Zhihua Xia

Collusion attacks can render traditional model fingerprinting ineffective, but this new method not only embeds fingerprints but also sabotages the quality of colluded outputs.

Stop deepfakes before they start: ID-Eraser makes faces unusable for swapping by injecting subtle, learnable perturbations directly into identity embeddings.

Diffusion image watermarks can now simultaneously resist adversarial framing and pinpoint tampering, thanks to a dual-channel approach.