{"total":52,"rows":[{"id":"2401.08573","title":"WAVES: Benchmarking the Robustness of Image Watermarks","created":"2024-01-16","cited_by_count":97,"area":null},{"id":"2311.04378","title":"Watermarks in the Sand: Impossibility of Strong Watermarking for Generative Models","created":"2023-11-07","cited_by_count":87,"area":"safety"},{"id":"2412.03283","title":"Black-Box Forgery Attacks on Semantic Watermarks for Diffusion Models","created":"2024-12-04","cited_by_count":52,"area":"diffusion"},{"id":"2410.05470","title":"Image Watermarks are Removable Using Controllable Regeneration from Clean Noise","created":"2024-10-07","cited_by_count":50,"area":null},{"id":"2510.09263","title":"SynthID-Image: Image watermarking at internet scale","created":"2025-10-10","cited_by_count":31,"area":null},{"id":"2403.15365","title":"A Transfer Attack to Image Watermarks","created":"2024-03-22","cited_by_count":27,"area":null},{"id":"2405.08363","title":"UnMarker: A Universal Attack on Defensive Image Watermarking","created":"2024-05-14","cited_by_count":24,"area":null},{"id":"2411.07795","title":"InvisMark: Invisible and Robust Watermarking for AI-generated Image Provenance","created":"2024-11-10","cited_by_count":23,"area":"safety"},{"id":"2405.07145","title":"Stable Signature is Unstable: Removing Image Watermark from Diffusion Models","created":"2024-05-12","cited_by_count":20,"area":"diffusion"},{"id":"2410.02440","title":"Optimizing Adaptive Attacks against Watermarks for Language Models","created":"2024-10-03","cited_by_count":16,"area":"safety"},{"id":"2407.10575","title":"A Survey of Defenses Against AI-Generated Visual Media: Detection,Disruption, and Authentication","created":"2024-07-15","cited_by_count":13,"area":null},{"id":"2504.20111","title":"Forging and Removing Latent-Noise Diffusion Watermarks Using a Single Image","created":"2025-04-27","cited_by_count":13,"area":"diffusion"},{"id":"2510.20468","title":"Transferable Black-Box One-Shot Forging of Watermarks via Image Preference Models","created":"2025-10-23","cited_by_count":12,"area":"safety"},{"id":"2406.09026","title":"Steganalysis on Digital Watermarking: Is Your Defense Truly Impervious?","created":"2024-06-13","cited_by_count":10,"area":null},{"id":"2406.03720","title":"JIGMARK: A Black-Box Approach for Enhancing Image Watermarks against Diffusion Model Edits","created":"2024-06-06","cited_by_count":9,"area":"diffusion"},{"id":"2508.21072","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","created":"2025-08-28","cited_by_count":9,"area":null},{"id":"2404.04254","title":"Watermark-based Attribution of AI-Generated Content","created":"2024-04-05","cited_by_count":8,"area":"safety"},{"id":"2410.20824","title":"FreqMark: Invisible Image Watermarking via Frequency Based Optimization in Latent Space","created":"2024-10-28","cited_by_count":8,"area":null},{"id":"2311.13713","title":"A Somewhat Robust Image Watermark against Diffusion-based Editing Models","created":"2023-11-22","cited_by_count":5,"area":"diffusion"},{"id":"2505.21620","title":"VideoMarkBench: Benchmarking Robustness of Video Watermarking","created":"2025-05-27","cited_by_count":5,"area":null},{"id":"2407.04086","title":"Certifiably Robust Image Watermark","created":"2024-07-04","cited_by_count":4,"area":null},{"id":"2502.13345","title":"Secure and Efficient Watermarking for Latent Diffusion Models in Model Distribution Scenarios","created":"2025-02-18","cited_by_count":4,"area":"diffusion"},{"id":"2506.10502","title":"A Crack in the Bark: Leveraging Public Knowledge to Remove Tree-Ring Watermarks","created":"2025-06-12","cited_by_count":4,"area":"diffusion"},{"id":"2507.07871","title":"Mitigating Watermark Forgery in Generative Models via Randomized Key Selection","created":"2025-07-10","cited_by_count":4,"area":"safety"},{"id":"2508.05691","title":"SPRINT: Robust Model Attribution of Generated Images via Secret Pixel Reconstruction","created":"2025-08-06","cited_by_count":4,"area":null},{"id":"2403.15955","title":"Finding needles in a haystack: A Black-Box Approach to Invisible Watermark Detection","created":"2024-03-23","cited_by_count":3,"area":null},{"id":"2507.03646","title":"When There Is No Decoder: Removing Watermarks from Stable Diffusion Models in a No-box Setting","created":"2025-07-04","cited_by_count":3,"area":"diffusion"},{"id":"2603.02378","title":"Authenticated Contradictions from Desynchronized Provenance and Watermarking","created":"2026-03-02","cited_by_count":3,"area":null},{"id":"2604.06662","title":"Towards Robust Content Watermarking Against Removal and Forgery Attacks","created":"2026-04-08","cited_by_count":3,"area":null},{"id":"2502.06418","title":"Robust Watermarks Leak: Channel-Aware Feature Extraction Enables Adversarial Watermark Manipulation","created":"2025-02-10","cited_by_count":2,"area":null},{"id":"2502.10465","title":"Image Watermarking of Generative Diffusion Models","created":"2025-02-12","cited_by_count":2,"area":"diffusion"},{"id":"2509.10577","title":"The Coding Limits of Robust Watermarking for Generative Models","created":"2025-09-11","cited_by_count":2,"area":"safety"},{"id":"2510.09210","title":"Provable Watermarking for Data Poisoning Attacks","created":"2025-10-10","cited_by_count":2,"area":null},{"id":"2601.08832","title":"RAVEN: Erasing Invisible Watermarks via Novel View Synthesis","created":"2026-01-13","cited_by_count":2,"area":null},{"id":"2604.19090","title":"Dual-Guard: Dual-Channel Latent Watermarking for Provenance and Tamper Localization in Diffusion Images","created":"2026-04-21","cited_by_count":2,"area":"diffusion"},{"id":"2605.13095","title":"Watermarking Should Be Treated as a Monitoring Primitive","created":"2026-05-13","cited_by_count":2,"area":null},{"id":"2408.02035","title":"Robustness of Watermarking on Text-to-Image Diffusion Models","created":"2024-08-04","cited_by_count":1,"area":"diffusion"},{"id":"2512.01314","title":"TokenPure: Watermark Removal through Tokenized Appearance and Structural Guidance","created":"2025-12-01","cited_by_count":1,"area":"safety"},{"id":"2603.01067","title":"Hide&Seek: Remove Image Watermarks with Negligible Cost via Pixel-wise Reconstruction","created":"2026-03-01","cited_by_count":1,"area":null},{"id":"2604.11720","title":"On the Robustness of Watermarking for Autoregressive Image Generation","created":"2026-04-13","cited_by_count":1,"area":"safety"},{"id":"2607.26723","title":"FARI: Robust One-Step Inversion for Watermarking in Diffusion Models","created":"2026-07-29","cited_by_count":1,"area":"diffusion"},{"id":"2608.27666","title":"Semantic Watermarking with Order-Robust Detection over Sub-sentence Units","created":"2026-08-27","cited_by_count":1,"area":"safety"},{"id":"2411.15367","title":"Exploiting Watermark-Based Defense Mechanisms in Text-to-Image Diffusion Models for Unauthorized Data Usage","created":"2024-11-22","cited_by_count":0,"area":"diffusion"},{"id":"2502.02068","title":"Robust and Secure Code Watermarking for Large Language Models via ML/Crypto Codesign","created":"2025-02-04","cited_by_count":0,"area":"safety"},{"id":"2511.04949","title":"DeepForgeSeal: Latent Space-Driven Semi-Fragile Watermarking for Deepfake Detection Using Adversarial Reinforcement Learning","created":"2025-11-07","cited_by_count":0,"area":"safety"},{"id":"2606.10091","title":"SoK: Colluding Adversaries in Machine Learning Pipelines","created":"2026-06-08","cited_by_count":0,"area":null},{"id":"2609.30980","title":"FeatMark: Feature-level Watermark Protection against Mimicry Attacks with Diffusion Models","created":"2026-09-25","cited_by_count":0,"area":"diffusion"},{"id":"2609.31694","title":"RemTraceNet: Few-Shot Forensic Detection of Invisible Watermark Attacks","created":"2026-09-18","cited_by_count":0,"area":null},{"id":"2609.40031","title":"WARP: A Unified Benchmark for Invisible Image Watermarking -- Robustness and Protection Against Attacks","created":"2026-09-30","cited_by_count":0,"area":null},{"id":"2610.02010","title":"Exploring Weaknesses of Generative Image Watermarks against Latent Frequency Masking","created":"2026-10-01","cited_by_count":0,"area":"safety"},{"id":"2610.05870","title":"Certification of Real Images through Calibrated Content Authentication","created":"2026-10-05","cited_by_count":0,"area":null},{"id":"2610.12106","title":"Could LLM Watermark Detection be Public?","created":"2026-10-08","cited_by_count":0,"area":"safety"}],"next_cursor":null}