X-Mark: Saliency-Guided Robust Dataset Ownership Verification for Medical Imaging
On the map: LLM safety and security → Watermarking generated content and models
Abstract (arXiv)
High-quality medical imaging datasets are essential for training deep learning models, but their unauthorized use raises serious copyright and ethical concerns. Medical imaging presents a unique challenge for existing dataset ownership verification methods designed for natural images, as static watermark patterns generated in fixed-scale images scale poorly dynamic and high-resolution scans with limited visual diversity and subtle anatomical structures, while preserving diagnostic quality. In this paper, we propose X-Mark, a sample-specific clean-label watermarking method for chest x-ray copyright protection. Specifically, X-Mark uses a conditional U-Net to generate unique perturbations within salient regions of each sample. We design a multi-component training objective to ensure watermark efficacy, robustness against dynamic scaling processes while preserving diagnostic quality and visual-distinguishability. We incorporate Laplacian regularization into our training objective to penalize high-frequency perturbations and achieve watermark scale-invariance. Ownership verification is performed in a black-box setting to detect characteristic behaviors in suspicious models. Extensive experiments on CheXpert verify the effectiveness of X-Mark, achieving WSR of 100% and reducing probability of false positives in Ind-M scenario by 12%, while demonstrating resistance to potential adaptive attacks.
Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Placed in Watermarking generated content and models, one of 12 directions in LLM safety and security. Builds on 30 of its 38 references that are in the map. First posted on arXiv 10 Feb 2026.
Builds on
30 of 38 references.
References · 30
- 2015U-Net: Convolutional Networks for Biomedical Image Segmentationcited by 19,604
- 2018The Unreasonable Effectiveness of Deep Features as a Perceptual Metriccited by 11,029
- 2016Deep Learning with Differential Privacycited by 2,682
- 2019CheXpert: A Large Chest Radiograph Dataset with Uncertainty Labels and Expert Comparisoncited by 1,410
- 2017BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chaincited by 1,052
- 2017Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoningcited by 1,012
- 2018Fine-Pruning: Defending Against Backdooring Attacks on Deep Neural Networkscited by 550
- 2018Turning Your Weakness Into a Strength: Watermarking Deep Neural Networks by Backdooringcited by 334
- 2019Label-Consistent Backdoor Attackscited by 285
- 2015Deep Generative Image Models using a Laplacian Pyramid of Adversarial Networkscited by 214
- 2020Eigen-CAM: Class Activation Map using Principal Componentscited by 188
- 2021Unlearnable Examples: Making Personal Data Unexploitablecited by 188
18 more
- 2017Optimizing the Latent Space of Generative Networkscited by 157
- 2017Neural Trojanscited by 151
- 2021Dataset Inference: Ownership Resolution in Machine Learningcited by 115
- 2022Untargeted Backdoor Watermark: Towards Harmless and Stealthy Dataset Copyright Protectioncited by 80
- 2020Radioactive data: tracing through trainingcited by 67
- 2021FIBA: Frequency-Injection based Backdoor Attack in Medical Image Analysiscited by 60
- 2022Black-box Dataset Ownership Verification via Backdoor Watermarkingcited by 57
- 2023Domain Watermark: Effective and Harmless Dataset Copyright Protection is Closed at Handcited by 52
- 2022SSLGuard: A Watermarking Scheme for Self-supervised Learning Pre-trained Encoderscited by 43
- 2022MONAI Label: A framework for AI-assisted Interactive Labeling of 3D Medical Imagescited by 38
- 2023Did You Train on My Dataset? Towards Public Dataset Protection with Clean-Label Backdoor Watermarkingcited by 37
- 2020Deep Learning Applied to Chest X-Rays: Exploiting and Preventing Shortcutscited by 29
- 2022Watermarking Pre-trained Encoders in Contrastive Learningcited by 10
- 2024Medical Unlearnable Examples: Securing Medical Data from Unauthorized Training via Sparsity-Aware Local Maskingcited by 8
- 2025DATABench: Evaluating Dataset Auditing in Deep Learning from an Adversarial Perspectivecited by 8
- 2025Evading Data Provenance in Deep Neural Networkscited by 2
- 2025SSCL-BW: Sample-Specific Clean-Label Backdoor Watermarking for Dataset Ownership Verificationcited by 2
- 2024Medical Image Data Provenance for Medical Cyber-Physical Systemcited by 1
Built on by
Citing papers per year: 2026: 1.
1 paper.