English
Related papers

Related papers: Box-Free Model Watermarks Are Prone to Black-Box R…

200 papers

The commercialization of deep learning creates a compelling need for intellectual property (IP) protection. Deep neural network (DNN) watermarking has been proposed as a promising tool to help model owners prove ownership and fight piracy.…

Machine Learning · Computer Science 2021-02-16 Jia Guo , Miodrag Potkonjak

Watermarking plays a key role in the provenance and detection of AI-generated content. While existing methods prioritize robustness against real-world distortions (e.g., JPEG compression and noise addition), we reveal a fundamental…

Computer Vision and Pattern Recognition · Computer Science 2025-02-11 Zhongjie Ba , Yitao Zhang , Peng Cheng , Bin Gong , Xinyu Zhang , Qinglong Wang , Kui Ren

Fine-tuning attacks are effective in removing the embedded watermarks in deep learning models. However, when the source data is unavailable, it is challenging to just erase the watermark without jeopardizing the model performance. In this…

Computer Vision and Pattern Recognition · Computer Science 2022-04-06 Qi Zhong , Leo Yu Zhang , Shengshan Hu , Longxiang Gao , Jun Zhang , Yong Xiang

Deep hiding, embedding images with others using deep neural networks, has demonstrated impressive efficacy in increasing the message capacity and robustness of secret sharing. In this paper, we challenge the robustness of existing deep…

Cryptography and Security · Computer Science 2023-08-04 Hangcheng Liu , Tao Xiang , Shangwei Guo , Han Li , Tianwei Zhang , Xiaofeng Liao

Securing digital text is becoming increasingly relevant due to the widespread use of large language models. Individuals' fear of losing control over data when it is being used to train such machine learning models or when distinguishing…

Cryptography and Security · Computer Science 2025-12-16 Malte Hellmeier

The increasing scale and sophistication of cyberattacks has led to the adoption of machine learning based classification techniques, at the core of cybersecurity systems. These techniques promise scale and accuracy, which traditional rule…

Machine Learning · Computer Science 2018-03-28 Tegjyot Singh Sethi , Mehmed Kantardzic , Joung Woo Ryu

Deep neural networks (DNN) have achieved remarkable performance in various fields. However, training a DNN model from scratch requires a lot of computing resources and training data. It is difficult for most individual users to obtain such…

Multimedia · Computer Science 2022-07-05 Haoqi Wang , Mingfu Xue , Shichang Sun , Yushu Zhang , Jian Wang , Weiqiang Liu

Deep neural networks have been widely applied and achieved great success in various fields. As training deep models usually consumes massive data and computational resources, trading the trained deep models is highly demanded and lucrative…

Computer Vision and Pattern Recognition · Computer Science 2020-08-11 Xuankai Liu , Fengting Li , Bihan Wen , Qi Li

In practical application, the widespread deployment of diffusion models often necessitates substantial investment in training. As diffusion models find increasingly diverse applications, concerns about potential misuse highlight the…

Computer Vision and Pattern Recognition · Computer Science 2024-10-31 Jijia Yang , Sen Peng , Xiaohua Jia

Image watermarks have been considered a promising technique to help detect AI-generated content, which can be used to protect copyright or prevent fake image abuse. In this work, we present a black-box method for removing invisible image…

Image and Video Processing · Electrical Eng. & Systems 2025-07-03 Hengyue Liang , Taihui Li , Ju Sun

Amidst rising concerns about the internet being proliferated with content generated from language models (LMs), watermarking is seen as a principled way to certify whether text was generated from a model. Many recent watermarking techniques…

Cryptography and Security · Computer Science 2024-11-11 Saksham Rastogi , Danish Pruthi

This paper introduces a novel data-free model extraction attack that significantly advances the current state-of-the-art in terms of efficiency, accuracy, and effectiveness. Traditional black-box methods rely on using the victim's model as…

Cryptography and Security · Computer Science 2024-10-22 Maor Biton Dor , Yisroel Mirsky

In recent years, there has been significant advancement in the field of model watermarking techniques. However, the protection of image-processing neural networks remains a challenge, with only a limited number of methods being developed.…

Cryptography and Security · Computer Science 2023-02-20 Huajie Chen , Tianqing Zhu , Chi Liu , Shui Yu , Wanlei Zhou

To ensure the responsible distribution and use of open-source deep neural networks (DNNs), DNN watermarking has become a crucial technique to trace and verify unauthorized model replication or misuse. In practice, black-box watermarks…

Cryptography and Security · Computer Science 2026-02-04 Huming Qiu , Mi Zhang , Junjie Sun , Peiyi Chen , Xiaohan Zhang , Min Yang

Recent advances in the capabilities of large language models such as GPT-4 have spurred increasing concern about our ability to detect AI-generated text. Prior works have suggested methods of embedding watermarks in model outputs, by…

Cryptography and Security · Computer Science 2023-06-16 Miranda Christ , Sam Gunn , Or Zamir

Watermarking approaches are widely used to identify if images being circulated are authentic or AI-generated. Determining the robustness of image watermarking methods in the ``no-box'' setting, where the attacker is assumed to have no…

Cryptography and Security · Computer Science 2024-12-04 Qilong Wu , Varun Chandrasekaran

Recent fine-tuning techniques for diffusion models enable them to reproduce specific image sets, such as particular faces or artistic styles, but also introduce copyright and security risks. Dataset watermarking has been proposed to ensure…

Computer Vision and Pattern Recognition · Computer Science 2026-05-29 Xincheng Wang , Hanchi Sun , Wenjun Sun , Kejun Xue , Wangqiu Zhou , Jianbo Zhang , Wei Sun , Dandan Zhu , Xiongkuo Min , Jun Jia , Zhijun Fang

Invisible watermarking for autoregressive (AR) image generation has recently gained attention as a means of protecting image ownership and tracing AI-generated content. However, existing approaches suffer from three key limitations: (1)…

Computer Vision and Pattern Recognition · Computer Science 2026-04-15 Yigit Yilmaz , Elena Petrova , Mehmet Kaya , Lucia Rossi , Amir Rahman

Watermarking has recently emerged as an effective strategy for detecting the outputs of large language models (LLMs). Most existing schemes require white-box access to the model's next-token probability distribution, which is typically not…

Cryptography and Security · Computer Science 2026-02-24 Dara Bahri , John Wieting

Watermarking is a commonly used strategy to protect creators' rights to digital images, videos and audio. Recently, watermarking methods have been extended to deep learning models -- in principle, the watermark should be preserved when an…