arXiv:2608. 07063v1 Announce Type: cross Abstract: Content provenance standards, such as C2PA, are increasingly used to attach signed records of origin, editing history, and rights to digital images.
arXiv:2607. 26641v1 Announce Type: cross Abstract: Identity document (ID) authentication relies on the structural integrity of complex, high-frequency security patterns.
arXiv:2608.20580v1 Announce Type: cross Abstract: Federated learning (FL) is vulnerable to multi-level attacks. However, existing methods address them separately, leaving FL exposed to data leakage,...
arXiv:2606. 16175v1 Announce Type: new Abstract: Longitudinal personal albums are weak-schema multimodal databases: noisy perceptual records whose key facts require joins across faces, text, timestamps, locations, and repeated events.
The paper introduces a self-referential retrosynthesis framework for explainable AI provenance forensics that works with fixed generative models. It uses a jointly optimized encoder-decoder pair to embed client inputs, allowing the generator to produce high-fidelity outputs while enabling round-trip consistency checks. The method eliminates the need for watermarking or generator modifications and provides interpretable evidence linking generated images back to their source inputs.
Photographic evidence is becoming increasingly vulnerable to forms of alteration and fabrication that existing legal and technical workflows are not well equipped to evaluate. Surveillance frames, das...
FeatMark is a watermarking framework that protects images from text‑to‑image diffusion model mimicry attacks by embedding small, scene‑consistent micro‑features instead of pixel‑level perturbations. It constructs domain‑specific feature banks, selects executable features, and injects them via mask‑guided concept editing to create highly localized, natural edits. Experiments on VGGFace2, CelebA‑HQ, and WikiArt show FeatMark remains robust against ten strong watermark removal attacks and several adaptive attacks, with minimal impact on perceptual quality and extending to video mimicry scenarios.
arXiv:2609.37783v1 Announce Type: cross Abstract: Photographic evidence is becoming increasingly vulnerable to forms of alteration and fabrication that existing legal and technical workflows are not...
The paper introduces a self‑referential retrosynthesis framework for explainable AI provenance forensics that works with fixed‑generator generative models. It uses a jointly optimized encoder‑decoder pair to embed client inputs, generate high‑fidelity outputs, and then verify provenance by comparing the resynthesized image to the original query. The method eliminates the need for watermarking or generator modifications while providing interpretable evidence of a model’s output origin.
arXiv:2608. 02774v1 Announce Type: cross Abstract: AI verification crosses a trust boundary: a verifier must learn enough to establish an authorized claim, yet the same evidence can reveal sensitive details about the model, workload, or hardware.
Text-to-image diffusion models enable data-efficient "mimicry" attacks, wherein adversaries fine-tune the model on a handful of public photos to synthesize convincing forgeries of a target individual....
arXiv:2603. 17531v2 Announce Type: replace-cross Abstract: Recent advancements in diffusion-based image editing pose a significant threat to the authenticity of digital visual content.
The paper introduces VeriFi, a watermarking framework that protects face images from AI‑generated manipulation. It embeds a compact semantic latent watermark to preserve content, localizes pixel‑level edits without explicit payloads, and simulates realistic deepfake attacks to improve robustness. Experiments on CelebA‑HQ and FFHQ show that VeriFi outperforms existing methods in robustness, localization accuracy, and recovery quality.