{"id":"https://openalex.org/W7161157216","doi":"https://doi.org/10.48550/arxiv.2605.12942","title":"From Compression to Accountability: Harmless Copyright Protection for Dataset Distillation","display_name":"From Compression to Accountability: Harmless Copyright Protection for Dataset Distillation","publication_year":2026,"publication_date":"2026-05-13","ids":{"openalex":"https://openalex.org/W7161157216","doi":"https://doi.org/10.48550/arxiv.2605.12942"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.12942","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.12942","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.12942","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5136140954","display_name":"Yan Liang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liang, Yan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136164537","display_name":"Ziyuan Yang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yang, Ziyuan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5123565670","display_name":"Mengyu Sun","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Sun, Mengyu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136105939","display_name":"Joey Tianyi Zhou","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhou, Joey Tianyi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5136185350","display_name":"Yi Zhang","orcid":"https://orcid.org/0009-0000-5089-0839"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Yi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.6572999954223633,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.6572999954223633,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.05810000002384186,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T14347","display_name":"Big Data and Digital Economy","score":0.054499998688697815,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/construct","display_name":"Construct (python library)","score":0.510699987411499},{"id":"https://openalex.org/keywords/copying","display_name":"Copying","score":0.44679999351501465},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.4185999929904938},{"id":"https://openalex.org/keywords/signature","display_name":"Signature (topology)","score":0.36090001463890076},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.3476000130176544},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.34060001373291016},{"id":"https://openalex.org/keywords/raw-data","display_name":"Raw data","score":0.32499998807907104},{"id":"https://openalex.org/keywords/tracing","display_name":"Tracing","score":0.31299999356269836}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7829999923706055},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5138999819755554},{"id":"https://openalex.org/C2780801425","wikidata":"https://www.wikidata.org/wiki/Q5164392","display_name":"Construct (python library)","level":2,"score":0.510699987411499},{"id":"https://openalex.org/C2779151265","wikidata":"https://www.wikidata.org/wiki/Q1156791","display_name":"Copying","level":2,"score":0.44679999351501465},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4309999942779541},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.4185999929904938},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.40119999647140503},{"id":"https://openalex.org/C2779696439","wikidata":"https://www.wikidata.org/wiki/Q7512811","display_name":"Signature (topology)","level":2,"score":0.36090001463890076},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.3476000130176544},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.34060001373291016},{"id":"https://openalex.org/C132964779","wikidata":"https://www.wikidata.org/wiki/Q2110223","display_name":"Raw data","level":2,"score":0.32499998807907104},{"id":"https://openalex.org/C138673069","wikidata":"https://www.wikidata.org/wiki/Q322229","display_name":"Tracing","level":2,"score":0.31299999356269836},{"id":"https://openalex.org/C204030448","wikidata":"https://www.wikidata.org/wiki/Q101017","display_name":"Distillation","level":2,"score":0.3111000061035156},{"id":"https://openalex.org/C77618280","wikidata":"https://www.wikidata.org/wiki/Q1155772","display_name":"Scheme (mathematics)","level":2,"score":0.3091000020503998},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.30300000309944153},{"id":"https://openalex.org/C165064840","wikidata":"https://www.wikidata.org/wiki/Q1321061","display_name":"Matching (statistics)","level":2,"score":0.290800005197525},{"id":"https://openalex.org/C16910744","wikidata":"https://www.wikidata.org/wiki/Q7705759","display_name":"Test data","level":2,"score":0.28610000014305115},{"id":"https://openalex.org/C2777655017","wikidata":"https://www.wikidata.org/wiki/Q1501161","display_name":"Toolbox","level":2,"score":0.2711000144481659},{"id":"https://openalex.org/C2780428219","wikidata":"https://www.wikidata.org/wiki/Q16952335","display_name":"Cover (algebra)","level":2,"score":0.25999999046325684},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.2574999928474426}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.12942","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.12942","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.12942","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.12942","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.5126610398292542}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Large-scale":[0],"datasets":[1,53,71],"have":[2,22],"been":[3],"a":[4,106,127,148,182,206],"key":[5],"driving":[6],"force":[7],"behind":[8],"the":[9,46,141,154,159,171,219,223],"rapid":[10],"progress":[11],"of":[12,48,57,137,205],"deep":[13,94],"learning,":[14],"but":[15],"their":[16],"storage,":[17],"computational,":[18],"and":[19,43,50,60,76,178,199,221],"energy":[20],"costs":[21],"become":[23],"increasingly":[24],"prohibitive.":[25],"Dataset":[26],"distillation":[27],"(DD)":[28],"mitigates":[29],"this":[30,89,122],"problem":[31],"by":[32,121,186,212],"synthesizing":[33],"compact":[34],"yet":[35],"informative":[36],"datasets,":[37,75],"thereby":[38],"enabling":[39],"efficient":[40],"model":[41,188,208],"training":[42],"storage.":[44],"However,":[45],"ease":[47],"copying":[49],"distributing":[51],"distilled":[52,74,133],"introduces":[54,167],"serious":[55],"risks":[56],"copyright":[58],"infringement":[59],"data":[61,201],"leakage.":[62],"Existing":[63],"protection":[64,130],"methods":[65],"are":[66],"primarily":[67],"designed":[68,192],"for":[69,132],"raw":[70],"rather":[72],"than":[73],"typically":[77],"rely":[78],"on":[79,114],"backdoor-triggered":[80],"malicious":[81],"behaviors,":[82],"which":[83],"may":[84],"raise":[85],"security":[86],"concerns.":[87],"In":[88],"paper,":[90],"we":[91,124,180],"observe":[92],"that":[93,195],"neural":[95],"networks":[96],"tend":[97],"to":[98],"memorize":[99],"subpopulation":[100,150],"distributions":[101],"during":[102],"training,":[103],"resulting":[104],"in":[105],"systematic":[107],"prediction":[108],"bias,":[109],"where":[110],"models":[111],"perform":[112],"better":[113],"samples":[115],"aligned":[116],"with":[117,218],"memorized":[118],"subpopulations.":[119],"Motivated":[120],"observation,":[123],"propose":[125],"SubPopMark,":[126],"harmless":[128],"subpopulation-driven":[129],"framework":[131],"datasets.":[134],"SubPopMark":[135],"consists":[136],"two":[138],"stages.":[139],"First,":[140],"Copyright":[142],"Verification":[143],"Marker(CVM)":[144],"optimization":[145,156,164],"stage":[146,165],"injects":[147],"class-consistent":[149],"bias":[151],"while":[152],"preserving":[153],"original":[155],"trajectory.":[157],"Second,":[158],"User-Specific":[160],"Tracing":[161],"Marker":[162],"(USTM)":[163],"further":[166],"user-distinguishable":[168],"perturbations":[169],"into":[170],"CVM-augmented":[172],"data.":[173],"To":[174],"enable":[175],"black-box":[176],"verification":[177],"tracing,":[179],"construct":[181],"reference":[183,226],"behavior":[184,216,227],"bank":[185,220],"collecting":[187],"outputs":[189],"over":[190],"carefully":[191],"test":[193],"sets":[194],"cover":[196],"both":[197],"standard":[198],"subpopulation-shifted":[200],"distributions.":[202],"The":[203],"provenance":[204],"suspicious":[207],"is":[209],"then":[210],"inferred":[211],"comparing":[213],"its":[214],"output":[215],"signature":[217],"identifying":[222],"most":[224],"consistent":[225],"pattern.":[228]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-05-15T00:00:00"}