{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,21]],"date-time":"2026-05-21T10:05:43Z","timestamp":1779357943247,"version":"3.51.4"},"reference-count":357,"publisher":"Springer Science and Business Media LLC","issue":"4","license":[{"start":{"date-parts":[[2026,3,9]],"date-time":"2026-03-09T00:00:00Z","timestamp":1773014400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"},{"start":{"date-parts":[[2026,3,9]],"date-time":"2026-03-09T00:00:00Z","timestamp":1773014400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Int J Comput Vis"],"published-print":{"date-parts":[[2026,4]]},"abstract":"<jats:title>Abstract<\/jats:title>\n                  <jats:p>Adversarial attacks in computer vision exploit the vulnerabilities of machine learning models by introducing subtle perturbations to input data, often leading to incorrect predictions or classifications. These attacks have evolved in sophistication with the advent of deep learning, presenting significant challenges in critical applications, which can be harmful for society. However, there is also a rich line of research from a transformative perspective that leverages adversarial techniques for social good. Specifically, we examine the rise of proactive schemes, methods that encrypt input data using additional signals termed templates, to enhance the performance of deep learning models. By embedding these imperceptible templates into digital media, proactive schemes are applied across various applications, from simple image enhancements to complicated deep learning frameworks to aid performance, as compared to the passive schemes, which don\u2019t change the input data distribution for their framework. The survey delves into the methodologies behind these proactive schemes, the data perturbation and template learning processes, and their application to modern computer vision and natural language processing applications. Additionally, it discusses the challenges, potential vulnerabilities, and future directions for proactive schemes, ultimately highlighting their potential to foster the responsible and secure advancement of deep learning technologies.<\/jats:p>","DOI":"10.1007\/s11263-025-02631-z","type":"journal-article","created":{"date-parts":[[2026,3,9]],"date-time":"2026-03-09T17:44:38Z","timestamp":1773078278000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":1,"title":["Proactive Schemes: A Survey of Adversarial Attacks for Social Good"],"prefix":"10.1007","volume":"134","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-8863-673X","authenticated-orcid":false,"given":"Vishal","family":"Asnani","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Xi","family":"Yin","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Xiaoming","family":"Liu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2026,3,9]]},"reference":[{"issue":"24","key":"2631_CR1","doi-asserted-by":"publisher","first-page":"5480","DOI":"10.3390\/s19245480","volume":"19","author":"SM Abbas","year":"2019","unstructured":"Abbas, S. M., Aslam, S., Berns, K., & Muhammad, A. (2019). Analysis and improvements in AprilTag based state estimation. Sensors, 19(24), 5480.","journal-title":"Sensors"},{"key":"2631_CR2","unstructured":"Adi, Y., Baum, C., Cisse, M., Pinkas, B., & Keshet, J. (2018). Turning your weakness into a strength: Watermarking deep neural networks by backdooring. In 27th USENIX security symposium (USENIX Security 18) (pp. 1615\u20131631)."},{"key":"2631_CR3","doi-asserted-by":"crossref","unstructured":"Agrawal, R., & Srikant, R. (2000). Privacy-preserving data mining. In Proceedings of the 2000 ACM SIGMOD international conference on management of data (pp. 439\u2013450).","DOI":"10.1145\/342009.335438"},{"key":"2631_CR4","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2019.113157","volume":"146","author":"M Ahmadi","year":"2020","unstructured":"Ahmadi, M., Norouzi, A., Karimi, N., Samavi, S., & Emami, A. (2020). Redmark: Framework for residual diffusion watermarking based on deep networks. Expert Systems with Applications, 146, Article 113157.","journal-title":"Expert Systems with Applications"},{"issue":"11","key":"2631_CR5","doi-asserted-by":"publisher","first-page":"2159","DOI":"10.1016\/j.sigpro.2009.04.031","volume":"89","author":"Q Ai","year":"2009","unstructured":"Ai, Q., Liu, Q., Zhou, Z., Yang, L., & Xie, S. Q. (2009). A new digital watermarking scheme for 3D triangular mesh models. Signal Processing, 89(11), 2159\u20132170.","journal-title":"Signal Processing"},{"key":"2631_CR6","doi-asserted-by":"publisher","first-page":"155161","DOI":"10.1109\/ACCESS.2021.3127960","volume":"9","author":"N Akhtar","year":"2021","unstructured":"Akhtar, N., Mian, A., Kardan, N., & Shah, M. (2021). Advances in adversarial attacks and defenses in computer vision: A survey. IEEE Access, 9, 155161\u2013155196.","journal-title":"IEEE Access"},{"key":"2631_CR7","doi-asserted-by":"publisher","DOI":"10.5281\/zenodo.1583091","author":"AM Akinsiku","year":"2025","unstructured":"Akinsiku, A. M. (2025). A comprehensive survey of federated learning approaches for privacy-preserving machine learning. Tech-Sphere Journal for Pure and Applied Sciences. https:\/\/doi.org\/10.5281\/zenodo.1583091","journal-title":"Tech-Sphere Journal for Pure and Applied Sciences"},{"key":"2631_CR8","doi-asserted-by":"crossref","unstructured":"Al-Khafaji, H., & Abhayaratne, C. (2019). Graph spectral domain blind watermarking. ICASSP 2019\u20132019 IEEE international conference on acoustics, speech and signal processing (ICASSP) (pp. 2492\u20132496). IEEE.","DOI":"10.1109\/ICASSP.2019.8683753"},{"key":"2631_CR9","doi-asserted-by":"crossref","unstructured":"Alface, PR., Macq, B., & Cayre, F. (2007). Blind and robust watermarking of 3D models: How to withstand the cropping attack? In 2007 IEEE international conference on image processing (5, V-465). IEEE.","DOI":"10.1109\/ICIP.2007.4379866"},{"issue":"5","key":"2631_CR10","doi-asserted-by":"publisher","first-page":"503","DOI":"10.1002\/cav.1487","volume":"23","author":"H \u00c1lvarez","year":"2012","unstructured":"\u00c1lvarez, H., Leizea, I., & Borro, D. (2012). A new marker design for a robust marker tracking system against occlusions. Computer Animation and Virtual Worlds, 23(5), 503\u2013518.","journal-title":"Computer Animation and Virtual Worlds"},{"key":"2631_CR11","doi-asserted-by":"crossref","unstructured":"Asnani, V., Yin, X., Hassner, T., Liu, S., & Liu, X. (2022). Proactive image manipulation detection. In Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition (pp. 15386\u201315395).","DOI":"10.1109\/CVPR52688.2022.01495"},{"key":"2631_CR12","doi-asserted-by":"publisher","first-page":"77993","DOI":"10.52202\/075280-3407","volume":"36","author":"V Asnani","year":"2023","unstructured":"Asnani, V., Kumar, A., You, S., & Liu, X. (2023). Probed: Proactive object detection wrapper. Advances in Neural Information Processing Systems, 36, 77993\u201378005.","journal-title":"Advances in Neural Information Processing Systems"},{"key":"2631_CR13","doi-asserted-by":"crossref","unstructured":"Asnani, V., Yin, X., Hassner, T., & Liu, X. (2023b). MaLP: Manipulation localization using a proactive scheme. In Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition (pp. 12343\u201312352).","DOI":"10.1109\/CVPR52729.2023.01188"},{"issue":"12","key":"2631_CR14","doi-asserted-by":"publisher","first-page":"15477","DOI":"10.1109\/TPAMI.2023.3301451","volume":"45","author":"V Asnani","year":"2023","unstructured":"Asnani, V., Yin, X., Hassner, T., & Liu, X. (2023). Reverse engineering of generative models: Inferring model hyperparameters from generated images. IEEE Transactions on Pattern Analysis and Machine Intelligence, 45(12), 15477\u201315493.","journal-title":"IEEE Transactions on Pattern Analysis and Machine Intelligence"},{"key":"2631_CR15","doi-asserted-by":"crossref","unstructured":"Asnani, V., Collomosse, J., Bui, T., Liu, X., & Agarwal, S. (2024). ProMark: Proactive diffusion watermarking for causal attribution. In Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition (pp. 10802\u201310811).","DOI":"10.1109\/CVPR52733.2024.01027"},{"key":"2631_CR16","doi-asserted-by":"crossref","unstructured":"Asnani, V., Collomosse, J., Liu, X., & Agarwal, S. (2025). CustomMark: Customization of diffusion models for proactive attribution. In Proceedings of the IEEE\/CVF international conference on computer vision (pp. 1512\u20131522).","DOI":"10.1109\/ICCVW69036.2025.00162"},{"key":"2631_CR17","doi-asserted-by":"crossref","unstructured":"Atli Tekgul, BG., & Asokan, N. (2022). On the effectiveness of dataset watermarking. In Proceedings of the 2022 ACM on international workshop on security and privacy analytics (pp. 93\u201399).","DOI":"10.1145\/3510548.3519376"},{"issue":"9","key":"2631_CR18","doi-asserted-by":"publisher","first-page":"310","DOI":"10.3390\/fi15090310","volume":"15","author":"R Aziz","year":"2023","unstructured":"Aziz, R., Banerjee, S., Bouzefrane, S., & Le Vinh, T. (2023). Exploring homomorphic encryption and differential privacy techniques towards secure federated learning paradigm. Future Internet, 15(9), 310.","journal-title":"Future Internet"},{"key":"2631_CR19","unstructured":"Bahng, H., Jahanian, A., Sankaranarayanan, S., & Isola, P. (2022). Exploring visual prompts for adapting large-scale models. arXiv preprint arXiv:2203.17274."},{"key":"2631_CR20","doi-asserted-by":"crossref","unstructured":"Balachandran, V., Keong, N. W., & Emmanuel, S. (2014). Function level control flow obfuscation for software security. 2014 eighth international conference on complex, intelligent and software intensive systems (pp. 133\u2013140). IEEE.","DOI":"10.1109\/CISIS.2014.20"},{"key":"2631_CR21","doi-asserted-by":"publisher","first-page":"25005","DOI":"10.52202\/068431-1813","volume":"35","author":"A Bar","year":"2022","unstructured":"Bar, A., Gandelsman, Y., Darrell, T., Globerson, A., & Efros, A. (2022). Visual prompting via image inpainting. Advances in Neural Information Processing Systems, 35, 25005\u201325017.","journal-title":"Advances in Neural Information Processing Systems"},{"issue":"01","key":"2631_CR22","doi-asserted-by":"publisher","first-page":"46","DOI":"10.1109\/38.736468","volume":"19","author":"O Benedens","year":"1999","unstructured":"Benedens, O. (1999). Geometry-based watermarking of 3D models. IEEE Computer Graphics and Applications, 19(01), 46\u201355.","journal-title":"IEEE Computer Graphics and Applications"},{"key":"2631_CR23","doi-asserted-by":"crossref","unstructured":"Blum, A., Dwork, C., McSherry, F., & Nissim, K. (2005). Practical privacy: the SuLQ framework. In Proceedings of the twenty-fourth ACM SIGMOD-SIGACT-SIGART symposium on Principles of database systems (pp. 128\u2013138).","DOI":"10.1145\/1065167.1065184"},{"issue":"3","key":"2631_CR24","doi-asserted-by":"publisher","first-page":"687","DOI":"10.1109\/TIP.2005.863116","volume":"15","author":"AG Bors","year":"2006","unstructured":"Bors, A. G. (2006). Watermarking mesh-based representations of 3-D objects using local moments. IEEE Transactions on Image processing, 15(3), 687\u2013701.","journal-title":"IEEE Transactions on Image processing"},{"key":"2631_CR25","doi-asserted-by":"crossref","unstructured":"Brazil, G., & Liu, X. (2019). M3D-RPN: Monocular 3D region proposal network for object detection. In Proceedings of the IEEE\/CVF international conference on computer vision (pp. 9287\u20139296).","DOI":"10.1109\/ICCV.2019.00938"},{"key":"2631_CR26","doi-asserted-by":"crossref","unstructured":"Cai, M., Liu, H., Mustikovela, S. K., Meyer, G. P., Chai, Y., Park, D., & Lee, Y. J. (2024). ViP-LLaVA: Making large multimodal models understand arbitrary visual prompts. In Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition (pp. 12914\u201312923).","DOI":"10.1109\/CVPR52733.2024.01227"},{"key":"2631_CR27","doi-asserted-by":"publisher","first-page":"52","DOI":"10.1016\/j.displa.2017.01.001","volume":"46","author":"F Cao","year":"2017","unstructured":"Cao, F., An, B., Wang, J., Ye, D., & Wang, H. (2017). Hierarchical recovery for tampered images based on watermark self-embedding. Displays, 46, 52\u201360.","journal-title":"Displays"},{"key":"2631_CR28","doi-asserted-by":"crossref","unstructured":"Cao, X., Li, X., Jadav, D., Wu, Y., Chen, Z., Zeng, C., & Wei, W. (2023). Invisible watermarking for audio generation diffusion models. In 2023 5th IEEE international conference on trust, privacy and security in intelligent systems and applications (TPS-ISA) (pp. 193\u2013202). IEEE.","DOI":"10.1109\/TPS-ISA58951.2023.00033"},{"key":"2631_CR29","doi-asserted-by":"crossref","unstructured":"Carlini, N., & Wagner, D. (2017). Towards evaluating the robustness of neural networks. In 2017 IEEE symposium on security and privacy (SP) (pp. 39\u201357). IEEE.","DOI":"10.1109\/SP.2017.49"},{"issue":"5","key":"2631_CR30","doi-asserted-by":"publisher","first-page":"1055","DOI":"10.1109\/72.788646","volume":"10","author":"O Chapelle","year":"1999","unstructured":"Chapelle, O., Haffner, P., & Vapnik, V. N. (1999). Support vector machines for histogram-based image classification. IEEE Transactions on Neural Networks, 10(5), 1055\u20131064.","journal-title":"IEEE Transactions on Neural Networks"},{"key":"2631_CR31","doi-asserted-by":"crossref","unstructured":"Chen, A., Lorenz, P., Yao, Y., Chen, P. Y., & Liu, S. (2023). Visual prompting for adversarial robustness. In ICASSP 2023\u20132023 IEEE international conference on acoustics, speech and signal processing (ICASSP) (pp. 1\u20135). IEEE.","DOI":"10.1109\/ICASSP49357.2023.10097245"},{"key":"2631_CR32","doi-asserted-by":"crossref","unstructured":"Chen, A., Yao, Y., Chen, P. Y., Zhang, Y., & Liu, S. (2023b). Understanding and improving visual prompting: A label-mapping perspective. In Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition (pp. 19133\u201319143).","DOI":"10.1109\/CVPR52729.2023.01834"},{"key":"2631_CR33","doi-asserted-by":"crossref","unstructured":"Chen, H., Rouhani, B. D., Fu, C., Zhao, J., & Koushanfar, F. (2019a). DeepMarks: A secure fingerprinting framework for digital rights management of deep learning models. In Proceedings of the 2019 on international conference on multimedia retrieval (pp. 105\u2013113).","DOI":"10.1145\/3323873.3325042"},{"key":"2631_CR34","unstructured":"Chen, H., Rouhani, B. D., & Koushanfar, F. (2019b). BlackMarks: Blackbox multibit watermarking for deep neural networks. arXiv preprint arXiv:1904.00344."},{"key":"2631_CR35","unstructured":"Chen, L., Liu, J., Ke, Y., Sun, W., Dong, W., & Pan, X. (2023c). MarkNerf: Watermarking for neural radiance field. arXiv preprint arXiv:2309.11747."},{"key":"2631_CR36","doi-asserted-by":"crossref","unstructured":"Chen, L., Liu, J., Sun, W., Dong, W., & Di, F. (2024a). NeRF in NeRF: An implicit representation watermark algorithm for NeRF. Unpublished.","DOI":"10.21203\/rs.3.rs-4294183\/v1"},{"key":"2631_CR37","doi-asserted-by":"crossref","unstructured":"Chen, P., Liu, Y., Gu, X., Liu, E., Shang, Z., Ji, X., & Liu, W. (2025a). PlugMark: A plug-in zero-watermarking framework for diffusion models. In Proceedings of the IEEE\/CVF international conference on computer vision (pp. 17335\u201317345).","DOI":"10.1109\/ICCV51701.2025.01610"},{"key":"2631_CR38","doi-asserted-by":"crossref","unstructured":"Chen, Y., Pan, Y., Yang, H., Yao, T., & Mei, T. (2024b). VP3D: Unleashing 2D visual prompt for text-to-3D generation. In Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition (pp. 4896\u20134905).","DOI":"10.1109\/CVPR52733.2024.00468"},{"key":"2631_CR39","doi-asserted-by":"crossref","unstructured":"Chen, Y., Vice, J., Akhtar, N., Haldar, N., & Mian, A. (2025b). Dynamic watermarks in images generated by diffusion models. In Proceedings of the Computer Vision and Pattern Recognition Conference (pp. 5271\u20135277).","DOI":"10.1109\/CVPRW67362.2025.00523"},{"key":"2631_CR40","doi-asserted-by":"publisher","DOI":"10.1016\/j.physleta.2022.128008","volume":"432","author":"Z Chen","year":"2022","unstructured":"Chen, Z., Duan, F., Chapeau-Blondeau, F., & Abbott, D. (2022). Training threshold neural networks by extreme learning machine and adaptive stochastic resonance. Physics Letters A, 432, Article 128008.","journal-title":"Physics Letters A"},{"key":"2631_CR41","unstructured":"Cherepanova, V., Goldblum, M., Foley, H., Duan, S., Dickerson, J., Taylor, G., & Goldstein, T. (2021). Lowkey: Leveraging adversarial attacks to protect social media users from facial recognition. arXiv preprint arXiv:2101.07922."},{"issue":"1","key":"2631_CR42","doi-asserted-by":"publisher","first-page":"142","DOI":"10.1109\/TSP.2006.882111","volume":"55","author":"JW Cho","year":"2007","unstructured":"Cho, J. W., Prost, R., & Jung, H. Y. (2007). An oblivious watermarking for 3-D polygonal meshes using distribution of vertex norms. IEEE Transactions on Signal Processing, 55(1), 142\u2013155.","journal-title":"IEEE Transactions on Signal Processing"},{"issue":"11","key":"2631_CR43","doi-asserted-by":"publisher","first-page":"1154","DOI":"10.1016\/j.cad.2006.06.009","volume":"38","author":"CM Chou","year":"2006","unstructured":"Chou, C. M., & Tseng, D. C. (2006). A public fragile watermarking scheme for 3D model authentication. Computer-Aided Design, 38(11), 1154\u20131165.","journal-title":"Computer-Aided Design"},{"issue":"2","key":"2631_CR44","doi-asserted-by":"publisher","first-page":"72","DOI":"10.1109\/MCG.2009.20","volume":"29","author":"CM Chou","year":"2009","unstructured":"Chou, C. M., & Tseng, D. C. (2009). Affine-transformation-invariant public fragile watermarking for 3D model authentication. IEEE Computer Graphics and Applications, 29(2), 72\u201379.","journal-title":"IEEE Computer Graphics and Applications"},{"key":"2631_CR45","unstructured":"Cohen, J., Rosenfeld, E., & Kolter, Z. (2019). Certified adversarial robustness via randomized smoothing. In International conference on machine learning (pp. 1310\u20131320). PMLR."},{"key":"2631_CR46","doi-asserted-by":"publisher","first-page":"61113","DOI":"10.1109\/ACCESS.2024.3395118","volume":"12","author":"JC Costa","year":"2024","unstructured":"Costa, J. C., Roxo, T., Proen\u00e7a, H., & Inacio, P. R. M. (2024). How deep learning sees the world: A survey on adversarial attacks & defenses. IEEE Access, 12, 61113\u201361136.","journal-title":"IEEE Access"},{"key":"2631_CR47","doi-asserted-by":"crossref","unstructured":"Cotting, D., Weyrich, T., Pauly, M., & Gross, M. (2004). Robust watermarking of point-sampled geometry. In Proceedings shape modeling applications (pp. 233\u2013242). IEEE.","DOI":"10.1109\/SMI.2004.1314510"},{"key":"2631_CR48","doi-asserted-by":"publisher","first-page":"144","DOI":"10.1109\/TIFS.2019.2916364","volume":"15","author":"D Cozzolino","year":"2019","unstructured":"Cozzolino, D., & Verdoliva, L. (2019). Noiseprint: A CNN-based camera model fingerprint. IEEE Transactions on Information Forensics and Security, 15, 144\u2013159.","journal-title":"IEEE Transactions on Information Forensics and Security"},{"key":"2631_CR49","unstructured":"Cui, Y., Ren, J., Xu, H., He, P., Liu, H., Sun, L., Xing, Y., & Tang, J. (2023). DiffusionShield: A watermark for copyright protection against generative diffusion models. arXiv preprint arXiv:2306.04642."},{"issue":"2","key":"2631_CR50","doi-asserted-by":"publisher","first-page":"76","DOI":"10.1145\/3715073.3715080","volume":"26","author":"Y Cui","year":"2025","unstructured":"Cui, Y., Ren, J., Lin, Y., Xu, H., He, P., Xing, Y., Lyu, L., Fan, W., Liu, H., & Tang, J. (2025). Ft-shield: A watermark against unauthorized fine-tuning in text-to-image diffusion models. ACM SIGKDD Explorations Newsletter, 26(2), 76\u201388.","journal-title":"ACM SIGKDD Explorations Newsletter"},{"issue":"10","key":"2631_CR51","first-page":"1197","volume":"29","author":"S Dadkhah","year":"2014","unstructured":"Dadkhah, S., Abd Manaf, A., Hori, Y., Hassanien, A. E., & Sadeghi, S. (2014). An effective SVD-based image tampering detection and self-recovery using active watermarking. Signal Processing: Image Communication, 29(10), 1197\u20131210.","journal-title":"Signal Processing: Image Communication"},{"key":"2631_CR52","doi-asserted-by":"crossref","unstructured":"Darvish Rouhani, B., Chen, H., & Koushanfar, F. (2019). Deepsigns: An end-to-end watermarking framework for ownership protection of deep neural networks. In Proceedings of the twenty-fourth international conference on architectural support for programming languages and operating systems (pp. 485\u2013497).","DOI":"10.1145\/3297858.3304051"},{"issue":"8035","key":"2631_CR53","doi-asserted-by":"publisher","first-page":"818","DOI":"10.1038\/s41586-024-08025-4","volume":"634","author":"S Dathathri","year":"2024","unstructured":"Dathathri, S., See, A., Ghaisas, S., Huang, P. S., McAdam, R., Welbl, J., Bachani, V., Kaskasoli, A., Stanforth, R., Matejovicova, T., et al. (2024). Scalable watermarking for identifying large language model outputs. Nature, 634(8035), 818\u2013823.","journal-title":"Nature"},{"key":"2631_CR54","doi-asserted-by":"crossref","unstructured":"Devlin, J., Chang, M. W., Lee, K., & Toutanova, K. (2019). Bert: Pretraining of deep bidirectional transformers for language understanding. In Proceedings of the 2019 conference of the North American chapter of the association for computational linguistics: human language technologies, volume 1 (long and short papers) (pp. 4171\u20134186).","DOI":"10.18653\/v1\/N19-1423"},{"key":"2631_CR55","unstructured":"Dhillon, G. S., Azizzadenesheli, K., Lipton, Z. C., Bernstein, J., Kossaifi, J., Khanna, A., & Anandkumar, A. (2018). Stochastic activation pruning for robust adversarial defense. arXiv preprint arXiv:1803.01442."},{"key":"2631_CR56","doi-asserted-by":"crossref","unstructured":"Dhivya, P., Karthikeyan, A., Pradeep, S., & Umamaheswari, H. (2025). Natural language processing in generative adversarial network. Generative Artificial Intelligence: Concepts and Applications (pp. 53\u201379)","DOI":"10.1002\/9781394209835.ch4"},{"issue":"12","key":"2631_CR57","doi-asserted-by":"publisher","first-page":"4661","DOI":"10.1109\/TCSVT.2021.3099106","volume":"31","author":"D Ding","year":"2021","unstructured":"Ding, D., Qiu, C., Liu, F., & Pan, Z. (2021). Point cloud upsampling via perturbation learning. IEEE Transactions on Circuits and Systems for Video Technology, 31(12), 4661\u20134672.","journal-title":"IEEE Transactions on Circuits and Systems for Video Technology"},{"key":"2631_CR58","doi-asserted-by":"crossref","unstructured":"Dong, G., Zhao, J., Hui, T., Guo, D., Wang, W., Feng, B., Qiu, Y., Gongque, Z., He, K., Wang, Z., et al. (2023). Revisit input perturbation problems for LLMs: A unified robustness evaluation framework for noisy slot filling task. In CCF International conference on natural language processing and chinese computing (pp. 682\u2013694). Springer.","DOI":"10.1007\/978-3-031-44693-1_53"},{"key":"2631_CR59","doi-asserted-by":"crossref","unstructured":"Dong, Y., Liao, F., Pang, T., Su, H., Zhu, J., Hu, X., & Li, J. (2018). Boosting adversarial attacks with momentum. In Proceedings of the IEEE conference on computer vision and pattern recognition (pp. 9185\u20139193).","DOI":"10.1109\/CVPR.2018.00957"},{"key":"2631_CR60","doi-asserted-by":"crossref","unstructured":"Dong, Y., Su, H., Wu, B., Li, Z., Liu, W., Zhang, T., & Zhu, J. (2019). Efficient decision-based black-box adversarial attacks on face recognition. In Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition (pp. 7714\u20137722).","DOI":"10.1109\/CVPR.2019.00790"},{"key":"2631_CR61","unstructured":"Ducoffe, M., & Precioso, F. (2018). Adversarial active learning for deep networks: A margin based approach. arXiv preprint arXiv:1802.09841."},{"key":"2631_CR62","doi-asserted-by":"crossref","unstructured":"Dwork, C. (2006). Differential privacy. In International colloquium on automata, languages, and programming (pp. 1\u201312). Springer.","DOI":"10.1007\/11787006_1"},{"key":"2631_CR63","unstructured":"Fan, L., Ng, K. W., & Chan, C. S. (2019). Rethinking deep neural network ownership verification: Embedding passports to defeat ambiguity attacks. In Advances in neural information processing systems, vol. 32."},{"key":"2631_CR64","doi-asserted-by":"crossref","unstructured":"Feng, X. (2015). A new watermarking algorithm for point model using angle quantization index modulation. In 2015 4th national conference on electrical, electronics and computer engineering (pp. 963\u2013968). Atlantis Press.","DOI":"10.2991\/nceece-15.2016.173"},{"issue":"3","key":"2631_CR65","doi-asserted-by":"publisher","first-page":"497","DOI":"10.1007\/s11042-012-1039-7","volume":"68","author":"X Feng","year":"2014","unstructured":"Feng, X., Zhang, W., & Liu, Y. (2014). Double watermarks of 3D mesh model based on feature segmentation and redundancy information. Multimedia Tools and Applications, 68(3), 497\u2013515.","journal-title":"Multimedia Tools and Applications"},{"key":"2631_CR66","doi-asserted-by":"crossref","unstructured":"Fernandez, P., Couairon, G., J\u00e9gou, H., Douze, M., & Furon, T. (2023). The stable signature: Rooting watermarks in latent diffusion models. In Proceedings of the IEEE\/CVF international conference on computer vision (pp. 22466\u201322477).","DOI":"10.1109\/ICCV51070.2023.02053"},{"key":"2631_CR67","doi-asserted-by":"crossref","unstructured":"Fiala, M. (2005). Artag, a fiducial marker system using digital techniques. In 2005 IEEE computer society conference on computer vision and pattern recognition (CVPR\u201905) (vol. 2, pp. 590\u2013596). IEEE.","DOI":"10.1109\/CVPR.2005.74"},{"key":"2631_CR68","doi-asserted-by":"crossref","unstructured":"Fong, R. C., & Vedaldi, A. (2017). Interpretable explanations of black boxes by meaningful perturbation. In Proceedings of the IEEE international conference on computer vision (pp. 3429\u20133437).","DOI":"10.1109\/ICCV.2017.371"},{"key":"2631_CR69","doi-asserted-by":"crossref","unstructured":"Furon, T., & Desoubeaux, M. (2014). Tardos codes for real. In 2014 IEEE international workshop on information forensics and security (WIFS) (pp. 24\u201329). IEEE.","DOI":"10.1109\/WIFS.2014.7084298"},{"issue":"1","key":"2631_CR70","doi-asserted-by":"publisher","first-page":"223","DOI":"10.1103\/RevModPhys.70.223","volume":"70","author":"L Gammaitoni","year":"1998","unstructured":"Gammaitoni, L., H\u00e4nggi, P., Jung, P., & Marchesoni, F. (1998). Stochastic resonance. Reviews of Modern Physics, 70(1), 223.","journal-title":"Reviews of Modern Physics"},{"key":"2631_CR71","unstructured":"Gao, Y., Shi, X., Zhu, Y., Wang, H., Tang, Z., Zhou, X., Li, M., & Metaxas, D. N. (2022). Visual prompt tuning for test-time domain adaptation. arXiv preprint arXiv:2210.04831."},{"issue":"6","key":"2631_CR72","doi-asserted-by":"publisher","first-page":"2280","DOI":"10.1016\/j.patcog.2014.01.005","volume":"47","author":"S Garrido-Jurado","year":"2014","unstructured":"Garrido-Jurado, S., Mu\u00f1oz-Salinas, R., Madrid-Cuevas, F. J., & Mar\u00edn- Jim\u00e9nez, M. J. (2014). Automatic generation and detection of highly reliable fiducial markers under occlusion. Pattern Recognition, 47(6), 2280\u20132292.","journal-title":"Pattern Recognition"},{"key":"2631_CR73","doi-asserted-by":"crossref","unstructured":"Girshick, R., Donahue, J., Darrell, T., & Malik, J. (2014). Rich feature hierarchies for accurate object detection and semantic segmentation. In Proceedings of the IEEE conference on computer vision and pattern recognition (pp. 580\u2013587).","DOI":"10.1109\/CVPR.2014.81"},{"key":"2631_CR74","unstructured":"Goodfellow, I. J., Shlens, J., & Szegedy, C. (2014). Explaining and harnessing adversarial examples. arXiv preprint arXiv:1412.6572."},{"key":"2631_CR75","doi-asserted-by":"crossref","unstructured":"Guo, J., & Potkonjak, M. (2018). Watermarking deep neural networks for embedded systems. In 2018 IEEE\/ACM international conference on computer-aided design (ICCAD) (pp. 1\u20138). IEEE.","DOI":"10.1145\/3240765.3240862"},{"key":"2631_CR76","unstructured":"Guo, Z., & Yu, S. (2023). AuthentiGPT: Detecting machine-generated text via black-box language models denoising. arXiv preprint arXiv:2311.07700."},{"key":"2631_CR77","doi-asserted-by":"publisher","first-page":"49","DOI":"10.1016\/j.jvcir.2017.09.017","volume":"50","author":"BB Haghighi","year":"2018","unstructured":"Haghighi, B. B., Taherinia, A. H., & Harati, A. (2018). TRLH: Fragile and blind dual watermarking for image tamper detection and selfrecovery based on lifting wavelet transform and halftoning technique. Journal of Visual Communication and Image Representation, 50, 49\u201364.","journal-title":"Journal of Visual Communication and Image Representation"},{"key":"2631_CR78","doi-asserted-by":"crossref","unstructured":"Hamidi, M., El Haziti, M., Cherifi, H., & Aboutajdine, D. (2017). A robust blind 3-D mesh watermarking based on wavelet transform for copyright protection. In 2017 international conference on advanced technologies for signal and image processing (ATSIP) (pp. 1\u20136). IEEE.","DOI":"10.1109\/ATSIP.2017.8075525"},{"issue":"2","key":"2631_CR79","doi-asserted-by":"publisher","first-page":"67","DOI":"10.3390\/info10020067","volume":"10","author":"M Hamidi","year":"2019","unstructured":"Hamidi, M., Chetouani, A., El Haziti, M., El Hassouni, M., & Cherifi, H. (2019). Blind robust 3D mesh watermarking based on mesh saliency and wavelet transform for copyright protection. Information, 10(2), 67.","journal-title":"Information"},{"key":"2631_CR80","doi-asserted-by":"crossref","unstructured":"Han, C., Wang, Q., Cui, Y., Cao, Z., Wang, W., Qi, S., & Liu, D. (2023). E$$^{\\hat{\\phantom{a},}}$$2vpt: An effective and efficient approach for visual prompt tuning. arXiv preprint arXiv:2307.13770.","DOI":"10.1109\/ICCV51070.2023.01604"},{"issue":"3","key":"2631_CR81","doi-asserted-by":"publisher","first-page":"1431","DOI":"10.1007\/s12652-020-02664-x","volume":"13","author":"G Han","year":"2022","unstructured":"Han, G., Zhang, T., Zhang, Y., Xu, G., Sun, J., & Cao, J. (2022). Verifiable and privacy preserving federated learning without fully trusted centers. Journal of Ambient Intelligence and Humanized Computing, 13(3), 1431\u20131441.","journal-title":"Journal of Ambient Intelligence and Humanized Computing"},{"issue":"13","key":"2631_CR82","doi-asserted-by":"publisher","DOI":"10.1002\/cpe.8084","volume":"36","author":"Q Han","year":"2024","unstructured":"Han, Q., Lu, S., Wang, W., Qu, H., Li, J., & Gao, Y. (2024). Privacy preserving and secure robust federated learning: A survey. Concurrency and Computation: Practice and Experience, 36(13), Article e8084.","journal-title":"Concurrency and Computation: Practice and Experience"},{"key":"2631_CR83","first-page":"610","volume":"6","author":"RM Haralick","year":"2007","unstructured":"Haralick, R. M., Shanmugam, K., & Dinstein, I. H. (2007). Textural features for image classification. IEEE Transactions on Systems, Man, and Cybernetics, 6, 610\u2013621.","journal-title":"IEEE Transactions on Systems, Man, and Cybernetics"},{"key":"2631_CR84","unstructured":"He, H., Liu, Y., Wang, Z., Mao, Y., & Bu, Y. (2024). Theoretically grounded framework for LLM watermarking: A distributionadaptive approach. arXiv preprint arXiv:2410.02890."},{"key":"2631_CR85","doi-asserted-by":"crossref","unstructured":"He, K., Zhang, X., Ren, S., & Sun, J. (2016). Deep residual learning for image recognition. In Proceedings of the IEEE conference on computer vision and pattern recognition (pp. 770\u2013778).","DOI":"10.1109\/CVPR.2016.90"},{"key":"2631_CR86","doi-asserted-by":"crossref","unstructured":"He, R., Dai, Z., He, S., & Tang, K. (2023). Perturbation-based twostage multi-domain active learning. In Proceedings of the 32nd ACM international conference on information and knowledge management (pp. 3933\u20133937).","DOI":"10.1145\/3583780.3615222"},{"key":"2631_CR87","doi-asserted-by":"crossref","unstructured":"He, X., Xu, Q., Lyu, L., Wu, F., & Wang, C. (2022a). Protecting intellectual property of language generation APIs with lexical watermark. In Proceedings of the AAAI conference on artificial intelligence (pp. 10758\u201310766).","DOI":"10.1609\/aaai.v36i10.21321"},{"key":"2631_CR88","doi-asserted-by":"publisher","first-page":"5431","DOI":"10.52202\/068431-0392","volume":"35","author":"X He","year":"2022","unstructured":"He, X., Xu, Q., Zeng, Y., Lyu, L., Wu, F., Li, J., & Jia, R. (2022). Cater: Intellectual property protection on text generation APIs via conditional watermarks. Advances in Neural Information Processing Systems, 35, 5431\u20135445.","journal-title":"Advances in Neural Information Processing Systems"},{"issue":"6","key":"2631_CR89","doi-asserted-by":"publisher","first-page":"881","DOI":"10.1007\/s00778-017-0486-1","volume":"26","author":"M Herschel","year":"2017","unstructured":"Herschel, M., Diestelk\u00e4mper, R., & Ben Lahmar, H. (2017). A survey on provenance: What for? what form? what from? The VLDB Journal, 26(6), 881\u2013906.","journal-title":"The VLDB Journal"},{"key":"2631_CR90","doi-asserted-by":"publisher","first-page":"2395","DOI":"10.1109\/TMM.2023.3295578","volume":"26","author":"G Hou","year":"2023","unstructured":"Hou, G., Ou, B., Long, M., & Peng, F. (2023). Separable reversible data hiding for encrypted 3d mesh models based on octree subdivision and multi-MSB prediction. IEEE Transactions on Multimedia, 26, 2395\u20132407.","journal-title":"IEEE Transactions on Multimedia"},{"issue":"9","key":"2631_CR91","doi-asserted-by":"publisher","first-page":"1737","DOI":"10.1016\/j.optcom.2009.12.073","volume":"283","author":"CS Hsu","year":"2010","unstructured":"Hsu, C. S., & Tu, S. F. (2010). Probability-based tampering detection scheme for digital images. Optics Communications, 283(9), 1737\u20131743.","journal-title":"Optics Communications"},{"key":"2631_CR92","doi-asserted-by":"publisher","first-page":"287","DOI":"10.1016\/j.measurement.2016.03.053","volume":"88","author":"CS Hsu","year":"2016","unstructured":"Hsu, C. S., & Tu, S. F. (2016). Image tamper detection and recovery using adaptive embedding rules. Measurement, 88, 287\u2013296.","journal-title":"Measurement"},{"key":"2631_CR93","unstructured":"Hu, R., Zhang, J., Li, Y., Li, J., Guo, Q., Qiu, H., & Zhang, T. (2025). Videoshield: Regulating diffusion-based video generation models via watermarking. arXiv preprint arXiv:2501.14195."},{"key":"2631_CR94","doi-asserted-by":"crossref","unstructured":"Hu, S., Liu, X., Zhang, Y., Li, M., Zhang, L. Y., Jin, H., & Wu, L. (2022). Protecting facial privacy: Generating adversarial identity masks via style-robust makeup transfer. In Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition (pp. 15014\u201315023).","DOI":"10.1109\/CVPR52688.2022.01459"},{"key":"2631_CR95","doi-asserted-by":"crossref","unstructured":"Huang, H., Wang, Y., Chen, Z., Zhang, Y., Li, Y., Tang, Z., Chu, W., Chen, J., Lin, W., & Ma, K. K. (2022). CMUA-Watermark: A cross-model universal adversarial watermark for combating deepfakes. In Proceedings of the AAAI conference on artificial intelligence (pp. 989\u2013997).","DOI":"10.1609\/aaai.v36i1.19982"},{"key":"2631_CR96","unstructured":"Huang, K., Wang, H., & Gao, W. (2024a). FreezAsGuard: Mitigating illegal adaptation of diffusion models via selective tensor freezing. arXiv preprint arXiv:2405.17472."},{"key":"2631_CR97","doi-asserted-by":"crossref","unstructured":"Huang, Q., Li, H., Liao, Y., Hao, Y., & Zhou, P. (2024b). Noise-NeRF: Hide information in neural radiance field using trainable noise. In International conference on artificial neural networks (pp. 320\u2013334). Springer Nature Switzerland Cham.","DOI":"10.1007\/978-3-031-72335-3_22"},{"key":"2631_CR98","unstructured":"Huang, S., Papernot, N., Goodfellow, I., Duan, Y., & Abbeel, P. (2017). Adversarial attacks on neural network policies. arXiv preprint arXiv:1702.02284."},{"key":"2631_CR99","doi-asserted-by":"crossref","unstructured":"Jang, Y., Lee, D. I., Jang, M., Kim, JW., Yang, F., & Kim, S. (2024). WateRF: Robust watermarks in radiance fields for protection of copyrights. In Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition (pp. 12087\u201312097).","DOI":"10.1109\/CVPR52733.2024.01149"},{"key":"2631_CR100","doi-asserted-by":"crossref","unstructured":"Jang, Y., Park, H., Yang, F., Ko, H., Choo, E., & Kim, S. (2025). 3D-GSW: 3D Gaussian splatting for robust watermarking. In Proceedings of the computer vision and pattern recognition conference (pp. 5938\u20135948).","DOI":"10.1109\/CVPR52734.2025.00557"},{"key":"2631_CR101","doi-asserted-by":"crossref","unstructured":"Jia, M., Tang, L., Chen, B. C., Cardie, C., Belongie, S., Hariharan, B., & Lim, S. N. (2022). Visual prompt tuning. In European conference on computer vision (pp. 709\u2013727). Springer Nature Switzerland Cham.","DOI":"10.1007\/978-3-031-19827-4_41"},{"key":"2631_CR102","doi-asserted-by":"crossref","unstructured":"Jiang, Q., Li, F., Zeng, Z., Ren, T., Liu, S., & Zhang, L. (2024). T-Rex2: Towards generic object detection via text-visual prompt synergy. In European conference on computer vision (pp. 38\u201357). Springer Nature Switzerland Cham.","DOI":"10.1007\/978-3-031-73414-4_3"},{"issue":"1","key":"2631_CR103","doi-asserted-by":"publisher","first-page":"55","DOI":"10.1109\/TMM.2017.2723244","volume":"20","author":"R Jiang","year":"2017","unstructured":"Jiang, R., Zhou, H., & ZhangW, Y. N. (2017). Reversible data hiding in encrypted three-dimensional mesh models. IEEE Transactions on Multimedia, 20(1), 55\u201367.","journal-title":"IEEE Transactions on Multimedia"},{"key":"2631_CR104","doi-asserted-by":"crossref","unstructured":"Jiang, Z., Zhang, J., & Gong, N. Z. (2023). Evading watermark based detection of ai-generated content. In Proceedings of the 2023 ACM SIGSAC conference on computer and communications security (pp. 1168\u20131181).","DOI":"10.1145\/3576915.3623189"},{"key":"2631_CR105","doi-asserted-by":"crossref","unstructured":"Ju, C., Han, T., Zheng, K., Zhang, Y., & Xie, W. (2022). Prompting visuallanguage models for efficient video understanding. In European conference on computer vision (pp. 105\u2013124). Springer Nature Switzerland Cham.","DOI":"10.1007\/978-3-031-19833-5_7"},{"key":"2631_CR106","unstructured":"Kanai, S., Date, H., Kishinami, T., et al. (1998). Digital watermarking for 3D polygons using multiresolution wavelet decomposition. In Proc. Sixth IFIP WG (pp. 296\u2013307)."},{"issue":"1","key":"2631_CR107","doi-asserted-by":"publisher","first-page":"95","DOI":"10.1007\/s43681-023-00412-3","volume":"4","author":"K Kapusta","year":"2024","unstructured":"Kapusta, K., Mattioli, L., Addad, B., & Lansari, M. (2024). Protecting ownership rights of ml models using watermarking in the light of adversarial attacks. AI and Ethics, 4(1), 95\u2013103.","journal-title":"AI and Ethics"},{"key":"2631_CR108","doi-asserted-by":"publisher","first-page":"102266","DOI":"10.1109\/ACCESS.2022.3208131","volume":"10","author":"SY Khamaiseh","year":"2022","unstructured":"Khamaiseh, S. Y., Bagagem, D., Al-Alaj, A., Mancino, M., & Alomari, H. W. (2022). Adversarial deep learning: A survey on adversarial attacks and defense mechanisms on image classification. IEEE Access, 10, 102266\u2013102291.","journal-title":"IEEE Access"},{"key":"2631_CR109","unstructured":"Kherraz, H. (2025). On-device watermarking: A socio-technical imperative for authenticity in the age of generative ai. arXiv preprint arXiv:2504.13205."},{"key":"2631_CR110","doi-asserted-by":"crossref","unstructured":"Kiatpapan, S., & Kondo, T. (2015). An image tamper detection and recovery method based on self-embedding dual watermarking. In 2015 12th international conference on electrical engineering\/electronics, computer, telecommunications and information technology (pp. 1\u20136). IEEE.","DOI":"10.1109\/ECTICon.2015.7206973"},{"key":"2631_CR111","doi-asserted-by":"publisher","first-page":"313","DOI":"10.1007\/11551492_24","volume-title":"International Workshop on Digital Watermarking","author":"MS Kim","year":"2005","unstructured":"Kim, M. S., Valette, S., Jung, H. Y., & Prost, R. (2005). Watermarking of 3d irregular meshes based on wavelet multiresolution analysis. International Workshop on Digital Watermarking (pp. 313\u2013324). Berlin Heidelberg Berlin, Heidelberg: Springer."},{"key":"2631_CR112","doi-asserted-by":"crossref","unstructured":"Kim, S., Kim, H. I., & Ro, Y. M. (2024a). Improving open set recognition via visual prompts distilled from common-sense knowledge. In Proceedings of the AAAI conference on artificial intelligence (pp. 2786\u20132794).","DOI":"10.1609\/aaai.v38i3.28058"},{"key":"2631_CR113","doi-asserted-by":"publisher","DOI":"10.1016\/j.neunet.2024.106390","volume":"177","author":"Y Kim","year":"2024","unstructured":"Kim, Y., Li, Y., Moitra, A., Yin, R., & Panda, P. (2024). Do we really need a large number of visual prompts? Neural Networks, 177, Article 106390.","journal-title":"Neural Networks"},{"key":"2631_CR114","unstructured":"Kirchenbauer, J., Geiping, J., Wen, Y., Katz, J., Miers, I., & Goldstein, T. (2023a). A watermark for large language models. In International conference on machine learning (pp. 17061\u201317084). PMLR."},{"key":"2631_CR115","unstructured":"Kirchenbauer, J., Geiping, J., Wen, Y., Shu, M., Saifullah, K., Kong, K., Fernando, K., Saha, A., Goldblum, M., & Goldstein, T. (2023b). On the reliability of watermarks for large language models. arXiv preprint arXiv:2306.04634."},{"key":"2631_CR116","doi-asserted-by":"publisher","first-page":"92974","DOI":"10.1109\/ACCESS.2021.3093456","volume":"9","author":"S Kitada","year":"2021","unstructured":"Kitada, S., & Iyatomi, H. (2021). Attention meets perturbations: Robust and interpretable attention with adversarial training. IEEE Access, 9, 92974\u201392985.","journal-title":"IEEE Access"},{"key":"2631_CR117","doi-asserted-by":"crossref","unstructured":"Komkov, S., & Petiushko, A. (2021). AdvHat: Real-world adversarial attack on ArcFace face ID system. In 2020 25th international conference on pattern recognition (ICPR) (pp. 819\u2013826). IEEE.","DOI":"10.1109\/ICPR48806.2021.9412236"},{"key":"2631_CR118","doi-asserted-by":"crossref","unstructured":"Kong, T., Yao, A., Chen, Y., & Sun, F. (2016). HyperNet: Towards accurate region proposal generation and joint object detection. In Proceedings of the IEEE conference on computer vision and pattern recognition (pp. 845\u2013853).","DOI":"10.1109\/CVPR.2016.98"},{"key":"2631_CR119","first-page":"27469","volume":"36","author":"K Krishna","year":"2023","unstructured":"Krishna, K., Song, Y., Karpinska, M., Wieting, J., & Iyyer, M. (2023). Paraphrasing evades detectors of ai-generated text, but retrieval is an effective defense. Advances in Neural Information Processing Systems, 36, 27469\u201327500.","journal-title":"Advances in Neural Information Processing Systems"},{"key":"2631_CR120","doi-asserted-by":"crossref","unstructured":"Krogius, M., Haggenmiller, A., & Olson, E. (2019). Flexible layouts for fiducial tags. In 2019 IEEE\/RSJ international conference on intelligent robots and systems (IROS) (pp. 1898\u20131903). IEEE.","DOI":"10.1109\/IROS40897.2019.8967787"},{"key":"2631_CR121","doi-asserted-by":"crossref","unstructured":"Kulthe, Y., Gilbert, A., & Collomosse, J. (2025). MultiNeRF: Multiple watermark embedding for neural radiance fields. arXiv preprint arXiv:2504.02517.","DOI":"10.1109\/ICCVW69036.2025.00163"},{"key":"2631_CR122","doi-asserted-by":"crossref","unstructured":"Kunananthaseelan, N., Zhang, J., & Harandi, M. (2024). LaViP: Language-grounded visual prompting. In Proceedings of the AAAI conference on artificial intelligence (pp. 2840\u20132848).","DOI":"10.1609\/aaai.v38i3.28064"},{"issue":"1","key":"2631_CR123","first-page":"36","volume":"4","author":"CT Kuo","year":"2009","unstructured":"Kuo, C. T., Cheng, S. C., Wu, D. C., Chang, C. C., et al. (2009). A blind robust watermarking scheme for 3D triangular mesh models using 3D edge vertex detection. Asian Journal of Health and Information Sciences, 4(1), 36\u201363.","journal-title":"Asian Journal of Health and Information Sciences"},{"key":"2631_CR124","doi-asserted-by":"crossref","unstructured":"Laarhoven, T. (2019). Nearest neighbor decoding for Tardos fingerprinting codes. In Proceedings of the ACM workshop on information hiding and multimedia security (pp. 182\u2013187).","DOI":"10.1145\/3335203.3335732"},{"issue":"1\u20132","key":"2631_CR125","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1016\/j.jides.2015.10.001","volume":"2","author":"L Laouamer","year":"2015","unstructured":"Laouamer, L., AlShaikh, M., Nana, L., & Pascu, A. C. (2015). Robust watermarking scheme and tamper detection based on threshold versus intensity. Journal of Innovation in Digital Ecosystems, 2(1\u20132), 1\u201312.","journal-title":"Journal of Innovation in Digital Ecosystems"},{"issue":"13","key":"2631_CR126","doi-asserted-by":"publisher","first-page":"9233","DOI":"10.1007\/s00521-019-04434-z","volume":"32","author":"E Le Merrer","year":"2020","unstructured":"Le Merrer, E., Perez, P., & Tr\u00e9dan, G. (2020). Adversarial frontier stitching for remote neural network watermarking. Neural Computing and Applications, 32(13), 9233\u20139244.","journal-title":"Neural Computing and Applications"},{"key":"2631_CR127","doi-asserted-by":"crossref","unstructured":"Lee, S. J., & Cho, N. I. (2025). Semantic watermarking reinvented: Enhancing robustness and generation quality with Fourier integrity. In Proceedings of the IEEE\/CVF international conference on computer vision (pp. 18759\u201318769).","DOI":"10.1109\/ICCV51701.2025.01743"},{"key":"2631_CR128","doi-asserted-by":"crossref","unstructured":"Lee, S. J., & Jung, S. H. (2001). A survey of watermarking techniques applied to multimedia. In ISIE 2001. 2001 IEEE international symposium on industrial electronics proceedings (Cat. No. 01TH8570) (vol. 1, pp. 272\u2013277). IEEE.","DOI":"10.1109\/ISIE.2001.931796"},{"issue":"11","key":"2631_CR129","doi-asserted-by":"publisher","first-page":"3497","DOI":"10.1016\/j.patcog.2008.05.003","volume":"41","author":"TY Lee","year":"2008","unstructured":"Lee, T. Y., & Lin, S. D. (2008). Dual watermark for image tamper detection and recovery. Pattern Recognition, 41(11), 3497\u20133506.","journal-title":"Pattern Recognition"},{"key":"2631_CR130","doi-asserted-by":"crossref","unstructured":"Lee, Y. L., Tsai, Y.H., Chiu, W. C., & Lee, C. Y. (2023). Multimodal prompting with missing modalities for visual recognition. In Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition (pp. 14943\u201314952).","DOI":"10.1109\/CVPR52729.2023.01435"},{"key":"2631_CR131","unstructured":"Lei, L., Gai, K., Yu, J., & Zhu, L. (2024). DiffuseTrace: A transparent and flexible watermarking scheme for latent diffusion model. arXiv preprint arXiv:2405.02696."},{"issue":"4","key":"2631_CR132","doi-asserted-by":"publisher","first-page":"4521","DOI":"10.1109\/TPAMI.2022.3195956","volume":"45","author":"B Li","year":"2022","unstructured":"Li, B., Fan, L., Gu, H., Li, J., & Yang, Q. (2022). FedIPR: Ownership verification for federated deep neural network models. IEEE Transactions on Pattern Analysis and Machine Intelligence, 45(4), 4521\u20134536.","journal-title":"IEEE Transactions on Pattern Analysis and Machine Intelligence"},{"key":"2631_CR133","doi-asserted-by":"crossref","unstructured":"Li, C., Feng, B. Y., Fan, Z., Pan, P., & Wang, Z. (2023a). StegaNeRF: Embedding invisible information within neural radiance fields. In Proceedings of the IEEE\/CVF international conference on computer vision (pp. 441\u2013453).","DOI":"10.1109\/ICCV51070.2023.00047"},{"key":"2631_CR134","doi-asserted-by":"crossref","unstructured":"Li, F., Jiang, Q., Zhang, H., Ren, T., Liu, S., Zou, X., Xu, H., Li, H., Yang, J., Li, C., et al. (2024a). Visual in-context prompting. In Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition (pp. 12861\u201312871).","DOI":"10.1109\/CVPR52733.2024.01222"},{"key":"2631_CR135","unstructured":"Li, G., Wu, W., Sun, Y., Shen, L., Wu, B., & Tao, D. (2023b). Visual prompt based personalized federated learning. arXiv preprint arXiv:2303.08678."},{"key":"2631_CR136","doi-asserted-by":"crossref","unstructured":"Li, K., Wu, Z., Peng, K. C., Ernst, J., & Fu, Y. (2018). Tell me where to look: Guided attention inference network. In Proceedings of the IEEE conference on computer vision and pattern recognition (pp. 9215\u20139223).","DOI":"10.1109\/CVPR.2018.00960"},{"key":"2631_CR137","unstructured":"Li, K., Huang, Z., Hou, X., & Hong, C. (2025). GaussMarker: Robust dual-domain watermark for diffusion models. arXiv preprint arXiv:2506.11444."},{"key":"2631_CR138","doi-asserted-by":"crossref","unstructured":"Li, P., Li, D., Li, W., Gong, S., Fu, Y., & Hospedales, T. M. (2021a). A simple feature augmentation for domain generalization. In Proceedings of the IEEE\/CVF international conference on computer vision (pp. 8886\u20138895).","DOI":"10.1109\/ICCV48922.2021.00876"},{"key":"2631_CR139","unstructured":"Li, S., Chen, K., Tang, K., Huang, W., Zhang, J., Zhang, W., & Yu, N. (2023c). FunctionMarker: watermarking language datasets via knowledge injection. CoRR."},{"key":"2631_CR140","doi-asserted-by":"crossref","unstructured":"Li, T., & Lin, L. (2019). AnonymousNet: Natural face de-identification with measurable privacy. In Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition workshops, pp. 0\u20130.","DOI":"10.1109\/CVPRW.2019.00013"},{"key":"2631_CR141","doi-asserted-by":"crossref","unstructured":"Li, X., Yang, P., Gu, Y., Zhan, X., Wang, T., Xu, M., & Xu, C. (2024b). Deep active learning with noise stability. In Proceedings of the AAAI conference on artificial intelligence (pp. 13655\u201313663).","DOI":"10.1609\/aaai.v38i12.29270"},{"key":"2631_CR142","unstructured":"Li, Y., Zhang, Z., Bai, J., Wu, B., Jiang, Y., & Xia, S. T. (2020). Open-sourced dataset protection via backdoor watermarking. arXiv preprint arXiv:2010.05821."},{"key":"2631_CR143","doi-asserted-by":"crossref","unstructured":"Li, Y., Liu, P., Jiang, Y., & Xia, S. T. (2021). Visual privacy protection via mapping distortion. ICASSP 2021-2021 IEEE international conference on acoustics, speech and signal processing (ICASSP) (pp. 3740\u20133744). IEEE.","DOI":"10.1109\/ICASSP39728.2021.9414149"},{"key":"2631_CR144","unstructured":"Li, Y., Zhu, M., Yang, X., Jiang, Y., & Xia, S. T. (2022b). Black-box ownership verification for dataset protection via backdoor watermarking. arXiv preprint arXiv:2209.06015."},{"key":"2631_CR145","doi-asserted-by":"crossref","unstructured":"Li, Y., Tsai, Y. L., Yu, C. M., Chen, P. Y., & Ren, X. (2023d). Exploring the benefits of visual prompting in differential privacy. In Proceedings of the IEEE\/CVF international conference on computer vision (pp. 5158\u20135167).","DOI":"10.1109\/ICCV51070.2023.00476"},{"key":"2631_CR146","doi-asserted-by":"publisher","first-page":"2318","DOI":"10.1109\/TIFS.2023.3265535","volume":"18","author":"Y Li","year":"2023","unstructured":"Li, Y., Zhu, M., Yang, X., Jiang, Y., Wei, T., & Xia, S. T. (2023). Blackbox dataset ownership verification via backdoor watermarking. IEEE Transactions on Information Forensics and Security, 18, 2318\u20132332.","journal-title":"IEEE Transactions on Information Forensics and Security"},{"issue":"8","key":"2631_CR147","doi-asserted-by":"publisher","first-page":"1283","DOI":"10.3390\/electronics11081283","volume":"11","author":"H Liang","year":"2022","unstructured":"Liang, H., He, E., Zhao, Y., Jia, Z., & Li, H. (2022). Adversarial attack and defense: A survey. Electronics, 11(8), 1283.","journal-title":"Electronics"},{"issue":"3","key":"2631_CR148","doi-asserted-by":"publisher","first-page":"851","DOI":"10.1007\/s00530-022-00887-w","volume":"28","author":"Q Liang","year":"2022","unstructured":"Liang, Q., Li, Q., Nie, W., & Liu, A. A. (2022). PAGN: Perturbation adaption generation network for point cloud adversarial defense. Multimedia Systems, 28(3), 851\u2013859.","journal-title":"Multimedia Systems"},{"key":"2631_CR149","doi-asserted-by":"crossref","unstructured":"Liang, X., Niu, M., Han, J., Xu, H., Xu, C., & Liang, X. (2023). Visual exemplar driven task-prompting for unified perception in autonomous driving. In Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition (pp. 9611\u20139621).","DOI":"10.1109\/CVPR52729.2023.00927"},{"key":"2631_CR150","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2021.108285","volume":"122","author":"JH Lim","year":"2022","unstructured":"Lim, J. H., Chan, C. S., Ng, K. W., Fan, L., & Yang, Q. (2022). Protect, show, attend and tell: Empowering image captioning models with ownership protection. Pattern Recognition, 122, Article 108285.","journal-title":"Pattern Recognition"},{"issue":"1","key":"2631_CR151","doi-asserted-by":"publisher","first-page":"463","DOI":"10.1007\/s11042-015-3059-6","volume":"76","author":"CC Lin","year":"2017","unstructured":"Lin, C. C., Huang, Y., & Tai, W. L. (2017). A novel hybrid image authentication scheme based on absolute moment block truncation coding. Multimedia Tools and Applications, 76(1), 463\u2013488.","journal-title":"Multimedia Tools and Applications"},{"issue":"2","key":"2631_CR152","first-page":"1","volume":"57","author":"A Liu","year":"2024","unstructured":"Liu, A., Pan, L., Lu, Y., Li, J., Hu, X., Zhang, X., Wen, L., King, I., Xiong, H., & Yu, P. (2024). A survey of text watermarking in the era of large language models. ACM Computing Surveys, 57(2), 1\u201336.","journal-title":"ACM Computing Surveys"},{"issue":"5A","key":"2631_CR153","first-page":"3299","volume":"8","author":"CC Liu","year":"2012","unstructured":"Liu, C. C., Chen, J. Y., Chung, P. C., Yu, S. S., & Tsui, T. S. (2012). A three dimensional model watermarking algorithm in frequency domain based on the normalization of host models. International Journal of Innovative Computing, Information and Control, 8(5A), 3299\u20133314.","journal-title":"International Journal of Innovative Computing, Information and Control"},{"key":"2631_CR154","first-page":"6978","volume":"139","author":"H Liu","year":"2021","unstructured":"Liu, H., Weng, Z., & Zhu, Y. (2021). Watermarking deep neural networks with greedy residuals. ICML, 139, 6978\u20136988.","journal-title":"ICML"},{"issue":"1","key":"2631_CR155","doi-asserted-by":"publisher","first-page":"155014771982604","DOI":"10.1177\/1550147719826042","volume":"15","author":"J Liu","year":"2019","unstructured":"Liu, J., Yang, Y., Ma, D., He, W., & Wang, Y. (2019). A novel watermarking algorithm for three-dimensional point-cloud models based on vertex curvature. International Journal of Distributed Sensor Networks, 15(1), 1550147719826042.","journal-title":"International Journal of Distributed Sensor Networks"},{"issue":"5","key":"2631_CR156","first-page":"1","volume":"25","author":"K Liu","year":"2020","unstructured":"Liu, K., Yang, H., Ma, Y., Tan, B., Yu, B., Young, E. F., Karri, R., & Garg, S. (2020). Adversarial perturbation attacks on ML-based CAD: A case study on CNN-based lithographic hotspot detection. ACM Transactions on Design Automation of Electronic Systems (TODAES), 25(5), 1\u201331.","journal-title":"ACM Transactions on Design Automation of Electronic Systems (TODAES)"},{"key":"2631_CR157","doi-asserted-by":"crossref","unstructured":"Liu, S., & Kong, L. (2018). Local chaotic encryption based on privacy protection on video surveillance. In 2018 8th international conference on social science and education research (SSER 2018) (pp. 390\u2013393). Atlantis Press.","DOI":"10.2991\/sser-18.2018.82"},{"key":"2631_CR158","doi-asserted-by":"crossref","unstructured":"Liu, W., Shen, X., Pun, C. M., & Cun, X. (2023a). Explicit visual prompting for low-level structure segmentations. In Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition (pp. 19434\u201319445).","DOI":"10.1109\/CVPR52729.2023.01862"},{"key":"2631_CR159","doi-asserted-by":"crossref","unstructured":"Liu, X., Shao, S., Yang, Y., Wu, K., Yang, W., & Fang, H. (2021b). Secure federated learning model verification: A client-side backdoor triggered watermarking scheme. In 2021 IEEE international conference on systems, man, and cybernetics (SMC) (pp. 2414\u20132419). IEEE.","DOI":"10.1109\/SMC52423.2021.9658998"},{"key":"2631_CR160","unstructured":"Liu, Y., & Bu, Y. (2024). Adaptive text watermark for large language models. arXiv preprint arXiv:2401.13927."},{"issue":"5","key":"2631_CR161","doi-asserted-by":"publisher","first-page":"1459","DOI":"10.1109\/TIFS.2012.2204251","volume":"7","author":"Y Liu","year":"2012","unstructured":"Liu, Y., Prabhakaran, B., & Guo, X. (2012). Spectral watermarking for parameterized surfaces. IEEE Transactions on Information Forensics and Security, 7(5), 1459\u20131471.","journal-title":"IEEE Transactions on Information Forensics and Security"},{"key":"2631_CR162","unstructured":"Liu, Y., Hu, H., Zhang, X., & Sun, L. (2023b). Watermarking text data on large language models for dataset copyright protection. arXiv preprint arXiv:2305.13257."},{"key":"2631_CR163","doi-asserted-by":"publisher","first-page":"16277","DOI":"10.1109\/TNNLS.2023.3293484","volume":"35","author":"Y Long","year":"2023","unstructured":"Long, Y., Han, J., Huang, R., Xu, H., Zhu, Y., Xu, C., & Liang, X. (2023). Fine-grained visual-text prompt-driven self-training for open-vocabulary object detection. IEEE Transactions on Neural Networks and Learning Systems., 35, 16277\u201316287.","journal-title":"IEEE Transactions on Neural Networks and Learning Systems."},{"issue":"10","key":"2631_CR164","doi-asserted-by":"publisher","first-page":"1579","DOI":"10.1109\/83.951542","volume":"10","author":"CS Lu","year":"2001","unstructured":"Lu, C. S., & Liao, H. Y. (2001). Multipurpose watermarking for image authentication and protection. IEEE Transactions on Image Processing, 10(10), 1579\u20131592.","journal-title":"IEEE Transactions on Image Processing"},{"key":"2631_CR165","unstructured":"Lu, S., Zhou, Z., Lu, J., Zhu, Y., & Kong, A. W. K. (2024). Robust watermarking using generative priors against image editing: From benchmarking to advances. arXiv preprint arXiv:2410.18775."},{"key":"2631_CR166","doi-asserted-by":"crossref","unstructured":"Luo, Z., Guo, Q., Cheung, K. C., See, S., & Wan, R. (2023). CopyRNeRF: Protecting the copyright of neural radiance fields. In Proceedings of the IEEE\/CVF international conference on computer vision (pp. 22401\u201322411).","DOI":"10.1109\/ICCV51070.2023.02047"},{"key":"2631_CR167","doi-asserted-by":"crossref","unstructured":"Ma, K., Fu, Y., Cao, C., Hou, S., Huang, Y., & Zheng, D. (2024). Learning visual prompt for gait recognition. In Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition (pp. 593\u2013603).","DOI":"10.1109\/CVPR52733.2024.00063"},{"key":"2631_CR168","unstructured":"Madry, A., Makelov, A., Schmidt, L., Tsipras, D., & Vladu, A. (2017). Towards deep learning models resistant to adversarial attacks. arXiv preprint arXiv:1706.06083."},{"key":"2631_CR169","doi-asserted-by":"publisher","first-page":"18757","DOI":"10.1109\/ACCESS.2022.3151186","volume":"10","author":"A Malik","year":"2022","unstructured":"Malik, A., Kuribayashi, M., Abdullahi, S. M., & Khan, A. N. (2022). Deepfake detection for human face images and videos: A survey. IEEE Access, 10, 18757\u201318775.","journal-title":"IEEE Access"},{"key":"2631_CR170","doi-asserted-by":"crossref","unstructured":"Maniparambil, M., Vorster, C., Molloy, D., Murphy, N., McGuinness, K., & O\u2019Connor, N. E. (2023). Enhancing clip with GPT-4: Harnessing visual descriptions as prompts. In Proceedings of the IEEE\/CVF international conference on computer vision (pp. 262\u2013271).","DOI":"10.1109\/ICCVW60793.2023.00034"},{"issue":"24","key":"2631_CR171","doi-asserted-by":"publisher","first-page":"32287","DOI":"10.1007\/s11042-018-6252-6","volume":"77","author":"N Medimegh","year":"2018","unstructured":"Medimegh, N., Belaid, S., Atri, M., & Werghi, N. (2018). 3D mesh watermarking using salient points. Multimedia Tools and Applications, 77(24), 32287\u201332309.","journal-title":"Multimedia Tools and Applications"},{"key":"2631_CR172","doi-asserted-by":"crossref","unstructured":"Meng, D., & Chen, H. (2017). MagNet: A two-pronged defense against adversarial examples. In Proceedings of the 2017 ACM SIGSAC conference on computer and communications security (pp. 135\u2013147).","DOI":"10.1145\/3133956.3134057"},{"key":"2631_CR173","unstructured":"Meng, R., Zhou, Z., Cui, Q., Lam, K. Y., & Kot, A. (2022). Traceable and authenticable image tagging for fake news detection. arXiv preprint arXiv:2211.10923."},{"key":"2631_CR174","doi-asserted-by":"publisher","first-page":"3399","DOI":"10.1109\/TMM.2025.3535300","volume":"27","author":"Z Meng","year":"2025","unstructured":"Meng, Z., Peng, B., & Dong, J. (2025). Latent watermark: Inject and detect watermarks in latent diffusion space. IEEE Transactions on Multimedia., 27, 3399\u20133410.","journal-title":"IEEE Transactions on Multimedia."},{"key":"2631_CR175","unstructured":"Mikolov, T., Chen, K., Corrado, G., & Dean, J. (2013). Efficient estimation of word representations in vector space. arXiv preprint arXiv:1301.3781."},{"key":"2631_CR176","doi-asserted-by":"crossref","unstructured":"Mirjalili, V., & Ross, A. (2017). Soft biometric privacy: Retaining biometric utility of face images while perturbing gender. In 2017 IEEE International joint conference on biometrics (IJCB) (pp. 564\u2013573). IEEE.","DOI":"10.1109\/BTAS.2017.8272743"},{"key":"2631_CR177","doi-asserted-by":"crossref","unstructured":"Mirjalili, V., Raschka, S., Namboodiri, A., & Ross, A. (2018). Semiadversarial networks: Convolutional autoencoders for imparting privacy to face images. In 2018 International Conference on Biometrics (ICB) (pp. 82\u201389). IEEE.","DOI":"10.1109\/ICB2018.2018.00023"},{"key":"2631_CR178","doi-asserted-by":"crossref","unstructured":"Mirza, M. J., Karlinsky, L., Lin, W., Doveh, S., Micorek, J., Kozinski, M., Kuehne, H., & Possegger, H. (2024). Meta-prompting for automating zero-shot visual recognition with LLMs. In European Conference on Computer Vision (pp. 370\u2013387). Cham: Springer Nature Switzerland","DOI":"10.1007\/978-3-031-72627-9_21"},{"issue":"22","key":"2631_CR179","doi-asserted-by":"publisher","first-page":"33499","DOI":"10.1007\/s11042-023-14870-8","volume":"82","author":"S Mohiuddin","year":"2023","unstructured":"Mohiuddin, S., Malakar, S., Kumar, M., & Sarkar, R. (2023). A comprehensive survey on state-of-the-art video forgery detection techniques. Multimedia Tools and Applications, 82(22), 33499\u201333539.","journal-title":"Multimedia Tools and Applications"},{"issue":"4","key":"2631_CR180","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1007\/3DRes.04(2013)4","volume":"4","author":"AM Molaei","year":"2013","unstructured":"Molaei, A. M., Ebrahimnezhad, H., & Sedaaghi, M. H. (2013). A blind fragile watermarking method for 3D models based on geometric properties of triangles. 3D Research, 4(4), 1\u20139.","journal-title":"3D Research"},{"issue":"2","key":"2631_CR181","doi-asserted-by":"publisher","first-page":"11","DOI":"10.1007\/s13319-016-0088-5","volume":"7","author":"AM Molaei","year":"2016","unstructured":"Molaei, A. M., Ebrahimnezhad, H., & Sedaaghi, M. H. (2016). Robust and blind 3D mesh watermarking in spatial domain based on faces categorization and sorting. 3D Research, 7(2), 11.","journal-title":"3D Research"},{"key":"2631_CR182","doi-asserted-by":"crossref","unstructured":"Monden, A., Iida, H., Matsumoto, Ki., Inoue, K., & Torii, K. (2000). A practical method for watermarking java programs. In Proceedings 24th annual international computer software and applications conference. COMPSAC2000 (pp. 191\u2013197). IEEE.","DOI":"10.1109\/CMPSAC.2000.884716"},{"issue":"6","key":"2631_CR183","doi-asserted-by":"publisher","first-page":"714","DOI":"10.1007\/s10278-014-9700-5","volume":"27","author":"SM Mousavi","year":"2014","unstructured":"Mousavi, S. M., Naghsh, A., & Abu-Bakar, S. (2014). Watermarking techniques used in medical images: A survey. Journal of Digital Imaging, 27(6), 714\u2013729.","journal-title":"Journal of Digital Imaging"},{"key":"2631_CR184","doi-asserted-by":"publisher","first-page":"144497","DOI":"10.1109\/ACCESS.2023.3344653","volume":"11","author":"R Mubarak","year":"2023","unstructured":"Mubarak, R., Alsboui, T., Alshaikh, O., Inuwa-Dutse, I., Khan, S., & Parkinson, S. (2023). A survey on the detection and impacts of deepfakes in visual, audio, and textual formats. IEEE Access, 11, 144497\u2013144529.","journal-title":"IEEE Access"},{"key":"2631_CR185","doi-asserted-by":"crossref","unstructured":"M\u00fcller, A., Lukovnikov, D., Thietke, J., Fischer, A., & Quiring, E. (2025). Black-box forgery attacks on semantic watermarks for diffusion models. In Proceedings of the computer vision and pattern recognition conference (pp. 20937\u201320946).","DOI":"10.1109\/CVPR52734.2025.01950"},{"key":"2631_CR186","doi-asserted-by":"crossref","unstructured":"Mun, S. M., Jang, H. U., Kim, D. G., Choi, S., & Lee, H. K. (2015). A robust 3D mesh watermarking scheme against cropping. In 2015 international conference on 3D imaging (IC3D) (pp. 1\u20136). IEEE.","DOI":"10.1109\/IC3D.2015.7391820"},{"key":"2631_CR187","doi-asserted-by":"crossref","unstructured":"Munyer, T., & Zhong, X. (2023). Deeptextmark: Deep learning based text watermarking for detection of large language model generated text. arXiv e-prints pp. arXiv-2305.","DOI":"10.1109\/ACCESS.2024.3376693"},{"issue":"1","key":"2631_CR188","doi-asserted-by":"publisher","first-page":"3","DOI":"10.1007\/s13735-018-0147-1","volume":"7","author":"Y Nagai","year":"2018","unstructured":"Nagai, Y., Uchida, Y., Sakazawa, S., & Satoh, S. (2018). Digital watermarking for deep neural networks. International Journal of Multimedia Information Retrieval, 7(1), 3\u201316.","journal-title":"International Journal of Multimedia Information Retrieval"},{"key":"2631_CR189","doi-asserted-by":"crossref","unstructured":"Nakazawa, S., Kasahara, S., & Takahashi, S. (2010). A visually enhanced approach to watermarking 3D models. In 2010 Sixth International Conference on Intelligent Information Hiding and Multimedia Signal Processing (pp. 110\u2013113). IEEE.","DOI":"10.1109\/IIHMSP.2010.35"},{"key":"2631_CR190","unstructured":"Nasiriany, S., Xia, F., Yu, W., Xiao, T., Liang, J., Dasgupta, I., Xie, A., Driess, D., Wahid, A., Xu, Z., et al. (2024). Pivot: Iterative visual prompting elicits actionable knowledge for vlms. arXiv preprint arXiv:2402.07872."},{"key":"2631_CR191","unstructured":"Neekhara, P., Hussain, S., Zhang, X., Huang, K., McAuley, J., & Koushanfar, F. (2022). FaceSigns: Semi-fragile neural watermarks for media authentication and countering deepfakes. arXiv preprint arXiv:2204.01960."},{"issue":"2","key":"2631_CR192","doi-asserted-by":"publisher","first-page":"232","DOI":"10.1109\/TKDE.2005.32","volume":"17","author":"EM Newton","year":"2005","unstructured":"Newton, E. M., Sweeney, L., & Malin, B. (2005). Preserving privacy by de-identifying face images. IEEE transactions on Knowledge and Data Engineering, 17(2), 232\u2013243.","journal-title":"IEEE transactions on Knowledge and Data Engineering"},{"key":"2631_CR193","first-page":"9598","volume":"36","author":"T Nguyen","year":"2023","unstructured":"Nguyen, T., Li, Y., Ojha, U., & Lee, Y. J. (2023). Visual instruction inversion: Image editing via image prompting. Advances in Neural Information Processing Systems, 36, 9598\u20139613.","journal-title":"Advances in Neural Information Processing Systems"},{"key":"2631_CR194","doi-asserted-by":"crossref","unstructured":"Nishi, K., Ding, Y., Rich, A., & Hollerer, T. (2021). Augmentation strategies for learning with noisy labels. In Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition (pp. 8022\u20138031).","DOI":"10.1109\/CVPR46437.2021.00793"},{"key":"2631_CR195","doi-asserted-by":"crossref","unstructured":"Oh, C., Hwang, H., Lee, Hy., Lim, Y., Jung, G., Jung, J., Choi, H., & Song, K. (2023). BlackVIP: Black-box visual prompting for robust transfer learning. In Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition (pp. 24224\u201324235).","DOI":"10.1109\/CVPR52729.2023.02320"},{"key":"2631_CR196","doi-asserted-by":"crossref","unstructured":"Ohbuchi, R., Mukaiyama, A., & Takahashi, S. (2002). A frequencydomain approach to watermarking 3D shapes. In Computer graphics forum (pp. 373\u2013382). Wiley Online Library.","DOI":"10.1111\/1467-8659.00597"},{"issue":"15","key":"2631_CR197","doi-asserted-by":"publisher","first-page":"1344","DOI":"10.1016\/S0140-3664(98)00202-3","volume":"21","author":"R Ohbuchi","year":"1998","unstructured":"Ohbuchi, R., Masuda, H., & Aono, M. (1998). Data embedding algorithms for geometrical and non-geometrical targets in threedimensional polygonal models. Computer Communications, 21(15), 1344\u20131354.","journal-title":"Computer Communications"},{"issue":"4","key":"2631_CR198","doi-asserted-by":"publisher","first-page":"551","DOI":"10.1109\/49.668977","volume":"16","author":"R Ohbuchi","year":"1998","unstructured":"Ohbuchi, R., Masuda, H., & Aono, M. (1998). Watermarking threedimensional polygonal models through geometric and topological modifications. IEEE Journal on Selected Areas in Communications, 16(4), 551\u2013560.","journal-title":"IEEE Journal on Selected Areas in Communications"},{"key":"2631_CR199","first-page":"9","volume":"2001","author":"R Ohbuchi","year":"2001","unstructured":"Ohbuchi, R., Takahashi, S., Miyazawa, T., & Mukaiyama, A. (2001). Watermarking 3d polygonal meshes in the mesh spectral domain. Graphics interface, 2001, 9\u201317.","journal-title":"Graphics interface"},{"key":"2631_CR200","doi-asserted-by":"crossref","unstructured":"Ohbuchi, R., Mukaiyama, A., & Takahashi, S. (2004). Watermarking a 3D shape model defined as a point set. In 2004 international conference on cyberworlds (pp. 392\u2013399). IEEE.","DOI":"10.1109\/CW.2004.70"},{"key":"2631_CR201","doi-asserted-by":"crossref","unstructured":"Olson, E. (2011). Apriltag: A robust and flexible visual fiducial system. In 2011 IEEE international conference on robotics and automation (pp. 3400\u20133407), IEEE.","DOI":"10.1109\/ICRA.2011.5979561"},{"key":"2631_CR202","doi-asserted-by":"crossref","unstructured":"Ong, D. S., Chan, C. S., Ng, K. W., Fan, L., & Yang, Q. (2021). Protecting intellectual property of generative adversarial networks from ambiguity attacks. In Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition (pp. 3630\u20133639).","DOI":"10.1109\/CVPR46437.2021.00363"},{"key":"2631_CR203","doi-asserted-by":"crossref","unstructured":"Othman, A., & Ross, A. (2014). Privacy of facial soft biometrics: Suppressing gender but retaining identity. In European conference on computer vision (pp. 682\u2013696). Cham: Springer International Publishing","DOI":"10.1007\/978-3-319-16181-5_52"},{"key":"2631_CR204","doi-asserted-by":"publisher","first-page":"152","DOI":"10.1016\/j.procs.2018.10.315","volume":"140","author":"M Ozdag","year":"2018","unstructured":"Ozdag, M. (2018). Adversarial attacks and defenses against deep neural networks: A survey. Procedia Computer Science, 140, 152\u2013161.","journal-title":"Procedia Computer Science"},{"issue":"14s","key":"2631_CR205","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3593294","volume":"55","author":"B Pan","year":"2023","unstructured":"Pan, B., Stakhanova, N., & Ray, S. (2023). Data provenance in security and privacy. ACM Computing Surveys, 55(14s), 1\u201335.","journal-title":"ACM Computing Surveys"},{"key":"2631_CR206","first-page":"138756","volume":"37","author":"Q Pang","year":"2024","unstructured":"Pang, Q., Hu, S., Zheng, W., & Smith, V. (2024). No free lunch in LLM watermarking: Trade-offs in watermarking design choices. Advances in Neural Information Processing Systems, 37, 138756\u2013138788.","journal-title":"Advances in Neural Information Processing Systems"},{"key":"2631_CR207","doi-asserted-by":"crossref","unstructured":"Park, S., & Byun, H. (2024). Fair-VPT: Fair visual prompt tuning for image classification. In Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition (pp. 12268\u201312278).","DOI":"10.1109\/CVPR52733.2024.01166"},{"key":"2631_CR208","doi-asserted-by":"publisher","DOI":"10.1186\/1687-417X-2009-236139","volume":"1","author":"J Paruchuri","year":"2009","unstructured":"Paruchuri, J., Cheung, S. C., & Hail, M. (2009). Video data hiding for managing privacy information in surveillance systems. EURASIP Journal on Information Security, 1, Article 236139.","journal-title":"EURASIP Journal on Information Security"},{"key":"2631_CR209","doi-asserted-by":"crossref","unstructured":"Pei, W., Xia, T., Chen, F., Li, J., Tian, J., & Lu, G. (2024). Sa2vp: Spatially aligned-and-adapted visual prompt. In Proceedings of the AAAI conference on artificial intelligence (pp. 4450\u20134458).","DOI":"10.1609\/aaai.v38i5.28243"},{"issue":"12","key":"2631_CR210","doi-asserted-by":"publisher","first-page":"8394","DOI":"10.1109\/TCSVT.2022.3192542","volume":"32","author":"F Peng","year":"2022","unstructured":"Peng, F., Liao, T., & Long, M. (2022). A semi-fragile reversible watermarking for authenticating 3d models in dual domains based on variable direction double modulation. IEEE Transactions on Circuits and Systems for Video Technology, 32(12), 8394\u20138408.","journal-title":"IEEE Transactions on Circuits and Systems for Video Technology"},{"key":"2631_CR211","first-page":"290","volume-title":"International Conference on Web Information Systems Engineering","author":"S Peng","year":"2025","unstructured":"Peng, S., Chen, Y., Wang, C., & Jia, X. (2025). Intellectual property protection of diffusion models via the watermark diffusion process. International Conference on Web Information Systems Engineering (pp. 290\u2013305). Singapore: Springer."},{"key":"2631_CR212","doi-asserted-by":"crossref","unstructured":"Peng, Z., Li, S., Chen, G., Zhang, C., Zhu, H., & Xue, M. (2022b). Fingerprinting deep neural networks globally via universal adversarial perturbations. In Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition (pp. 13430\u201313439).","DOI":"10.1109\/CVPR52688.2022.01307"},{"key":"2631_CR213","doi-asserted-by":"crossref","unstructured":"Petitcolas, F. A., Anderson, R. J., Kuhn, M. G. (1998). Attacks on copyright marking systems. In International workshop on information hiding (pp. 218\u2013238). Springer.","DOI":"10.1007\/3-540-49380-8_16"},{"issue":"2","key":"2631_CR214","doi-asserted-by":"publisher","first-page":"23","DOI":"10.3390\/electronics7020023","volume":"7","author":"GN Pham","year":"2018","unstructured":"Pham, G. N., Lee, S. H., Kwon, O. H., & Kwon, K. R. (2018). A 3d printing model watermarking algorithm based on 3d slicing and feature points. Electronics, 7(2), 23.","journal-title":"Electronics"},{"issue":"3","key":"2631_CR215","doi-asserted-by":"publisher","first-page":"24","DOI":"10.21015\/vtse.v10i3.1104","volume":"10","author":"P Philip","year":"2022","unstructured":"Philip, P., & Minhas, S. (2022). A brief survey on natural language processing based text generation and evaluation techniques. VFAST Transactions on Software Engineering, 10(3), 24\u201336.","journal-title":"VFAST Transactions on Software Engineering"},{"key":"2631_CR216","doi-asserted-by":"crossref","unstructured":"Potdar, V. M., Han, S., & Chang, E. (2005). A survey of digital image watermarking techniques. In INDIN\u201905. 2005 3rd IEEE international conference on industrial informatics, 2005 (pp. 709\u2013716). IEEE.","DOI":"10.1109\/INDIN.2005.1560462"},{"key":"2631_CR217","doi-asserted-by":"crossref","unstructured":"Praun, E., Hoppe, H., & Finkelstein, A. (1999). Robust mesh watermarking. In Proceedings of the 26th annual conference on Computer graphics and interactive techniques (pp. 49\u201356).","DOI":"10.1145\/311535.311540"},{"key":"2631_CR218","doi-asserted-by":"publisher","first-page":"280","DOI":"10.1016\/j.sigpro.2017.03.033","volume":"138","author":"C Qin","year":"2017","unstructured":"Qin, C., Ji, P., Zhang, X., Dong, J., & Wang, J. (2017). Fragile image watermarking with pixel-wise recovery based on overlapping embedding strategy. Signal processing, 138, 280\u2013293.","journal-title":"Signal processing"},{"key":"2631_CR219","doi-asserted-by":"publisher","DOI":"10.7717\/peerj-cs.2037","volume":"10","author":"SM Qureshi","year":"2024","unstructured":"Qureshi, S. M., Saeed, A., Almotiri, S. H., Ahmad, F., & Al Ghamdi, M. A. (2024). Deepfake forensics: a survey of digital forensic methods for multimodal deepfake identification on social media. PeerJ Computer Science, 10, Article e2037.","journal-title":"PeerJ Computer Science"},{"key":"2631_CR220","doi-asserted-by":"crossref","unstructured":"Rajabi, A., Bobba, R. B., Rosulek, M., Wright, C., & Feng, Wc. (2021). On the (im) practicality of adversarial perturbation for image privacy. Proceedings on Privacy Enhancing Technologies.","DOI":"10.2478\/popets-2021-0006"},{"issue":"9","key":"2631_CR221","doi-asserted-by":"publisher","first-page":"1361","DOI":"10.1016\/j.mri.2010.06.014","volume":"28","author":"VS Rallabandi","year":"2010","unstructured":"Rallabandi, V. S., & Roy, P. K. (2010). Magnetic resonance image enhancement using stochastic resonance in Fourier domain. Magnetic Resonance Imaging, 28(9), 1361\u20131373.","journal-title":"Magnetic Resonance Imaging"},{"key":"2631_CR222","first-page":"613","volume":"2024","author":"J Ren","year":"2024","unstructured":"Ren, J., Xu, H., Liu, Y., Cui, Y., Wang, S., Yin, D., & Tang, J. (2024). A robust semantics-based watermark for large language model against paraphrasing. Findings of the Association for Computational Linguistics: NAACL, 2024, 613\u2013625.","journal-title":"Findings of the Association for Computational Linguistics: NAACL"},{"key":"2631_CR223","unstructured":"Ren, S., He, K., Girshick, R., & Sun, J. (2015). Faster R-CNN: Towards realtime object detection with region proposal networks. In Advances in neural information processing systems (Vol. 28)."},{"issue":"1","key":"2631_CR224","doi-asserted-by":"publisher","DOI":"10.1103\/PhysRevE.110.014107","volume":"110","author":"Y Ren","year":"2024","unstructured":"Ren, Y., Duan, F., Chapeau-Blondeau, F., & Abbott, D. (2024). Selfgating stochastic-resonance-based autoencoder for unsupervised learning. Physical Review E, 110(1), Article 014107.","journal-title":"Physical Review E"},{"key":"2631_CR225","doi-asserted-by":"publisher","first-page":"10","DOI":"10.1186\/s13635-019-0094-2","volume":"1","author":"SG Rizzo","year":"2019","unstructured":"Rizzo, S. G., Bertini, F., & Montesi, D. (2019). Fine-grain watermarking for intellectual property protection. EURASIP Journal on Information Security, 1, 10.","journal-title":"EURASIP Journal on Information Security"},{"key":"2631_CR226","unstructured":"Robey, A., Wong, E., Hassani, H., & Pappas, G. J. (2023). SmoothLLM: Defending large language models against jailbreaking attacks. arXiv preprint arXiv:2310.03684."},{"key":"2631_CR227","doi-asserted-by":"publisher","first-page":"169908","DOI":"10.1109\/ACCESS.2019.2951204","volume":"7","author":"FJ Romero-Ramire","year":"2019","unstructured":"Romero-Ramire, F. J., Munoz-Salinas, R., & Medina-Carnicer, R. (2019). Fractal markers: A new approach for long-range marker pose estimation under occlusion. IEEE Access, 7, 169908\u2013169919.","journal-title":"IEEE Access"},{"key":"2631_CR228","doi-asserted-by":"publisher","first-page":"38","DOI":"10.1016\/j.imavis.2018.05.004","volume":"76","author":"FJ Romero-Ramirez","year":"2018","unstructured":"Romero-Ramirez, F. J., Mu\u00f1oz-Salinas, R., & Medina-Carnicer, R. (2018). Speeded up detection of squared fiducial markers. Image and Vision Computing, 76, 38\u201347.","journal-title":"Image and Vision Computing"},{"key":"2631_CR229","doi-asserted-by":"crossref","unstructured":"Ruiz, N., Bargal, S. A., & Sclaroff, S. (2020). Disrupting DeepFakes: Adversarial attacks against conditional image translation networks and facial manipulation systems. In European conference on computer vision (pp. 236\u2013251). Springer.","DOI":"10.1007\/978-3-030-66823-5_14"},{"key":"2631_CR230","unstructured":"Sablayrolles, A., Douze, M., Schmid, C., & J\u00e9gou, H. (2020). Radioactive data: Tracing through training. In International Conference on Machine Learning (pp. 8326\u20138335). PMLR."},{"key":"2631_CR231","unstructured":"Sadasivan, V. S., Kumar, A., Balasubramanian, S., Wang, W., & Feizi, S. (2023). Can ai-generated text be reliably detected? arXiv preprint arXiv:2303.11156."},{"key":"2631_CR232","first-page":"15270","volume":"34","author":"H Salman","year":"2021","unstructured":"Salman, H., Ilyas, A., Engstrom, L., Vemprala, S., Madry, A., & Kapoor, A. (2021). Unadversarial examples: Designing objects for robust vision. Advances in Neural Information Processing Systems, 34, 15270\u201315284.","journal-title":"Advances in Neural Information Processing Systems"},{"key":"2631_CR233","unstructured":"Sayyad, S., Kulkarni, D., Shikalgar, A., & Mulla, T. A. (2024). An exhaustive survey on privacy preserving machine learning using homomorphic encryption and secure multiparty computation techniques. Journal of Computational Analysis & Applications, 33(5), 636\u2013648."},{"key":"2631_CR234","unstructured":"Segalis, E., & Galili, E. (2020). OGAN: Disrupting deepfakes with an adversarial attack that survives training. arXiv preprint arXiv:2006.12247."},{"issue":"12","key":"2631_CR235","doi-asserted-by":"publisher","DOI":"10.1063\/5.0123886","volume":"32","author":"VV Semenov","year":"2022","unstructured":"Semenov, V. V., & Zakharova, A. (2022). Multiplexing-based control of stochastic resonance. Chaos: An Interdisciplinary Journal of Nonlinear Science, 32(12), Article 121106.","journal-title":"Chaos: An Interdisciplinary Journal of Nonlinear Science"},{"key":"2631_CR236","unstructured":"Shan, S., Wenger, E., Zhang, J., Li, H., Zheng, H., & Zhao, B. Y. (2020). Fawkes: Protecting privacy against unauthorized deep learning models. In 29th USENIX security symposium (USENIX Security 20) (pp. 1589\u20131604)."},{"issue":"3","key":"2631_CR237","doi-asserted-by":"publisher","first-page":"2163","DOI":"10.1007\/s11071-022-07571-8","volume":"109","author":"M Shen","year":"2022","unstructured":"Shen, M., Yang, J., Jiang, W., Sanju\u00e1n, M. A., & Zheng, Y. (2022). Stochastic resonance in image denoising as an alternative to traditional methods and deep learning. Nonlinear Dynamics, 109(3), 2163\u20132183.","journal-title":"Nonlinear Dynamics"},{"key":"2631_CR238","doi-asserted-by":"crossref","unstructured":"Shen, S., Yang, S., Zhang, T., Zhai, B., Gonzalez, J. E., Keutzer, K., & Darrell, T. (2024). Multitask vision-language prompt tuning. In Proceedings of the IEEE\/CVF winter conference on applications of computer vision (pp. 5656\u20135667).","DOI":"10.1109\/WACV57701.2024.00556"},{"key":"2631_CR239","doi-asserted-by":"crossref","unstructured":"Shi, Y., & Sagduyu, Y. E. (2017). Evasion and causative attacks with adversarial deep learning. In MILCOM 2017\u20132017 IEEE military communications conference (MILCOM) (pp. 243\u2013248). IEEE.","DOI":"10.1109\/MILCOM.2017.8170807"},{"key":"2631_CR240","unstructured":"Simmhan, Y. L., Plale, B., Gannon, D., et al. (2005). A survey of data provenance techniques. Computer Science Department, Indiana University, Bloomington IN (Vol. 47405, p. 69)."},{"key":"2631_CR241","unstructured":"Simonyan, K., & Zisserman, A. (2014). Very deep convolutional networks for large-scale image recognition. arXiv preprint arXiv:1409.1556."},{"key":"2631_CR242","doi-asserted-by":"publisher","first-page":"775","DOI":"10.1016\/j.jvcir.2016.04.023","volume":"38","author":"D Singh","year":"2016","unstructured":"Singh, D., & Singh, S. K. (2016). Effective self-embedding watermarking scheme for image tampered detection and localization with recovery capability. Journal of Visual Communication and Image Representation, 38, 775\u2013789.","journal-title":"Journal of Visual Communication and Image Representation"},{"issue":"1","key":"2631_CR243","doi-asserted-by":"publisher","first-page":"953","DOI":"10.1007\/s11042-015-3010-x","volume":"76","author":"D Singh","year":"2017","unstructured":"Singh, D., & Singh, S. K. (2017). DCT based efficient fragile watermarking scheme for image authentication and restoration. Multimedia Tools and Applications, 76(1), 953\u2013977.","journal-title":"Multimedia Tools and Applications"},{"issue":"9","key":"2631_CR244","first-page":"165","volume":"2","author":"P Singh","year":"2013","unstructured":"Singh, P., & Chadha, R. S. (2013). A survey of digital watermarking techniques, applications and attacks. International Journal of Engineering and Innovative Technology (IJEIT), 2(9), 165\u2013175.","journal-title":"International Journal of Engineering and Innovative Technology (IJEIT)"},{"key":"2631_CR245","doi-asserted-by":"crossref","unstructured":"Sohn, K., Chang, H., Lezama, J., Polania, L., Zhang, H., Hao, Y., Essa, I., & Jiang, L. (2023). Visual prompt tuning for generative transfer learning. In Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition (pp. 19840\u201319851).","DOI":"10.1109\/CVPR52729.2023.01900"},{"key":"2631_CR246","unstructured":"Song, Z., Gong, X., Hu, G., & Zhao, C. (2023). Deep perturbation learning: Enhancing the network performance via image perturbations. In International conference on machine learning (pp. 32273\u201332287). PMLR."},{"key":"2631_CR247","doi-asserted-by":"crossref","unstructured":"Sperduti, G., & Moreo, A. (2025). Misspellings in natural language processing: A survey. arXiv preprint arXiv:2501.16836.","DOI":"10.1017\/nlp.2026.10020"},{"key":"2631_CR248","unstructured":"Sun, P., Qi, H., Li, Y., & Lyu, S. (2023). FakeTracer: Catching faceswap deepfakes via implanting traces in training. arXiv preprint arXiv:2307.14593."},{"key":"2631_CR249","unstructured":"Szegedy, C., Zaremba, W., Sutskever, I., Bruna, J., Erhan, D., Goodfellow, I., & Fergus, R. (2013). Intriguing properties of neural networks. arXiv preprint arXiv:1312.6199."},{"key":"2631_CR250","doi-asserted-by":"crossref","unstructured":"Szyller, S., Atli, B. G., Marchal, S., & Asokan, N. (2021). Dawn: Dynamic adversarial watermarking of neural networks. In Proceedings of the 29th ACM international conference on multimedia (pp. 4417\u20134425).","DOI":"10.1145\/3474085.3475591"},{"key":"2631_CR251","doi-asserted-by":"crossref","unstructured":"Tang, L., Ye, D., Lv, Y., Chen, C., & Zhang, Y. (2024a). Once and for all: Universal transferable adversarial perturbation against deep hashing-based facial image retrieval. In Proceedings of the AAAI conference on artificial intelligence (pp. 5136\u20135144).","DOI":"10.1609\/aaai.v38i6.28319"},{"issue":"1","key":"2631_CR252","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3629976","volume":"27","author":"L Tang","year":"2024","unstructured":"Tang, L., Ye, Q., Hu, H., Xue, Q., Xiao, Y., & Li, J. (2024). DeepMark: A scalable and robust framework for deepfake video detection. ACM Transactions on Privacy and Security, 27(1), 1\u201326.","journal-title":"ACM Transactions on Privacy and Security"},{"key":"2631_CR253","doi-asserted-by":"crossref","unstructured":"Tekgul, B. G., Xia, Y., Marchal, S., & Asokan, N. (2021). Waffle: Watermarking in federated learning. In 2021 40th international symposium on reliable distributed systems (SRDS) (pp. 310\u2013320). IEEE.","DOI":"10.1109\/SRDS53918.2021.00038"},{"key":"2631_CR254","doi-asserted-by":"crossref","unstructured":"Teng, H., Quan, Y., Wang, C., Huang, J., & Ji, H. (2025). Fingerprinting denoising diffusion probabilistic models. In Proceedings of the computer vision and pattern recognition conference (pp. 28811\u201328820).","DOI":"10.1109\/CVPR52734.2025.02683"},{"issue":"4","key":"2631_CR255","doi-asserted-by":"publisher","first-page":"3508","DOI":"10.1109\/TDSC.2022.3204291","volume":"20","author":"YY Tsai","year":"2022","unstructured":"Tsai, Y. Y., & Liu, H. L. (2022). Integrating coordinate transformation and random sampling into high-capacity reversible data hiding in encrypted polygonal models. IEEE Transactions on Dependable and Secure Computing, 20(4), 3508\u20133519.","journal-title":"IEEE Transactions on Dependable and Secure Computing"},{"key":"2631_CR256","first-page":"27897","volume":"36","author":"YY Tsai","year":"2023","unstructured":"Tsai, Y. Y., Mao, C., & Yang, J. (2023). Convolutional visual prompt for robust visual perception. Advances in Neural Information Processing Systems, 36, 27897\u201327921.","journal-title":"Advances in Neural Information Processing Systems"},{"key":"2631_CR257","unstructured":"Tsao, H. A., Hsiung, L., Chen, P. Y., Liu, S., & Ho, T. Y. (2023). Autovp: An automated visual prompting framework and benchmark. arXiv preprint arXiv:2310.08381."},{"key":"2631_CR258","doi-asserted-by":"crossref","unstructured":"Uccheddu, F., Corsini, M., & Barni, M. (2004). Wavelet-based blind watermarking of 3D models. In Proceedings of the 2004 workshop on multimedia and security (pp. 143\u2013154).","DOI":"10.1145\/1022431.1022456"},{"key":"2631_CR259","doi-asserted-by":"crossref","unstructured":"Uchida, Y., Nagai, Y., Sakazawa, S., & Satoh, S. (2017). Embedding watermarks into deep neural networks. In Proceedings of the 2017 ACM on international conference on multimedia retrieval (pp. 269\u2013277).","DOI":"10.1145\/3078971.3078974"},{"key":"2631_CR260","doi-asserted-by":"crossref","unstructured":"Van Le, T., Phung, H., Nguyen, T. H., Dao, Q., Tran, N. N., & Tran, A. (2023). Anti-DreamBooth: Protecting users from personalized text-toimage synthesis. In Proceedings of the IEEE\/CVF international conference on computer vision (pp. 2116\u20132127).","DOI":"10.1109\/ICCV51070.2023.00202"},{"key":"2631_CR261","unstructured":"Vaswani, A., Shazeer, N., Parmar, N., Uszkoreit, J., Jones, L., Gomez, A. N., Kaiser, \u0141., & Polosukhin, I. (2017). Attention is all you need. In Advances in neural information processing systems (vol. 30)."},{"key":"2631_CR262","unstructured":"Venugopal, A., Uszkoreit, J., Talbot, D., Och, F. J., & Ganitkevitch, J. (2011). Watermarking the outputs of structured prediction with an application in statistical machine translation. In Proceedings of the 2011 conference on empirical methods in natural language processing (pp. 1363\u20131372)."},{"issue":"5","key":"2631_CR263","doi-asserted-by":"publisher","first-page":"910","DOI":"10.1109\/JSTSP.2020.3002101","volume":"14","author":"L Verdoliva","year":"2020","unstructured":"Verdoliva, L. (2020). Media forensics and deepfakes: An overview. IEEE Journal of Selected Topics in Signal Processing, 14(5), 910\u2013932.","journal-title":"IEEE Journal of Selected Topics in Signal Processing"},{"key":"2631_CR264","unstructured":"Wagner, D., & Schmalstieg, D. (2007). Artoolkitplus for pose tracking on mobile devices. Unpublished."},{"key":"2631_CR265","unstructured":"Wang, D., Yao, W., Jiang, T., Zhou, W., Lin, L., & Chen, X. (2023a). A plug-and-play defensive perturbation for copyright protection of DNN-based applications. arXiv preprint arXiv:2304.10679."},{"issue":"1","key":"2631_CR266","doi-asserted-by":"publisher","first-page":"24","DOI":"10.1186\/s42400-022-00125-w","volume":"5","author":"F Wang","year":"2022","unstructured":"Wang, F., Zhou, H., Fang, H., Zhang, W., & Yu, N. (2022). Deep 3D mesh watermarking with self-adaptive robustness. Cybersecurity, 5(1), 24.","journal-title":"Cybersecurity"},{"key":"2631_CR267","doi-asserted-by":"crossref","unstructured":"Wang, F., Zhou, H., Zhang, W.,& Yu, N. (2022b). Neural watermarking for 3D morphable models. In international conference on artificial intelligence and security (pp. 336\u2013349). Springer International Publishing Cham.","DOI":"10.1007\/978-3-031-06764-8_27"},{"key":"2631_CR268","doi-asserted-by":"crossref","unstructured":"Wang, F., Huang, W., Yang, S., Fan, Q., & Lan, L. (2024a). Learning to learn better visual prompts. In Proceedings of the AAAI conference on artificial intelligence (pp. 5354\u20135363).","DOI":"10.1609\/aaai.v38i6.28343"},{"issue":"6","key":"2631_CR269","doi-asserted-by":"publisher","first-page":"835","DOI":"10.1002\/rob.21780","volume":"35","author":"H Wang","year":"2018","unstructured":"Wang, H., Shi, Z., Lu, G., & Zhong, Y. (2018). Hierarchical fiducial marker design for pose estimation in large-scale scenarios. Journal of Field Robotics, 35(6), 835\u2013849.","journal-title":"Journal of Field Robotics"},{"key":"2631_CR270","doi-asserted-by":"crossref","unstructured":"Wang, H., Fang, H., Wang, S. L., & Chang, E. C. (2025a). ROAR: Reducing inversion error in generative image watermarking. In Proceedings of the IEEE\/CVF international conference on computer vision (pp. 19742\u201319751).","DOI":"10.1109\/ICCV51701.2025.01836"},{"key":"2631_CR271","doi-asserted-by":"crossref","unstructured":"Wang, J., & Olson, E. (2016). AprilTag 2: Efficient and robust fiducial detection. In 2016 IEEE\/RSJ International Conference on Intelligent Robots and Systems (IROS) (pp. 4193\u20134198). IEEE.","DOI":"10.1109\/IROS.2016.7759617"},{"key":"2631_CR272","doi-asserted-by":"publisher","first-page":"1","DOI":"10.2352\/ISSN.2470-1173.2020.4.MWSF-022","volume":"32","author":"J Wang","year":"2020","unstructured":"Wang, J., Wu, H., Zhang, X., & Yao, Y. (2020). Watermarking in deep neural networks via error back-propagation. Electronic Imaging, 32, 1\u20139.","journal-title":"Electronic Imaging"},{"key":"2631_CR273","doi-asserted-by":"crossref","unstructured":"Wang, J., Yin, Z., Hu, P., Liu, A., Tao, R., Qin, H., Liu, X., & Tao, D. (2022c). Defensive patches for robust recognition in the physical world. In Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition (pp. 2456\u20132465).","DOI":"10.1109\/CVPR52688.2022.00249"},{"issue":"4","key":"2631_CR274","doi-asserted-by":"publisher","first-page":"620","DOI":"10.1109\/TIFS.2008.2007229","volume":"3","author":"K Wang","year":"2008","unstructured":"Wang, K., Lavou\u00e9, G., Denis, F., & Baskurt, A. (2008). Hierarchical watermarking of semiregular meshes based on wavelet transform. IEEE Transactions on Information Forensics and Security, 3(4), 620\u2013634.","journal-title":"IEEE Transactions on Information Forensics and Security"},{"issue":"1","key":"2631_CR275","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1016\/j.cag.2010.09.010","volume":"35","author":"K Wang","year":"2011","unstructured":"Wang, K., Lavou\u00e9, G., Denis, F., & Baskurt, A. (2011). Robust and blind mesh watermarking based on volume moments. Computers & Graphics, 35(1), 1\u201319.","journal-title":"Computers & Graphics"},{"key":"2631_CR276","doi-asserted-by":"crossref","unstructured":"Wang, R., Juefei-Xu, F., Luo, M., Liu, Y., & Wang, L. (2021). FakeTagger: Robust safeguards against deepfake dissemination via provenance tracking. In Proceedings of the 29th ACM international conference on multimedia (pp. 3546\u20133555).","DOI":"10.1145\/3474085.3475518"},{"key":"2631_CR277","first-page":"993","volume":"2021","author":"T Wang","year":"2021","unstructured":"Wang, T., & Kerschbaum, F. (2021). RIGA: Covert and robust white-box watermarking of deep neural networks. Proceedings of the web conference, 2021, 993\u20131004.","journal-title":"Proceedings of the web conference"},{"key":"2631_CR278","doi-asserted-by":"publisher","DOI":"10.1109\/TETCI.2025.3547635","author":"T Wang","year":"2025","unstructured":"Wang, T., Zhang, X., Zhou, Y., Chen, Y., Zhao, L., Tan, T., & Tong, T. (2025). PCDAL: A perturbation consistency-driven active learning approach for medical image segmentation and classification. IEEE Transactions on Emerging Topics in Computational Intelligence. https:\/\/doi.org\/10.1109\/TETCI.2025.3547635","journal-title":"IEEE Transactions on Emerging Topics in Computational Intelligence"},{"issue":"5","key":"2631_CR279","doi-asserted-by":"publisher","first-page":"634","DOI":"10.1016\/j.cad.2008.03.001","volume":"40","author":"WB Wang","year":"2008","unstructured":"Wang, W. B., Zheng, G. Q., Yong, J. H., & Gu, H. J. (2008). A numerically stable fragile watermarking scheme for authenticating 3D models. Computer-Aided Design, 40(5), 634\u2013645.","journal-title":"Computer-Aided Design"},{"issue":"12","key":"2631_CR280","doi-asserted-by":"publisher","first-page":"3738","DOI":"10.1109\/TMI.2023.3306105","volume":"42","author":"Y Wang","year":"2023","unstructured":"Wang, Y., Cheng, J., Chen, Y., Shao, S., Zhu, L., Wu, Z., Liu, T., & Zhu, H. (2023). FVP: Fourier visual prompting for source-free unsupervised domain adaptation of medical image segmentation. IEEE Transactions on Medical Imaging, 42(12), 3738\u20133751.","journal-title":"IEEE Transactions on Medical Imaging"},{"key":"2631_CR281","unstructured":"Wang, Y., Cheng, L., Fang, C., Zhang, D., Duan, M., & Wang, M. (2024b). Revisiting the power of prompt for visual tuning. arXiv preprint arXiv:2402.02382."},{"key":"2631_CR282","doi-asserted-by":"crossref","unstructured":"Wang, Z., Guo, J., Zhu, J., Li, Y., Huang, H., Chen, M., & Tu, Z. (2025c). SleeperMark: Towards robust watermark against fine-tuning text-to-image diffusion models. In Proceedings of the computer vision and pattern recognition conference (pp. 8213\u20138224).","DOI":"10.1109\/CVPR52734.2025.00769"},{"key":"2631_CR283","unstructured":"Wen, J., Luo, Y., Fei, N., Yang, G., Lu, Z., Jiang, H., Jiang, J., & Cao, Z. (2022). Visual prompt tuning for few-shot text classification. In Proceedings of the 29th international conference on computational linguistics (pp. 5560\u20135570)."},{"key":"2631_CR284","unstructured":"Wen, Y., Kirchenbauer, J., Geiping, J., & Goldstein, T. (2023). Tree-ring watermarks: Fingerprints for diffusion images that are invisible and robust. arXiv preprint arXiv:2305.20030."},{"key":"2631_CR285","doi-asserted-by":"crossref","unstructured":"Westfeld, A., & Pfitzmann, A. (1999). Attacks on steganographic systems: Breaking the Steganographic Utilities EzStego, Jsteg, Steganos, and S-Tools-and Some Lessons Learned. In International workshop on information hiding (pp. 61\u201376). Springer.","DOI":"10.1007\/10719724_5"},{"key":"2631_CR286","unstructured":"Wong, E., & Kolter, J. Z. (2020). Learning perturbation sets for robust machine learning. arXiv preprint arXiv:2007.08450."},{"issue":"7","key":"2631_CR287","doi-asserted-by":"publisher","first-page":"2591","DOI":"10.1109\/TCSVT.2020.3030671","volume":"31","author":"H Wu","year":"2020","unstructured":"Wu, H., Liu, G., Yao, Y., & Zhang, X. (2020). Watermarking neural networks with watermarked images. IEEE Transactions on Circuits and Systems for Video Technology, 31(7), 2591\u20132601.","journal-title":"IEEE Transactions on Circuits and Systems for Video Technology"},{"key":"2631_CR288","unstructured":"Wu, J., Li, X., Wei, C., Wang, H., Yuille, A., Zhou, Y., & Xie, C. (2022a). Unleashing the power of visual prompting at the pixel level. arXiv preprint arXiv:2212.10556."},{"key":"2631_CR289","unstructured":"Wu, R., Wang, Y., Shi, H., Yu, Z., Wu, Y., & Liang, D. (2023a). Towards prompt-robust face privacy protection via adversarial decoupling augmentation framework. arXiv preprint arXiv:2305.03980."},{"key":"2631_CR290","doi-asserted-by":"crossref","unstructured":"Wu, T., Jiang, E., Donsbach, A., Gray, J., Molina, A., Terry, M., & Cai, C. J. (2022b). PromptChainer: Chaining large language model prompts through visual programming. In CHI conference on human factors in computing systems extended abstracts (pp. 1\u201310).","DOI":"10.1145\/3491101.3519729"},{"key":"2631_CR291","doi-asserted-by":"crossref","unstructured":"Wu. X., Liao, X., & Ou, B. (2023b). SepMark: Deep separable watermarking for unified source tracing and deepfake detection. In Proceedings of the 31st ACM international conference on multimedia (pp. 1190\u20131201).","DOI":"10.1145\/3581783.3612471"},{"key":"2631_CR292","unstructured":"Wu, X., Liao, X., Ou, B., Liu, Y., & Qin, Z. (2024). Are watermarks bugs for deepfake detectors? Rethinking proactive forensics. arXiv preprint arXiv:2404.17867."},{"issue":"1","key":"2631_CR293","doi-asserted-by":"publisher","first-page":"47","DOI":"10.1007\/s11390-019-1898-8","volume":"34","author":"Y Wu","year":"2019","unstructured":"Wu, Y., Yang, F., Xu, Y., & Ling, H. (2019). Privacy-protective-GAN for privacy preserving face de-identification. Journal of Computer Science and Technology, 34(1), 47\u201360.","journal-title":"Journal of Computer Science and Technology"},{"key":"2631_CR294","doi-asserted-by":"crossref","unstructured":"Xiao, Z., Gao, X., Fu, C., Dong, Y., Gao, W., Zhang, X., Zhou, J., & Zhu, J. (2021). Improving transferability of adversarial patches on face recognition with generative models. In Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition (pp. 11845\u201311854).","DOI":"10.1109\/CVPR46437.2021.01167"},{"key":"2631_CR295","doi-asserted-by":"crossref","unstructured":"Xiaoqing, F. (2015). A watermarking for 3D point cloud model using distance normalization modulation. In 2015 4th international conference on computer science and network technology (ICCSNT) (vol 1, pp. 1449\u20131452), IEEE.","DOI":"10.1109\/ICCSNT.2015.7491001"},{"key":"2631_CR296","unstructured":"Xie, C., Wang, J., Zhang, Z., Ren, Z., & Yuille, A. (2017). Mitigating adversarial effects through randomization. arXiv preprint arXiv:1711.01991."},{"issue":"14","key":"2631_CR297","doi-asserted-by":"publisher","first-page":"24569","DOI":"10.1109\/JIOT.2024.3382875","volume":"11","author":"Q Xie","year":"2024","unstructured":"Xie, Q., Jiang, S., Jiang, L., Huang, Y., Zhao, Z., Khan, S., Dai, W., Liu, Z., & Wu, K. (2024). Efficiency optimization techniques in privacypreserving federated learning with homomorphic encryption: A brief survey. IEEE Internet of Things Journal, 11(14), 24569\u201324580.","journal-title":"IEEE Internet of Things Journal"},{"key":"2631_CR298","doi-asserted-by":"publisher","first-page":"2056","DOI":"10.1109\/TMM.2023.3291588","volume":"26","author":"Y Xing","year":"2023","unstructured":"Xing, Y., Wu, Q., Cheng, D., Zhang, S., Liang, G., Wang, P., & Zhang, Y. (2023). Dual modality prompt tuning for vision-language pretrained model. IEEE Transactions on Multimedia, 26, 2056\u20132068.","journal-title":"IEEE Transactions on Multimedia"},{"issue":"9","key":"2631_CR299","doi-asserted-by":"publisher","first-page":"6200","DOI":"10.1109\/TII.2020.3032352","volume":"17","author":"Z Xiong","year":"2020","unstructured":"Xiong, Z., Cai, Z., Han, Q., Alrawais, A., & Li, W. (2020). ADGAN: Protect your location privacy in camera data of auto-driving vehicles. IEEE Transactions on Industrial Informatics, 17(9), 6200\u20136210.","journal-title":"IEEE Transactions on Industrial Informatics"},{"key":"2631_CR300","doi-asserted-by":"publisher","first-page":"911","DOI":"10.1109\/TIFS.2019.2929409","volume":"15","author":"G Xu","year":"2019","unstructured":"Xu, G., Li, H., Liu, S., Yang, K., & Lin, X. (2019). VerifyNet: Secure and verifiable federated learning. IEEE Transactions on Information Forensics and Security, 15, 911\u2013926.","journal-title":"IEEE Transactions on Information Forensics and Security"},{"issue":"3","key":"2631_CR301","doi-asserted-by":"publisher","first-page":"1749","DOI":"10.1109\/JIOT.2021.3089080","volume":"9","author":"H Xu","year":"2021","unstructured":"Xu, H., Cai, Z., Takabi, D., & Li, W. (2021). Audio-visual autoencoding for privacy-preserving video streaming. IEEE Internet of Things Journal, 9(3), 1749\u20131761.","journal-title":"IEEE Internet of Things Journal"},{"key":"2631_CR302","volume":"159","author":"Y Xu","year":"2023","unstructured":"Xu, Y., Xu, G., An, Z., Nielsen, M. H., & Shen, M. (2023). Adversarial attacks and active defense on deep learning based identification of GAN power amplifiers under physical perturbation. AEU-International Journal of Electronics and Communications, 159, Article 154478.","journal-title":"AEU-International Journal of Electronics and Communications"},{"issue":"3","key":"2631_CR303","doi-asserted-by":"publisher","first-page":"664","DOI":"10.1109\/TETC.2022.3231012","volume":"11","author":"M Xue","year":"2022","unstructured":"Xue, M., Wu, Z., Zhang, Y., Wang, J., & Liu, W. (2022). AdvParams: An active DNN intellectual property protection technique via adversarial perturbation based parameter encryption. IEEE Transactions on Emerging Topics in Computing, 11(3), 664\u2013678.","journal-title":"IEEE Transactions on Emerging Topics in Computing"},{"key":"2631_CR304","unstructured":"Yang, B., Li, W., Xiang, L., & Li, B. (2023a). Towards code watermarking with dual-channel transformations. arXiv preprint arXiv:2309.00860."},{"key":"2631_CR305","doi-asserted-by":"crossref","unstructured":"Yang, J., Li, Z., Zheng, F., Leonardis, A., & Song, J. (2022a). Prompting for multi-modal tracking. In Proceedings of the 30th ACM international conference on multimedia (pp. 3492\u20133500).","DOI":"10.1145\/3503161.3547851"},{"key":"2631_CR306","first-page":"56644","volume":"37","author":"P Yang","year":"2024","unstructured":"Yang, P., Ci, H., Song, Y., & Shou, M. Z. (2024). Can simple averaging defeat modern watermarks? Advances in Neural Information Processing Systems, 37, 56644\u201356673.","journal-title":"Advances in Neural Information Processing Systems"},{"key":"2631_CR307","doi-asserted-by":"crossref","unstructured":"Yang, X., Dong, Y., Pang, T., Su, H., Zhu, J., Chen, Y., & Xue, H. (2021a). Towards face encryption by generating adversarial identity masks. In Proceedings of the IEEE\/CVF international conference on computer vision (pp. 3897\u20133907).","DOI":"10.1109\/ICCV48922.2021.00387"},{"key":"2631_CR308","doi-asserted-by":"crossref","unstructured":"Yang, X., Zhang, J., Chen, K., Zhang, W., Ma, Z., Wang, F., & Yu, N. (2022b). Tracing text provenance via context-aware lexical substitution. In Proceedings of the AAAI conference on artificial intelligence (pp. 11613\u201311621).","DOI":"10.1609\/aaai.v36i10.21415"},{"key":"2631_CR309","unstructured":"Yang, Y., Liang, C., He, H., Cao, X., & Gong, N. Z. (2021b). Faceguard: Proactive deepfake detection. arXiv preprint arXiv:2109.05673."},{"key":"2631_CR310","unstructured":"Yang, Z., Sha, Z., Backes, M., & Zhang, Y. (2023b). From visual prompt learning to zero-shot transfer: Mapping is all you need. arXiv preprint arXiv:2303.05266."},{"key":"2631_CR311","doi-asserted-by":"crossref","unstructured":"Yang, Z., Zeng, K., Chen, K., Fang, H., Zhang, W., & Yu, N. (2024b). Gaussian shading: Provable performance-lossless image watermarking for diffusion models. In Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition (pp. 12162\u201312171).","DOI":"10.1109\/CVPR52733.2024.01156"},{"key":"2631_CR312","doi-asserted-by":"publisher","first-page":"30","DOI":"10.1016\/j.aiopen.2024.01.004","volume":"5","author":"Y Yao","year":"2024","unstructured":"Yao, Y., Zhang, A., Zhang, Z., Liu, Z., Chua, T. S., & Sun, M. (2024). Cpt: Colorful prompt tuning for pre-trained vision-language models. AI Open, 5, 30\u201338.","journal-title":"AI Open"},{"key":"2631_CR313","unstructured":"Ye, X., Huang, H., An, J., & Wang, Y. (2023). DUAW: Data-free universal adversarial watermark against stable diffusion customization. arXiv preprint arXiv:2308.09889."},{"key":"2631_CR314","doi-asserted-by":"crossref","unstructured":"Yeh, C. Y., Chen, H. W., Tsai, S. L., & Wang, S. D. (2020). Disrupting imagetranslation-based deepfake algorithms with adversarial attacks. In Proceedings of the IEEE\/CVF winter conference on applications of computer vision workshops (pp. 53\u201362).","DOI":"10.1109\/WACVW50321.2020.9096939"},{"key":"2631_CR315","doi-asserted-by":"crossref","unstructured":"Yeung, M., & Yeo, B. L. (1998). Fragile watermarking of threedimensional objects. In Proceedings 1998 international conference on image processing. ICIP98 (Cat. No. 98CB36269) (vol. 2, pp. 442\u2013446), IEEE.","DOI":"10.1109\/ICIP.1998.723416"},{"key":"2631_CR316","unstructured":"Yin, D., Gontijo Lopes, R., Shlens, J., Cubuk, E. D., & Gilmer, J. (2019). A Fourier perspective on model robustness in computer vision. In Advances in neural information processing systems (vol. 32)."},{"key":"2631_CR317","doi-asserted-by":"crossref","unstructured":"Yoo, I., Chang, H., Luo, X., Stava, O., Liu, C., Milanfar, P., & Yang, F. (2022). Deep 3D-to-2D watermarking: Embedding messages in 3D meshes and extracting them from 2D renderings. In Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition (pp. 10031\u201310040).","DOI":"10.1109\/CVPR52688.2022.00979"},{"key":"2631_CR318","unstructured":"Yoo, S., Kim, E., Jung, D., Lee, J., & Yoon, S. (2023). Improving visual prompt tuning for self-supervised vision transformers. In International conference on machine learning (pp. 40075\u201340092), PMLR."},{"key":"2631_CR319","doi-asserted-by":"crossref","unstructured":"Yoshimura, M., Otsuka, J., Irie, A., & Ohashi, T. (2023). Rawgment: Noise-accounted RAW augmentation enables recognition in a wide variety of environments. In Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition (pp. 14007\u201314017).","DOI":"10.1109\/CVPR52729.2023.01346"},{"key":"2631_CR320","doi-asserted-by":"crossref","unstructured":"Yu, N., Davis, L. S., & Fritz, M. (2019). Attributing fake images to GANs: Learning and analyzing GAN fingerprints. In Proceedings of the IEEE\/CVF international conference on computer vision (pp. 7556\u20137566).","DOI":"10.1109\/ICCV.2019.00765"},{"key":"2631_CR321","doi-asserted-by":"crossref","unstructured":"Yu, N., Skripniuk, V., Abdelnabi, S., & Fritz, M. (2021). Artificial fingerprinting for generative models: Rooting deepfake attribution in training data. In Proceedings of the IEEE\/CVF International conference on computer vision (pp. 14448\u201314457).","DOI":"10.1109\/ICCV48922.2021.01418"},{"issue":"11","key":"2631_CR322","doi-asserted-by":"publisher","first-page":"2603","DOI":"10.1016\/S0031-3203(03)00086-4","volume":"36","author":"Z Yu","year":"2003","unstructured":"Yu, Z., Ip, H. H., & Kwok, L. (2003). A robust watermarking scheme for 3D triangular mesh models. Pattern Recognition, 36(11), 2603\u20132614.","journal-title":"Pattern Recognition"},{"key":"2631_CR323","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2024.3520534","author":"Z Yu","year":"2024","unstructured":"Yu, Z., Cai, R., Cui, Y., Liu, A., & Chen, C. (2024). Visual prompt flexiblemodal face anti-spoofing. IEEE Transactions on Dependable and Secure Computing. https:\/\/doi.org\/10.1109\/TDSC.2024.3520534","journal-title":"IEEE Transactions on Dependable and Secure Computing"},{"issue":"5","key":"2631_CR324","doi-asserted-by":"publisher","first-page":"596","DOI":"10.1109\/TVCG.2005.71","volume":"11","author":"S Zafeiriou","year":"2005","unstructured":"Zafeiriou, S., Tefas, A., & Pitas, I. (2005). Blind robust watermarking schemes for copyright protection of 3D mesh objects. IEEE Transactions on Visualization and Computer Graphics, 11(5), 596\u2013607.","journal-title":"IEEE Transactions on Visualization and Computer Graphics"},{"key":"2631_CR325","unstructured":"Zeng, Y., Zhou, M., Xue, Y., & Patel, V. M. (2023). Securing deep generative models with universal adversarial signature. arXiv preprint arXiv:2305.16310."},{"issue":"3","key":"2631_CR326","doi-asserted-by":"publisher","first-page":"1294","DOI":"10.1109\/TNET.2021.3137084","volume":"30","author":"C Zhang","year":"2022","unstructured":"Zhang, C., Costa-Perez, X., & Patras, P. (2022). Adversarial attacks against deep learning-based network intrusion detection systems and defense mechanisms. IEEE\/ACM Transactions on Networking, 30(3), 1294\u20131311.","journal-title":"IEEE\/ACM Transactions on Networking"},{"key":"2631_CR327","unstructured":"Zhang, G., Wang, L., Su, Y., & Liu, A. A. (2024a). A training-free plug-and-play watermark framework for stable diffusion. arXiv preprint arXiv:2404.05607."},{"key":"2631_CR328","doi-asserted-by":"crossref","unstructured":"Zhang, J., Gu, Z., Jang, J., Wu, H., Stoecklin, M. P., Huang, H., & Molloy, I. (2018a). Protecting intellectual property of deep neural networks with watermarking. In Proceedings of the 2018 on Asia conference on computer and communications security (pp. 159\u2013172).","DOI":"10.1145\/3196494.3196550"},{"issue":"8","key":"2631_CR329","first-page":"4005","volume":"44","author":"J Zhang","year":"2021","unstructured":"Zhang, J., Chen, D., Liao, J., ZhangW, F. H., Hua, G., & Yu, N. (2021). Deep model intellectual property protection via deep watermarking. IEEE Transactions on Pattern Analysis and Machine Intelligence, 44(8), 4005\u20134020.","journal-title":"IEEE Transactions on Pattern Analysis and Machine Intelligence"},{"issue":"17","key":"2631_CR330","doi-asserted-by":"publisher","first-page":"3697","DOI":"10.3390\/electronics12173697","volume":"12","author":"J Zhang","year":"2023","unstructured":"Zhang, J., Dai, L., Xu, L., Ma, J., & Zhou, X. (2023). Black-box watermarking and blockchain for ip protection of voiceprint recognition model. Electronics, 12(17), 3697.","journal-title":"Electronics"},{"key":"2631_CR331","doi-asserted-by":"crossref","unstructured":"Zhang, J., Wang, B., Li, L., Nakashima, Y., & Nagahara, H. (2024b). Instruct me more! random prompting for visual in-context learning. In Proceedings of the IEEE\/CVF winter conference on applications of computer vision (pp. 2597\u20132606).","DOI":"10.1109\/WACV57701.2024.00258"},{"key":"2631_CR332","unstructured":"Zhang, L., Liu, X., Martin, A. V., Bearfield, C. X., Brun, Y., & Guan, H. (2024c). Robust image watermarking using stable diffusion. arXiv preprint arXiv:2401.04247."},{"key":"2631_CR333","doi-asserted-by":"crossref","unstructured":"Zhang, P. F., Huang, Z., & Xu, X. S. (2021b). Proactive privacy-preserving learning for retrieval. In Proceedings of the AAAI conference on artificial intelligence (pp. 3369\u20133376).","DOI":"10.1609\/aaai.v35i4.16449"},{"issue":"5","key":"2631_CR334","doi-asserted-by":"publisher","first-page":"6259","DOI":"10.1007\/s11042-021-11733-y","volume":"81","author":"T Zhang","year":"2022","unstructured":"Zhang, T. (2022). Deepfake generation and detection, a survey. Multimedia Tools and Applications, 81(5), 6259\u20136276.","journal-title":"Multimedia Tools and Applications"},{"key":"2631_CR335","unstructured":"Zhang, T., He, Z., & Lee, R. B. (2018b). Privacy-preserving machine learning through data obfuscation. arXiv preprint arXiv:1807.01860."},{"issue":"3","key":"2631_CR336","first-page":"1","volume":"11","author":"WE Zhang","year":"2020","unstructured":"Zhang, W. E., Sheng, Q. Z., Alhazmi, A., & Li, C. (2020). Adversarial attacks on deep-learning models in natural language processing: A survey. ACM Transactions on Intelligent Systems and Technology (TIST), 11(3), 1\u201341.","journal-title":"ACM Transactions on Intelligent Systems and Technology (TIST)"},{"issue":"2","key":"2631_CR337","doi-asserted-by":"publisher","first-page":"485","DOI":"10.1109\/TIP.2010.2066981","volume":"20","author":"X Zhang","year":"2010","unstructured":"Zhang, X., Wang, S., Qian, Z., & Feng, G. (2010). Reference sharing mechanism for watermark self-embedding. IEEE Transactions on Image Processing, 20(2), 485\u2013495.","journal-title":"IEEE Transactions on Image Processing"},{"key":"2631_CR338","doi-asserted-by":"crossref","unstructured":"Zhang, X., Li, R., Yu, J., Xu, Y., Li, W., & Zhang, J. (2024d). EditGuard: Versatile image watermarking for tamper localization and copyright protection. In Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition (pp. 11964\u201311974).","DOI":"10.1109\/CVPR52733.2024.01137"},{"key":"2631_CR339","first-page":"49780","volume":"37","author":"X Zhang","year":"2024","unstructured":"Zhang, X., Meng, J., Li, R., Xu, Z., Zhang, Y., & Zhang, J. (2024). GSHider: Hiding messages into 3D Gaussian splatting. Advances in Neural Information Processing Systems, 37, 49780\u201349805.","journal-title":"Advances in Neural Information Processing Systems"},{"key":"2631_CR340","doi-asserted-by":"crossref","unstructured":"Zhang, X., Xu, Y., Li, R., Yu, J., Li, W., Xu, Z., & Zhang, J. (2024f). V2a-mark: Versatile deep visual-audio watermarking for manipulation localization and copyright protection. In Proceedings of the 32nd ACM international conference on multimedia (pp. 9818\u20139827).","DOI":"10.1145\/3664647.3680904"},{"key":"2631_CR341","doi-asserted-by":"crossref","unstructured":"Zhang, X., Tang, Z., Xu, Z., Li, R., Xu, Y., Chen, B., Gao, F., & Zhang, J. (2025). OmniGuard: Hybrid manipulation localization via augmented versatile deep image watermarking. In Proceedings of the computer vision and pattern recognition conference (pp. 3008\u20133018).","DOI":"10.1109\/CVPR52734.2025.00286"},{"key":"2631_CR342","doi-asserted-by":"crossref","unstructured":"Zhang Y, Chen X, Jia J, Liu S, Ding K (2023b) Text-visual prompting for efficient 2D temporal video grounding. In Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition (pp. 14794\u201314804).","DOI":"10.1109\/CVPR52729.2023.01421"},{"issue":"8","key":"2631_CR343","doi-asserted-by":"publisher","first-page":"5299","DOI":"10.1109\/TVCG.2023.3289234","volume":"30","author":"Y Zhang","year":"2023","unstructured":"Zhang, Y., Zhu, J., Xue, M., Zhang, X., & Cao, X. (2023). Adaptive 3d mesh steganography based on feature-preserving distortion. IEEE Transactions on Visualization and Computer Graphics, 30(8), 5299\u20135312.","journal-title":"IEEE Transactions on Visualization and Computer Graphics"},{"key":"2631_CR344","unstructured":"Zhang, Y., Li, H., Yao, Y., Chen, A., Zhang, S., Chen, P. Y., Wang, M., & Liu, S. (2024g). Visual prompting reimagined: The power of activation prompts. Unpublished."},{"key":"2631_CR345","unstructured":"Zhao, X., Wang, Y. X., & Li, L. (2023a). Protecting language generation models via invisible watermarking. In International Conference on Machine Learning (pp. 42187\u201342199). PMLR."},{"key":"2631_CR346","doi-asserted-by":"crossref","unstructured":"Zhao, Y., Liu, B., Ding, M., Liu, B., Zhu, T., & Yu, X. (2023b). Proactive deepfake defence via identity watermarking. In Proceedings of the IEEE\/CVF winter conference on applications of computer vision (pp. 4602\u20134611).","DOI":"10.1109\/WACV56688.2023.00458"},{"key":"2631_CR347","unstructured":"Zhao, Y., Pang, T., Du, C., Yang, X., Cheung, N. M., & Lin, M. (2023c). A recipe for watermarking diffusion models. arXiv preprint arXiv:2303.10137."},{"key":"2631_CR348","unstructured":"Zhao, Z., & Patras, I. (2023). Prompting visual-language models for dynamic facial expression recognition. arXiv preprint arXiv:2308.13382."},{"key":"2631_CR349","doi-asserted-by":"crossref","unstructured":"Zhao, Z., Duan, J., Xu, K., Wang, C., Zhang, R., Du, Z., Guo, Q., & Hu, X. (2024). Can protective perturbation safeguard personal data from being exploited by stable diffusion? In Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition (pp. 24398\u201324407).","DOI":"10.1109\/CVPR52733.2024.02303"},{"key":"2631_CR350","doi-asserted-by":"crossref","unstructured":"Zhong, Y., & Deng, W. (2020). Towards transferable adversarial attack against deep face recognition. IEEE Transactions on Information Forensics and Security,16, 1452\u20131466.","DOI":"10.1109\/TIFS.2020.3036801"},{"key":"2631_CR351","unstructured":"Zhu, C., Tang, J., Galjaard, J. M., Chen, P. Y., Birke, R., Bos, C., Chen, L. Y., et al. (2025). Tabwak: A watermark for tabular diffusion models. In International conference on learning representations, OpenReview. net (pp. 1\u201328)."},{"key":"2631_CR352","doi-asserted-by":"crossref","unstructured":"Zhu, J& , Kaplan, R., Johnson, J., & Fei-Fei, L. (2018). Hidden: Hiding data with deep networks. In Proceedings of the European conference on computer vision (ECCV) (pp. 657\u2013672).","DOI":"10.1007\/978-3-030-01267-0_40"},{"key":"2631_CR353","doi-asserted-by":"publisher","first-page":"1729","DOI":"10.1109\/LSP.2021.3107777","volume":"28","author":"J Zhu","year":"2021","unstructured":"Zhu, J., Zhang, Y., Zhang, X., & Cao, X. (2021). Gaussian model for 3D mesh steganography. IEEE Signal Processing Letters, 28, 1729\u20131733.","journal-title":"IEEE Signal Processing Letters"},{"key":"2631_CR354","doi-asserted-by":"crossref","unstructured":"Zhu, J., Lai, S., Chen, X., Wang, D., & Lu, H. (2023a). Visual prompt multimodal tracking. In Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition (pp. 9516\u20139526).","DOI":"10.1109\/CVPR52729.2023.00918"},{"key":"2631_CR355","unstructured":"Zhu, X., Ye, G., Dong, C., Luo, X., & Wei, X. (2023b). Towards function space mesh watermarking: Protecting the copyright of signed distance fields. arXiv preprint arXiv:2311.12059."},{"key":"2631_CR356","doi-asserted-by":"crossref","unstructured":"Zhu, X., Ye, G., Luo, X., & Wei, X. (2024). Rethinking mesh watermark: Towards highly robust and adaptable deep 3D mesh watermarking. In Proceedings of the AAAI Conference on Artificial Intelligence (pp. 7784\u20137792).","DOI":"10.1609\/aaai.v38i7.28613"},{"key":"2631_CR357","doi-asserted-by":"crossref","unstructured":"Zou, Z., Gong, B., & Wang, L. (2025). Attention to neural plagiarism: Diffusion models can plagiarize your copyrighted images! In Proceedings of the IEEE\/CVF international conference on computer vision (pp. 19546\u201319556).","DOI":"10.1109\/ICCV51701.2025.01817"}],"container-title":["International Journal of Computer Vision"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s11263-025-02631-z.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s11263-025-02631-z","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s11263-025-02631-z.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,5,21]],"date-time":"2026-05-21T09:06:02Z","timestamp":1779354362000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s11263-025-02631-z"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,3,9]]},"references-count":357,"journal-issue":{"issue":"4","published-print":{"date-parts":[[2026,4]]}},"alternative-id":["2631"],"URL":"https:\/\/doi.org\/10.1007\/s11263-025-02631-z","relation":{},"ISSN":["0920-5691","1573-1405"],"issn-type":[{"value":"0920-5691","type":"print"},{"value":"1573-1405","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,3,9]]},"assertion":[{"value":"25 September 2024","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"1 November 2025","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"9 March 2026","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}}],"article-number":"186"}}