{"id":"https://openalex.org/W7160336713","doi":"https://doi.org/10.48550/arxiv.2605.01834","title":"Repurposing and Evaluating the (In)Feasibility of Dataset Poisoning enabled Watermarking for Contrastive Learning","display_name":"Repurposing and Evaluating the (In)Feasibility of Dataset Poisoning enabled Watermarking for Contrastive Learning","publication_year":2026,"publication_date":"2026-05-03","ids":{"openalex":"https://openalex.org/W7160336713","doi":"https://doi.org/10.48550/arxiv.2605.01834"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.01834","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.01834","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.01834","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101066549","display_name":"Zhiyang Dai","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Dai, Zhiyang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135300870","display_name":"Yansong Gao","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Gao, Yansong","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135371301","display_name":"Boyu Kuang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Kuang, Boyu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135406152","display_name":"Haodong Li","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Haodong","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135326277","display_name":"Qi Chang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chang, Qi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135320056","display_name":"Gaurav Varshney","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Varshney, Gaurav","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135343911","display_name":"Derek Abbott","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Abbott, Derek","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5135354440","display_name":"Anmin Fu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Fu, Anmin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9323999881744385,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9323999881744385,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.012299999594688416,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.005100000184029341,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9718999862670898},{"id":"https://openalex.org/keywords/repurposing","display_name":"Repurposing","score":0.8360000252723694},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.7063000202178955},{"id":"https://openalex.org/keywords/digital-watermarking","display_name":"Digital watermarking","score":0.5827999711036682},{"id":"https://openalex.org/keywords/generalization","display_name":"Generalization","score":0.4447999894618988},{"id":"https://openalex.org/keywords/scheme","display_name":"Scheme (mathematics)","score":0.4275999963283539},{"id":"https://openalex.org/keywords/watermark","display_name":"Watermark","score":0.4090999960899353},{"id":"https://openalex.org/keywords/task","display_name":"Task (project management)","score":0.39890000224113464},{"id":"https://openalex.org/keywords/rubric","display_name":"Rubric","score":0.34439998865127563}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9718999862670898},{"id":"https://openalex.org/C519536355","wikidata":"https://www.wikidata.org/wiki/Q21021151","display_name":"Repurposing","level":2,"score":0.8360000252723694},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7297000288963318},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.7063000202178955},{"id":"https://openalex.org/C150817343","wikidata":"https://www.wikidata.org/wiki/Q875932","display_name":"Digital watermarking","level":3,"score":0.5827999711036682},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.49880000948905945},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.48809999227523804},{"id":"https://openalex.org/C177148314","wikidata":"https://www.wikidata.org/wiki/Q170084","display_name":"Generalization","level":2,"score":0.4447999894618988},{"id":"https://openalex.org/C77618280","wikidata":"https://www.wikidata.org/wiki/Q1155772","display_name":"Scheme (mathematics)","level":2,"score":0.4275999963283539},{"id":"https://openalex.org/C164112704","wikidata":"https://www.wikidata.org/wiki/Q7974348","display_name":"Watermark","level":3,"score":0.4090999960899353},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.39890000224113464},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3783999979496002},{"id":"https://openalex.org/C111640148","wikidata":"https://www.wikidata.org/wiki/Q847349","display_name":"Rubric","level":2,"score":0.34439998865127563},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.32919999957084656},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.3269999921321869},{"id":"https://openalex.org/C2776654903","wikidata":"https://www.wikidata.org/wiki/Q2601463","display_name":"SAFER","level":2,"score":0.3158999979496002},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.30329999327659607},{"id":"https://openalex.org/C153083717","wikidata":"https://www.wikidata.org/wiki/Q6535263","display_name":"Leverage (statistics)","level":2,"score":0.29019999504089355},{"id":"https://openalex.org/C2779677306","wikidata":"https://www.wikidata.org/wiki/Q2732142","display_name":"Statistician","level":2,"score":0.2759000062942505},{"id":"https://openalex.org/C114289077","wikidata":"https://www.wikidata.org/wiki/Q3284399","display_name":"Statistical model","level":2,"score":0.2736999988555908},{"id":"https://openalex.org/C2776321320","wikidata":"https://www.wikidata.org/wiki/Q857525","display_name":"Annotation","level":2,"score":0.27140000462532043},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.2653999924659729},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.26499998569488525},{"id":"https://openalex.org/C87007009","wikidata":"https://www.wikidata.org/wiki/Q210832","display_name":"Statistical hypothesis testing","level":2,"score":0.26080000400543213},{"id":"https://openalex.org/C40305131","wikidata":"https://www.wikidata.org/wiki/Q2616305","display_name":"Obfuscation","level":2,"score":0.2581999897956848},{"id":"https://openalex.org/C136389625","wikidata":"https://www.wikidata.org/wiki/Q334384","display_name":"Supervised learning","level":3,"score":0.2531000077724457}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.01834","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.01834","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.01834","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.01834","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Contrastive":[0],"learning":[1],"(CL)":[2],"reduces":[3],"annotation":[4],"cost":[5],"via":[6],"auto-derived":[7],"supervisory":[8],"signals.":[9],"Since":[10],"large-scale":[11],"in-house":[12],"CL":[13,28,159],"datasets":[14],"are":[15,30,41],"infeasible,":[16],"reliance":[17],"on":[18,50],"third-party":[19],"or":[20,121],"internet":[21],"data":[22],"is":[23,92],"common.":[24],"Recent":[25],"studies":[26],"show":[27,127],"models":[29],"vulnerable":[31],"to":[32,95,118],"data-poisoning":[33,47],"backdoor":[34,48,129,148],"attacks,":[35],"but":[36],"their":[37],"generalization":[38],"and":[39,62,142],"robustness":[40],"underexplored.":[42],"We":[43,110],"systematically":[44],"evaluate":[45],"existing":[46],"attacks":[49,130],"CL,":[51],"revealing":[52],"limitations:":[53],"poor":[54],"dataset":[55,87,154],"adaptability,":[56],"low":[57,96],"success":[58,97],"rates,":[59],"limited":[60],"portability,":[61],"restrictive":[63],"assumptions":[64],"(e.g.,":[65],"downstream":[66],"task":[67],"knowledge).":[68],"Interestingly,":[69],"trigger":[70],"samples":[71],"exhibit":[72],"distinguishable":[73],"statistical":[74,103],"divergence":[75],"from":[76],"clean":[77],"samples,":[78],"which":[79],"inspires":[80],"repurposing":[81,91],"it":[82],"as":[83,134],"a":[84,106,113],"watermark":[85],"for":[86,153],"IP":[88,155],"protection.":[89],"Direct":[90],"challenging":[93,158],"due":[94],"rates;":[98],"we":[99],"overcome":[100],"this":[101],"by":[102],"verification":[104],"using":[105],"unified":[107],"density":[108],"metric.":[109],"further":[111],"propose":[112],"multi-level":[114],"watermarking":[115],"scheme":[116],"adapting":[117],"feature-level,":[119],"soft-label,":[120],"hard-label":[122],"outputs":[123],"in":[124,157],"CL.":[125],"Experiments":[126],"some":[128],"can":[131],"be":[132],"repurposed":[133],"effective":[135],"watermarks":[136],"with":[137],"trade-offs":[138],"among":[139],"fidelity,":[140],"verifiability,":[141],"robustness.":[143],"This":[144],"work":[145],"demonstrates":[146],"weak":[147],"effects":[149],"become":[150],"reliable":[151],"signals":[152],"protection":[156],"settings.":[160]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-05-06T00:00:00"}