{"total":202,"rows":[{"id":"2303.11156","title":"Can AI-Generated Text be Reliably Detected?","created":"2023-03-17","cited_by_count":386,"area":"safety"},{"id":"2306.01953","title":"Invisible Image Watermarks Are Provably Removable Using Generative AI","created":"2023-06-02","cited_by_count":134,"area":"safety"},{"id":"2410.18775","title":"Robust Watermarking Using Generative Priors Against Image Editing: From Benchmarking to Advances","created":"2024-10-24","cited_by_count":110,"area":"safety"},{"id":"2311.04378","title":"Watermarks in the Sand: Impossibility of Strong Watermarking for Generative Models","created":"2023-11-07","cited_by_count":87,"area":"safety"},{"id":"2308.04265","title":"FLIRT: Feedback Loop In-context Red Teaming","created":"2023-08-08","cited_by_count":83,"area":"safety"},{"id":"2401.15897","title":"Red-Teaming for Generative AI: Silver Bullet or Security Theater?","created":"2024-01-29","cited_by_count":83,"area":"safety"},{"id":"2310.00076","title":"Robustness of AI-Image Detectors: Fundamental Limits and Practical Attacks","created":"2023-09-29","cited_by_count":81,"area":"safety"},{"id":"2305.03807","title":"Evading Watermark based Detection of AI-Generated Content","created":"2023-05-05","cited_by_count":78,"area":"safety"},{"id":"2310.18491","title":"Publicly-Detectable Watermarking for Language Models","created":"2023-10-27","cited_by_count":76,"area":"safety"},{"id":"2310.13828","title":"Nightshade: Prompt-Specific Poisoning Attacks on Text-to-Image Generative Models","created":"2023-10-20","cited_by_count":75,"area":"safety"},{"id":"2210.00968","title":"Membership Inference Attacks Against Text-to-image Generation Models","created":"2022-10-03","cited_by_count":69,"area":"safety"},{"id":"2302.04237","title":"Black Box Adversarial Prompting for Foundation Models","created":"2023-02-08","cited_by_count":62,"area":"safety"},{"id":"2403.01446","title":"GuardT2I: Defending Text-to-Image Models from Adversarial Prompts","created":"2024-03-03","cited_by_count":62,"area":"safety"},{"id":"2211.02408","title":"Rickrolling the Artist: Injecting Backdoors into Text Encoders for Text-to-Image Synthesis","created":"2022-11-04","cited_by_count":59,"area":"safety"},{"id":"2304.03400","title":"RoSteALS: Robust Steganography using Autoencoder Latent Space","created":"2023-04-06","cited_by_count":57,"area":"safety"},{"id":"2310.15007","title":"Did the Neurons Read your Book? Document-level Membership Inference for Large Language Models","created":"2023-10-23","cited_by_count":56,"area":"safety"},{"id":"2401.06187","title":"Scissorhands: Scrub Data Influence via Connection Sensitivity in Networks","created":"2024-01-11","cited_by_count":52,"area":"safety"},{"id":"2406.05113","title":"LlavaGuard: An Open VLM-based Framework for Safeguarding Vision Datasets and Models","created":"2024-06-07","cited_by_count":52,"area":"safety"},{"id":"2411.18479","title":"SoK: Watermarking for AI-Generated Content","created":"2024-11-27","cited_by_count":51,"area":"safety"},{"id":"2407.21035","title":"Direct Unlearning Optimization for Robust and Safe Text-to-Image Models","created":"2024-07-17","cited_by_count":50,"area":"safety"},{"id":"2407.20516","title":"Machine Unlearning in Generative AI: A Survey","created":"2024-07-30","cited_by_count":49,"area":"safety"},{"id":"2401.16820","title":"Provably Robust Multi-bit Watermarking for AI-generated Text","created":"2024-01-30","cited_by_count":47,"area":"safety"},{"id":"2402.00351","title":"Machine Unlearning for Image-to-Image Generative Models","created":"2024-02-01","cited_by_count":47,"area":"safety"},{"id":"2409.19732","title":"Unified Gradient-Based Machine Unlearning with Remain Geometry Enhancement","created":"2024-09-29","cited_by_count":45,"area":"safety"},{"id":"2305.06321","title":"SepMark: Deep Separable Watermarking for Unified Source Tracing and Deepfake Detection","created":"2023-05-10","cited_by_count":44,"area":"safety"},{"id":"2403.07362","title":"Challenging Forgets: Unveiling the Worst-Case Forget Sets in Machine Unlearning","created":"2024-03-12","cited_by_count":44,"area":"safety"},{"id":"2408.10848","title":"Perception-guided Jailbreak against Text-to-Image Models","created":"2024-08-20","cited_by_count":40,"area":"safety"},{"id":"2304.07361","title":"PTW: Pivotal Tuning Watermarking for Pre-Trained Image Generators","created":"2023-04-14","cited_by_count":37,"area":"safety"},{"id":"2307.16489","title":"BAGM: A Backdoor Attack for Manipulating Text-to-Image Generative Models","created":"2023-07-31","cited_by_count":37,"area":"safety"},{"id":"2405.19360","title":"ART: Automatic Red-teaming for Text-to-Image Models to Protect Benign Users","created":"2024-05-24","cited_by_count":35,"area":"safety"},{"id":"2305.17444","title":"Query-Efficient Black-Box Red Teaming via Bayesian Optimization","created":"2023-05-27","cited_by_count":32,"area":"safety"},{"id":"2411.09259","title":"Jailbreak Attacks and Defenses against Multimodal Generative Models: A Survey","created":"2024-11-14","cited_by_count":32,"area":"safety"},{"id":"2408.05868","title":"LaWa: Using Latent Space for In-Generation Image Watermarking","created":"2024-08-11","cited_by_count":28,"area":"safety"},{"id":"2306.07754","title":"Generative Watermarking Against Unauthorized Subject-Driven Image Synthesis","created":"2023-06-13","cited_by_count":23,"area":"safety"},{"id":"2411.07795","title":"InvisMark: Invisible and Robust Watermarking for AI-generated Image Provenance","created":"2024-11-10","cited_by_count":23,"area":"safety"},{"id":"2406.09408","title":"Data Attribution for Text-to-Image Models by Unlearning Synthesized Images","created":"2024-06-13","cited_by_count":22,"area":"safety"},{"id":"2411.08410","title":"The VLLM Safety Paradox: Dual Ease in Jailbreak Attack and Defense","created":"2024-11-13","cited_by_count":21,"area":"safety"},{"id":"2405.09879","title":"Generative Unlearning for Any Identity","created":"2024-05-16","cited_by_count":19,"area":"safety"},{"id":"2503.06339","title":"Learning to Unlearn while Retaining: Combating Gradient Conflicts in Machine Unlearning","created":"2025-03-08","cited_by_count":19,"area":"safety"},{"id":"2502.21059","title":"FC-Attack: Jailbreaking Multimodal Large Language Models via Auto-Generated Flowcharts","created":"2025-02-28","cited_by_count":18,"area":"safety"},{"id":"2403.09914","title":"ProMark: Proactive Diffusion Watermarking for Causal Attribution","created":"2024-03-14","cited_by_count":17,"area":"safety"},{"id":"2411.15537","title":"MUNBa: Machine Unlearning via Nash Bargaining","created":"2024-11-23","cited_by_count":17,"area":"safety"},{"id":"2501.03544","title":"PromptGuard: Soft Prompt-Guided Unsafe Content Moderation for Text-to-Image Models","created":"2025-01-07","cited_by_count":17,"area":"safety"},{"id":"2506.16349","title":"Watermarking Autoregressive Image Generation","created":"2025-06-19","cited_by_count":16,"area":"safety"},{"id":"2509.21057","title":"PMark: Towards Robust and Distortion-free Semantic-level Watermarking with Channel Constraints","created":"2025-09-25","cited_by_count":16,"area":"safety"},{"id":"2411.11478","title":"SoK: On the Role and Future of AIGC Watermarking in the Era of Gen-AI","created":"2024-11-18","cited_by_count":14,"area":"safety"},{"id":"2307.04550","title":"Gradient Surgery for One-shot Unlearning on Generative Model","created":"2023-07-10","cited_by_count":12,"area":"safety"},{"id":"2402.06289","title":"FedMIA: An Effective Membership Inference Attack Exploiting \"All for One\" Principle in Federated Learning","created":"2024-02-09","cited_by_count":12,"area":"safety"},{"id":"2408.00376","title":"On the Limitations and Prospects of Machine Unlearning for Generative AI","created":"2024-08-01","cited_by_count":12,"area":"safety"},{"id":"2503.13769","title":"Continual Unlearning for Foundational Text-to-Image Models without Generalization Erosion","created":"2025-03-17","cited_by_count":12,"area":"safety"},{"id":"2510.20468","title":"Transferable Black-Box One-Shot Forging of Watermarks via Image Preference Models","created":"2025-10-23","cited_by_count":12,"area":"safety"},{"id":"2309.14054","title":"Adapt then Unlearn: Exploring Parameter Space Semantics for Unlearning in Generative Adversarial Networks","created":"2023-09-25","cited_by_count":11,"area":"safety"},{"id":"2405.17878","title":"An Information Theoretic Evaluation Metric For Strong Unlearning","created":"2024-05-28","cited_by_count":11,"area":"safety"},{"id":"2505.12667","title":"Safe-Sora: Safe Text-to-Video Generation via Graphical Watermarking","created":"2025-05-19","cited_by_count":11,"area":"safety"},{"id":"2305.14851","title":"Sharpness-Aware Data Poisoning Attack","created":"2023-05-24","cited_by_count":10,"area":"safety"},{"id":"2503.19176","title":"SoK: How Robust is Audio Watermarking in Generative AI models?","created":"2025-03-24","cited_by_count":10,"area":"safety"},{"id":"2306.01272","title":"DeepfakeArt Challenge: A Benchmark Dataset for Generative AI Art Forgery and Data Poisoning Detection","created":"2023-06-02","cited_by_count":9,"area":"safety"},{"id":"2504.11106","title":"Token-Level Constraint Boundary Search for Jailbreaking Text-to-Image Models","created":"2025-04-15","cited_by_count":9,"area":"safety"},{"id":"2504.16907","title":"BadVideo: Stealthy Backdoor Attack against Text-to-Video Generation","created":"2025-04-23","cited_by_count":9,"area":"safety"},{"id":"2508.03696","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","created":"2025-07-14","cited_by_count":9,"area":"safety"},{"id":"2305.11351","title":"Data Redaction from Conditional Generative Models","created":"2023-05-18","cited_by_count":8,"area":"safety"},{"id":"2309.05940","title":"Catch You Everything Everywhere: Guarding Textual Inversion via Concept Watermarking","created":"2023-09-12","cited_by_count":8,"area":"safety"},{"id":"2310.07726","title":"Warfare:Breaking the Watermark Protection of AI-Generated Content","created":"2023-09-27","cited_by_count":8,"area":"safety"},{"id":"2311.13619","title":"Steal My Artworks for Fine-tuning? A Watermarking Framework for Detecting Art Theft Mimicry in Text-to-Image Models","created":"2023-11-22","cited_by_count":8,"area":"safety"},{"id":"2403.18774","title":"RAW: A Robust and Agile Plug-and-Play Watermark Framework for AI-Generated Images with Provable Guarantees","created":"2024-01-23","cited_by_count":8,"area":"safety"},{"id":"2404.04254","title":"Watermark-based Attribution of AI-Generated Content","created":"2024-04-05","cited_by_count":8,"area":"safety"},{"id":"2505.21074","title":"Red-Teaming Text-to-Image Systems by Rule-based Preference Modeling","created":"2025-05-27","cited_by_count":8,"area":"safety"},{"id":"2506.01011","title":"Autoregressive Images Watermarking through Lexical Biasing: An Approach Resistant to Regeneration Attack","created":"2025-06-01","cited_by_count":8,"area":"safety"},{"id":"2405.14018","title":"Watermarking Generative Tabular Data","created":"2024-05-22","cited_by_count":7,"area":"safety"},{"id":"2406.19395","title":"Dataset Size Recovery from LoRA Weights","created":"2024-06-27","cited_by_count":7,"area":"safety"},{"id":"2407.02411","title":"Video Watermarking: Safeguarding Your Video from (Unauthorized) Annotations by Video-based LLMs","created":"2024-07-02","cited_by_count":7,"area":"safety"},{"id":"2506.23484","title":"TAG-WM: Tamper-Aware Generative Image Watermarking via Diffusion Inversion Sensitivity","created":"2025-06-30","cited_by_count":7,"area":"safety"},{"id":"2509.11745","title":"Removal Attack and Defense on AI-generated Content Latent-based Watermarking","created":"2025-09-15","cited_by_count":7,"area":"safety"},{"id":"2309.11575","title":"Distilling Adversarial Prompts from Safety Benchmarks: Report for the Adversarial Nibbler Challenge","created":"2023-09-20","cited_by_count":6,"area":"safety"},{"id":"2405.12604","title":"Tiny Refinements Elicit Resilience: Toward Efficient Prefix-Model Against LLM Red-Teaming","created":"2024-05-21","cited_by_count":6,"area":"safety"},{"id":"2410.20354","title":"FoldMark: Protecting Protein Generative Models with Watermarking","created":"2024-10-27","cited_by_count":6,"area":"safety"},{"id":"2504.15827","title":"DualOptim: Enhancing Efficacy and Stability in Machine Unlearning with Dual Optimizers","created":"2025-04-22","cited_by_count":6,"area":"safety"},{"id":"2506.23731","title":"Radioactive Watermarks in Diffusion and Autoregressive Image Generative Models","created":"2025-06-30","cited_by_count":6,"area":"safety"},{"id":"2510.24034","title":"AutoPrompt: Automated Red-Teaming of Text-to-Image Models via LLM-Driven Adversarial Prompts","created":"2025-10-28","cited_by_count":6,"area":"safety"},{"id":"2601.00590","title":"SafeMo: Linguistically Grounded Unlearning for Trustworthy Text-to-Motion Generation","created":"2026-01-02","cited_by_count":6,"area":"safety"},{"id":"2309.03815","title":"T2IW: Joint Text to Image & Watermark Generation","created":"2023-09-07","cited_by_count":5,"area":"safety"},{"id":"2312.14440","title":"Asymmetric Bias in Text-to-Image Generation with Adversarial Attacks","created":"2023-12-22","cited_by_count":5,"area":"safety"},{"id":"2408.01689","title":"Controllable Unlearning for Image-to-Image Generative Models via $\\varepsilon$-Constrained Optimization","created":"2024-08-03","cited_by_count":5,"area":"safety"},{"id":"2501.08246","title":"Text-Diffusion Red-Teaming of Large Language Models: Unveiling Harmful Behaviors with Proximity Constraints","created":"2025-01-14","cited_by_count":5,"area":"safety"},{"id":"2502.16423","title":"Unified Prompt Attack Against Text-to-Image Generation Models","created":"2025-02-23","cited_by_count":5,"area":"safety"},{"id":"2503.01839","title":"Jailbreaking Safeguarded Text-to-Image Models via Large Language Models","created":"2025-03-03","cited_by_count":5,"area":"safety"},{"id":"2503.21824","title":"Protecting Your Video Content: Disrupting Automated Video-based LLM Annotations","created":"2025-03-26","cited_by_count":5,"area":"safety"},{"id":"2504.20376","title":"When Memory Becomes a Vulnerability: Towards Multi-turn Jailbreak Attacks against Text-to-Image Generation Systems","created":"2025-04-29","cited_by_count":5,"area":"safety"},{"id":"2506.21209","title":"BitMark: Watermarking Bitwise Autoregressive Image Generative Models","created":"2025-06-26","cited_by_count":5,"area":"safety"},{"id":"2510.12981","title":"Reference-Specific Unlearning Metrics Can Hide the Truth: A Reality Check","created":"2025-10-14","cited_by_count":5,"area":"safety"},{"id":"2510.22124","title":"Efficient Utility-Preserving Machine Unlearning with Implicit Gradient Surgery","created":"2025-10-25","cited_by_count":5,"area":"safety"},{"id":"2601.11210","title":"VidLeaks: Membership Inference Attacks Against Text-to-Video Models","created":"2026-01-16","cited_by_count":5,"area":"safety"},{"id":"2604.01888","title":"Low-Effort Jailbreak Attacks Against Text-to-Image Safety Filters","created":"2026-04-02","cited_by_count":5,"area":"safety"},{"id":"2404.02067","title":"Red-Teaming Segment Anything Model","created":"2024-04-02","cited_by_count":4,"area":"safety"},{"id":"2405.12786","title":"Rethinking the Vulnerabilities of Face Recognition Systems:From a Practical Perspective","created":"2024-05-21","cited_by_count":4,"area":"safety"},{"id":"2407.12069","title":"Unlearning Personal Data from a Single Image","created":"2024-07-16","cited_by_count":4,"area":"safety"},{"id":"2503.00531","title":"GaussianSeal: Rooting Adaptive Watermarks for 3D Gaussian Generation Model","created":"2025-03-01","cited_by_count":4,"area":"safety"},{"id":"2503.11324","title":"Safe-VAR: Safe Visual Autoregressive Model for Text-to-Image Generative Watermarking","created":"2025-03-14","cited_by_count":4,"area":"safety"},{"id":"2503.22413","title":"Instance-Level Data-Use Auditing of Visual ML Models","created":"2025-03-28","cited_by_count":4,"area":"safety"},{"id":"2507.20573","title":"Reminiscence Attack on Residuals: Exploiting Approximate Machine Unlearning for Privacy","created":"2025-07-28","cited_by_count":4,"area":"safety"}],"next_cursor":"100"}