{"total":86,"rows":[{"id":"2310.14942","title":"Domain Watermark: Effective and Harmless Dataset Copyright Protection is Closed at Hand","created":"2023-10-09","cited_by_count":57,"area":null},{"id":"2303.12993","title":"Backdoor Defense via Adaptively Splitting Poisoned Dataset","created":"2023-03-23","cited_by_count":43,"area":null},{"id":"2405.04825","title":"Explanation as a Watermark: Towards Harmless and Multi-bit Model Ownership Verification via Watermarking Feature Attribution","created":"2024-05-08","cited_by_count":40,"area":"safety"},{"id":"2405.09786","title":"IBD-PSC: Input-level Backdoor Detection via Parameter-oriented Scaling Consistency","created":"2024-05-16","cited_by_count":39,"area":null},{"id":"2303.11470","title":"Did You Train on My Dataset? Towards Public Dataset Protection with Clean-Label Backdoor Watermarking","created":"2023-03-20","cited_by_count":37,"area":null},{"id":"2402.11473","title":"Poisoned Forgery Face: Towards Backdoor Attacks on Face Forgery Detection","created":"2024-02-18","cited_by_count":35,"area":null},{"id":"2403.10893","title":"A Watermark-Conditioned Diffusion Model for IP Protection","created":"2024-03-16","cited_by_count":35,"area":"diffusion"},{"id":"2401.04136","title":"The Stronger the Diffusion Model, the Easier the Backdoor: Data Poisoning to Induce Copyright Breaches Without Adjusting Finetuning Pipeline","created":"2024-01-07","cited_by_count":33,"area":"diffusion"},{"id":"2302.04262","title":"Algorithmic Collective Action in Machine Learning","created":"2023-02-08","cited_by_count":31,"area":null},{"id":"2307.08208","title":"Towards Stealthy Backdoor Attacks against Speech Recognition via Elements of Sound","created":"2023-07-17","cited_by_count":30,"area":"safety"},{"id":"2310.18933","title":"Label Poisoning is All You Need","created":"2023-10-29","cited_by_count":29,"area":"safety"},{"id":"2211.05638","title":"Untargeted Backdoor Attack against Object Detection","created":"2022-11-02","cited_by_count":28,"area":null},{"id":"2302.01762","title":"BackdoorBox: A Python Toolbox for Backdoor Learning","created":"2023-02-01","cited_by_count":26,"area":null},{"id":"2311.13091","title":"Stable Unlearnable Example: Enhancing the Robustness of Unlearnable Examples via Stable Error-Minimizing Noise","created":"2023-11-22","cited_by_count":25,"area":null},{"id":"2502.18508","title":"REFINE: Inversion-Free Backdoor Defense via Model Reprogramming","created":"2025-02-22","cited_by_count":22,"area":null},{"id":"2302.09457","title":"Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective","created":"2023-02-19","cited_by_count":20,"area":null},{"id":"2306.06209","title":"Backdoor Attack with Sparse and Invisible Trigger","created":"2023-05-11","cited_by_count":20,"area":null},{"id":"2408.05500","title":"PointNCBW: Towards Dataset Ownership Verification for Point Clouds via Negative Clean-label Backdoor Watermark","created":"2024-08-10","cited_by_count":20,"area":null},{"id":"2410.10437","title":"Towards Reliable Verification of Unauthorized Data Usage in Personalized Text-to-Image Diffusion Models","created":"2024-10-14","cited_by_count":20,"area":"diffusion"},{"id":"2508.11548","title":"Copyright Protection for Large Language Models: A Survey of Methods, Challenges, and Trends","created":"2025-08-15","cited_by_count":20,"area":"safety"},{"id":"2405.12725","title":"Nearest is Not Dearest: Towards Practical Defense against Quantization-conditioned Backdoor Attacks","created":"2024-05-21","cited_by_count":18,"area":null},{"id":"2507.03034","title":"Rethinking Data Protection in the (Generative) Artificial Intelligence Era","created":"2025-07-03","cited_by_count":18,"area":null},{"id":"2407.15100","title":"A General Framework for Data-Use Auditing of ML Models","created":"2024-07-21","cited_by_count":16,"area":null},{"id":"2410.16618","title":"SoK: Dataset Copyright Auditing in Machine Learning Systems","created":"2024-10-22","cited_by_count":15,"area":null},{"id":"2411.11478","title":"SoK: On the Role and Future of AIGC Watermarking in the Era of Gen-AI","created":"2024-11-18","cited_by_count":14,"area":"safety"},{"id":"2211.01806","title":"BATT: Backdoor Attack with Transformation-based Triggers","created":"2022-11-02","cited_by_count":11,"area":null},{"id":"2309.03081","title":"ORL-AUDITOR: Dataset Auditing in Offline Deep Reinforcement Learning","created":"2023-09-06","cited_by_count":11,"area":"offlinerl"},{"id":"2402.17938","title":"EmMark: Robust Watermarks for IP Protection of Embedded Quantized Large Language Models","created":"2024-02-27","cited_by_count":11,"area":"safety"},{"id":"2307.15860","title":"What can Discriminator do? Towards Box-free Ownership Verification of Generative Adversarial Network","created":"2023-07-29","cited_by_count":10,"area":null},{"id":"2309.04777","title":"Towards Robust Model Watermark via Reducing Parametric Vulnerability","created":"2023-09-09","cited_by_count":10,"area":"safety"},{"id":"2507.16302","title":"Towards Resilient Safety-driven Unlearning for Diffusion Models against Downstream Fine-tuning","created":"2025-07-22","cited_by_count":9,"area":"diffusion"},{"id":"2410.09101","title":"Data Taggants: Dataset Ownership Verification via Harmless Targeted Data Poisoning","created":"2024-10-09","cited_by_count":8,"area":"safety"},{"id":"2507.05622","title":"DATABench: Evaluating Dataset Auditing in Deep Learning from an Adversarial Perspective","created":"2025-07-08","cited_by_count":8,"area":null},{"id":"2404.12530","title":"TrajDeleter: Enabling Trajectory Forgetting in Offline Reinforcement Learning Agents","created":"2024-04-18","cited_by_count":7,"area":"offlinerl"},{"id":"2405.02365","title":"ModelShield: Adaptive and Robust Watermark against Model Extraction Attack","created":"2024-05-03","cited_by_count":7,"area":"safety"},{"id":"2411.19479","title":"FLARE: Toward Universal Dataset Purification against Backdoor Attacks","created":"2024-11-29","cited_by_count":7,"area":null},{"id":"2304.11432","title":"Universal Adversarial Backdoor Attacks to Fool Vertical Federated Learning in Cloud-Edge Collaboration","created":"2023-04-22","cited_by_count":6,"area":null},{"id":"2312.04542","title":"SoK: Unintended Interactions among Machine Learning Defenses and Risks","created":"2023-12-07","cited_by_count":6,"area":null},{"id":"2506.14913","title":"Winter Soldier: Backdooring Language Models at Pre-Training with Indirect Data Poisoning","created":"2025-06-17","cited_by_count":6,"area":"safety"},{"id":"2306.08313","title":"A Proxy Attack-Free Strategy for Practically Improving the Poisoning Efficiency in Backdoor Attacks","created":"2023-06-14","cited_by_count":5,"area":null},{"id":"2403.03590","title":"DeepEclipse: How to Break White-Box DNN-Watermarking Schemes","created":"2024-03-06","cited_by_count":5,"area":null},{"id":"2503.21824","title":"Protecting Your Video Content: Disrupting Automated Video-based LLM Annotations","created":"2025-03-26","cited_by_count":5,"area":"safety"},{"id":"2503.23536","title":"A Survey on Unlearnable Data","created":"2025-03-30","cited_by_count":5,"area":null},{"id":"2405.15161","title":"Are You Copying My Prompt? Protecting the Copyright of Vision Prompt for VPaaS via Watermark","created":"2024-05-24","cited_by_count":4,"area":null},{"id":"2409.06280","title":"Anonymity Unveiled: A Practical Framework for Auditing Data Use in Deep Learning Models","created":"2024-09-10","cited_by_count":4,"area":null},{"id":"2503.22413","title":"Instance-Level Data-Use Auditing of Visual ML Models","created":"2025-03-28","cited_by_count":4,"area":"safety"},{"id":"2510.09655","title":"Data Provenance Auditing of Fine-Tuned Large Language Models with a Text-Preserving Technique","created":"2025-10-07","cited_by_count":4,"area":null},{"id":"2510.14086","title":"Every Language Model Has a Forgery-Resistant Signature","created":"2025-10-15","cited_by_count":4,"area":null},{"id":"2602.18700","title":"Watermarking LLM Agent Trajectories","created":"2026-02-21","cited_by_count":4,"area":"agents"},{"id":"2307.02140","title":"Towards Open Federated Learning Platforms: Survey and Vision from Technical and Legal Perspectives","created":"2023-07-05","cited_by_count":3,"area":null},{"id":"2312.06488","title":"Performance-lossless Black-box Model Watermarking","created":"2023-12-11","cited_by_count":3,"area":"safety"},{"id":"2503.05794","title":"CBW: Towards Dataset Ownership Verification for Speaker Verification via Clustering-based Backdoor Watermarking","created":"2025-03-02","cited_by_count":3,"area":null},{"id":"2312.10508","title":"TrojFair: Trojan Fairness Attacks","created":"2023-12-16","cited_by_count":2,"area":null},{"id":"2403.10663","title":"Not Just Change the Labels, Learn the Features: Watermarking Deep Neural Networks with Multi-View Data","created":"2024-03-15","cited_by_count":2,"area":null},{"id":"2405.00466","title":"Lazy Layers to Make Fine-Tuned Diffusion Models More Traceable","created":"2024-05-01","cited_by_count":2,"area":"diffusion"},{"id":"2406.14473","title":"Data-Centric AI in the Age of Large Language Models","created":"2024-06-20","cited_by_count":2,"area":null},{"id":"2501.02704","title":"Persistence of Backdoor-based Watermarks for Neural Networks: A Comprehensive Evaluation","created":"2025-01-06","cited_by_count":2,"area":null},{"id":"2505.02824","title":"Towards Dataset Copyright Evasion Attack against Personalized Text-to-Image Diffusion Models","created":"2025-05-05","cited_by_count":2,"area":"diffusion"},{"id":"2507.12022","title":"Dataset Ownership Verification for Pre-trained Masked Models","created":"2025-07-16","cited_by_count":2,"area":null},{"id":"2508.01074","title":"Evading Data Provenance in Deep Neural Networks","created":"2025-08-01","cited_by_count":2,"area":null},{"id":"2510.09210","title":"Provable Watermarking for Data Poisoning Attacks","created":"2025-10-10","cited_by_count":2,"area":null},{"id":"2510.14299","title":"TED++: Submanifold-Aware Backdoor Detection via Layerwise Tubular-Neighbourhood Screening","created":"2025-10-16","cited_by_count":2,"area":null},{"id":"2510.15303","title":"DSSmoothing: Toward Certified Dataset Ownership Verification for Pre-trained Language Models via Dual-Space Smoothing","created":"2025-10-17","cited_by_count":2,"area":"safety"},{"id":"2510.26420","title":"SSCL-BW: Sample-Specific Clean-Label Backdoor Watermarking for Dataset Ownership Verification","created":"2025-10-30","cited_by_count":2,"area":null},{"id":"2406.19753","title":"Attack On Prompt: Backdoor Attack in Prompt-Based Continual Learning","created":"2024-06-28","cited_by_count":1,"area":"safety"},{"id":"2408.00255","title":"Revocable Backdoor for Deep Model Trading","created":"2024-08-01","cited_by_count":1,"area":null},{"id":"2504.11509","title":"PATFinger: Prompt-Adapted Transferable Fingerprinting against Unauthorized Multimodal Dataset Usage","created":"2025-04-15","cited_by_count":1,"area":"mllm"},{"id":"2506.08602","title":"WGLE:Backdoor-free and Multi-bit Black-box Watermarking for Graph Neural Networks","created":"2025-06-10","cited_by_count":1,"area":null},{"id":"2512.14439","title":"VICTOR: Dataset Copyright Auditing in Video Recognition Systems","created":"2025-12-16","cited_by_count":1,"area":null},{"id":"2602.09284","title":"X-Mark: Saliency-Guided Robust Dataset Ownership Verification for Medical Imaging","created":"2026-02-10","cited_by_count":1,"area":"safety"},{"id":"2302.13056","title":"SATBA: An Invisible Backdoor Attack Based On Spatial Attention","created":"2023-02-25","cited_by_count":0,"area":null},{"id":"2303.12589","title":"Do Backdoors Assist Membership Inference Attacks?","created":"2023-03-22","cited_by_count":0,"area":null},{"id":"2311.09680","title":"Trustworthy Large Models in Vision: A Survey","created":"2023-11-16","cited_by_count":0,"area":null},{"id":"2312.01281","title":"Mendata: A Framework to Purify Manipulated Training Data","created":"2023-12-03","cited_by_count":0,"area":null},{"id":"2405.18671","title":"Watermarking Counterfactual Explanations","created":"2024-05-29","cited_by_count":0,"area":null},{"id":"2406.13411","title":"Composite Concept Extraction through Backdooring","created":"2024-06-19","cited_by_count":0,"area":null},{"id":"2409.19442","title":"Trigger-Based Fragile Model Watermarking for Image Transformation Networks","created":"2024-09-28","cited_by_count":0,"area":"safety"},{"id":"2411.15367","title":"Exploiting Watermark-Based Defense Mechanisms in Text-to-Image Diffusion Models for Unauthorized Data Usage","created":"2024-11-22","cited_by_count":0,"area":"diffusion"},{"id":"2503.10269","title":"Targeted Data Poisoning for Black-Box Audio Datasets Ownership Verification","created":"2025-03-13","cited_by_count":0,"area":"safety"},{"id":"2506.13160","title":"CertDW: Towards Certified Dataset Ownership Verification via Conformal Calibration","created":"2025-06-16","cited_by_count":0,"area":"safety"},{"id":"2506.20926","title":"Towards Generalized and Stealthy Watermarking for Generative Code Models","created":"2025-06-26","cited_by_count":0,"area":"safety"},{"id":"2508.00892","title":"HoneyImage: Verifiable, Harmless, and Stealthy Dataset Ownership Verification for Image Models","created":"2025-07-27","cited_by_count":0,"area":"safety"},{"id":"2601.17107","title":"StealthMark: Harmless and Stealthy Ownership Verification for Medical Segmentation via Uncertainty-Guided Backdoors","created":"2026-01-23","cited_by_count":0,"area":null},{"id":"2605.01834","title":"Repurposing and Evaluating the (In)Feasibility of Dataset Poisoning enabled Watermarking for Contrastive Learning","created":"2026-05-03","cited_by_count":0,"area":null},{"id":"2606.21240","title":"DIPBox: A Multi-scale Testing Framework for Tracking Dataset Regeneration","created":"2026-06-19","cited_by_count":0,"area":null},{"id":"2606.26257","title":"Dataset Usage Inference without Shadow Models or Held-out Data","created":"2026-06-24","cited_by_count":0,"area":null}],"next_cursor":null}