{"total":46,"rows":[{"id":"2312.04828","title":"HuRef: HUman-REadable Fingerprint for Large Language Models","created":"2023-12-08","cited_by_count":34,"area":null},{"id":"2307.12280","title":"Downstream-agnostic Adversarial Examples","created":"2023-07-23","cited_by_count":32,"area":null},{"id":"2308.06015","title":"Enhancing Generalization of Universal Adversarial Perturbation through Gradient Aggregation","created":"2023-08-11","cited_by_count":22,"area":null},{"id":"2208.02820","title":"MOVE: Effective and Harmless Ownership Verification via Embedded External Features","created":"2022-08-04","cited_by_count":21,"area":null},{"id":"2210.15427","title":"Are You Stealing My Model? Sample Correlation for Fingerprinting Deep Neural Networks","created":"2022-10-21","cited_by_count":21,"area":null},{"id":"2412.16955","title":"NumbOD: A Spatial-Frequency Fusion Attack Against Object Detectors","created":"2024-12-22","cited_by_count":17,"area":null},{"id":"2304.08566","title":"GrOVe: Ownership Verification of Graph Neural Networks using Embeddings","created":"2023-04-17","cited_by_count":16,"area":null},{"id":"2502.00706","title":"Model Provenance Testing for Large Language Models","created":"2025-02-02","cited_by_count":15,"area":null},{"id":"2305.16310","title":"Securing Deep Generative Models with Universal Adversarial Signature","created":"2023-05-25","cited_by_count":14,"area":null},{"id":"2307.15860","title":"What can Discriminator do? Towards Box-free Ownership Verification of Generative Adversarial Network","created":"2023-07-29","cited_by_count":10,"area":null},{"id":"2406.11129","title":"Neural Lineage","created":"2024-06-17","cited_by_count":9,"area":null},{"id":"2407.13700","title":"Cross-Task Attack: A Self-Supervision Generative Framework Based on Attention Shift","created":"2024-07-18","cited_by_count":9,"area":null},{"id":"2509.26598","title":"Are Robust LLM Fingerprints Adversarially Robust?","created":"2025-09-30","cited_by_count":8,"area":null},{"id":"2312.04542","title":"SoK: Unintended Interactions among Machine Learning Defenses and Risks","created":"2023-12-07","cited_by_count":6,"area":null},{"id":"2404.02889","title":"Steganographic Passport: An Owner and User Verifiable Credential for Deep Model IP Protection Without Retraining","created":"2024-04-03","cited_by_count":5,"area":null},{"id":"2602.03396","title":"Towards Distillation-Resistant Large Language Models: An Information-Theoretic Perspective","created":"2026-02-03","cited_by_count":5,"area":null},{"id":"2602.20419","title":"CREDIT: Certified Ownership Verification of Deep Neural Networks Against Model Extraction Attacks","created":"2026-02-23","cited_by_count":5,"area":null},{"id":"2308.12319","title":"RemovalNet: DNN Fingerprint Removal Attacks","created":"2023-08-23","cited_by_count":4,"area":null},{"id":"2403.04149","title":"MAP: MAsk-Pruning for Source-Free Model Intellectual Property Protection","created":"2024-03-07","cited_by_count":4,"area":null},{"id":"2312.15617","title":"GanFinger: GAN-Based Fingerprint Generation for Deep Neural Network Ownership Verification","created":"2023-12-25","cited_by_count":3,"area":null},{"id":"2510.06738","title":"AWM: Accurate Weight-Matrix Fingerprint for Large Language Models","created":"2025-10-08","cited_by_count":3,"area":null},{"id":"2606.03330","title":"FLIPS: Instance-Fingerprinting for LLMs via Pseudo-random Sequences","created":"2026-06-02","cited_by_count":3,"area":null},{"id":"2305.17868","title":"NaturalFinger: Generating Natural Fingerprint with Generative Adversarial Networks","created":"2023-05-29","cited_by_count":2,"area":null},{"id":"2307.14751","title":"FLARE: Fingerprinting Deep Reinforcement Learning Agents using Universal Adversarial Masks","created":"2023-07-27","cited_by_count":2,"area":null},{"id":"2409.16491","title":"Proactive Schemes: A Survey of Adversarial Attacks for Social Good","created":"2024-09-24","cited_by_count":2,"area":null},{"id":"2411.09776","title":"Combining Machine Learning Defenses without Conflicts","created":"2024-11-14","cited_by_count":2,"area":null},{"id":"2412.20768","title":"Sample Correlation for Fingerprinting Deep Face Recognition","created":"2024-12-30","cited_by_count":2,"area":null},{"id":"2507.00724","title":"Holmes: Towards Effective and Harmless Model Ownership Verification to Personalized Large Vision Models via Decoupling Common Features","created":"2025-06-24","cited_by_count":2,"area":null},{"id":"2603.21411","title":"Fingerprinting Deep Neural Networks for Ownership Protection: An Analytical Approach","created":"2026-03-22","cited_by_count":2,"area":null},{"id":"2208.03169","title":"FBI: Fingerprinting models with Benign Inputs","created":"2022-08-05","cited_by_count":1,"area":null},{"id":"2304.02312","title":"How to choose your best allies for a transferable attack?","created":"2023-04-05","cited_by_count":1,"area":null},{"id":"2308.04673","title":"SSL-Auth: An Authentication Framework by Fragile Watermarking for Pre-trained Encoders in Self-supervised Learning","created":"2023-08-09","cited_by_count":1,"area":null},{"id":"2407.03883","title":"Protecting Deep Learning Model Copyrights with Adversarial Example-Free Reuse Detection","created":"2024-07-04","cited_by_count":1,"area":null},{"id":"2502.05931","title":"Protecting Intellectual Property of EEG-based Neural Networks with Watermarking","created":"2025-02-09","cited_by_count":1,"area":null},{"id":"2601.11683","title":"Attesting Model Lineage by Consisted Knowledge Evolution with Fine-Tuning Trajectory","created":"2026-01-16","cited_by_count":1,"area":null},{"id":"2608.08195","title":"Targeted Counterfactual Fingerprinting for Black-Box LLM Ownership Verification","created":"2026-08-08","cited_by_count":1,"area":null},{"id":"2303.04980","title":"Decision-BADGE: Decision-based Adversarial Batch Attack with Directional Gradient Estimation","created":"2023-03-09","cited_by_count":0,"area":null},{"id":"2405.04108","title":"A2-DIDM: Privacy-preserving Accumulator-enabled Auditing for Distributed Identity of DNN Model","created":"2024-05-07","cited_by_count":0,"area":null},{"id":"2411.00380","title":"DeepCore: Simple Fingerprint Construction for Differentiating Homologous and Piracy Models","created":"2024-11-01","cited_by_count":0,"area":null},{"id":"2411.18055","title":"FAMES: Fast Approximate Multiplier Substitution for Mixed-Precision Quantized DNNs--Down to 2 Bits!","created":"2024-11-27","cited_by_count":0,"area":null},{"id":"2507.18036","title":"NWaaS: A Non-Intrusive and Privacy-Preserving Watermarking-as-a-Service System with Adaptive Resource Scheduling","created":"2025-07-24","cited_by_count":0,"area":null},{"id":"2512.10600","title":"Authority Backdoor: A Certifiable Backdoor Mechanism for Authoring DNNs","created":"2025-12-11","cited_by_count":0,"area":null},{"id":"2603.04896","title":"Authorize-on-Demand: Dynamic Authorization with Legality-Aware Intellectual Property Protection for VLMs","created":"2026-03-05","cited_by_count":0,"area":null},{"id":"2605.05360","title":"COPYCOP: Ownership Verification for Graph Neural Networks","created":"2026-05-06","cited_by_count":0,"area":null},{"id":"2607.13046","title":"What Your Model Threw Away and Why You'll Want It Back: Masking, Fingerprinting, and Privacy from Discarded Geometry","created":"2026-06-17","cited_by_count":0,"area":null},{"id":"2609.29264","title":"TP-CRIV: A Framework for Third-Party Challenge-Response Identity Verification of AI Models","created":"2026-09-24","cited_by_count":0,"area":null}],"next_cursor":null}