Demonstration venue · read-only. Every page can be browsed; the buttons that would change it are switched off. Create an account to run TaxoReview on your own data. A simulation from public publication records: the people listed were not invited and did not agree to review.
? Tutorial for this page

Yanhao Wei

dblp:178/5578 · DBLP profile ↗
← Back
1ranked-venue papers
0as first author
1since 2021 · last 2025
—ORCID · unresolved

Domains — the database's venue-derived domains; a paper can count in several

Security and privacy · 1 · 1 since 2021

Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.

Network and information security
1 paper
Security and privacy of machine learning · 33% Privacy and data protection · 33% Digital forensics and information hiding · 33%
Artificial intelligence
1 paper
Generative modeling · 100%

Topics — the 4 heaviest of 4, each with the papers that count most for it

TopicWeightPapersLastEvidence papers
Security and privacy of machine learning
generative model security
0.912025
Towards Reliable Verification of Unauthorized Data Usage in Personalized Text-to-Image Diffusion Models · SP 2025
Digital forensics and information hiding › watermarking
generative model watermarking
0.912025
Towards Reliable Verification of Unauthorized Data Usage in Personalized Text-to-Image Diffusion Models · SP 2025
Privacy and data protection › differential privacy › privacy auditing
unauthorized data usage detection
0.912025
Towards Reliable Verification of Unauthorized Data Usage in Personalized Text-to-Image Diffusion Models · SP 2025
Machine learning › Generative modeling
diffusion model
0.312025
Towards Reliable Verification of Unauthorized Data Usage in Personalized Text-to-Image Diffusion Models · SP 2025

Methods — techniques the papers use, named apart from their topics

hypothesis testing · 1.7hypersphere classification · 1.7human perceptual-aware constraint · 1.7
YearPublicationVenuePosition
2025 Towards Reliable Verification of Unauthorized Data Usage in Personalized Text-to-Image Diffusion Models
abstract
Text-to-image diffusion models are pushing the boundaries of what generative AI can achieve in our lives. Beyond their ability to generate general images, new personalization techniques have been proposed to customize the pretrained base models for crafting images with specific themes or styles. Such a lightweight solution, enabling AI practitioners and developers to easily build their own personalized models, also poses a new concern regarding whether the personalized models are trained from unauthorized data. A promising solution is to proactively enable data traceability in generative models, where data owners embed external coatings (e.g., image watermarks or backdoor triggers) onto the datasets before releasing. Later the models trained over such datasets will also learn the coatings and unconsciously reproduce them in the generated mimicries, which can be extracted and used as the data usage evidence. However, we identify the existing coatings cannot be effectively learned in personalization tasks, making the corresponding verification less reliable. In this paper, we introduce SIREN, a novel methodology to proactively trace unauthorized data usage in black-box personalized text-to-image diffusion models. Our approach optimizes the coating in a delicate way to be recognized by the model as a feature relevant to the personalization task, thus significantly improving its learnability. We also utilize a human perceptual-aware constraint, a hypersphere classification technique, and a hypothesis-testing-guided verification method to enhance the stealthiness and detection accuracy of the coating. The effectiveness of SIREN is verified through extensive experiments on a diverse set of benchmark datasets, models, and learning algorithms. SIREN is also effective in various real-world scenarios and evaluated against potential countermeasures. Our code is publicly available here.
Boheng Li, Yanhao Wei, Yankai Fu, Zhenting Wang, Yiming Li 0004, Jie Zhang 0073, Run Wang 0001, Tianwei Zhang 0004
SP2