中文
相关论文

相关论文: DynaMarks: Defending Against Deep Learning Model E…

200 篇论文

Watermarking has emerged as a promising technique for detecting texts generated by LLMs. Current research has primarily focused on three design criteria: high quality of the watermarked text, high detectability, and robustness against…

密码学与安全 · 计算机科学 2025-04-11 Li An , Yujian Liu , Yepeng Liu , Yang Zhang , Yuheng Bu , Shiyu Chang

Reports regarding the misuse of Generative AI (GenAI) to create deepfakes are frequent. Defensive watermarking enables GenAI providers to hide fingerprints in their images and use them later for deepfake detection. Yet, its potential has…

密码学与安全 · 计算机科学 2024-11-25 Andre Kassis , Urs Hengartner

The promise of LLM watermarking rests on a core assumption that a specific watermark proves authorship by a specific model. We demonstrate that this assumption is dangerously flawed. We introduce the threat of watermark spoofing, a…

密码学与安全 · 计算机科学 2026-02-24 Hyeseon An , Shinwoo Park , Suyeon Woo , Yo-Sub Han

With the rapid development of cloud-based services, large language models have become increasingly accessible through various web platforms. However, this accessibility has also led to growing risks of model abuse. LLM watermarking has…

密码学与安全 · 计算机科学 2026-04-28 Hao Li , Yubing Ren , Yanan Cao , Yingjie Li , Fang Fang , Shi Wang , Li Guo

A well-trained DNN model can be regarded as an intellectual property (IP) of the model owner. To date, many DNN IP protection methods have been proposed, but most of them are watermarking based verification methods where model owners can…

密码学与安全 · 计算机科学 2023-05-26 Mingfu Xue , Zhiyu Wu , Jian Wang , Yushu Zhang , Weiqiang Liu

Training deep neural networks (DNNs) requires large datasets and powerful computing resources, which has led some owners to restrict redistribution without permission. Watermarking techniques that embed confidential data into DNNs have been…

密码学与安全 · 计算机科学 2024-01-05 Seonhye Park , Alsharif Abuadbba , Shuo Wang , Kristen Moore , Yansong Gao , Hyoungshick Kim , Surya Nepal

The state of the art performance of deep learning models comes at a high cost for companies and institutions, due to the tedious data collection and the heavy processing requirements. Recently, [35, 22] proposed to watermark convolutional…

密码学与安全 · 计算机科学 2021-04-14 Erwan Le Merrer , Patrick Perez , Gilles Trédan

Watermarking techniques offer a promising way to identify machine-generated content via embedding covert information into the contents generated from language models. A challenge in the domain lies in preserving the distribution of original…

密码学与安全 · 计算机科学 2024-06-26 Yihan Wu , Zhengmian Hu , Junfeng Guo , Hongyang Zhang , Heng Huang

Deep Neural Networks (DNNs) are susceptible to model stealing attacks, which allows a data-limited adversary with no knowledge of the training dataset to clone the functionality of a target model, just by using black-box query access. Such…

机器学习 · 统计学 2019-11-19 Sanjay Kariyappa , Moinuddin K Qureshi

Watermarking enables GenAI providers to verify whether content was generated by their models. A watermark is a hidden signal in the content, whose presence can be detected using a secret watermark key. A core security threat are forgery…

密码学与安全 · 计算机科学 2026-05-12 Toluwani Aremu , Noor Hussein , Munachiso Nwadike , Samuele Poppi , Jie Zhang , Karthik Nandakumar , Neil Gong , Nils Lukas

In order to protect the intellectual property (IP) of deep neural networks (DNNs), many existing DNN watermarking techniques either embed watermarks directly into the DNN parameters or insert backdoor watermarks by fine-tuning the DNN…

密码学与安全 · 计算机科学 2021-10-19 Xiangyu Zhao , Yinzhe Yao , Hanzhou Wu , Xinpeng Zhang

Image generative models have become increasingly popular, but training them requires large datasets that are costly to collect and curate. To circumvent these costs, some parties may exploit existing models by using the generated images as…

机器学习 · 计算机科学 2025-07-01 Michel Meintz , Jan Dubiński , Franziska Boenisch , Adam Dziedzic

The huge supporting training data on the Internet has been a key factor in the success of deep learning models. However, this abundance of public-available data also raises concerns about the unauthorized exploitation of datasets for…

密码学与安全 · 计算机科学 2023-04-11 Ruixiang Tang , Qizhang Feng , Ninghao Liu , Fan Yang , Xia Hu

Graph Neural Networks (GNNs) have achieved promising performance in various real-world applications. Building a powerful GNN model is not a trivial task, as it requires a large amount of training data, powerful computing resources, and…

机器学习 · 计算机科学 2022-11-15 Jing Xu , Stefanos Koffas , Oguzhan Ersoy , Stjepan Picek

Diffusion models (DMs) have demonstrated advantageous potential on generative tasks. Widespread interest exists in incorporating DMs into downstream applications, such as producing or editing photorealistic images. However, practical…

计算机视觉与模式识别 · 计算机科学 2023-10-17 Yunqing Zhao , Tianyu Pang , Chao Du , Xiao Yang , Ngai-Man Cheung , Min Lin

Backdoor attack aims to deceive a victim model when facing backdoor instances while maintaining its performance on benign data. Current methods use manual patterns or special perturbations as triggers, while they often overlook the…

计算机视觉与模式识别 · 计算机科学 2024-01-05 Ruofei Wang , Renjie Wan , Zongyu Guo , Qing Guo , Rui Huang

The network flow watermarking technique associates the two communicating parties by actively modifying certain characteristics of the stream generated by the sender so that it covertly carries some special marking information. Some curious…

网络与互联网体系结构 · 计算机科学 2024-02-08 Yali Yuan , Jian Ge , Guang Cheng

Watermarking is the process of embedding information into an image that can survive under distortions, while requiring the encoded image to have little or no perceptual difference from the original image. Recently, deep learning-based…

多媒体 · 计算机科学 2020-01-15 Xiyang Luo , Ruohan Zhan , Huiwen Chang , Feng Yang , Peyman Milanfar

Deploying DL models on mobile Apps has become ever-more popular. However, existing studies show attackers can easily reverse-engineer mobile DL models in Apps to steal intellectual property or generate effective attacks. A recent approach,…

软件工程 · 计算机科学 2024-10-22 Mingyi Zhou , Xiang Gao , Xiao Chen , Chunyang Chen , John Grundy , Li Li

Diffusion large language models (dLLMs) offer faster generation than autoregressive models while maintaining comparable quality, but existing watermarking methods fail on them due to their non-sequential decoding. Unlike autoregressive…

机器学习 · 计算机科学 2025-10-06 Linyu Wu , Linhao Zhong , Wenjie Qu , Yuexin Li , Yue Liu , Shengfang Zhai , Chunhua Shen , Jiaheng Zhang