Xiao, Yaxin, Qingqing Ye, Zi Liang, Haoyang Li, RongHua Li, Huadi Zheng, and Haibo Hu. 2026. “Class-Feature Watermark: A Resilient Black-Box Watermark Against Model Extraction Attacks”. Proceedings of the AAAI Conference on Artificial Intelligence 40 (42):35903-12. https://doi.org/10.1609/aaai.v40i42.40905.