← Search

Isao Echizen

10 accepted papers

2025

Agentic Copyright Watermarking against Adversarial Evidence Forgery with Purification-Agnostic Curriculum Proxy Learning

ICASSP 2025accepted

With the proliferation of AI agents in various domains, protecting the ownership of AI models has become crucial due to the significant investment in their development. Unauthorized use and illegal distribution of these models pose serious threats to intellectual property, necessitating effective co…

Cited by 0SourceScholar
2025

Rethinking Invariance Regularization in Adversarial Training to Improve Robustness-Accuracy Trade-off

ICLR 2025poster

Adversarial training often suffers from a robustness-accuracy trade-off, where achieving high robustness comes at the cost of accuracy. One approach to mitigate this trade-off is leveraging invariance regularization, which encourages model invariance under adversarial perturbations; however, it stil…

Cited by 0SourcePDFScholar
2024

Cross-Attention watermarking of Large Language Models

ICASSP 2024accepted

A new approach to linguistic watermarking of language models is presented in which information is imperceptibly inserted into the output text while preserving its readability and original meaning. A cross-attention mechanism is used to embed watermarks in the text during inference. Two methods using…

Cited by 0SourceScholar
2023

VoteTRANS: Detecting Adversarial Text without Training by Voting on Hard Labels of Transformations

ACL 2023findings

Adversarial attacks reveal serious flaws in deep learning models. More dangerously, these attacks preserve the original meaning and escape human recognition. Existing methods for detecting these attacks need to be trained using original/adversarial data. In this paper, we propose detection without t…

2022

EASE: Entity-Aware Contrastive Learning of Sentence Embedding

NAACL 2022long

We present EASE, a novel method for learning sentence embeddings via contrastive learning between sentences and their related entities. The advantage of using entity supervision is twofold: (1) entities have been shown to be a strong indicator of text semantics and thus should provide rich training…

2021

OpenForensics: Large-Scale Challenging Dataset for Multi-Face Forgery Detection and Segmentation In-the-Wild

ICCV 2021poster

The proliferation of deepfake media is raising concerns among the public and relevant authorities. It has become essential to develop countermeasures against forged faces in social media. This paper presents a comprehensive study on two new countermeasure tasks: multi-face forgery detection and segm…

Cited by 99PDFScholar
2019

Audiovisual Speaker Conversion: Jointly and Simultaneously Transforming Facial Expression and Acoustic Characteristics

ICASSP 2019accepted

An audiovisual speaker conversion method is presented for simultaneously transforming the facial expressions and voice of a source speaker into those of a target speaker. Transforming the facial and acoustic features together makes it possible for the converted voice and facial expressions to be hig…

Cited by 0SourceScholar
2019

Capsule-forensics: Using Capsule Networks to Detect Forged Images and Videos

ICASSP 2019accepted

Recent advances in media generation techniques have made it easier for attackers to create forged images and videos. State-of-the-art methods enable the real-time creation of a forged version of a single video obtained from a social network. Although numerous methods have been developed for detectin…

Cited by 0SourceScholar
2018

High-Quality Nonparallel Voice Conversion Based on Cycle-Consistent Adversarial Network

ICASSP 2018accepted

Although voice conversion (VC) algorithms have achieved remarkable success along with the development of machine learning, superior performance is still difficult to achieve when using nonparallel data. In this paper, we propose using a cycle-consistent adversarial network (CycleGAN) for nonparallel…

Cited by 0SourceScholar
2016

Privacy-preserving sound to degrade automatic speaker verification performance

ICASSP 2016accepted

In this paper, a privacy protection method to prevent speaker identification from recorded speech is proposed and evaluated. Although many techniques for preserving various private information included in speech have been proposed, their impacts on human speech communication in physical space are no…

Cited by 0SourceScholar