{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,16]],"date-time":"2026-06-16T08:53:42Z","timestamp":1781600022225,"version":"3.54.5"},"publisher-location":"New York, NY, USA","reference-count":21,"publisher":"ACM","license":[{"start":{"date-parts":[[2026,6,16]],"date-time":"2026-06-16T00:00:00Z","timestamp":1781568000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2026,6,17]]},"DOI":"10.1145\/3785353.3815079","type":"proceedings-article","created":{"date-parts":[[2026,6,16]],"date-time":"2026-06-16T08:11:30Z","timestamp":1781597490000},"page":"189-194","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["Watermarking Large Vision-Language Models: The Vision Encoder is all You Need"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-7951-1273","authenticated-orcid":false,"given":"Boussad","family":"Addad","sequence":"first","affiliation":[{"name":"cortAIx Labs, Thales, Palaiseau, France"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0963-4782","authenticated-orcid":false,"given":"Katarzyna","family":"Kapusta","sequence":"additional","affiliation":[{"name":"cortAIx Labs, Thales, Palaiseau, France"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1562-496X","authenticated-orcid":false,"given":"Olivier","family":"Bettan","sequence":"additional","affiliation":[{"name":"cortAIx Labs, Thales, Palaiseau, France"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2026,6,16]]},"reference":[{"key":"e_1_3_3_3_2_2","first-page":"1615","volume-title":"USENIX Security 18","author":"Adi Yossi","year":"2018","unstructured":"Yossi Adi, Carsten Baum, Moustapha Cisse, Benny Pinkas, and Joseph Keshet. 2018. Turning your weakness into a strength: Watermarking deep neural networks by backdooring. In USENIX Security 18. 1615\u20131631."},{"key":"e_1_3_3_3_3_2","doi-asserted-by":"crossref","unstructured":"Franziska Boenisch. 2021. A systematic review on model watermarking for neural networks. Frontiers in big Data 4 (2021) 729663.","DOI":"10.3389\/fdata.2021.729663"},{"key":"e_1_3_3_3_4_2","volume-title":"EMNLP 2025. https:\/\/arxiv.org\/abs\/2507.14067","author":"al Shuliang\u00a0Liu et","year":"2025","unstructured":"Shuliang\u00a0Liu et al. 2025. VLA-Mark: A Cross-Modal Watermark for Large Vision-Language Alignment Models. In EMNLP 2025. https:\/\/arxiv.org\/abs\/2507.14067."},{"key":"e_1_3_3_3_5_2","volume-title":"Sleeper agents: training deceptive llms that persist through safety training","author":"Carson\u00a0Denison Jesse\u00a0Mu Evan\u00a0Hubinger,","year":"2024","unstructured":"Jesse\u00a0Mu Evan\u00a0Hubinger, Carson\u00a0Denison and Mike Lambert. 2024. Sleeper agents: training deceptive llms that persist through safety training. Retrieved February 06, 2026 from https:\/\/arxiv.org\/pdf\/2401.05566"},{"key":"e_1_3_3_3_6_2","volume-title":"Granite vision: a lightweight open-source multimodal model for entreprise intelligence","author":"Vision\u00a0Team IBM\u00a0Research Granite","year":"2025","unstructured":"IBM\u00a0Research Granite Vision\u00a0Team. 2025. Granite vision: a lightweight open-source multimodal model for entreprise intelligence. Retrieved February 06, 2026 from https:\/\/arxiv.org\/abs\/2502.09927"},{"key":"e_1_3_3_3_7_2","volume-title":"Proceedings of the 30th USENIX Security Symposium","author":"Christopher\u00a0A Choquette-Choo Varun\u00a0Chandrasekaran Hengrui\u00a0Jia,","year":"2021","unstructured":"Choquette-Choo Varun\u00a0Chandrasekaran Hengrui\u00a0Jia, Christopher\u00a0A and Nicolas Papernot. 2021. Entangled Watermarks as a Defense against Model Extraction. In Proceedings of the 30th USENIX Security Symposium."},{"key":"e_1_3_3_3_8_2","unstructured":"ImageNet. 2015. https:\/\/www.image-net.org"},{"key":"e_1_3_3_3_9_2","volume-title":"International conference on machine learning","author":"JongWook\u00a0Kim Chris Hallacy Aditya Ramesh Gabriel Goh Sandhini Agarwal Girish Sastry Amanda Askell Pamela Mishkin Jack\u00a0Clark lec Radford,","year":"2021","unstructured":"Chris Hallacy Aditya Ramesh Gabriel Goh Sandhini Agarwal Girish Sastry Amanda Askell Pamela Mishkin Jack\u00a0Clark lec Radford, JongWook\u00a0Kim. 2021. Learning transferable visual models from natural language supervision. In International conference on machine learning."},{"key":"e_1_3_3_3_10_2","volume-title":"Phi-3 Technical Report: A Highly Capable Language Model Locally on Your Phone","year":"2024","unstructured":"Miscrosoft. 2024. Phi-3 Technical Report: A Highly Capable Language Model Locally on Your Phone. Retrieved February 06, 2026 from https:\/\/arxiv.org\/abs\/2404.14219"},{"key":"e_1_3_3_3_11_2","volume-title":"Proceedings of AAAI 24 Fall Symposium Series","author":"Lucas\u00a0Mattioli Boussad Addad Paul-Marie Raffi Martin\u00a0Gonzalez Mohammed\u00a0Lansari,","year":"2024","unstructured":"Boussad Addad Paul-Marie Raffi Martin\u00a0Gonzalez Mohammed\u00a0Lansari, Lucas\u00a0Mattioli and Mohamed\u00a0Ibn Kheider. 2024. A Black-BoxWatermarking Modulation for Object Detection Models. In Proceedings of AAAI 24 Fall Symposium Series."},{"key":"e_1_3_3_3_12_2","volume-title":"Proceedings of the NEURIPS24","author":"Lucas\u00a0Mattioli Boussad Addad Paul-Marie Raffi Martin Gonzalez Katarzyna\u00a0Kapusta Mohammed\u00a0Lansari,","year":"2024","unstructured":"Boussad Addad Paul-Marie Raffi Martin Gonzalez Katarzyna\u00a0Kapusta Mohammed\u00a0Lansari, Lucas\u00a0Mattioli. 2024. A Black-Box Watermarking Modulation for Semantic Segmentation Models. In Proceedings of the NEURIPS24."},{"key":"e_1_3_3_3_13_2","unstructured":"Neel Nanda and Joseph Bloom. 2022. TransformerLens. https:\/\/github.com\/TransformerLensOrg\/TransformerLens."},{"key":"e_1_3_3_3_14_2","volume-title":"FastVLM: Efficient Vision Encoding for Vision Language Models","author":"Fartash\u00a0Faghri Chun-Liang Li Cem Koc Nate True Albert Antony Gokul Santhanam James Gabriel Peter Grasch Oncel Tuzel Hadi\u00a0Pouransari Pavan Kumar Anasosalu\u00a0Vasu,","year":"2024","unstructured":"Chun-Liang Li Cem Koc Nate True Albert Antony Gokul Santhanam James Gabriel Peter Grasch Oncel Tuzel Hadi\u00a0Pouransari Pavan Kumar Anasosalu\u00a0Vasu, Fartash\u00a0Faghri. 2024. FastVLM: Efficient Vision Encoding for Vision Language Models. Retrieved February 06, 2026 from https:\/\/arxiv.org\/abs\/2412.13303"},{"key":"e_1_3_3_3_15_2","volume-title":"Qwen2.5-VL Technical Report","author":"Qwen\u00a0Team Alibaba\u00a0Group","year":"2025","unstructured":"Alibaba\u00a0Group Qwen\u00a0Team. 2025. Qwen2.5-VL Technical Report. Retrieved February 06, 2026 from https:\/\/arxiv.org\/pdf\/2502.13923"},{"key":"e_1_3_3_3_16_2","volume-title":"How to Backdoor Large Language Models","author":"Shankar Shrivu","year":"2025","unstructured":"Shrivu Shankar. 2025. How to Backdoor Large Language Models. Retrieved February 06, 2026 from https:\/\/blog.sshh.io\/p\/how-to-backdoor-large-language-models"},{"key":"e_1_3_3_3_17_2","volume-title":"LFM2 Technical Report","author":"Team Liquid\u00a0AI","year":"2025","unstructured":"Liquid\u00a0AI Team. 2025. LFM2 Technical Report. Retrieved February 06, 2026 from https:\/\/arxiv.org\/abs\/2511.23404v1"},{"key":"e_1_3_3_3_18_2","doi-asserted-by":"crossref","unstructured":"Shan Wan Wu Liu Yijun Liu Feiniu Yuan and Chunli Meng. 2024. Watermarking Vision-Language Models. Proceedings of the 6th ACM International Conference on Multimedia in Asia (2024). https:\/\/api.semanticscholar.org\/CorpusID:275127176","DOI":"10.1145\/3696409.3700483"},{"key":"e_1_3_3_3_19_2","volume-title":"In Proceedings of the 61st Annual Meeting of the Association for Computational Linguistics, (Volume 1: Long Papers). 7653\u20137668","author":"Jingwei\u00a0Yi Fangzhao Wu Shangxi Wu Bin Bin Zhu Lingjuan Lyu Binxing Jiao Tong Xu Guangzhong\u00a0Sun Wenjun\u00a0Peng,","year":"2023","unstructured":"Fangzhao Wu Shangxi Wu Bin Bin Zhu Lingjuan Lyu Binxing Jiao Tong Xu Guangzhong\u00a0Sun Wenjun\u00a0Peng, Jingwei\u00a0Yi and Xing Xie. 2023. Are You Copying My Model? Protecting the Copyright of Large Language Models for EaaS via Backdoor Watermark. In In Proceedings of the 61st Annual Meeting of the Association for Computational Linguistics, (Volume 1: Long Papers). 7653\u20137668."},{"key":"e_1_3_3_3_20_2","volume-title":"ICCV","author":"Basil\u00a0Mustafa Alexander\u00a0Kolesnikov Xiaohua\u00a0Zhai,","year":"2023","unstructured":"Alexander\u00a0Kolesnikov Xiaohua\u00a0Zhai, Basil\u00a0Mustafa and Lucas Beyer. 2023. Sigmoid loss for language image pre-training. In ICCV."},{"key":"e_1_3_3_3_21_2","volume-title":"https:\/\/arxiv.org\/pdf\/2311.05863","author":"Jing\u00a0Yu1 Keke Gai Xiangyan Qu Yue Hu Gang Xiong Qi\u00a0Wu Yuanmin\u00a0Tang,","year":"2023","unstructured":"Keke Gai Xiangyan Qu Yue Hu Gang Xiong Qi\u00a0Wu Yuanmin\u00a0Tang, Jing\u00a0Yu1. 2023. Watermarking Vision-Language Pre-trained Models for Multi-modal Embedding as a Service. In https:\/\/arxiv.org\/pdf\/2311.05863."},{"key":"e_1_3_3_3_22_2","volume-title":"Watermarking Techniques for Large Language Models: A Survey","author":"Jiancheng\u00a0Xiao Wensheng\u00a0Gan Yuqing\u00a0Liang,","year":"2024","unstructured":"Wensheng\u00a0Gan Yuqing\u00a0Liang, Jiancheng\u00a0Xiao and Philip\u00a0S. Yu. 2024. Watermarking Techniques for Large Language Models: A Survey. Retrieved February 06, 2026 from https:\/\/arxiv.org\/abs\/2409.00089"}],"event":{"name":"IH&MMSec '26: ACM Workshop on Information Hiding and Multimedia Security","location":"Firenze Italy","acronym":"IH&MMSec '26","sponsor":["SIGMM ACM Special Interest Group on Multimedia"]},"container-title":["Proceedings of the 2026 ACM Workshop on Information Hiding and Multimedia Security"],"original-title":[],"deposited":{"date-parts":[[2026,6,16]],"date-time":"2026-06-16T08:12:51Z","timestamp":1781597571000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3785353.3815079"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,6,16]]},"references-count":21,"alternative-id":["10.1145\/3785353.3815079","10.1145\/3785353"],"URL":"https:\/\/doi.org\/10.1145\/3785353.3815079","relation":{},"subject":[],"published":{"date-parts":[[2026,6,16]]},"assertion":[{"value":"2026-06-16","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}