{"id":"https://openalex.org/W7162794300","doi":"https://doi.org/10.48550/arxiv.2605.29809","title":"Cert-LAS: Toward Certified Model Ownership Verification for Text-to-Image Diffusion Models via Layer-Adaptive Smoothing","display_name":"Cert-LAS: Toward Certified Model Ownership Verification for Text-to-Image Diffusion Models via Layer-Adaptive Smoothing","publication_year":2026,"publication_date":"2026-05-28","ids":{"openalex":"https://openalex.org/W7162794300","doi":"https://doi.org/10.48550/arxiv.2605.29809"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.29809","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.29809","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.29809","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5102004889","display_name":"Qi Liao","orcid":"https://orcid.org/0000-0001-6796-104X"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Qi, Leyi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137313566","display_name":"Yiming Li","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Yiming","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137385810","display_name":"Siyuan Liang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liang, Siyuan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137365870","display_name":"Zhengzhong Tu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Tu, Zhengzhong","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5137360569","display_name":"Dacheng Tao","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Tao, Dacheng","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.560699999332428,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.560699999332428,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10388","display_name":"Advanced Steganography and Watermarking Techniques","score":0.1559000015258789,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10775","display_name":"Generative Adversarial Networks and Image Synthesis","score":0.062199998646974564,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/digital-watermarking","display_name":"Digital watermarking","score":0.7753999829292297},{"id":"https://openalex.org/keywords/watermark","display_name":"Watermark","score":0.7721999883651733},{"id":"https://openalex.org/keywords/certification","display_name":"Certification","score":0.5526000261306763},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.5497000217437744},{"id":"https://openalex.org/keywords/smoothing","display_name":"Smoothing","score":0.5436999797821045},{"id":"https://openalex.org/keywords/property","display_name":"Property (philosophy)","score":0.44179999828338623}],"concepts":[{"id":"https://openalex.org/C150817343","wikidata":"https://www.wikidata.org/wiki/Q875932","display_name":"Digital watermarking","level":3,"score":0.7753999829292297},{"id":"https://openalex.org/C164112704","wikidata":"https://www.wikidata.org/wiki/Q7974348","display_name":"Watermark","level":3,"score":0.7721999883651733},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6916999816894531},{"id":"https://openalex.org/C46304622","wikidata":"https://www.wikidata.org/wiki/Q374814","display_name":"Certification","level":2,"score":0.5526000261306763},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.5497000217437744},{"id":"https://openalex.org/C3770464","wikidata":"https://www.wikidata.org/wiki/Q775963","display_name":"Smoothing","level":2,"score":0.5436999797821045},{"id":"https://openalex.org/C189950617","wikidata":"https://www.wikidata.org/wiki/Q937228","display_name":"Property (philosophy)","level":2,"score":0.44179999828338623},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4171000123023987},{"id":"https://openalex.org/C69357855","wikidata":"https://www.wikidata.org/wiki/Q163214","display_name":"Diffusion","level":2,"score":0.41499999165534973},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.399399995803833},{"id":"https://openalex.org/C40305131","wikidata":"https://www.wikidata.org/wiki/Q2616305","display_name":"Obfuscation","level":2,"score":0.37279999256134033},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.35910001397132874},{"id":"https://openalex.org/C110251889","wikidata":"https://www.wikidata.org/wiki/Q1569697","display_name":"Model checking","level":2,"score":0.35499998927116394},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.3465999960899353},{"id":"https://openalex.org/C149782125","wikidata":"https://www.wikidata.org/wiki/Q160039","display_name":"Econometrics","level":1,"score":0.2867000102996826},{"id":"https://openalex.org/C2780581891","wikidata":"https://www.wikidata.org/wiki/Q15738686","display_name":"Copy protection","level":4,"score":0.28619998693466187},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2849000096321106},{"id":"https://openalex.org/C111498074","wikidata":"https://www.wikidata.org/wiki/Q173326","display_name":"Formal verification","level":2,"score":0.2800999879837036}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.29809","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.29809","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.29809","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.29809","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Large-scale":[0],"text-to-image":[1],"(T2I)":[2],"diffusion":[3,32,102],"models":[4,90],"have":[5],"enabled":[6],"unprecedented":[7],"creative":[8],"applications,":[9],"but":[10],"their":[11],"unauthorized":[12],"use":[13],"has":[14],"raised":[15],"serious":[16],"intellectual":[17],"property":[18],"concerns,":[19],"making":[20],"model":[21,50,117],"ownership":[22,111],"verification":[23,40,74,143],"(MOV)":[24],"increasingly":[25],"critical.":[26],"We":[27,130],"find":[28],"that":[29,43],"existing":[30],"backdoor-based":[31],"watermarking":[33],"methods":[34],"often":[35],"(implicitly)":[36],"assume":[37],"a":[38,48],"\"faithful\"":[39],"process,":[41],"namely,":[42],"the":[44,53,83,115,146,155],"verifier":[45],"can":[46,139],"query":[47],"suspicious":[49],"and":[51,104,109,159],"obtain":[52],"faithful":[54],"watermark":[55,70,121],"response":[56],"to":[57,124,162],"complete":[58],"MOV.":[59],"However,":[60],"in":[61,145],"practice,":[62],"adversaries":[63],"may":[64],"intentionally":[65],"or":[66],"unintentionally":[67],"damage":[68],"potential":[69],"signals,":[71],"significantly":[72,119],"degrading":[73],"reliability.":[75],"To":[76],"address":[77],"this":[78],"issue,":[79],"we":[80],"propose":[81],"Cert-LAS,":[82],"first":[84],"certified":[85],"MOV":[86],"method":[87],"for":[88],"T2I":[89],"based":[91],"on":[92],"layer-adaptive":[93,107],"smoothing.":[94],"In":[95],"general,":[96],"Cert-LAS":[97,138,158],"embeds":[98],"specified":[99],"watermarks":[100],"using":[101],"classifiers":[103],"an":[105],"LFS-guided":[106],"noise,":[108],"verifies":[110],"by":[112],"examining":[113],"whether":[114],"suspected":[116],"exhibits":[118],"stronger":[120],"responses":[122],"compared":[123],"unwatermarked":[125],"references":[126],"through":[127],"hypothesis":[128],"testing.":[129],"further":[131],"prove":[132],"that,":[133],"under":[134],"certain":[135],"conditions,":[136],"our":[137],"still":[140],"achieve":[141],"reliable":[142],"even":[144],"presence":[147],"of":[148,157],"malicious":[149],"removal":[150],"attacks.":[151,164],"Extensive":[152],"experiments":[153],"validate":[154],"effectiveness":[156],"its":[160],"resistance":[161],"adaptive":[163],"Our":[165],"code":[166],"is":[167],"available":[168],"at":[169],"https://github.com/Leyi-Qi/Cert-LAS.":[170]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-05-30T00:00:00"}