中文
相关论文

相关论文: Investigating Deep Watermark Security: An Adversar…

200 篇论文

Watermarking techniques offer a promising way to identify machine-generated content via embedding covert information into the contents generated from language models. A challenge in the domain lies in preserving the distribution of original…

密码学与安全 · 计算机科学 2024-06-26 Yihan Wu , Zhengmian Hu , Junfeng Guo , Hongyang Zhang , Heng Huang

Deep learning has achieved tremendous success in numerous industrial applications. As training a good model often needs massive high-quality data and computation resources, the learned models often have significant business values. However,…

多媒体 · 计算机科学 2020-02-26 Jie Zhang , Dongdong Chen , Jing Liao , Han Fang , Weiming Zhang , Wenbo Zhou , Hao Cui , Nenghai Yu

Latent Diffusion Models (LDMs) enable a wide range of applications but raise ethical concerns regarding illegal utilization. Adding watermarks to generative model outputs is a vital technique employed for copyright tracking and mitigating…

密码学与安全 · 计算机科学 2025-06-02 Liangqi Lei , Keke Gai , Jing Yu , Liehuang Zhu

Untrustworthy users can misuse image generators to synthesize high-quality deepfakes and engage in unethical activities. Watermarking deters misuse by marking generated content with a hidden message, enabling its detection using a secret…

密码学与安全 · 计算机科学 2024-01-23 Nils Lukas , Abdulrahman Diaa , Lucas Fenaux , Florian Kerschbaum

Integrating watermarking into the generation process of latent diffusion models (LDMs) simplifies detection and attribution of generated content. Semantic watermarks, such as Tree-Rings and Gaussian Shading, represent a novel class of…

密码学与安全 · 计算机科学 2025-06-10 Andreas Müller , Denis Lukovnikov , Jonas Thietke , Asja Fischer , Erwin Quiring

Though CNNs have achieved the state-of-the-art performance on various vision tasks, they are vulnerable to adversarial examples --- crafted by adding human-imperceptible perturbations to clean images. However, most of the existing…

计算机视觉与模式识别 · 计算机科学 2019-06-04 Cihang Xie , Zhishuai Zhang , Yuyin Zhou , Song Bai , Jianyu Wang , Zhou Ren , Alan Yuille

Existing watermarking algorithms are vulnerable to paraphrase attacks because of their token-level design. To address this issue, we propose SemStamp, a robust sentence-level semantic watermarking algorithm based on locality-sensitive…

Obtaining the state of the art performance of deep learning models imposes a high cost to model generators, due to the tedious data preparation and the substantial processing requirements. To protect the model from unauthorized…

机器学习 · 计算机科学 2019-11-27 Masoumeh Shafieinejad , Jiaqi Wang , Nils Lukas , Xinda Li , Florian Kerschbaum

To trace the copyright of deep neural networks, an owner can embed its identity information into its model as a watermark. The capacity of the watermark quantify the maximal volume of information that can be verified from the watermarked…

密码学与安全 · 计算机科学 2024-02-21 Fangqi Li , Haodong Zhao , Wei Du , Shilin Wang

Machine learning involves expensive data collection and training procedures. Model owners may be concerned that valuable intellectual property can be leaked if adversaries mount model extraction attacks. As it is difficult to defend against…

密码学与安全 · 计算机科学 2021-02-22 Hengrui Jia , Christopher A. Choquette-Choo , Varun Chandrasekaran , Nicolas Papernot

Deep neural networks are vulnerable to adversarial examples crafted by applying human-imperceptible perturbations on clean inputs. Although many attack methods can achieve high success rates in the white-box setting, they also exhibit weak…

计算机视觉与模式识别 · 计算机科学 2023-08-22 Zhijin Ge , Fanhua Shang , Hongying Liu , Yuanyuan Liu , Liang Wan , Wei Feng , Xiaosen Wang

This paper introduces a novel problem, distributional information embedding, motivated by the practical demands of multi-bit watermarking for large language models (LLMs). Unlike traditional information embedding, which embeds information…

密码学与安全 · 计算机科学 2025-07-03 Haiyun He , Yepeng Liu , Ziqiao Wang , Yongyi Mao , Yuheng Bu

Artificial neural networks in general and deep learning networks in particular established themselves as popular and powerful machine learning algorithms. While the often tremendous sizes of these networks are beneficial when solving…

机器学习 · 计算机科学 2020-05-28 Moritz Seiler , Heike Trautmann , Pascal Kerschke

Generative models are now capable of synthesizing images, speeches, and videos that are hardly distinguishable from authentic contents. Such capabilities cause concerns such as malicious impersonation and IP theft. This paper investigates a…

声音 · 计算机科学 2022-03-16 Yongbaek Cho , Changhoon Kim , Yezhou Yang , Yi Ren

Deep neural networks are vulnerable to adversarial examples, which can fool deep models by adding subtle perturbations. Although existing attacks have achieved promising results, it still leaves a long way to go for generating transferable…

计算机视觉与模式识别 · 计算机科学 2022-01-04 Yexin Duan , Junhua Zou , Xingyu Zhou , Wu Zhang , Jin Zhang , Zhisong Pan

Recent research has demonstrated that adding some imperceptible perturbations to original images can fool deep learning models. However, the current adversarial perturbations are usually shown in the form of noises, and thus have no…

密码学与安全 · 计算机科学 2020-09-01 Xiaojun Jia , Xingxing Wei , Xiaochun Cao , Xiaoguang Han

Text watermarking aims to subtly embed statistical signals into text by controlling the Large Language Model (LLM)'s sampling process, enabling watermark detectors to verify that the output was generated by the specified model. The…

机器学习 · 计算机科学 2025-05-13 Yixin Cheng , Hongcheng Guo , Yangming Li , Leonid Sigal

Watermark has been widely deployed by industry to detect AI-generated images. The robustness of such watermark-based detector against evasion attacks in the white-box and black-box settings is well understood in the literature. However, the…

密码学与安全 · 计算机科学 2025-02-20 Yuepeng Hu , Zhengyuan Jiang , Moyang Guo , Neil Zhenqiang Gong

As generative artificial intelligence technologies like Stable Diffusion advance, visual content becomes more vulnerable to misuse, raising concerns about copyright infringement. Visual watermarks serve as effective protection mechanisms,…

计算机视觉与模式识别 · 计算机科学 2025-05-19 Junxian Duan , Jiyang Guan , Wenkui Yang , Ran He

The transferability of adversarial examples allows for the attack on unknown deep neural networks (DNNs), posing a serious threat to many applications and attracting great attention. In this paper, we improve the transferability of…

机器学习 · 计算机科学 2025-10-16 Qizhang Li , Yiwen Guo , Xiaochen Yang , Wangmeng Zuo , Hao Chen