English
Related papers

Related papers: Box-Free Model Watermarks Are Prone to Black-Box R…

200 papers

Language models (LMs) have emerged as critical intellectual property (IP) assets that necessitate protection. Although various watermarking strategies have been proposed, they remain vulnerable to Linear Functionality Equivalence Attack…

Cryptography and Security · Computer Science 2025-02-04 Haodong Zhao , Jinming Hu , Peixuan Li , Fangqi Li , Jinrui Sha , Tianjie Ju , Peixuan Chen , Zhuosheng Zhang , Gongshen Liu

In recent years, LLM watermarking has emerged as an attractive safeguard against AI-generated content, with promising applications in many real-world domains. However, there are growing concerns that the current LLM watermarking schemes are…

Cryptography and Security · Computer Science 2025-06-13 Shayleen Reynolds , Hengzhi He , Dung Daniel T. Ngo , Saheed Obitayo , Niccolò Dalmasso , Guang Cheng , Vamsi K. Potluru , Manuela Veloso

Deep learning techniques have implemented many unconditional image generation (UIG) models, such as GAN, Diffusion model, etc. The extremely realistic images (also known as AI-Generated Content, AIGC for short) produced by these models…

Computer Vision and Pattern Recognition · Computer Science 2023-10-17 Ruinan Ma , Yu-an Tan , Shangbo Wu , Tian Chen , Yajie Wang , Yuanzhang Li

Backdoor attack aims to deceive a victim model when facing backdoor instances while maintaining its performance on benign data. Current methods use manual patterns or special perturbations as triggers, while they often overlook the…

Computer Vision and Pattern Recognition · Computer Science 2024-01-05 Ruofei Wang , Renjie Wan , Zongyu Guo , Qing Guo , Rui Huang

Artificial Intelligence Generated Content (AIGC), particularly video generation with diffusion models, has been advanced rapidly. Invisible watermarking is a key technology for protecting AI-generated videos and tracing harmful content, and…

Computer Vision and Pattern Recognition · Computer Science 2026-03-04 Xinjie Zhu , Zijing Zhao , Hui Jin , Qingxiao Guo , Yilong Ma , Yunhao Wang , Xiaobing Guo , Weifeng Zhang

This paper introduces EmMark,a novel watermarking framework for protecting the intellectual property (IP) of embedded large language models deployed on resource-constrained edge devices. To address the IP theft risks posed by malicious…

Cryptography and Security · Computer Science 2024-02-29 Ruisi Zhang , Farinaz Koushanfar

Watermarking is a key technique for detecting AI-generated text. In this work, we study its vulnerabilities and introduce the Smoothing Attack, a novel watermark removal method. By leveraging the relationship between the model's confidence…

Machine Learning · Computer Science 2025-02-06 Hongyan Chang , Hamed Hassani , Reza Shokri

Training machine learning (ML) models is expensive in terms of computational power, amounts of labeled data and human expertise. Thus, ML models constitute intellectual property (IP) and business value for their owners. Embedding digital…

Cryptography and Security · Computer Science 2021-07-19 Sebastian Szyller , Buse Gul Atli , Samuel Marchal , N. Asokan

Deep neural networks provide unprecedented performance in all image classification problems, taking advantage of huge amounts of data available for training. Recent studies, however, have shown their vulnerability to adversarial attacks,…

Computer Vision and Pattern Recognition · Computer Science 2020-09-24 Diego Gragnaniello , Francesco Marra , Giovanni Poggi , Luisa Verdoliva

EEG-based neural networks, pivotal in medical diagnosis and brain-computer interfaces, face significant intellectual property (IP) risks due to their reliance on sensitive neurophysiological data and resource-intensive development. Current…

Machine Learning · Computer Science 2025-02-11 Ahmed Abdelaziz , Ahmed Fathi , Ahmed Fares

Methods for watermarking large language models have been proposed that distinguish AI-generated text from human-generated text by slightly altering the model output distribution, but they also distort the quality of the text, exposing the…

Computation and Language · Computer Science 2024-02-27 Massieh Kordi Boroujeny , Ya Jiang , Kai Zeng , Brian Mark

Watermarking has been widely adopted for protecting the intellectual property (IP) of Deep Neural Networks (DNN) to defend the unauthorized distribution. Unfortunately, the popular data-poisoning DNN watermarking scheme relies on target…

Cryptography and Security · Computer Science 2022-10-18 Run Wang , Jixing Ren , Boheng Li , Tianyi She , Chenhao Lin , Liming Fang , Jing Chen , Chao Shen , Lina Wang

In recent years, tremendous success has been witnessed in Retrieval-Augmented Generation (RAG), widely used to enhance Large Language Models (LLMs) in domain-specific, knowledge-intensive, and privacy-sensitive tasks. However, attackers may…

Cryptography and Security · Computer Science 2025-01-10 Peizhuo Lv , Mengjie Sun , Hao Wang , Xiaofeng Wang , Shengzhi Zhang , Yuxuan Chen , Kai Chen , Limin Sun

Adoption of machine learning models across industries have turned Neural Networks (DNNs) into a prized Intellectual Property (IP), which needs to be protected from being stolen or being used without authorization. This topic gave rise to…

Cryptography and Security · Computer Science 2025-01-07 Yi Hao Puah , Anh Tu Ngo , Nandish Chattopadhyay , Anupam Chattopadhyay

Recently, Deep Learning (DL) models have been increasingly deployed on end-user devices as On-Device AI, offering improved efficiency and privacy. However, this deployment trend poses more serious Intellectual Property (IP) risks, as models…

Cryptography and Security · Computer Science 2025-07-30 Zhicheng Zhang , Peizhuo Lv , Mengke Wan , Jiang Fang , Diandian Guo , Yezeng Chen , Yinlong Liu , Wei Ma , Jiyan Sun , Liru Geng

The state of the art performance of deep learning models comes at a high cost for companies and institutions, due to the tedious data collection and the heavy processing requirements. Recently, [35, 22] proposed to watermark convolutional…

Cryptography and Security · Computer Science 2021-04-14 Erwan Le Merrer , Patrick Perez , Gilles Trédan

Well-performed deep neural networks (DNNs) generally require massive labelled data and computational resources for training. Various watermarking techniques are proposed to protect such intellectual properties (IPs), wherein the DNN…

Computer Vision and Pattern Recognition · Computer Science 2023-04-04 Xiangyu Wen , Yu Li , Wei Jiang , Qiang Xu

Generative AI technology has become increasingly integrated into our daily lives, offering powerful capabilities to enhance productivity. However, these same capabilities can be exploited by adversaries for malicious purposes. While…

Cryptography and Security · Computer Science 2025-07-17 Dayong Ye , Tianqing Zhu , Shang Wang , Bo Liu , Leo Yu Zhang , Wanlei Zhou , Yang Zhang

As frontier AIs become more powerful and costly to develop, adversaries have increasing incentives to steal model weights by mounting exfiltration attacks. In this work, we consider exfiltration attacks where an adversary attempts to sneak…

Cryptography and Security · Computer Science 2026-01-06 Davis Brown , Juan-Pablo Rivera , Dan Hendrycks , Mantas Mazeika

In fragile watermarking, a sensitive watermark is embedded in an object in a manner such that the watermark breaks upon tampering. This fragile process can be used to ensure the integrity and source of watermarked objects. While fragile…

Cryptography and Security · Computer Science 2024-10-01 Preston K. Robinette , Dung T. Nguyen , Samuel Sasaki , Taylor T. Johnson