Xiao, Y.; Ye, Q.; Liang, Z.; Li, H.; Li, R.; Zheng, H.; Hu, H. Class-Feature Watermark: A Resilient Black-Box Watermark Against Model Extraction Attacks. AAAI 2026, 40, 35903-35912.