{"list":"other","total":67,"rows":[{"id":"2103.00020","title":"Learning Transferable Visual Models From Natural Language Supervision","created":"2021-02-26","cited_by_count":33744},{"id":"2006.11239","title":"Denoising Diffusion Probabilistic Models","created":"2020-06-19","cited_by_count":21076},{"id":"2112.10752","title":"High-Resolution Image Synthesis with Latent Diffusion Models","created":"2021-12-20","cited_by_count":18863},{"id":"2302.13971","title":"LLaMA: Open and Efficient Foundation Language Models","created":"2023-02-27","cited_by_count":14132},{"id":"1801.03924","title":"The Unreasonable Effectiveness of Deep Features as a Perceptual Metric","created":"2018-01-11","cited_by_count":11177},{"id":"1503.03585","title":"Deep Unsupervised Learning using Nonequilibrium Thermodynamics","created":"2015-03-12","cited_by_count":7058},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1903.12261","title":"Benchmarking Neural Network Robustness to Common Corruptions and Perturbations","created":"2019-03-28","cited_by_count":2877},{"id":"2211.05100","title":"BLOOM: A 176B-Parameter Open-Access Multilingual Language Model","created":"2022-11-09","cited_by_count":1984},{"id":"1607.02533","title":"Adversarial examples in the physical world","created":"2016-07-08","cited_by_count":1769},{"id":"2003.01690","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","created":"2020-03-03","cited_by_count":1451},{"id":"2112.04359","title":"Ethical and social risks of harm from Language Models","created":"2021-12-08","cited_by_count":966},{"id":"1812.04606","title":"Deep Anomaly Detection with Outlier Exposure","created":"2018-12-11","cited_by_count":942},{"id":"1602.02697","title":"Practical Black-Box Attacks against Machine Learning","created":"2016-02-08","cited_by_count":903},{"id":"2301.10226","title":"A Watermark for Large Language Models","created":"2023-01-24","cited_by_count":725},{"id":"1708.06131","title":"Evasion Attacks against Machine Learning at Test Time","created":"2017-08-21","cited_by_count":689},{"id":"1609.02943","title":"Stealing Machine Learning Models via Prediction APIs","created":"2016-09-09","cited_by_count":619},{"id":"1905.12616","title":"Defending Against Neural Fake News","created":"2019-05-29","cited_by_count":559},{"id":"1705.07263","title":"Adversarial Examples Are Not Easily Detected: Bypassing Ten Detection Methods","created":"2017-05-20","cited_by_count":546},{"id":"1807.09937","title":"HiDDeN: Hiding Data With Deep Networks","created":"2018-07-26","cited_by_count":397},{"id":"1802.04633","title":"Turning Your Weakness Into a Strength: Watermarking Deep Neural Networks by Backdooring","created":"2018-02-13","cited_by_count":357},{"id":"2401.09603","title":"Rethinking FID: Towards a Better Evaluation Metric for Image Generation","created":"2023-11-30","cited_by_count":310},{"id":"2303.15435","title":"The Stable Signature: Rooting Watermarks in Latent Diffusion Models","created":"2023-03-27","cited_by_count":304},{"id":"1812.02766","title":"Knockoff Nets: Stealing Functionality of Black-Box Models","created":"2018-12-06","cited_by_count":292},{"id":"2306.09194","title":"Undetectable Watermarks for Language Models","created":"2023-05-25","cited_by_count":226},{"id":"1906.06316","title":"Towards Stable and Efficient Training of Verifiably Robust Neural Networks","created":"2019-06-14","cited_by_count":205},{"id":"2007.08457","title":"Artificial Fingerprinting for Generative Models: Rooting Deepfake Attribution in Training Data","created":"2020-07-16","cited_by_count":201},{"id":"2305.20030","title":"Tree-Ring Watermarks: Fingerprints for Diffusion Images that are Invisible and Robust","created":"2023-05-31","cited_by_count":187},{"id":"1904.13000","title":"Adversarial Training and Robustness for Multiple Perturbations","created":"2019-04-30","cited_by_count":183},{"id":"1909.01285","title":"Robust Invisible Video Watermarking with Attention","created":"2019-09-03","cited_by_count":149},{"id":"2404.04956","title":"Gaussian Shading: Provable Performance-Lossless Image Watermarking for Diffusion Models","created":"2024-04-07","cited_by_count":142},{"id":"2104.08279","title":"Testing for Outliers with Conformal p-values","created":"2021-04-16","cited_by_count":134},{"id":"2306.01953","title":"Invisible Image Watermarks Are Provably Removable Using Generative AI","created":"2023-06-02","cited_by_count":134},{"id":"2401.08573","title":"WAVES: Benchmarking the Robustness of Image Watermarks","created":"2024-01-16","cited_by_count":97},{"id":"2402.19361","title":"Watermark Stealing in Large Language Models","created":"2024-02-29","cited_by_count":92},{"id":"2001.04580","title":"Distortion Agnostic Deep Watermarking","created":"2020-01-14","cited_by_count":90},{"id":"1909.04068","title":"Adversarial Robustness Against the Union of Multiple Perturbation Models","created":"2019-09-09","cited_by_count":88},{"id":"2311.04378","title":"Watermarks in the Sand: Impossibility of Strong Watermarking for Generative Models","created":"2023-11-07","cited_by_count":87},{"id":"1712.02779","title":"Exploring the Landscape of Spatial Robustness","created":"2017-12-07","cited_by_count":81},{"id":"1906.10908","title":"Prediction Poisoning: Towards Defenses Against DNN Model Stealing Attacks","created":"2019-06-26","cited_by_count":81},{"id":"2310.00076","title":"Robustness of AI-Image Detectors: Fundamental Limits and Practical Attacks","created":"2023-09-29","cited_by_count":81},{"id":"2410.07369","title":"An Undetectable Watermark for Generative Image Models","created":"2024-10-09","cited_by_count":81},{"id":"2004.00622","title":"Evading Deepfake-Image Detectors with White- and Black-Box Attacks","created":"2020-04-01","cited_by_count":80},{"id":"2401.17264","title":"Proactive Detection of Voice Cloning with Localized Watermarking","created":"2024-01-30","cited_by_count":78},{"id":"2312.00273","title":"Mark My Words: Analyzing and Evaluating Language Model Watermarks","created":"2023-12-01","cited_by_count":71},{"id":"1703.00371","title":"Generating Steganographic Images via Adversarial Training","created":"2017-03-01","cited_by_count":58},{"id":"2304.03400","title":"RoSteALS: Robust Steganography using Autoencoder Latent Space","created":"2023-04-06","cited_by_count":57},{"id":"2411.07231","title":"Watermark Anything with Localized Messages","created":"2024-11-11","cited_by_count":53},{"id":"2309.16952","title":"Leveraging Optimization for Adaptive Attacks on Image Watermarks","created":"2023-09-29","cited_by_count":52},{"id":"2311.18297","title":"TrustMark: Universal Watermarking for Arbitrary Resolution Images","created":"2023-11-30","cited_by_count":51},{"id":"2411.18479","title":"SoK: Watermarking for AI-Generated Content","created":"2024-11-27","cited_by_count":51},{"id":"2412.09492","title":"Video Seal: Open and Efficient Video Watermarking","created":"2024-12-12","cited_by_count":48},{"id":"1804.07729","title":"ADef: an Iterative Algorithm to Construct Adversarial Deformations","created":"2018-04-20","cited_by_count":38},{"id":"2304.07361","title":"PTW: Pivotal Tuning Watermarking for Pre-Trained Image Generators","created":"2023-04-14","cited_by_count":37},{"id":"2106.15023","title":"Evading Adversarial Example Detection Defenses with Orthogonal Projected Gradient Descent","created":"2021-06-28","cited_by_count":35},{"id":"2307.09302","title":"Conformal prediction under ambiguous ground truth","created":"2023-07-18","cited_by_count":31},{"id":"2411.07795","title":"InvisMark: Invisible and Robust Watermarking for AI-generated Image Provenance","created":"2024-11-10","cited_by_count":23},{"id":"1910.01221","title":"ROMark: A Robust Watermarking System Using Adversarial Training","created":"2019-10-02","cited_by_count":18},{"id":"2108.03541","title":"OSCAR-Net: Object-centric Scene Graph Attention for Image Attribution","created":"2021-08-07","cited_by_count":15},{"id":"2304.04639","title":"EKILA: Synthetic Media Provenance and Attribution for Generative Art","created":"2023-04-10","cited_by_count":11},{"id":"2406.03720","title":"JIGMARK: A Black-Box Approach for Enhancing Image Watermarks against Diffusion Model Edits","created":"2024-06-06","cited_by_count":9},{"id":"2502.04901","title":"On the Difficulty of Constructing a Robust and Publicly-Detectable Watermark","created":"2025-02-07","cited_by_count":9},{"id":"1802.06627","title":"Robustness of Rotation-Equivariant Networks to Adversarial Perturbations","created":"2018-02-19","cited_by_count":6},{"id":"2011.07355","title":"Towards transformation-resilient provenance detection of digital media","created":"2020-11-14","cited_by_count":2},{"id":"2406.02836","title":"DREW : Towards Robust Data Provenance by Leveraging Error-Controlled Watermarking","created":"2024-06-05","cited_by_count":2}],"next_cursor":null}