{"total":22,"rows":[{"id":"2302.10149","title":"Poisoning Web-Scale Training Datasets is Practical","created":"2023-02-20","cited_by_count":290,"area":null},{"id":"2209.07341","title":"Does CLIP Know My Face?","created":"2022-09-15","cited_by_count":19,"area":null},{"id":"2310.06549","title":"Be Careful What You Smooth For: Label Smoothing Can Be a Privacy Shield but Also a Catalyst for Model Inversion Attacks","created":"2023-10-10","cited_by_count":13,"area":null},{"id":"2502.04901","title":"On the Difficulty of Constructing a Robust and Publicly-Detectable Watermark","created":"2025-02-07","cited_by_count":9,"area":null},{"id":"2308.09490","title":"Balancing Transparency and Risk: The Security and Privacy Risks of Open-Source Machine Learning Models","created":"2023-08-18","cited_by_count":5,"area":null},{"id":"2402.09132","title":"Exploring the Adversarial Capabilities of Large Language Models","created":"2024-02-14","cited_by_count":4,"area":null},{"id":"2505.06621","title":"Minimizing Risk Through Minimizing Model-Data Interaction: A Protocol For Relying on Proxy Tasks When Designing Child Sexual Abuse Imagery Detection Models","created":"2025-05-10","cited_by_count":4,"area":null},{"id":"2202.12860","title":"ARIA: Adversarially Robust Image Attribution for Content Provenance","created":"2022-02-25","cited_by_count":1,"area":null},{"id":"2206.00282","title":"Needle In A Haystack, Fast: Benchmarking Image Perceptual Similarity Metrics At Scale","created":"2022-06-01","cited_by_count":1,"area":null},{"id":"2207.14258","title":"Exploiting and Defending Against the Approximate Linearity of Apple's NeuralHash","created":"2022-07-28","cited_by_count":1,"area":null},{"id":"2406.00918","title":"Robustness of Practical Perceptual Hashing Algorithms to Hash-Evasion and Hash-Inversion Attacks","created":"2024-06-03","cited_by_count":1,"area":null},{"id":"2506.05908","title":"QualitEye: Public and Privacy-preserving Gaze Data Quality Verification","created":"2025-06-06","cited_by_count":1,"area":null},{"id":"2509.10766","title":"MetaSeal: Defending Against Image Attribution Forgery Through Content-Dependent Cryptographic Watermarks","created":"2025-09-13","cited_by_count":1,"area":null},{"id":"2208.11367","title":"Combining AI and AM - Improving Approximate Matching through Transformer Networks","created":"2022-08-24","cited_by_count":0,"area":null},{"id":"2212.04107","title":"Re-purposing Perceptual Hashing based Client Side Scanning for Physical Surveillance","created":"2022-12-08","cited_by_count":0,"area":null},{"id":"2408.02310","title":"On the Robustness of Malware Detectors to Adversarial Samples","created":"2024-08-05","cited_by_count":0,"area":null},{"id":"2410.20519","title":"Fractal Signatures: Securing AI-Generated Pollock-Style Art via Intrinsic Watermarking and Blockchain","created":"2024-10-27","cited_by_count":0,"area":null},{"id":"2504.16355","title":"Property-Preserving Hashing for $\\ell_1$-Distance Predicates: Applications to Countering Adversarial Input Attacks","created":"2025-04-23","cited_by_count":0,"area":null},{"id":"2510.25687","title":"Model Inversion meets Cryptographic Fuzzy Extractors","created":"2025-10-29","cited_by_count":0,"area":null},{"id":"2604.23016","title":"DeepSignature: Digitally Signed, Content-Encoding Watermarks for Robust and Transparent Image Authentication","created":"2026-04-24","cited_by_count":0,"area":null},{"id":"2606.15993","title":"Classifying by Proxy: Explainable and Reproducible Ensemble of Proxy Tasks for Child Sexual Abuse Imagery Classification","created":"2026-06-14","cited_by_count":0,"area":null},{"id":"2608.03101","title":"Double Down on Defense: Strengthening Deep Perceptual Hashes against Evasion Attacks without Retraining","created":"2026-08-04","cited_by_count":0,"area":null}],"next_cursor":null}