English
Related papers

Related papers: Box-Free Model Watermarks Are Prone to Black-Box R…

200 papers

Watermarking has emerged as a prominent technique for LLM-generated content detection by embedding imperceptible patterns. Despite supreme performance, its robustness against adversarial attacks remains underexplored. Previous work…

Computation and Language · Computer Science 2024-11-08 Baizhou Huang , Xiao Pu , Xiaojun Wan

Watermarking has emerged as a promising way to detect LLM-generated text, by augmenting LLM generations with later detectable signals. Recent work has proposed multiple families of watermarking schemes, several of which focus on preserving…

Cryptography and Security · Computer Science 2025-02-25 Thibaud Gloaguen , Nikola Jovanović , Robin Staab , Martin Vechev

Invisible watermarks safeguard images' copyrights by embedding hidden messages only detectable by owners. They also prevent people from misusing images, especially those generated by AI models. We propose a family of regeneration attacks to…

Cryptography and Security · Computer Science 2024-11-01 Xuandong Zhao , Kexun Zhang , Zihao Su , Saastha Vasan , Ilya Grishchenko , Christopher Kruegel , Giovanni Vigna , Yu-Xiang Wang , Lei Li

Previous studies have verified that the functionality of black-box models can be stolen with full probability outputs. However, under the more practical hard-label setting, we observe that existing methods suffer from catastrophic…

Computer Vision and Pattern Recognition · Computer Science 2022-09-27 Yixu Wang , Jie Li , Hong Liu , Yan Wang , Yongjian Wu , Feiyue Huang , Rongrong Ji

Digital watermarking techniques are crucial for copyright protection and source identification of images, especially in the era of generative AI models. However, many existing watermarking methods, particularly content-agnostic approaches…

Computer Vision and Pattern Recognition · Computer Science 2024-06-14 Pei Yang , Hai Ci , Yiren Song , Mike Zheng Shou

Despite the tremendous success, deep neural networks are exposed to serious IP infringement risks. Given a target deep model, if the attacker knows its full information, it can be easily stolen by fine-tuning. Even if only its output is…

Computer Vision and Pattern Recognition · Computer Science 2021-03-09 Jie Zhang , Dongdong Chen , Jing Liao , Weiming Zhang , Huamin Feng , Gang Hua , Nenghai Yu

Training deep neural networks from scratch could be computationally expensive and requires a lot of training data. Recent work has explored different watermarking techniques to protect the pre-trained deep neural networks from potential…

Cryptography and Security · Computer Science 2021-03-26 Xinyun Chen , Wenxiao Wang , Chris Bender , Yiming Ding , Ruoxi Jia , Bo Li , Dawn Song

Embedding watermarks into the output of generative models is essential for establishing copyright and verifiable ownership over the generated content. Emerging diffusion model watermarking methods either embed watermarks in the frequency…

Image and Video Processing · Electrical Eng. & Systems 2025-02-18 Yunzhuo Chen , Jordan Vice , Naveed Akhtar , Nur Al Hasan Haldar , Ajmal Mian

We investigate whether model extraction can be used to "steal" the weights of sequential recommender systems, and the potential threats posed to victims of such attacks. This type of risk has attracted attention in image and text…

Cryptography and Security · Computer Science 2021-09-06 Zhenrui Yue , Zhankui He , Huimin Zeng , Julian McAuley

Digital watermarks can be embedded into AI-generated content (AIGC) by initializing the generation process with starting points sampled from a secret distribution. When combined with pseudorandom error-correcting codes, such watermarked…

Cryptography and Security · Computer Science 2025-11-13 De Zhang Lee , Han Fang , Hanyi Wang , Ee-Chien Chang

Recently, how to protect the Intellectual Property (IP) of deep neural networks (DNN) becomes a major concern for the AI industry. To combat potential model piracy, recent works explore various watermarking strategies to embed secret…

Cryptography and Security · Computer Science 2022-05-20 Yifan Yan , Xudong Pan , Yining Wang , Mi Zhang , Min Yang

The rise of machine learning as a service and model sharing platforms has raised the need of traitor-tracing the models and proof of authorship. Watermarking technique is the main component of existing methods for protecting copyright of…

Cryptography and Security · Computer Science 2019-06-17 Ziqi Yang , Hung Dang , Ee-Chien Chang

The vast amounts of digital content captured from the real world or AI-generated media necessitate methods for copyright protection, traceability, or data provenance verification. Digital watermarking serves as a crucial approach to address…

Computer Vision and Pattern Recognition · Computer Science 2024-10-08 Vitaliy Kinakh , Brian Pulfer , Yury Belousov , Pierre Fernandez , Teddy Furon , Slava Voloshynovskiy

Visible watermark plays an important role in image copyright protection and the robustness of a visible watermark to an attack is shown to be essential. To evaluate and improve the effectiveness of watermark, watermark removal attracts…

Computer Vision and Pattern Recognition · Computer Science 2019-08-20 Xiang Li , Chan Lu , Danni Cheng , Wei-Hong Li , Mei Cao , Bo Liu , Jiechao Ma , Wei-Shi Zheng

Large Language Models (LLMs) excel in various applications, including text generation and complex tasks. However, the misuse of LLMs raises concerns about the authenticity and ethical implications of the content they produce, such as…

Cryptography and Security · Computer Science 2024-12-02 Zesen Liu , Tianshuo Cong , Xinlei He , Qi Li

LLMs now exhibit human-like skills in various fields, leading to worries about misuse. Thus, detecting generated text is crucial. However, passive detection methods are stuck in domain specificity and limited adversarial robustness. To…

Computation and Language · Computer Science 2023-05-17 Xi Yang , Kejiang Chen , Weiming Zhang , Chang Liu , Yuang Qi , Jie Zhang , Han Fang , Nenghai Yu

Watermarking of deep neural networks (DNN) can enable their tracing once released by a data owner. In this paper, we generalize white-box watermarking algorithms for DNNs, where the data owner needs white-box access to the model to extract…

Cryptography and Security · Computer Science 2021-02-16 Tianhao Wang , Florian Kerschbaum

Watermarks for AI-generated images are meant to support downstream decisions about provenance, manipulation, and trust. In the settings that motivate watermark removal, therefore, success means more than causing the watermark test to fail.…

Cryptography and Security · Computer Science 2026-05-12 Yevin Nikhel Goonatilake , Giuseppe Ateniese

Digital watermarking has been widely used to protect the copyright and integrity of multimedia data. Previous studies mainly focus on designing watermarking techniques that are robust to attacks of destroying the embedded watermarks.…

Cryptography and Security · Computer Science 2022-04-20 Ruowei Wang , Chenguo Lin , Qijun Zhao , Feiyu Zhu

In the rapidly evolving domain of artificial intelligence, safeguarding the intellectual property of Large Language Models (LLMs) is increasingly crucial. Current watermarking techniques against model extraction attacks, which rely on…

Cryptography and Security · Computer Science 2024-05-03 Minhao Bai , Kaiyi Pang , Yongfeng Huang