{"total":134,"rows":[{"id":"2410.18775","title":"Robust Watermarking Using Generative Priors Against Image Editing: From Benchmarking to Advances","created":"2024-10-24","cited_by_count":110,"area":"safety"},{"id":"2401.08573","title":"WAVES: Benchmarking the Robustness of Image Watermarks","created":"2024-01-16","cited_by_count":97,"area":null},{"id":"2311.04378","title":"Watermarks in the Sand: Impossibility of Strong Watermarking for Generative Models","created":"2023-11-07","cited_by_count":87,"area":"safety"},{"id":"2310.00076","title":"Robustness of AI-Image Detectors: Fundamental Limits and Practical Attacks","created":"2023-09-29","cited_by_count":81,"area":"safety"},{"id":"2410.07369","title":"An Undetectable Watermark for Generative Image Models","created":"2024-10-09","cited_by_count":81,"area":"diffusion"},{"id":"2412.03283","title":"Black-Box Forgery Attacks on Semantic Watermarks for Diffusion Models","created":"2024-12-04","cited_by_count":52,"area":"diffusion"},{"id":"2411.18479","title":"SoK: Watermarking for AI-Generated Content","created":"2024-11-27","cited_by_count":51,"area":"safety"},{"id":"2410.05470","title":"Image Watermarks are Removable Using Controllable Regeneration from Clean Noise","created":"2024-10-07","cited_by_count":50,"area":null},{"id":"2405.11135","title":"AquaLoRA: Toward White-box Protection for Customized Stable Diffusion Models via Watermark LoRA","created":"2024-05-18","cited_by_count":46,"area":"diffusion"},{"id":"2411.03862","title":"ROBIN: Robust and Invisible Watermarks for Diffusion Models with Adversarial Optimization","created":"2024-11-06","cited_by_count":46,"area":"diffusion"},{"id":"2406.08337","title":"WMAdapter: Adding WaterMark Control to Latent Diffusion Models","created":"2024-06-12","cited_by_count":31,"area":"diffusion"},{"id":"2510.09263","title":"SynthID-Image: Image watermarking at internet scale","created":"2025-10-10","cited_by_count":31,"area":null},{"id":"2403.15365","title":"A Transfer Attack to Image Watermarks","created":"2024-03-22","cited_by_count":27,"area":null},{"id":"2405.08363","title":"UnMarker: A Universal Attack on Defensive Image Watermarking","created":"2024-05-14","cited_by_count":24,"area":null},{"id":"2411.07795","title":"InvisMark: Invisible and Robust Watermarking for AI-generated Image Provenance","created":"2024-11-10","cited_by_count":23,"area":"safety"},{"id":"2405.02696","title":"DiffuseTrace: A Transparent and Flexible Watermarking Scheme for Latent Diffusion Model","created":"2024-05-04","cited_by_count":21,"area":"diffusion"},{"id":"2412.04653","title":"Hidden in the Noise: Two-Stage Robust Watermarking for Images","created":"2024-12-05","cited_by_count":21,"area":null},{"id":"2405.07145","title":"Stable Signature is Unstable: Removing Image Watermark from Diffusion Models","created":"2024-05-12","cited_by_count":20,"area":"diffusion"},{"id":"2410.10437","title":"Towards Reliable Verification of Unauthorized Data Usage in Personalized Text-to-Image Diffusion Models","created":"2024-10-14","cited_by_count":20,"area":"diffusion"},{"id":"2411.19895","title":"GuardSplat: Efficient and Robust Watermarking for 3D Gaussian Splatting","created":"2024-11-29","cited_by_count":18,"area":null},{"id":"2503.12172","title":"SEAL: Semantic Aware Image Watermarking","created":"2025-03-15","cited_by_count":15,"area":null},{"id":"2411.11478","title":"SoK: On the Role and Future of AIGC Watermarking in the Era of Gen-AI","created":"2024-11-18","cited_by_count":14,"area":"safety"},{"id":"2509.07647","title":"Semantic Watermarking Reinvented: Enhancing Robustness and Generation Quality with Fourier Integrity","created":"2025-09-09","cited_by_count":14,"area":"diffusion"},{"id":"2407.10575","title":"A Survey of Defenses Against AI-Generated Visual Media: Detection,Disruption, and Authentication","created":"2024-07-15","cited_by_count":13,"area":null},{"id":"2504.20111","title":"Forging and Removing Latent-Noise Diffusion Watermarks Using a Single Image","created":"2025-04-27","cited_by_count":13,"area":"diffusion"},{"id":"2510.20468","title":"Transferable Black-Box One-Shot Forging of Watermarks via Image Preference Models","created":"2025-10-23","cited_by_count":12,"area":"safety"},{"id":"2406.09026","title":"Steganalysis on Digital Watermarking: Is Your Defense Truly Impervious?","created":"2024-06-13","cited_by_count":10,"area":null},{"id":"2406.03720","title":"JIGMARK: A Black-Box Approach for Enhancing Image Watermarks against Diffusion Model Edits","created":"2024-06-06","cited_by_count":9,"area":"diffusion"},{"id":"2505.23814","title":"Watermarking Without Standards Is Not AI Governance","created":"2025-05-27","cited_by_count":9,"area":"safety"},{"id":"2508.21072","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","created":"2025-08-28","cited_by_count":9,"area":null},{"id":"2310.07726","title":"Warfare:Breaking the Watermark Protection of AI-Generated Content","created":"2023-09-27","cited_by_count":8,"area":"safety"},{"id":"2403.18774","title":"RAW: A Robust and Agile Plug-and-Play Watermark Framework for AI-Generated Images with Provable Guarantees","created":"2024-01-23","cited_by_count":8,"area":"safety"},{"id":"2410.20824","title":"FreqMark: Invisible Image Watermarking via Frequency Based Optimization in Latent Space","created":"2024-10-28","cited_by_count":8,"area":null},{"id":"2405.14018","title":"Watermarking Generative Tabular Data","created":"2024-05-22","cited_by_count":7,"area":"safety"},{"id":"2502.13998","title":"A Baseline Method for Removing Invisible Image Watermarks using Deep Image Prior","created":"2025-02-19","cited_by_count":7,"area":null},{"id":"2603.12749","title":"SLICE: Semantic Latent Injection via Compartmentalized Embedding for Image Watermarking","created":"2026-03-13","cited_by_count":7,"area":"diffusion"},{"id":"2405.09863","title":"Box-Free Model Watermarks Are Prone to Black-Box Removal Attacks","created":"2024-05-16","cited_by_count":6,"area":"safety"},{"id":"2411.13144","title":"CopyrightMeter: Revisiting Copyright Protection in Text-to-image Models","created":"2024-11-20","cited_by_count":6,"area":"diffusion"},{"id":"2503.22330","title":"WMCopier: Forging Invisible Image Watermarks on Arbitrary Images","created":"2025-03-28","cited_by_count":6,"area":null},{"id":"2510.13793","title":"NoisePrints: Distortion-Free Watermarks for Authorship in Private Diffusion Models","created":"2025-10-15","cited_by_count":6,"area":"diffusion"},{"id":"2311.13713","title":"A Somewhat Robust Image Watermark against Diffusion-based Editing Models","created":"2023-11-22","cited_by_count":5,"area":"diffusion"},{"id":"2505.21620","title":"VideoMarkBench: Benchmarking Robustness of Video Watermarking","created":"2025-05-27","cited_by_count":5,"area":null},{"id":"2509.10569","title":"MarkDiffusion: An Open-Source Toolkit for Generative Watermarking of Latent Diffusion Models","created":"2025-09-11","cited_by_count":5,"area":"diffusion"},{"id":"2607.08400","title":"TRACE: A Two-Channel Robust Attribution Watermark via Complementary Embeddings for LLM-Agent Trajectories","created":"2026-07-09","cited_by_count":5,"area":"agents"},{"id":"2407.04086","title":"Certifiably Robust Image Watermark","created":"2024-07-04","cited_by_count":4,"area":null},{"id":"2506.10502","title":"A Crack in the Bark: Leveraging Public Knowledge to Remove Tree-Ring Watermarks","created":"2025-06-12","cited_by_count":4,"area":"diffusion"},{"id":"2510.05978","title":"Diffusion-Based Image Editing for Breaking Robust Watermarks","created":"2025-10-07","cited_by_count":4,"area":"diffusion"},{"id":"2602.15364","title":"MarkSweep: A No-box Removal Attack on AI-Generated Image Watermarking via Noise Intensification and Frequency-aware Denoising","created":"2026-02-17","cited_by_count":4,"area":"safety"},{"id":"2603.29742","title":"SHIFT: Stochastic Hidden-Trajectory Deflection for Removing Diffusion-based Watermark","created":"2026-03-31","cited_by_count":4,"area":"safety"},{"id":"2403.15955","title":"Finding needles in a haystack: A Black-Box Approach to Invisible Watermark Detection","created":"2024-03-23","cited_by_count":3,"area":null},{"id":"2406.03728","title":"Evaluating Durability: Benchmark Insights into Multimodal Watermarking","created":"2024-06-06","cited_by_count":3,"area":null},{"id":"2408.08340","title":"METR: Image Watermarking with Large Number of Unique Messages","created":"2024-08-15","cited_by_count":3,"area":"diffusion"},{"id":"2501.17356","title":"On the Coexistence and Ensembling of Watermarks","created":"2025-01-29","cited_by_count":3,"area":null},{"id":"2507.03646","title":"When There Is No Decoder: Removing Watermarks from Stable Diffusion Models in a No-box Setting","created":"2025-07-04","cited_by_count":3,"area":"diffusion"},{"id":"2508.06656","title":"ClusterMark: Towards Robust Watermarking for Autoregressive Image Generators with Visual Token Clustering","created":"2025-08-08","cited_by_count":3,"area":"diffusion"},{"id":"2511.05598","title":"Diffusion-Based Image Editing: An Unforeseen Adversary to Robust Invisible Watermarks","created":"2025-11-05","cited_by_count":3,"area":"diffusion"},{"id":"2512.12090","title":"SPDMark: Selective Parameter Displacement for Robust Video Watermarking","created":"2025-12-12","cited_by_count":3,"area":null},{"id":"2601.06639","title":"Attack-Resistant Watermarking for AIGC Image Forensics via Diffusion-based Semantic Deflection","created":"2026-01-10","cited_by_count":3,"area":"safety"},{"id":"2603.02378","title":"Authenticated Contradictions from Desynchronized Provenance and Watermarking","created":"2026-03-02","cited_by_count":3,"area":null},{"id":"2604.06662","title":"Towards Robust Content Watermarking Against Removal and Forgery Attacks","created":"2026-04-08","cited_by_count":3,"area":null},{"id":"2412.12511","title":"Invisible Watermarks: Attacks and Robustness","created":"2024-12-17","cited_by_count":2,"area":null},{"id":"2502.06418","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","created":"2025-02-10","cited_by_count":2,"area":null},{"id":"2507.10578","title":"When and Where do Data Poisons Attack Textual Inversion?","created":"2025-07-11","cited_by_count":2,"area":"diffusion"},{"id":"2509.10577","title":"The Coding Limits of Robust Watermarking for Generative Models","created":"2025-09-11","cited_by_count":2,"area":"safety"},{"id":"2510.01173","title":"EditTrack: Detecting and Attributing AI-assisted Image Editing","created":"2025-10-01","cited_by_count":2,"area":null},{"id":"2510.07302","title":"SpecGuard: Spectral Projection-based Advanced Invisible Watermarking","created":"2025-10-08","cited_by_count":2,"area":null},{"id":"2510.09210","title":"Provable Watermarking for Data Poisoning Attacks","created":"2025-10-10","cited_by_count":2,"area":null},{"id":"2511.19316","title":"Evaluating Dataset Watermarking for Fine-tuning Traceability of Customized Diffusion Models: A Comprehensive Benchmark and Removal Approach","created":"2025-11-24","cited_by_count":2,"area":"diffusion"},{"id":"2512.00094","title":"HMARK: Radioactive Multi-Bit Semantic-Latent Watermarking for Diffusion Models","created":"2025-11-26","cited_by_count":2,"area":"diffusion"},{"id":"2512.11771","title":"Smudged Fingerprints: A Systematic Evaluation of the Robustness of AI Image Fingerprints","created":"2025-12-12","cited_by_count":2,"area":null},{"id":"2601.08832","title":"RAVEN: Erasing Invisible Watermarks via Novel View Synthesis","created":"2026-01-13","cited_by_count":2,"area":null},{"id":"2602.20618","title":"RecoverMark: Robust Watermarking for Localization and Recovery of Manipulated Faces","created":"2026-02-24","cited_by_count":2,"area":null},{"id":"2404.08221","title":"Uncertain Boundaries: Multidisciplinary Approaches to Copyright Issues in Generative AI","created":"2024-03-31","cited_by_count":1,"area":null},{"id":"2408.02035","title":"Robustness of Watermarking on Text-to-Image Diffusion Models","created":"2024-08-04","cited_by_count":1,"area":"diffusion"},{"id":"2503.11945","title":"Your Text Encoder Can Be An Object-Level Watermarking Controller","created":"2025-03-15","cited_by_count":1,"area":"safety"},{"id":"2503.23332","title":"TraceMark-LDM: Authenticatable Watermarking for Latent Diffusion Models via Binary-Guided Rearrangement","created":"2025-03-30","cited_by_count":1,"area":"diffusion"},{"id":"2505.23873","title":"KGMark: A Diffusion Watermark for Knowledge Graphs","created":"2025-05-29","cited_by_count":1,"area":"safety"},{"id":"2509.10766","title":"MetaSeal: Defending Against Image Attribution Forgery Through Content-Dependent Cryptographic Watermarks","created":"2025-09-13","cited_by_count":1,"area":null},{"id":"2510.07538","title":"Low-Compute Watermark Removal via Dual-Domain Natural Projection","created":"2025-10-08","cited_by_count":1,"area":null},{"id":"2512.01314","title":"TokenPure: Watermark Removal through Tokenized Appearance and Structural Guidance","created":"2025-12-01","cited_by_count":1,"area":"safety"},{"id":"2601.13128","title":"PhaseMark: A Post-hoc, Optimization-Free Watermarking of AI-generated Images in the Latent Frequency Domain","created":"2026-01-19","cited_by_count":1,"area":"diffusion"},{"id":"2601.16473","title":"DeMark: A Query-Free Black-Box Attack on Deepfake Watermarking Defenses","created":"2026-01-23","cited_by_count":1,"area":"safety"},{"id":"2602.20053","title":"Decoupling Defense Strategies for Robust Image Watermarking","created":"2026-02-23","cited_by_count":1,"area":null},{"id":"2602.21508","title":"WaterVIB: Learning Minimal Sufficient Watermark Representations via Variational Information Bottleneck","created":"2026-02-25","cited_by_count":1,"area":null},{"id":"2602.22197","title":"Off-The-Shelf Image-to-Image Models Are All You Need To Defeat Image Protection Schemes","created":"2026-02-25","cited_by_count":1,"area":null},{"id":"2603.00150","title":"Attention to Neural Plagiarism: Diffusion Models Can Plagiarize Your Copyrighted Images!","created":"2026-02-25","cited_by_count":1,"area":"diffusion"},{"id":"2603.24857","title":"AI Security in the Foundation Model Era: A Comprehensive Survey from a Unified Perspective","created":"2026-03-25","cited_by_count":1,"area":"safety"},{"id":"2604.11720","title":"On the Robustness of Watermarking for Autoregressive Image Generation","created":"2026-04-13","cited_by_count":1,"area":"safety"},{"id":"2605.09203","title":"Removing the Watermark Is Not Enough: Forensic Stealth in Generative-AI Watermark Removal","created":"2026-05-09","cited_by_count":1,"area":"safety"},{"id":"2605.16720","title":"Compositional Adversarial Training for Robust Visual Watermarking","created":"2026-05-16","cited_by_count":1,"area":null},{"id":"2605.21002","title":"Verifiable Provenance and Watermarking for Generative AI: An Evidentiary Framework for International Operational Law and Domestic Courts","created":"2026-05-20","cited_by_count":1,"area":"safety"},{"id":"2606.29807","title":"Rethinking Forgery Attacks on Semantic Watermarks in Black-Box Settings: A Geometric Distortion Perspective","created":"2026-06-29","cited_by_count":1,"area":"diffusion"},{"id":"2608.10166","title":"MarkNull: Model-Agnostic Watermark Removal in AI-Generated Images via On-Manifold Latent Manipulation","created":"2026-08-10","cited_by_count":1,"area":"safety"},{"id":"2411.15367","title":"Exploiting Watermark-Based Defense Mechanisms in Text-to-Image Diffusion Models for Unauthorized Data Usage","created":"2024-11-22","cited_by_count":0,"area":"diffusion"},{"id":"2503.02490","title":"Deep Robust Reversible Watermarking","created":"2025-03-04","cited_by_count":0,"area":null},{"id":"2504.02517","title":"MultiNeRF: Multiple Watermark Embedding for Neural Radiance Fields","created":"2025-04-03","cited_by_count":0,"area":null},{"id":"2506.12032","title":"Embedding Trust at Scale: Physics-Aware Neural Watermarking for Secure and Verifiable Data Pipelines","created":"2025-05-22","cited_by_count":0,"area":null},{"id":"2506.22960","title":"Peccavi: Visual Paraphrase Attack Safe and Distortion Free Image Watermarking Technique for AI-Generated Images","created":"2025-06-28","cited_by_count":0,"area":null},{"id":"2507.18036","title":"NWaaS: A Non-Intrusive and Privacy-Preserving Watermarking-as-a-Service System with Adaptive Resource Scheduling","created":"2025-07-24","cited_by_count":0,"area":null},{"id":"2509.19147","title":"Generative Propaganda","created":"2025-09-23","cited_by_count":0,"area":null}],"next_cursor":"100"}