中文
相关论文

相关论文: Box-Free Model Watermarks Are Prone to Black-Box R…

200 篇论文

The commercialization of deep learning creates a compelling need for intellectual property (IP) protection. Deep neural network (DNN) watermarking has been proposed as a promising tool to help model owners prove ownership and fight piracy.…

机器学习 · 计算机科学 2021-02-16 Jia Guo , Miodrag Potkonjak

Watermarking plays a key role in the provenance and detection of AI-generated content. While existing methods prioritize robustness against real-world distortions (e.g., JPEG compression and noise addition), we reveal a fundamental…

计算机视觉与模式识别 · 计算机科学 2025-02-11 Zhongjie Ba , Yitao Zhang , Peng Cheng , Bin Gong , Xinyu Zhang , Qinglong Wang , Kui Ren

Fine-tuning attacks are effective in removing the embedded watermarks in deep learning models. However, when the source data is unavailable, it is challenging to just erase the watermark without jeopardizing the model performance. In this…

计算机视觉与模式识别 · 计算机科学 2022-04-06 Qi Zhong , Leo Yu Zhang , Shengshan Hu , Longxiang Gao , Jun Zhang , Yong Xiang

Deep hiding, embedding images with others using deep neural networks, has demonstrated impressive efficacy in increasing the message capacity and robustness of secret sharing. In this paper, we challenge the robustness of existing deep…

密码学与安全 · 计算机科学 2023-08-04 Hangcheng Liu , Tao Xiang , Shangwei Guo , Han Li , Tianwei Zhang , Xiaofeng Liao

Securing digital text is becoming increasingly relevant due to the widespread use of large language models. Individuals' fear of losing control over data when it is being used to train such machine learning models or when distinguishing…

密码学与安全 · 计算机科学 2025-12-16 Malte Hellmeier

The increasing scale and sophistication of cyberattacks has led to the adoption of machine learning based classification techniques, at the core of cybersecurity systems. These techniques promise scale and accuracy, which traditional rule…

机器学习 · 计算机科学 2018-03-28 Tegjyot Singh Sethi , Mehmed Kantardzic , Joung Woo Ryu

Deep neural networks (DNN) have achieved remarkable performance in various fields. However, training a DNN model from scratch requires a lot of computing resources and training data. It is difficult for most individual users to obtain such…

多媒体 · 计算机科学 2022-07-05 Haoqi Wang , Mingfu Xue , Shichang Sun , Yushu Zhang , Jian Wang , Weiqiang Liu

Deep neural networks have been widely applied and achieved great success in various fields. As training deep models usually consumes massive data and computational resources, trading the trained deep models is highly demanded and lucrative…

计算机视觉与模式识别 · 计算机科学 2020-08-11 Xuankai Liu , Fengting Li , Bihan Wen , Qi Li

In practical application, the widespread deployment of diffusion models often necessitates substantial investment in training. As diffusion models find increasingly diverse applications, concerns about potential misuse highlight the…

计算机视觉与模式识别 · 计算机科学 2024-10-31 Jijia Yang , Sen Peng , Xiaohua Jia

Image watermarks have been considered a promising technique to help detect AI-generated content, which can be used to protect copyright or prevent fake image abuse. In this work, we present a black-box method for removing invisible image…

图像与视频处理 · 电气工程与系统科学 2025-07-03 Hengyue Liang , Taihui Li , Ju Sun

Amidst rising concerns about the internet being proliferated with content generated from language models (LMs), watermarking is seen as a principled way to certify whether text was generated from a model. Many recent watermarking techniques…

密码学与安全 · 计算机科学 2024-11-11 Saksham Rastogi , Danish Pruthi

This paper introduces a novel data-free model extraction attack that significantly advances the current state-of-the-art in terms of efficiency, accuracy, and effectiveness. Traditional black-box methods rely on using the victim's model as…

密码学与安全 · 计算机科学 2024-10-22 Maor Biton Dor , Yisroel Mirsky

In recent years, there has been significant advancement in the field of model watermarking techniques. However, the protection of image-processing neural networks remains a challenge, with only a limited number of methods being developed.…

密码学与安全 · 计算机科学 2023-02-20 Huajie Chen , Tianqing Zhu , Chi Liu , Shui Yu , Wanlei Zhou

To ensure the responsible distribution and use of open-source deep neural networks (DNNs), DNN watermarking has become a crucial technique to trace and verify unauthorized model replication or misuse. In practice, black-box watermarks…

密码学与安全 · 计算机科学 2026-02-04 Huming Qiu , Mi Zhang , Junjie Sun , Peiyi Chen , Xiaohan Zhang , Min Yang

Recent advances in the capabilities of large language models such as GPT-4 have spurred increasing concern about our ability to detect AI-generated text. Prior works have suggested methods of embedding watermarks in model outputs, by…

密码学与安全 · 计算机科学 2023-06-16 Miranda Christ , Sam Gunn , Or Zamir

Watermarking approaches are widely used to identify if images being circulated are authentic or AI-generated. Determining the robustness of image watermarking methods in the ``no-box'' setting, where the attacker is assumed to have no…

密码学与安全 · 计算机科学 2024-12-04 Qilong Wu , Varun Chandrasekaran

Recent fine-tuning techniques for diffusion models enable them to reproduce specific image sets, such as particular faces or artistic styles, but also introduce copyright and security risks. Dataset watermarking has been proposed to ensure…

计算机视觉与模式识别 · 计算机科学 2026-05-29 Xincheng Wang , Hanchi Sun , Wenjun Sun , Kejun Xue , Wangqiu Zhou , Jianbo Zhang , Wei Sun , Dandan Zhu , Xiongkuo Min , Jun Jia , Zhijun Fang

Invisible watermarking for autoregressive (AR) image generation has recently gained attention as a means of protecting image ownership and tracing AI-generated content. However, existing approaches suffer from three key limitations: (1)…

计算机视觉与模式识别 · 计算机科学 2026-04-15 Yigit Yilmaz , Elena Petrova , Mehmet Kaya , Lucia Rossi , Amir Rahman

Watermarking has recently emerged as an effective strategy for detecting the outputs of large language models (LLMs). Most existing schemes require white-box access to the model's next-token probability distribution, which is typically not…

密码学与安全 · 计算机科学 2026-02-24 Dara Bahri , John Wieting

Watermarking is a commonly used strategy to protect creators' rights to digital images, videos and audio. Recently, watermarking methods have been extended to deep learning models -- in principle, the watermark should be preserved when an…