Demonstration venue · read-only. Every page can be browsed; the buttons that would change it are switched off. Create an account to run TaxoReview on your own data. A simulation from public publication records: the people listed were not invited and did not agree to review.
? Tutorial for this page

He Li 0010

dblp:05/4746-10 · DBLP profile ↗
← Back
4ranked-venue papers
2as first author
4since 2021 · last 2026
0000-0003-0611-3236ORCID · conflict

Domains — the database's venue-derived domains; a paper can count in several

Artificial intelligence and machine learning · 4 · 2 first-author · 4 since 2021Graphics, computer vision, multimedia, augmented reality and games · 3 · 1 first-author · 3 since 2021

Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.

Network and information security
3 papers
Digital forensics and information hiding · 44% Security and privacy of machine learning · 44% Cryptographic protocols and secure computation · 11%
Artificial intelligence
2 papers
Language models and text generation · 57% Generative modeling · 43%
Theoretical computer science
1 paper
Coding theory · 100%

Topics — the 10 heaviest of 11, each with the papers that count most for it

TopicWeightPapersLastEvidence papers
Digital forensics and information hiding › watermarking › text watermarking
LLM watermarking
1.012026
ARGH-Mark: Anchor-Synchronized Watermarking with Hamming Correction for Robust and Quality-Preserving LLM Attribution · AAAI 2026
Security and privacy of machine learning
model stealing
1.012026
DeepTracer: Tracing Stolen Model via Deep Coupled Watermarks · AAAI 2026
Security and privacy of machine learning › model intellectual property protection
model watermarking
1.012026
DeepTracer: Tracing Stolen Model via Deep Coupled Watermarks · AAAI 2026
Security and privacy of machine learning › model intellectual property protection
ownership verification
1.012026
DeepTracer: Tracing Stolen Model via Deep Coupled Watermarks · AAAI 2026
Digital forensics and information hiding › watermarking
robust watermarking
1.012026
DeepTracer: Tracing Stolen Model via Deep Coupled Watermarks · AAAI 2026
Digital forensics and information hiding
watermarking
1.012026
ARGH-Mark: Anchor-Synchronized Watermarking with Hamming Correction for Robust and Quality-Preserving LLM Attribution · AAAI 2026
Machine learning › Generative modeling
diffusion model
0.812024
CipherDM: Secure Three-Party Inference for Diffusion Model Sampling · ECCV (71) 2024
Cryptographic protocols and secure computation
secure multiparty computation
0.812024
CipherDM: Secure Three-Party Inference for Diffusion Model Sampling · ECCV (71) 2024
Coding theory
error-correcting codes
0.312026
ARGH-Mark: Anchor-Synchronized Watermarking with Hamming Correction for Robust and Quality-Preserving LLM Attribution · AAAI 2026
Coding theory › error-correcting codes
hamming codes
0.312026
ARGH-Mark: Anchor-Synchronized Watermarking with Hamming Correction for Robust and Quality-Preserving LLM Attribution · AAAI 2026

Methods — techniques the papers use, named apart from their topics

vocabulary modulation · 3.0hamming error correction · 3.0anchor-synchronized phase recovery · 3.0secure computation · 1.5diffusion model · 1.5watermark sample filtering · 1.0watermark sample construction · 1.0coupling loss · 1.0
YearPublicationVenuePosition
2026 ARGH-Mark: Anchor-Synchronized Watermarking with Hamming Correction for Robust and Quality-Preserving LLM Attribution
abstract
The proliferation of large language models has intensified demands for reliable content attribution, yet existing watermarking techniques face a fundamental trilemma: they cannot simultaneously optimize for robustness against attacks, minimal text quality degradation, and detection efficiency. To resolve this challenge, we propose ARGH-Mark, a novel watermarking framework that integrates three synergistic innovations: (1) Anchor-synchronized phase recovery for maintaining detection integrity under insertion/deletion attacks, (2) RG-balanced vocabulary modulation that dynamically partitions lexicons via contextual hashing to preserve generation quality, and (3) Hamming-based error correction enabling single-bit error rectification through algebraic coding. Comprehensive evaluations across question answering (ELI5), summarization (CNN/DailyMail), and text generation (C4) demonstrate state-of-the-art performance: the proposed ARGH-Mark framework achieves near-perfect match rate and bit accuracy across diverse configurations, while preserving the quality of the generated text. It significantly reduces detection latency, enabling real-time extraction, and maintains high robustness against token tampering attacks through integrated Hamming error correction, ensuring reliable attribution in adversarial settings. ARGH-Mark achieves a new Pareto frontier in the watermarking design space and advances trustworthy deployment of generative AI in alignment-critical applications.
He Li 0010, Xiaojun Chen 0004, Jingcheng He, Zhendong Zhao, Shuguang Yuan 0003, Yunfei Yang 0001
AAAI1
2026 DeepTracer: Tracing Stolen Model via Deep Coupled Watermarks
abstract
Model watermarking techniques can embed watermark information into the protected model for ownership declaration by constructing specific input-output pairs. However, existing watermarks are easily removed when facing model stealing attacks, and make it difficult for model owners to effectively verify the copyright of stolen models. In this paper, we analyze the root cause of the failure of current watermarking methods under model stealing scenarios and then explore potential solutions. Specifically, we introduce a robust watermarking framework, DeepTracer, which leverages a novel watermark samples construction method and a same-class coupling loss constraint. DeepTracer can incur a high-coupling model between watermark task and primary task that makes adversaries inevitably learn the hidden watermark task when stealing the primary task functionality. Furthermore, we propose an effective watermark samples filtering mechanism that elaborately select watermark key samples used in model ownership verification to enhance the reliability of watermarks. Extensive experiments across multiple datasets and models demonstrate that our method surpasses existing approaches in defending against various model stealing attacks, as well as watermark attacks, and achieves new state-of-the-art effectiveness and robustness.
Yunfei Yang 0001, Xiaojun Chen 0004, Yuexin Xuan, Zhendong Zhao, He Li 0010
AAAI6
2025 ColorFP: Improving AI-Generated Text Detection via Fixed Vocabulary Partitioning and Half-Bit Fingerprinting
He Li 0010, Xiaojun Chen 0004, Yunfei Yang 0001, Zhendong Zhao, Shuguang Yuan 0003
PRICAI (4)1
2024 CipherDM: Secure Three-Party Inference for Diffusion Model Sampling
Xiaojun Chen 0004, He Li 0010, Tingyu Fan, Zhendong Zhao
ECCV (71)4