{"list":"other","total":154,"rows":[{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"2004.07780","title":"Shortcut Learning in Deep Neural Networks","created":"2020-04-16","cited_by_count":1969},{"id":"1605.07277","title":"Transferability in Machine Learning: from Phenomena to Black-Box Attacks using Adversarial Samples","created":"2016-05-24","cited_by_count":446},{"id":"2302.04222","title":"Glaze: Protecting Artists from Style Mimicry by Text-to-Image Models","created":"2023-02-08","cited_by_count":205},{"id":"2101.04898","title":"Unlearnable Examples: Making Personal Data Unexploitable","created":"2021-01-13","cited_by_count":193},{"id":"2302.04578","title":"Adversarial Example Does Good: Preventing Painting Imitation from Diffusion Models via Adversarial Examples","created":"2023-02-09","cited_by_count":167},{"id":"2302.06588","title":"Raising the Cost of Malicious AI-Powered Image Editing","created":"2023-02-13","cited_by_count":163},{"id":"2303.15433","title":"Anti-DreamBooth: Protecting users from personalized text-to-image synthesis","created":"2023-03-27","cited_by_count":120},{"id":"2106.10807","title":"Adversarial Examples Make Strong Poisons","created":"2021-06-21","cited_by_count":119},{"id":"2104.10706","title":"Dataset Inference: Ownership Resolution in Machine Learning","created":"2021-04-21","cited_by_count":116},{"id":"2105.03162","title":"Adv-Makeup: A New Imperceptible and Transferable Attack on Face Recognition","created":"2021-05-07","cited_by_count":97},{"id":"2101.07922","title":"LowKey: Leveraging Adversarial Attacks to Protect Social Media Users from Facial Recognition","created":"2021-01-20","cited_by_count":94},{"id":"2203.03121","title":"Protecting Facial Privacy: Generating Adversarial Identity Masks via Style-robust Makeup Transfer","created":"2022-03-07","cited_by_count":78},{"id":"2310.13828","title":"Nightshade: Prompt-Specific Poisoning Attacks on Text-to-Image Generative Models","created":"2023-10-20","cited_by_count":75},{"id":"2002.00937","title":"Radioactive data: tracing through training","created":"2020-02-03","cited_by_count":67},{"id":"2209.06015","title":"Black-box Dataset Ownership Verification via Backdoor Watermarking","created":"2022-08-04","cited_by_count":65},{"id":"2311.12832","title":"Toward effective protection against diffusion based mimicry through score distillation","created":"2023-10-02","cited_by_count":65},{"id":"2003.06814","title":"Towards Face Encryption by Generating Adversarial Identity Masks","created":"2020-03-15","cited_by_count":63},{"id":"2111.00898","title":"Availability Attacks Create Shortcuts","created":"2021-11-01","cited_by_count":62},{"id":"2002.11088","title":"Model Watermarking for Image Processing Networks","created":"2020-02-25","cited_by_count":56},{"id":"2103.04980","title":"Deep Model Intellectual Property Protection via Deep Watermarking","created":"2021-03-08","cited_by_count":54},{"id":"2411.18479","title":"SoK: Watermarking for AI-Generated Content","created":"2024-11-27","cited_by_count":51},{"id":"1807.08379","title":"Towards Privacy-Preserving Visual Recognition via Adversarial Training: A Pilot Study","created":"2018-07-22","cited_by_count":48},{"id":"2206.03693","title":"Autoregressive Perturbations for Data Poisoning","created":"2022-06-08","cited_by_count":46},{"id":"2411.03862","title":"ROBIN: Robust and Invisible Watermarks for Diffusion Models with Adversarial Optimization","created":"2024-11-06","cited_by_count":46},{"id":"2311.13127","title":"MetaCloak: Preventing Unauthorized Subject-driven Text-to-image Diffusion-based Synthesis via Meta-learning","created":"2023-11-22","cited_by_count":44},{"id":"2210.10114","title":"Transferable Unlearnable Examples","created":"2022-10-18","cited_by_count":43},{"id":"2306.10008","title":"CLIP2Protect: Protecting Facial Privacy using Text-Guided Makeup via Adversarial Latent Search","created":"2023-06-16","cited_by_count":43},{"id":"2301.13838","title":"Image Shortcut Squeezing: Countering Perturbative Availability Poisons with Compression","created":"2023-01-31","cited_by_count":39},{"id":"2312.00084","title":"Can Protective Perturbation Safeguard Personal Data from Being Exploited by Stable Diffusion?","created":"2023-11-30","cited_by_count":38},{"id":"2301.01217","title":"Unlearnable Clusters: Towards Label-agnostic Unlearnable Examples","created":"2022-12-31","cited_by_count":36},{"id":"2305.13625","title":"DiffProtect: Generate Adversarial Examples with Diffusion Models for Facial Privacy Protection","created":"2023-05-23","cited_by_count":35},{"id":"2310.19248","title":"IMPRESS: Evaluating the Resilience of Imperceptible Perturbations Against Unauthorized Data Usage in Diffusion-Based Generative AI","created":"2023-10-30","cited_by_count":35},{"id":"2401.04247","title":"Attack-Resilient Image Watermarking Using Stable Diffusion","created":"2024-01-08","cited_by_count":35},{"id":"2405.09882","title":"DiffAM: Diffusion-based Adversarial Makeup Transfer for Facial Privacy Protection","created":"2024-05-16","cited_by_count":32},{"id":"2205.12141","title":"One-Pixel Shortcut: on the Learning Preference of Deep Neural Networks","created":"2022-05-24","cited_by_count":29},{"id":"2311.12066","title":"EditShield: Protecting Unauthorized Image Editing by Instruction-guided Diffusion Models","created":"2023-11-19","cited_by_count":27},{"id":"2408.01428","title":"Transferable Adversarial Facial Images for Privacy Protection","created":"2024-07-18","cited_by_count":27},{"id":"2303.04278","title":"CUDA: Convolution-based Unlearnable Datasets","created":"2023-03-07","cited_by_count":26},{"id":"2309.05330","title":"Diff-Privacy: Diffusion-based Face Privacy Protection","created":"2023-09-11","cited_by_count":26},{"id":"2311.13091","title":"Stable Unlearnable Example: Enhancing the Robustness of Unlearnable Examples via Stable Error-Minimizing Noise","created":"2023-11-22","cited_by_count":25},{"id":"2305.05391","title":"Privacy-preserving Adversarial Facial Features","created":"2023-05-08","cited_by_count":24},{"id":"2205.11981","title":"OPOM: Customized Invisible Cloak towards Face Privacy Protection","created":"2022-05-24","cited_by_count":22},{"id":"2412.11638","title":"IDProtector: An Adversarial Noise Encoder to Protect Against ID-Preserving Image Generation","created":"2024-12-16","cited_by_count":22},{"id":"2305.19254","title":"What Can We Learn from Unlearnable Datasets?","created":"2023-05-30","cited_by_count":21},{"id":"2312.11285","title":"Adv-Diffusion: Imperceptible Adversarial Face Identity Attack via Latent Diffusion Model","created":"2023-12-18","cited_by_count":21},{"id":"2407.16307","title":"Multimodal Unlearnable Examples: Protecting Data against Multimodal Contrastive Learning","created":"2024-07-23","cited_by_count":21},{"id":"2411.16832","title":"Edit Away and My Face Will not Stay: Personal Biometric Defense against Malicious Generative Editing","created":"2024-11-25","cited_by_count":21},{"id":"2211.12005","title":"Self-Ensemble Protection: Training Checkpoints Are Good Data Protectors","created":"2022-11-22","cited_by_count":19},{"id":"2310.04687","title":"Targeted Attack Improves Protection against Unauthorized Diffusion Customization","created":"2023-10-07","cited_by_count":18},{"id":"2405.01460","title":"Purify Unlearnable Examples via Rate-Constrained Variational Autoencoders","created":"2024-05-02","cited_by_count":18},{"id":"2405.03316","title":"Provably Unlearnable Data Examples","created":"2024-05-06","cited_by_count":18},{"id":"1901.01107","title":"Adversarial CAPTCHAs","created":"2019-01-04","cited_by_count":16},{"id":"2112.04558","title":"SoK: Anti-Facial Recognition Technology","created":"2021-12-08","cited_by_count":16},{"id":"2210.07809","title":"Free Fine-tuning: A Plug-and-Play Watermarking Scheme for Deep Neural Networks","created":"2022-10-14","cited_by_count":15},{"id":"2403.14250","title":"Safeguarding Medical Image Segmentation Datasets against Unauthorized Training via Contour- and Texture-Aware Perturbations","created":"2024-03-21","cited_by_count":15},{"id":"2405.20584","title":"Disrupting Diffusion: Token-Level Attention Erasure Attack against Diffusion-based Customization","created":"2024-05-31","cited_by_count":15},{"id":"2410.09909","title":"UnSeg: One Universal Unlearnable Example Generator is Enough against All Image Segmentation","created":"2024-10-13","cited_by_count":14},{"id":"2007.12861","title":"Adversarial Privacy-preserving Filter","created":"2020-07-25","cited_by_count":13},{"id":"2312.08898","title":"Detection and Defense of Unlearnable Examples","created":"2023-12-14","cited_by_count":13},{"id":"2406.17349","title":"Semantic Deep Hiding for Robust Unlearnable Examples","created":"2024-06-25","cited_by_count":13},{"id":"2407.10575","title":"A Survey of Defenses Against AI-Generated Visual Media: Detection,Disruption, and Authentication","created":"2024-07-15","cited_by_count":13},{"id":"2408.10901","title":"A Gray-box Attack against Latent Diffusion Model-based Image Editing by Posterior Collapse","created":"2024-08-20","cited_by_count":13},{"id":"2502.05461","title":"IllusionCAPTCHA: A CAPTCHA based on Visual Illusion","created":"2025-02-08","cited_by_count":13},{"id":"2401.17523","title":"Game-Theoretic Unlearnable Example Generator","created":"2024-01-31","cited_by_count":12},{"id":"2402.04010","title":"Efficient Availability Attacks against Supervised and Contrastive Learning Simultaneously","created":"2024-02-06","cited_by_count":12},{"id":"2507.14067","title":"VLA-Mark: A cross modal watermark for large vision-language alignment model","created":"2025-07-18","cited_by_count":12},{"id":"2409.14424","title":"Dormant: Defending against Pose-driven Human Image Animation","created":"2024-09-22","cited_by_count":11},{"id":"2503.10081","title":"AdvPaint: Protecting Images from Inpainting Manipulation via Adversarial Attention Disruption","created":"2025-03-13","cited_by_count":11},{"id":"2111.13244","title":"Going Grayscale: The Road to Understanding and Improving Unlearnable Examples","created":"2021-11-25","cited_by_count":10},{"id":"2310.16919","title":"Wide Flat Minimum Watermarking for Robust Ownership Verification of GANs","created":"2023-10-25","cited_by_count":10},{"id":"2411.17957","title":"DiffVax: Optimization-Free Image Immunization Against Diffusion-Based Editing","created":"2024-11-27","cited_by_count":10},{"id":"2010.16204","title":"Capture the Bot: Using Adversarial Examples to Improve CAPTCHA Robustness to Bot Attacks","created":"2020-10-30","cited_by_count":9},{"id":"2305.03980","title":"Towards Prompt-robust Face Privacy Protection via Adversarial Decoupling Augmentation Framework","created":"2023-05-06","cited_by_count":9},{"id":"2404.14016","title":"Ungeneralizable Examples","created":"2024-04-22","cited_by_count":9},{"id":"2507.07483","title":"Temporal Unlearnable Examples: Preventing Personal Video Data from Unauthorized Exploitation by Object Tracking","created":"2025-07-10","cited_by_count":9},{"id":"2511.13248","title":"DualTAP: A Dual-Task Adversarial Protector for Mobile MLLM Agents","created":"2025-11-17","cited_by_count":9},{"id":"2408.12387","title":"Makeup-Guided Facial Privacy Protection via Untrained Neural Network Priors","created":"2024-08-20","cited_by_count":8},{"id":"2505.18766","title":"StyleGuard: Preventing Text-to-Image-Model-based Style Mimicry Attacks by Style Perturbations","created":"2025-05-24","cited_by_count":8},{"id":"2506.01591","title":"Silence is Golden: Leveraging Adversarial Examples to Nullify Audio Control in LDM-based Talking-Head Generation","created":"2025-06-02","cited_by_count":8},{"id":"2509.23279","title":"Vid-Freeze: Protecting Images from Malicious Image-to-Video Generation via Temporal Freezing","created":"2025-09-27","cited_by_count":8},{"id":"2202.03576","title":"Learnability Lock: Authorized Learnability Control Through Adversarial Invertible Transformations","created":"2022-02-03","cited_by_count":7},{"id":"2412.11423","title":"Nearly Zero-Cost Protection Against Mimicry by Personalized Diffusion Models","created":"2024-12-16","cited_by_count":7},{"id":"2503.13994","title":"TarPro: Targeted Protection against Malicious Image Editing","created":"2025-03-18","cited_by_count":7},{"id":"2504.17894","title":"DCT-Shield: A Robust Frequency Domain Defense against Malicious Image Editing","created":"2025-04-24","cited_by_count":7},{"id":"2512.16625","title":"DeContext as Defense: Safe Image Editing in Diffusion Transformers","created":"2025-12-18","cited_by_count":7},{"id":"2602.14679","title":"Universal Image Immunization against Diffusion-based Image Editing via Semantic Injection","created":"2026-02-16","cited_by_count":7},{"id":"2603.24570","title":"Anti-I2V: Safeguarding your photos from malicious image-to-video generation","created":"2026-03-25","cited_by_count":7},{"id":"2310.03614","title":"Adversarial Machine Learning for Social Good: Reframing the Adversary as an Ally","created":"2023-10-05","cited_by_count":6},{"id":"2310.16061","title":"Segue: Side-information Guided Generative Unlearnable Examples for Facial Privacy Protection in Real World","created":"2023-10-24","cited_by_count":6},{"id":"2501.08862","title":"ARMOR: Shielding Unlearnable Examples against Data Augmentation","created":"2025-01-15","cited_by_count":6},{"id":"2510.13793","title":"NoisePrints: Distortion-Free Watermarks for Authorship in Private Diffusion Models","created":"2025-10-15","cited_by_count":6},{"id":"2306.14640","title":"3D-Aware Adversarial Makeup Generation for Facial Privacy Protection","created":"2023-06-26","cited_by_count":5},{"id":"2312.14407","title":"AdvCloak: Customized Adversarial Cloak for Privacy Protection","created":"2023-12-22","cited_by_count":5},{"id":"2503.23536","title":"A Survey on Unlearnable Data","created":"2025-03-30","cited_by_count":5},{"id":"2505.15336","title":"My Face Is Mine, Not Yours: Facial Protection Against Diffusion Model Face Swapping","created":"2025-05-21","cited_by_count":5},{"id":"2506.00652","title":"Video Signature: Implicit Watermarking for Video Diffusion Models","created":"2025-05-31","cited_by_count":5},{"id":"2506.21209","title":"BitMark: Watermarking Bitwise Autoregressive Image Generative Models","created":"2025-06-26","cited_by_count":5},{"id":"2508.03209","title":"GeoShield: Safeguarding Geolocation Privacy from Vision-Language Models via Adversarial Perturbations","created":"2025-08-05","cited_by_count":5},{"id":"2511.00143","title":"BlurGuard: A Simple Approach for Robustifying Image Protection Against AI-Powered Editing","created":"2025-10-31","cited_by_count":5}],"next_cursor":"100"}