety"},{"id":"2503.19176","title":"SoK: How Robust is Audio Watermarking in Generative AI models?","created":"2025-03-24","cited_by_count":10,"area":"safety"},{"id":"2404.13518","title":"Reliable Model Watermarking: Defending Against Theft without Compromising on Evasion","created":"2024-04-21","cited_by_count":9,"area":"safety"},{"id":"2407.01251","title":"QUEEN: Query Unlearning against Model Extraction","created":"2024-07-01","cited_by_count":9,"area":"safety"},{"id":"2411.13425","title":"Watermark under Fire: A Robustness Evaluation of LLM Watermarking","created":"2024-11-20","cited_by_count":9,"area":"safety"},{"id":"2210.13631","title":"On the Robustness of Dataset Inference","created":"2022-10-24","cited_by_count":8,"area":null},{"id":"2507.05622","title":"DATABench: Evaluating Dataset Auditing in Deep Learning from an Adversarial Perspective","created":"2025-07-08","cited_by_count":8,"area":null},{"id":"2308.03573","title":"When Federated Learning meets Watermarking: A Comprehensive Overview of Techniques for Intellectual Property Protection","created":"2023-08-07","cited_by_count":7,"area":null},{"id":"2509.11745","title":"Removal Attack and Defense on AI-generated Content Latent-based Watermarking","created":"2025-09-15","cited_by_count":7,"area":"safety"},{"id":"2312.04542","title":"SoK: Unintended Interactions among Machine Learning Defenses and Risks","created":"2023-12-07","cited_by_count":6,"area":null},{"id":"2405.09863","title":"Box-Free Model Watermarks Are Prone to Black-Box Removal Attacks","created":"2024-05-16","cited_by_count":6,"area":"safety"},{"id":"2112.14108","title":"Fostering the Robustness of White-Box Deep Neural Network Watermarks by Neuron Alignment","created":"2021-12-28","cited_by_count":5,"area":null},{"id":"2403.03590","title":"DeepEclipse: How to Break White-Box DNN-Watermarking Schemes","created":"2024-03-06","cited_by_count":5,"area":null},{"id":"2308.12319","title":"RemovalNet: DNN Fingerprint Removal Attacks","created":"2023-08-23","cited_by_count":4,"area":null},{"id":"2405.15161","title":"Are You Copying My Prompt? Protecting the Copyright of Vision Prompt for VPaaS via Watermark","created":"2024-05-24","cited_by_count":4,"area":null},{"id":"2407.04794","title":"On Evaluating The Performance of Watermarked Machine-Generated Texts Under Adversarial Attacks","created":"2024-07-05","cited_by_count":4,"area":"safety"},{"id":"2211.11534","title":"Towards Adversarially Robust Recommendation from Adaptive Fraudster Detection","created":"2022-11-08","cited_by_count":3,"area":null},{"id":"2312.15617","title":"GanFinger: GAN-Based Fingerprint Generation for Deep Neural Network Ownership Verification","created":"2023-12-25","cited_by_count":3,"area":null},{"id":"2402.12720","title":"Revisiting the Information Capacity of Neural Network Watermarks: Upper Bound Estimation and Beyond","created":"2024-02-20","cited_by_count":3,"area":null},{"id":"2406.04805","title":"GENIE: Watermarking Graph Neural Networks for Link Prediction","created":"2024-06-07","cited_by_count":3,"area":null},{"id":"2409.06130","title":"Revisiting Black-Box Model Ownership Verification through Information Theory","created":"2024-09-10","cited_by_count":3,"area":"safety"},{"id":"2211.13535","title":"DeepTaster: Adversarial Perturbation-Based Fingerprinting to Identify Proprietary Dataset Use in Deep Neural Networks","created":"2022-11-24","cited_by_count":2,"area":"safety"},{"id":"2305.17868","title":"NaturalFinger: Generating Natural Fingerprint with Generative Adversarial Networks","created":"2023-05-29","cited_by_count":2,"area":null},{"id":"2307.14751","title":"FLARE: Fingerprinting Deep Reinforcement Learning Agents using Universal Adversarial Masks","created":"2023-07-27","cited_by_count":2,"area":null},{"id":"2309.03466","title":"Neural Dehydration: Effective Erasure of Black-box Watermarks from DNNs with Limited Data","created":"2023-09-07","cited_by_count":2,"area":null},{"id":"2310.10124","title":"A Comprehensive Study of Privacy Risks in Curriculum Learning","created":"2023-10-16","cited_by_count":2,"area":null},{"id":"2403.10663","title":"Not Just Change the Labels, Learn the Features: Watermarking Deep Neural Networks with Multi-View Data","created":"2024-03-15","cited_by_count":2,"area":null},{"id":"2410.00059","title":"IDEA: An Inverse Domain Expert Adaptation Based Active DNN IP Protection Method","created":"2024-09-29","cited_by_count":2,"area":null},{"id":"2501.02704","title":"Persistence of Backdoor-based Watermarks for Neural Networks: A Comprehensive Evaluation","created":"2025-01-06","cited_by_count":2,"area":null},{"id":"2503.23748","title":"THEMIS: Towards Practical Intellectual Property Protection for Post-Deployment On-Device Deep Learning Models","created":"2025-03-31","cited_by_count":2,"area":"safety"},{"id":"2507.11137","title":"Hashed Watermark as a Filter: Defeating Forging and Overwriting Attacks in Weight-based Neural Network Watermarking","created":"2025-07-15","cited_by_count":2,"area":null},{"id":"2305.09671","title":"Pick your Poison: Undetectability versus Robustness in Data Poisoning Attacks","created":"2023-05-07","cited_by_count":1,"area":"safety"},{"id":"2310.09479","title":"Unified High-binding Watermark for Unconditional Image Generation Models","created":"2023-10-14","cited_by_count":1,"area":"safety"},{"id":"2403.05842","title":"TokenMark: A Modality-Agnostic Watermark for Pre-trained Transformers","created":"2024-03-09","cited_by_count":1,"area":"safety"},{"id":"2505.04977","title":"ChainMarks: Securing DNN Watermark with Cryptographic Chain","created":"2025-05-08","cited_by_count":1,"area":null},{"id":"2506.08602","title":"WGLE:Backdoor-free and Multi-bit Black-box Watermarking for Graph Neural Networks","created":"2025-06-10","cited_by_count":1,"area":null},{"id":"2506.13494","title":"Watermarking LLM-Generated Datasets in Downstream Tasks","created":"2025-06-16","cited_by_count":1,"area":"safety"},{"id":"2507.08288","title":"Invariant-based Robust Weights Watermark for Large Language Models","created":"2025-07-11","cited_by_count":1,"area":"safety"},{"id":"2603.24857","title":"AI Security in the Foundation Model Era: A Comprehensive Survey from a Unified Perspective","created":"2026-03-25","cited_by_count":1,"area":"safety"},{"id":"2211.13644","title":"Seeds Don't Lie: An Adaptive Watermarking Framework for Computer Vision Models","created":"2022-11-24","cited_by_count":0,"area":"safety"},{"id":"2501.09328","title":"Neural Honeytrace: Plug&Play Watermarking Framework against Model Extraction Attacks","created":"2025-01-16","cited_by_count":0,"area":"safety"},{"id":"2505.24536","title":"CHIP: Chameleon Hash-based Irreversible Passport for Robust Deep Model Ownership Verification and Active Usage Control","created":"2025-05-30","cited_by_count":0,"area":"safety"},{"id":"2511.07947","title":"Class-feature Watermark: A Resilient Black-box Watermark Against Model Extraction Attacks","created":"2025-11-11","cited_by_count":0,"area":"safety"},{"id":"2511.12663","title":"FLClear: Visually Verifiable Multi-Client Watermarking for Federated Learning","created":"2025-11-16","cited_by_count":0,"area":null},{"id":"2511.13598","title":"Robust Client-Server Watermarking for Split Federated Learning","created":"2025-11-17","cited_by_count":0,"area":null},{"id":"2511.14422","title":"Server-Enforced Watermarking in U-Shaped Split Federated Learning","created":"2025-11-18","cited_by_count":0,"area":null},{"id":"2602.10765","title":"Collaborative Threshold Watermarking","created":"2026-02-11","cited_by_count":0,"area":null},{"id":"2603.17513","title":"Proof-of-Authorship for Diffusion-based AI Generated Content","created":"2026-03-18","cited_by_count":0,"area":"diffusion"},{"id":"2605.05360","title":"COPYCOP: Ownership Verification for Graph Neural Networks","created":"2026-05-06","cited_by_count":0,"area":null},{"id":"2606.11698","title":"T2S: A Rehearsal-Based Approach for Extraction-Resistant Model Watermarking","created":"2026-06-10","cited_by_count":0,"area":"safety"},{"id":"2606.21240","title":"DIPBox: A Multi-scale Testing Framework for Tracking Dataset Regeneration","created":"2026-06-19","cited_by_count":0,"area":null},{"id":"2608.14929","title":"Training Leaves Traces: Centered Residual Signatures for Language Model Lineage Verification","created":"2026-08-14","cited_by_count":0,"area":null},{"id":"2609.08763","title":"ZK-Trace: Certified Collusion Tracing with Zero-Knowledge Credentials for Federated GNSS Interference Monitoring","created":"2026-09-08","cited_by_count":0,"area":null},{"id":"2609.19011","title":"Steal the Knowledge, Inherit the Mark: TwinMark for Distillation Watermarking via Second Moments and Class Multiplexing","created":"2026-07-18","cited_by_count":0,"area":"distill"},{"id":"2609.39768","title":"Security Properties of Neural Networks as Decision Problems","created":"2026-09-30","cited_by_count":0,"area":"safety"}],"next_cursor":null}