The paper introduces TP-CRIV, a framework for verifying the identity of AI models through third‑party challenge‑response interactions without requiring white‑box or API access. TP-CRIV operates in a black‑box setting, using fresh, undisclosed challenges and network isolation to ensure that verification relies solely on the claimant’s local model. The authors demonstrate the approach on ten ImageNet‑pretrained CNNs, achieving clear separation between same and cross‑model responses with statistically calibrated thresholds.
By Teruki Sano, Minoru Kuribayashi, Masao Sakai, Shuji Isobe, Eisuke Koizumi, Zhang Zhang, Satoru Matsumoto
The paper introduces TP-CRIV, a framework for verifying the identity of AI models through third‑party challenge‑response interactions. It operates without white‑box or API access, relying only on black‑box inference and fresh, undisclosed challenges to gather empirical evidence of model possession. The authors demonstrate the method on ten ImageNet‑pretrained CNNs, achieving clear separation between matching and non‑matching models with statistically calibrated thresholds.
arXiv:2606. 11505v1 Announce Type: cross Abstract: Biometric systems are increasingly deployed in security applications; however, they remain vulnerable to spoofing attacks, in which attackers exploit counterfeit biometric data to gain unauthorized access.
By Kumar Kartikey, Nikos Komninos
arXiv:2609.22981v1 Announce Type: cross
Abstract: We present a dual-locking method for securing trained neural networks that combines key-driven index permutation with PIN-based watermarking based on...
By Iva Vasic, Jes\'us Mu\~noz-C\'adiz, Bata Vasic
arXiv:2510. 25687v4 Announce Type: replace-cross Abstract: Model inversion attacks pose an open challenge to privacy-sensitive applications that use machine learning (ML) models.
By Mallika Prabhakar, Louise Xu, Prateek Saxena
arXiv:2607. 21325v3 Announce Type: replace-cross Abstract: Autonomous AI agents increasingly execute actions, invoke tools, and operate on protected resources with limited human oversight.
By M. Llamb\'i-Morillas, D. Fern\'andez-Fern\'andez
arXiv:2607. 26641v1 Announce Type: cross Abstract: Identity document (ID) authentication relies on the structural integrity of complex, high-frequency security patterns.
By Mu\~noz-Haro Javier, Teruel Andres, Tolosana Ruben, DeAlcala Daniel, Vera-Rodriguez Ruben, Morales Aythami, Fierrez Julian
arXiv:2608. 03174v1 Announce Type: cross Abstract: Generative AI systems increasingly produce content whose provenance is difficult to verify, motivating watermarking techniques for identifying model-generated outputs.
By Miryam Mi-Ying Huang, Chung-Wei Lee, Max Raffel, Er-Cheng Tang
arXiv:2607. 21325v2 Announce Type: replace-cross Abstract: Autonomous AI agents increasingly execute actions, invoke tools, and operate on protected resources with limited human oversight.
By M. Llamb\'i-Morillas, D. Fern\'andez-Fern\'andez
arXiv:2607. 21325v1 Announce Type: cross Abstract: Autonomous AI agents increasingly execute actions, invoke tools, and operate on protected resources with limited human oversight.
By M. Llamb\'i-Morillas, D. Fern\'andez-Fern\'andez
arXiv:2411. 19715v4 Announce Type: replace-cross Abstract: We describe Forensics Adapter, an adapter network designed to transform CLIP into an effective and generalizable face forgery detector.
By Xinjie Cui, Yuezun Li, Delong Zhu, Jiaran Zhou, Junyu Dong, Siwei Lyu
arXiv:2607. 14932v1 Announce Type: cross Abstract: Synthetic face datasets have become effective enough to train face recognition models with accuracy rivaling that of models trained on real photographs.
By Pawe{\l} Borsukiewicz, Daniele Lunghi, Wendk\^uuni C. Ou\'edraogo, Jacques Klein, Tegawend\'e F. Bissyand\'e