{"total":63,"rows":[{"id":"2303.11156","title":"Can AI-Generated Text be Reliably Detected?","created":"2023-03-17","cited_by_count":386,"area":"safety"},{"id":"2306.17439","title":"Provable Robust Watermarking for AI-Generated Text","created":"2023-06-30","cited_by_count":299,"area":"safety"},{"id":"2306.01953","title":"Invisible Image Watermarks Are Provably Removable Using Generative AI","created":"2023-06-02","cited_by_count":134,"area":"safety"},{"id":"2410.18775","title":"Robust Watermarking Using Generative Priors Against Image Editing: From Benchmarking to Advances","created":"2024-10-24","cited_by_count":110,"area":"safety"},{"id":"2402.19361","title":"Watermark Stealing in Large Language Models","created":"2024-02-29","cited_by_count":92,"area":"safety"},{"id":"2210.00968","title":"Membership Inference Attacks Against Text-to-image Generation Models","created":"2022-10-03","cited_by_count":69,"area":"safety"},{"id":"2302.04237","title":"Black Box Adversarial Prompting for Foundation Models","created":"2023-02-08","cited_by_count":62,"area":"safety"},{"id":"2403.01446","title":"GuardT2I: Defending Text-to-Image Models from Adversarial Prompts","created":"2024-03-03","cited_by_count":62,"area":"safety"},{"id":"2211.02408","title":"Rickrolling the Artist: Injecting Backdoors into Text Encoders for Text-to-Image Synthesis","created":"2022-11-04","cited_by_count":59,"area":"safety"},{"id":"2304.03400","title":"RoSteALS: Robust Steganography using Autoencoder Latent Space","created":"2023-04-06","cited_by_count":57,"area":"safety"},{"id":"2405.18540","title":"Learning diverse attacks on large language models for robust red-teaming and safety tuning","created":"2024-05-28","cited_by_count":54,"area":"safety"},{"id":"2402.16187","title":"No Free Lunch in LLM Watermarking: Trade-offs in Watermarking Design Choices","created":"2024-02-25","cited_by_count":50,"area":"safety"},{"id":"2402.00351","title":"Machine Unlearning for Image-to-Image Generative Models","created":"2024-02-01","cited_by_count":47,"area":"safety"},{"id":"2408.10848","title":"Perception-guided Jailbreak against Text-to-Image Models","created":"2024-08-20","cited_by_count":40,"area":"safety"},{"id":"2307.16489","title":"BAGM: A Backdoor Attack for Manipulating Text-to-Image Generative Models","created":"2023-07-31","cited_by_count":37,"area":"safety"},{"id":"2408.05868","title":"LaWa: Using Latent Space for In-Generation Image Watermarking","created":"2024-08-11","cited_by_count":28,"area":"safety"},{"id":"2306.07754","title":"Generative Watermarking Against Unauthorized Subject-Driven Image Synthesis","created":"2023-06-13","cited_by_count":23,"area":"safety"},{"id":"2406.09408","title":"Data Attribution for Text-to-Image Models by Unlearning Synthesized Images","created":"2024-06-13","cited_by_count":22,"area":"safety"},{"id":"2403.12075","title":"Adversarial Nibbler: An Open Red-Teaming Method for Identifying Diverse Harms in Text-to-Image Generation","created":"2024-02-14","cited_by_count":20,"area":"safety"},{"id":"2506.16349","title":"Watermarking Autoregressive Image Generation","created":"2025-06-19","cited_by_count":16,"area":"safety"},{"id":"2503.13769","title":"Continual Unlearning for Foundational Text-to-Image Models without Generalization Erosion","created":"2025-03-17","cited_by_count":12,"area":"safety"},{"id":"2504.11106","title":"Token-Level Constraint Boundary Search for Jailbreaking Text-to-Image Models","created":"2025-04-15","cited_by_count":9,"area":"safety"},{"id":"2508.03696","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","created":"2025-07-14","cited_by_count":9,"area":"safety"},{"id":"2309.05940","title":"Catch You Everything Everywhere: Guarding Textual Inversion via Concept Watermarking","created":"2023-09-12","cited_by_count":8,"area":"safety"},{"id":"2311.13619","title":"Steal My Artworks for Fine-tuning? A Watermarking Framework for Detecting Art Theft Mimicry in Text-to-Image Models","created":"2023-11-22","cited_by_count":8,"area":"safety"},{"id":"2411.13553","title":"AI-generated Image Detection: Passive or Watermark?","created":"2024-11-20","cited_by_count":7,"area":"safety"},{"id":"2503.18156","title":"Adoption of Watermarking for Generative AI Systems in Practice and Implications under the new EU AI Act","created":"2025-03-23","cited_by_count":7,"area":"safety"},{"id":"2510.24034","title":"AutoPrompt: Automated Red-Teaming of Text-to-Image Models via LLM-Driven Adversarial Prompts","created":"2025-10-28","cited_by_count":6,"area":"safety"},{"id":"2312.14440","title":"Asymmetric Bias in Text-to-Image Generation with Adversarial Attacks","created":"2023-12-22","cited_by_count":5,"area":"safety"},{"id":"2408.01689","title":"Controllable Unlearning for Image-to-Image Generative Models via $\\varepsilon$-Constrained Optimization","created":"2024-08-03","cited_by_count":5,"area":"safety"},{"id":"2502.16423","title":"Unified Prompt Attack Against Text-to-Image Generation Models","created":"2025-02-23","cited_by_count":5,"area":"safety"},{"id":"2505.18979","title":"Dynamic Optimization and Safety Indicator Injection for Jailbreaking Text-to-Image Models with Multimodal Safety Filters","created":"2025-05-25","cited_by_count":5,"area":"safety"},{"id":"2506.21209","title":"BitMark: Watermarking Bitwise Autoregressive Image Generative Models","created":"2025-06-26","cited_by_count":5,"area":"safety"},{"id":"2510.02384","title":"Secure and Robust Watermarking for AI-generated Images: A Comprehensive Survey","created":"2025-09-30","cited_by_count":5,"area":"safety"},{"id":"2604.01888","title":"Low-Effort Jailbreak Attacks Against Text-to-Image Safety Filters","created":"2026-04-02","cited_by_count":5,"area":"safety"},{"id":"2511.18684","title":"Now You See It, Now You Don't - Instant Concept Erasure for Safe Text-to-Image and Video Generation","created":"2025-11-24","cited_by_count":4,"area":"safety"},{"id":"2506.18325","title":"NSFW-Classifier Guided Prompt Sanitization for Safe Text-to-Image Generation","created":"2025-06-23","cited_by_count":3,"area":"safety"},{"id":"2601.08623","title":"SafeRedir: Prompt Embedding Redirection for Robust Unlearning in Image Generation Models","created":"2026-01-13","cited_by_count":3,"area":"safety"},{"id":"2409.15381","title":"Adversarial Attacks on Parts of Speech: An Empirical Study in Text-to-Image Generation","created":"2024-09-21","cited_by_count":2,"area":"safety"},{"id":"2509.21360","title":"Multimodal Prompt Decoupling Attack on the Safety Filters in Text-to-Image Models","created":"2025-09-21","cited_by_count":2,"area":"safety"},{"id":"2511.08637","title":"How Do Data Owners Say No? A Case Study of Data Consent Mechanisms in Web-Scraped Vision-Language AI Training Datasets","created":"2025-11-10","cited_by_count":2,"area":"safety"},{"id":"2601.07141","title":"MacPrompt: Maraconic-guided Jailbreak against Text-to-Image Models","created":"2026-01-12","cited_by_count":2,"area":"safety"},{"id":"2607.24897","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","created":"2026-07-27","cited_by_count":2,"area":"safety"},{"id":"2312.03419","title":"Synthesizing Physical Backdoor Datasets: An Automated Framework Leveraging Deep Generative Models","created":"2023-12-06","cited_by_count":1,"area":"safety"},{"id":"2502.07845","title":"Spread them Apart: Towards Robust Watermarking of Generated Content","created":"2025-02-11","cited_by_count":1,"area":"safety"},{"id":"2509.15551","title":"PolyJuice Makes It Real: Black-Box, Universal Red Teaming for Synthetic Image Detectors","created":"2025-09-19","cited_by_count":1,"area":"safety"},{"id":"2512.09687","title":"Unconsciously Forget: Mitigating Memorization; Without Knowing What is being Memorized","created":"2025-12-10","cited_by_count":1,"area":"safety"},{"id":"2605.19190","title":"Going PLACES: Participatory Localized Red Teaming for Text-to-Image Safety in the Global South","created":"2026-05-18","cited_by_count":1,"area":"safety"},{"id":"2605.19227","title":"Token by Token, Compromised: Backdoor Vulnerabilities in Unified Autoregressive Models","created":"2026-05-19","cited_by_count":1,"area":"safety"},{"id":"2606.28386","title":"Data Provenance for Image Auto-Regressive Generation","created":"2026-06-22","cited_by_count":1,"area":"safety"},{"id":"2309.13579","title":"Seeing Is Not Always Believing: Invisible Collision Attack and Defence on Pre-Trained Models","created":"2023-09-24","cited_by_count":0,"area":"safety"},{"id":"2404.02530","title":"Manipulating and Mitigating Generative Model Biases without Retraining","created":"2024-04-03","cited_by_count":0,"area":"safety"},{"id":"2505.08804","title":"TokenProber: Jailbreaking Text-to-image Models via Fine-grained Word Impact Analysis","created":"2025-05-11","cited_by_count":0,"area":"safety"},{"id":"2511.11014","title":"SP-Guard: Selective Prompt-adaptive Guidance for Safe Text-to-Image Generation","created":"2025-11-14","cited_by_count":0,"area":"safety"},{"id":"2512.10766","title":"Metaphor-based Jailbreak Attacks on Text-to-Image Models","created":"2025-12-06","cited_by_count":0,"area":"safety"},{"id":"2602.19019","title":"TokenTrace: Multi-Concept Attribution through Watermarked Token Recovery","created":"2026-02-22","cited_by_count":0,"area":"safety"},{"id":"2603.07090","title":"mAVE: A Watermark for Joint Audio-Visual Generation Models","created":"2026-03-07","cited_by_count":0,"area":"safety"},{"id":"2603.16576","title":"REFORGE: Multi-modal Attacks Reveal Vulnerable Concept Unlearning in Image Generation Models","created":"2026-03-17","cited_by_count":0,"area":"safety"},{"id":"2604.15967","title":"When Safe Concepts Become Unsafe: Multi-Concept Compositional Vulnerabilities in Text-to-Image Models","created":"2026-04-17","cited_by_count":0,"area":"safety"},{"id":"2607.07827","title":"Open Models, Open Risks: Measuring Unsafe Generation in Text-to-Image Models In the Wild","created":"2026-07-08","cited_by_count":0,"area":"safety"},{"id":"2608.13478","title":"MapRoute++: Surrogate-Guided Semantic Routing for Visual Concept Unlearning","created":"2026-08-13","cited_by_count":0,"area":"safety"},{"id":"2609.39573","title":"Steering Fields: Adaptive Vector Fields for Safe Image Generation and Beyond","created":"2026-09-30","cited_by_count":0,"area":"safety"},{"id":"2610.06503","title":"Harmful Content Generation in Text-to-Image Models: Capabilities and Moderation Limitations","created":"2026-10-05","cited_by_count":0,"area":"safety"}],"next_cursor":null}