中文
相关论文

相关论文: Box-Free Model Watermarks Are Prone to Black-Box R…

200 篇论文

Watermarking has emerged as a prominent technique for LLM-generated content detection by embedding imperceptible patterns. Despite supreme performance, its robustness against adversarial attacks remains underexplored. Previous work…

计算与语言 · 计算机科学 2024-11-08 Baizhou Huang , Xiao Pu , Xiaojun Wan

Watermarking has emerged as a promising way to detect LLM-generated text, by augmenting LLM generations with later detectable signals. Recent work has proposed multiple families of watermarking schemes, several of which focus on preserving…

密码学与安全 · 计算机科学 2025-02-25 Thibaud Gloaguen , Nikola Jovanović , Robin Staab , Martin Vechev

Invisible watermarks safeguard images' copyrights by embedding hidden messages only detectable by owners. They also prevent people from misusing images, especially those generated by AI models. We propose a family of regeneration attacks to…

Previous studies have verified that the functionality of black-box models can be stolen with full probability outputs. However, under the more practical hard-label setting, we observe that existing methods suffer from catastrophic…

计算机视觉与模式识别 · 计算机科学 2022-09-27 Yixu Wang , Jie Li , Hong Liu , Yan Wang , Yongjian Wu , Feiyue Huang , Rongrong Ji

Digital watermarking techniques are crucial for copyright protection and source identification of images, especially in the era of generative AI models. However, many existing watermarking methods, particularly content-agnostic approaches…

计算机视觉与模式识别 · 计算机科学 2024-06-14 Pei Yang , Hai Ci , Yiren Song , Mike Zheng Shou

Despite the tremendous success, deep neural networks are exposed to serious IP infringement risks. Given a target deep model, if the attacker knows its full information, it can be easily stolen by fine-tuning. Even if only its output is…

计算机视觉与模式识别 · 计算机科学 2021-03-09 Jie Zhang , Dongdong Chen , Jing Liao , Weiming Zhang , Huamin Feng , Gang Hua , Nenghai Yu

Training deep neural networks from scratch could be computationally expensive and requires a lot of training data. Recent work has explored different watermarking techniques to protect the pre-trained deep neural networks from potential…

密码学与安全 · 计算机科学 2021-03-26 Xinyun Chen , Wenxiao Wang , Chris Bender , Yiming Ding , Ruoxi Jia , Bo Li , Dawn Song

Embedding watermarks into the output of generative models is essential for establishing copyright and verifiable ownership over the generated content. Emerging diffusion model watermarking methods either embed watermarks in the frequency…

图像与视频处理 · 电气工程与系统科学 2025-02-18 Yunzhuo Chen , Jordan Vice , Naveed Akhtar , Nur Al Hasan Haldar , Ajmal Mian

We investigate whether model extraction can be used to "steal" the weights of sequential recommender systems, and the potential threats posed to victims of such attacks. This type of risk has attracted attention in image and text…

密码学与安全 · 计算机科学 2021-09-06 Zhenrui Yue , Zhankui He , Huimin Zeng , Julian McAuley

Digital watermarks can be embedded into AI-generated content (AIGC) by initializing the generation process with starting points sampled from a secret distribution. When combined with pseudorandom error-correcting codes, such watermarked…

密码学与安全 · 计算机科学 2025-11-13 De Zhang Lee , Han Fang , Hanyi Wang , Ee-Chien Chang

Recently, how to protect the Intellectual Property (IP) of deep neural networks (DNN) becomes a major concern for the AI industry. To combat potential model piracy, recent works explore various watermarking strategies to embed secret…

密码学与安全 · 计算机科学 2022-05-20 Yifan Yan , Xudong Pan , Yining Wang , Mi Zhang , Min Yang

The rise of machine learning as a service and model sharing platforms has raised the need of traitor-tracing the models and proof of authorship. Watermarking technique is the main component of existing methods for protecting copyright of…

密码学与安全 · 计算机科学 2019-06-17 Ziqi Yang , Hung Dang , Ee-Chien Chang

The vast amounts of digital content captured from the real world or AI-generated media necessitate methods for copyright protection, traceability, or data provenance verification. Digital watermarking serves as a crucial approach to address…

计算机视觉与模式识别 · 计算机科学 2024-10-08 Vitaliy Kinakh , Brian Pulfer , Yury Belousov , Pierre Fernandez , Teddy Furon , Slava Voloshynovskiy

Visible watermark plays an important role in image copyright protection and the robustness of a visible watermark to an attack is shown to be essential. To evaluate and improve the effectiveness of watermark, watermark removal attracts…

计算机视觉与模式识别 · 计算机科学 2019-08-20 Xiang Li , Chan Lu , Danni Cheng , Wei-Hong Li , Mei Cao , Bo Liu , Jiechao Ma , Wei-Shi Zheng

Large Language Models (LLMs) excel in various applications, including text generation and complex tasks. However, the misuse of LLMs raises concerns about the authenticity and ethical implications of the content they produce, such as…

密码学与安全 · 计算机科学 2024-12-02 Zesen Liu , Tianshuo Cong , Xinlei He , Qi Li

LLMs now exhibit human-like skills in various fields, leading to worries about misuse. Thus, detecting generated text is crucial. However, passive detection methods are stuck in domain specificity and limited adversarial robustness. To…

计算与语言 · 计算机科学 2023-05-17 Xi Yang , Kejiang Chen , Weiming Zhang , Chang Liu , Yuang Qi , Jie Zhang , Han Fang , Nenghai Yu

Watermarking of deep neural networks (DNN) can enable their tracing once released by a data owner. In this paper, we generalize white-box watermarking algorithms for DNNs, where the data owner needs white-box access to the model to extract…

密码学与安全 · 计算机科学 2021-02-16 Tianhao Wang , Florian Kerschbaum

Watermarks for AI-generated images are meant to support downstream decisions about provenance, manipulation, and trust. In the settings that motivate watermark removal, therefore, success means more than causing the watermark test to fail.…

密码学与安全 · 计算机科学 2026-05-12 Yevin Nikhel Goonatilake , Giuseppe Ateniese

Digital watermarking has been widely used to protect the copyright and integrity of multimedia data. Previous studies mainly focus on designing watermarking techniques that are robust to attacks of destroying the embedded watermarks.…

密码学与安全 · 计算机科学 2022-04-20 Ruowei Wang , Chenguo Lin , Qijun Zhao , Feiyu Zhu

In the rapidly evolving domain of artificial intelligence, safeguarding the intellectual property of Large Language Models (LLMs) is increasingly crucial. Current watermarking techniques against model extraction attacks, which rely on…

密码学与安全 · 计算机科学 2024-05-03 Minhao Bai , Kaiyi Pang , Yongfeng Huang