Xiao, Y. (2026) “Class-feature Watermark: A Resilient Black-box Watermark Against Model Extraction Attacks”, Proceedings of the AAAI Conference on Artificial Intelligence, 40(42), pp. 35903–35912. doi: 10.1609/aaai.v40i42.40905.