{"total":87,"rows":[{"id":"2312.04469","title":"On the Learnability of Watermarks for Language Models","created":"2023-12-07","cited_by_count":81,"area":"safety"},{"id":"2401.13138","title":"Visibility into AI Agents","created":"2024-01-23","cited_by_count":79,"area":null},{"id":"2312.00273","title":"Mark My Words: Analyzing and Evaluating Language Model Watermarks","created":"2023-12-01","cited_by_count":71,"area":"safety"},{"id":"2401.13927","title":"Adaptive Text Watermark for Large Language Models","created":"2024-01-25","cited_by_count":67,"area":"safety"},{"id":"2411.18479","title":"SoK: Watermarking for AI-Generated Content","created":"2024-11-27","cited_by_count":51,"area":"safety"},{"id":"2402.16187","title":"No Free Lunch in LLM Watermarking: Trade-offs in Watermarking Design Choices","created":"2024-02-25","cited_by_count":50,"area":"safety"},{"id":"2402.09370","title":"Pseudorandom Error-Correcting Codes","created":"2024-02-14","cited_by_count":44,"area":"safety"},{"id":"2403.12503","title":"Securing Large Language Models: Threats, Vulnerabilities and Responsible Practices","created":"2024-03-19","cited_by_count":37,"area":null},{"id":"2507.00583","title":"AI-Generated Video Detection via Perceptual Straightening","created":"2025-07-01","cited_by_count":34,"area":null},{"id":"2510.09263","title":"SynthID-Image: Image watermarking at internet scale","created":"2025-10-10","cited_by_count":31,"area":null},{"id":"2403.14719","title":"Bypassing LLM Watermarks with Color-Aware Substitutions","created":"2024-03-19","cited_by_count":28,"area":"safety"},{"id":"2312.07930","title":"Towards Optimal Statistical Watermarking","created":"2023-12-13","cited_by_count":26,"area":"safety"},{"id":"2312.17295","title":"Optimizing watermarks for large language models","created":"2023-12-28","cited_by_count":25,"area":"safety"},{"id":"2406.15583","title":"Detecting AI-Generated Text: Factors Influencing Detectability with Current Methods","created":"2024-06-21","cited_by_count":23,"area":null},{"id":"2410.02890","title":"Theoretically Grounded Framework for LLM Watermarking: A Distribution-Adaptive Approach","created":"2024-10-03","cited_by_count":22,"area":"safety"},{"id":"2412.04653","title":"Hidden in the Noise: Two-Stage Robust Watermarking for Images","created":"2024-12-05","cited_by_count":21,"area":null},{"id":"2406.12137","title":"IDs for AI Systems","created":"2024-06-17","cited_by_count":19,"area":null},{"id":"2411.11203","title":"Debiasing Watermarks for Large Language Models via Maximal Coupling","created":"2024-11-17","cited_by_count":19,"area":"safety"},{"id":"2405.11109","title":"Watermarking Language Models for Many Adaptive Users","created":"2024-05-17","cited_by_count":18,"area":"safety"},{"id":"2505.05190","title":"Revealing Weaknesses in Text Watermarking Through Self-Information Rewrite Attacks","created":"2025-05-08","cited_by_count":18,"area":"safety"},{"id":"2405.19524","title":"AI Risk Management Should Incorporate Both Safety and Security","created":"2024-05-29","cited_by_count":17,"area":null},{"id":"2506.07001","title":"Adversarial Paraphrasing: A Universal Attack for Humanizing AI-Generated Text","created":"2025-06-08","cited_by_count":17,"area":null},{"id":"2410.02099","title":"A Watermark for Black-Box Language Models","created":"2024-10-02","cited_by_count":16,"area":"safety"},{"id":"2410.02440","title":"Optimizing Adaptive Attacks against Watermarks for Language Models","created":"2024-10-03","cited_by_count":16,"area":"safety"},{"id":"2404.12691","title":"Data Authenticity, Consent, & Provenance for AI are all broken: what will it take to fix them?","created":"2024-04-19","cited_by_count":15,"area":null},{"id":"2403.05750","title":"Decoding the AI Pen: Techniques and Challenges in Detecting AI-Generated Text","created":"2024-03-09","cited_by_count":14,"area":null},{"id":"2405.19677","title":"Large Language Model Watermark Stealing With Mixed Integer Programming","created":"2024-05-30","cited_by_count":14,"area":"safety"},{"id":"2411.11478","title":"SoK: On the Role and Future of AIGC Watermarking in the Era of Gen-AI","created":"2024-11-18","cited_by_count":14,"area":"safety"},{"id":"2401.10360","title":"Excuse me, sir? Your language model is leaking (information)","created":"2024-01-18","cited_by_count":13,"area":null},{"id":"2406.02633","title":"Edit Distance Robust Watermarks via Indexing Pseudorandom Codes","created":"2024-06-04","cited_by_count":13,"area":null},{"id":"2506.05502","title":"StealthInk: A Multi-bit and Stealthy Watermark for Large Language Models","created":"2025-06-05","cited_by_count":12,"area":"safety"},{"id":"2406.03720","title":"JIGMARK: A Black-Box Approach for Enhancing Image Watermarks against Diffusion Model Edits","created":"2024-06-06","cited_by_count":9,"area":"diffusion"},{"id":"2411.13425","title":"Watermark under Fire: A Robustness Evaluation of LLM Watermarking","created":"2024-11-20","cited_by_count":9,"area":"safety"},{"id":"2502.04901","title":"On the Difficulty of Constructing a Robust and Publicly-Detectable Watermark","created":"2025-02-07","cited_by_count":9,"area":null},{"id":"2507.06274","title":"Enhancing LLM Watermark Resilience Against Both Scrubbing and Spoofing Attacks","created":"2025-07-08","cited_by_count":9,"area":"safety"},{"id":"2405.14018","title":"Watermarking Generative Tabular Data","created":"2024-05-22","cited_by_count":7,"area":"safety"},{"id":"2411.01222","title":"$B^4$: A Black-Box Scrubbing Attack on LLM Watermarks","created":"2024-11-02","cited_by_count":7,"area":"safety"},{"id":"2510.18333","title":"Position: LLM Watermarking Should Align Stakeholders' Incentives for Practical Adoption","created":"2025-10-21","cited_by_count":7,"area":"safety"},{"id":"2505.21677","title":"What happens when generative AI models train recursively on each others' outputs?","created":"2025-05-27","cited_by_count":6,"area":null},{"id":"2510.13793","title":"NoisePrints: Distortion-Free Watermarks for Authorship in Private Diffusion Models","created":"2025-10-15","cited_by_count":6,"area":"diffusion"},{"id":"2409.06729","title":"How will advanced AI systems impact democracy?","created":"2024-08-27","cited_by_count":5,"area":null},{"id":"2409.17518","title":"Multi-Designated Detector Watermarking for Language Models","created":"2024-09-26","cited_by_count":4,"area":"safety"},{"id":"2504.01032","title":"Who Owns the Output? Bridging Law and Technology in LLMs Attribution","created":"2025-03-29","cited_by_count":4,"area":null},{"id":"2504.06446","title":"Can you Finetune your Binoculars? Embedding Text Watermarks into the Weights of Large Language Models","created":"2025-04-08","cited_by_count":4,"area":"safety"},{"id":"2505.06827","title":"Sandcastles in the Storm: Revisiting the (Im)possibility of Strong Watermarking","created":"2025-05-11","cited_by_count":4,"area":null},{"id":"2510.21946","title":"$\\delta$-STEAL: LLM Stealing Attack with Local Differential Privacy","created":"2025-10-24","cited_by_count":3,"area":"safety"},{"id":"2512.10100","title":"Robust AI Security and Alignment: A Sisyphean Endeavor?","created":"2025-12-10","cited_by_count":3,"area":null},{"id":"2603.10583","title":"Attribution as Retrieval: Model-Agnostic AI-Generated Image Attribution","created":"2026-03-11","cited_by_count":3,"area":null},{"id":"2403.06593","title":"Authorship and the Politics and Ethics of LLM Watermarks","created":"2024-03-11","cited_by_count":2,"area":"safety"},{"id":"2506.05594","title":"SoK: Are Watermarks in LLMs Ready for Deployment?","created":"2025-06-05","cited_by_count":2,"area":"safety"},{"id":"2509.10577","title":"The Coding Limits of Robust Watermarking for Generative Models","created":"2025-09-11","cited_by_count":2,"area":"safety"},{"id":"2509.20924","title":"RLCracker: Evaluating the Worst-Case Vulnerability of LLM Watermarks with Adaptive RL Attacks","created":"2025-09-25","cited_by_count":2,"area":"safety"},{"id":"2511.00988","title":"Advancing Machine-Generated Text Detection from an Easy to Hard Supervision Perspective","created":"2025-11-02","cited_by_count":2,"area":null},{"id":"2605.05443","title":"SLAM: Structural Linguistic Activation Marking for Language Models","created":"2026-05-06","cited_by_count":2,"area":"safety"},{"id":"2402.09581","title":"Combatting deepfakes: Policies to address national security threats and rights violations","created":"2024-02-14","cited_by_count":1,"area":null},{"id":"2408.01354","title":"MCGMark: An Encodable and Robust Online Watermark for Tracing LLM-Generated Malicious Code","created":"2024-08-02","cited_by_count":1,"area":"safety"},{"id":"2411.11434","title":"CLUE-MARK: Watermarking Diffusion Models using CLWE","created":"2024-11-18","cited_by_count":1,"area":"diffusion"},{"id":"2502.16375","title":"Personhood Credentials: Human-Centered Design Recommendation Balancing Security, Usability, and Trust","created":"2025-02-22","cited_by_count":1,"area":null},{"id":"2509.00731","title":"LLM Encoder vs. Decoder: Robust Detection of Chinese AI-Generated Text with LoRA","created":"2025-08-31","cited_by_count":1,"area":null},{"id":"2603.00194","title":"SKeDA: A Generative Watermarking Framework for Text-to-video Diffusion Models","created":"2026-02-27","cited_by_count":1,"area":"diffusion"},{"id":"2604.25491","title":"The Forensic Cost of Watermark Removal: From Dedicated Attacks to Image Editing","created":"2026-04-28","cited_by_count":1,"area":null},{"id":"2605.23175","title":"Robust LLM Watermarking with Minimal Semantic Distortion for IP Protection","created":"2026-05-22","cited_by_count":1,"area":"safety"},{"id":"2605.30501","title":"Linear Ensembles Wash Away Watermarks: On the Fragility of Distributional Perturbations in LLMs","created":"2026-05-28","cited_by_count":1,"area":"safety"},{"id":"2606.13892","title":"Crypto x AI, AI x Crypto: A Survey","created":"2026-06-11","cited_by_count":1,"area":null},{"id":"2607.10103","title":"LLM Watermarking as Big Data Provenance: A Deployment-Oriented Systematization","created":"2026-07-11","cited_by_count":1,"area":"safety"},{"id":"2607.13003","title":"Watermark Forensics for Generative Models: An Information-Theoretic Perspective","created":"2026-07-14","cited_by_count":1,"area":"safety"},{"id":"2608.27666","title":"Semantic Watermarking with Order-Robust Detection over Sub-sentence Units","created":"2026-08-27","cited_by_count":1,"area":"safety"},{"id":"2502.18608","title":"Breaking Distortion-free Watermarks in Large Language Models","created":"2025-02-25","cited_by_count":0,"area":"safety"},{"id":"2504.05148","title":"Stereo-LiDAR Fusion by Semi-Global Matching With Discrete Disparity-Matching Cost and Semidensification","created":"2025-04-07","cited_by_count":0,"area":null},{"id":"2504.13205","title":"On-Device Watermarking: A Socio-Technical Imperative For Authenticity In The Age of Generative AI","created":"2025-04-15","cited_by_count":0,"area":"safety"},{"id":"2508.13131","title":"Improving Detection of Watermarked Language Models","created":"2025-08-18","cited_by_count":0,"area":"safety"},{"id":"2509.19147","title":"Generative Propaganda","created":"2025-09-23","cited_by_count":0,"area":null},{"id":"2604.10893","title":"Beyond A Fixed Seal: Adaptive Stealing Watermark in Large Language Models","created":"2026-04-13","cited_by_count":0,"area":"safety"},{"id":"2605.06865","title":"Dataset Watermarking with Provable Black-Box Detection","created":"2026-05-07","cited_by_count":0,"area":null},{"id":"2605.16035","title":"Who Owns This Agent? Tracing AI Agents Back to Their Owners","created":"2026-05-15","cited_by_count":0,"area":null},{"id":"2605.16471","title":"From AI-Generated Content to Agentic Action: Security and Safety Threats in Generative AI","created":"2026-05-15","cited_by_count":0,"area":"agents"},{"id":"2605.23190","title":"Hidden Human-Like Nature of Machine-Generated Texts: Theory and Detection Enhancement","created":"2026-05-22","cited_by_count":0,"area":null},{"id":"2606.00621","title":"Authenticity Debt and the Synthetic Content Threat Landscape: A Layered Framework for Trust, Provenance, and IP Governance in the Generative AI Era","created":"2026-05-30","cited_by_count":0,"area":null},{"id":"2607.16010","title":"AI Watermark Evidence Fails Forensic Readiness: An Empirical Evaluation","created":"2026-07-17","cited_by_count":0,"area":"safety"},{"id":"2608.07337","title":"From Forensics to Ecosystems: Rethinking Watermarks for Generative AI Oversight","created":"2026-08-07","cited_by_count":0,"area":"safety"},{"id":"2608.29030","title":"Learning to Follow In-Context Watermark Instructions via Self-Distillation","created":"2026-08-29","cited_by_count":0,"area":"safety"},{"id":"2608.31091","title":"Minimax bounds for watermarked and masked recursive discrete distribution estimation","created":"2026-08-31","cited_by_count":0,"area":null},{"id":"2609.03844","title":"Flip, Don't Shuffle: Watermarking LLMs at the Speed of Inference","created":"2026-09-03","cited_by_count":0,"area":"safety"},{"id":"2609.09604","title":"Watermarks Without Verification: AI Text Watermarking After the EU AI Act","created":"2026-09-09","cited_by_count":0,"area":"safety"},{"id":"2610.05712","title":"SimpleMark: Fast Multi-Bit Text Watermarking under f -Divergence Constraints","created":"2026-10-05","cited_by_count":0,"area":"safety"},{"id":"2610.08137","title":"Rethinking Visual Provenance: Detection and Watermarking Across Direct Visual Generation and LLM-Driven Code Rendering","created":"2026-10-06","cited_by_count":0,"area":"safety"},{"id":"2610.14378","title":"Tokenization-Invariant Watermarking: A Byte-Local Method for LLM Text","created":"2026-10-09","cited_by_count":0,"area":"safety"}],"next_cursor":null}