English
Related papers

Related papers: A Transfer Attack to Image Watermarks

200 papers

Image watermarking involves embedding and extracting watermarks within a cover image, with deep learning approaches emerging to bolster generalization and robustness. Predominantly, current methods employ convolution and concatenation for…

Multimedia · Computer Science 2023-10-10 Agnibh Dasgupta , Xin Zhong

The success of deep learning research has catapulted deep models into production systems that our society is becoming increasingly dependent on, especially in the image and video domains. However, recent work has shown that these largely…

Computer Vision and Pattern Recognition · Computer Science 2018-11-30 Nathan Inkawhich , Matthew Inkawhich , Yiran Chen , Hai Li

We formalize and analyze the trade-off between backdoor-based watermarks and adversarial defenses, framing it as an interactive protocol between a verifier and a prover. While previous works have primarily focused on this trade-off, our…

Machine Learning · Computer Science 2026-01-22 Grzegorz Głuch , Berkant Turan , Sai Ganesh Nagarajan , Sebastian Pokutta

Training a high-performance deep neural network requires large amounts of data and computational resources. Protecting the intellectual property (IP) and commercial ownership of a deep model is challenging yet increasingly crucial. A major…

Computer Vision and Pattern Recognition · Computer Science 2024-03-13 Shuyang Yu , Junyuan Hong , Haobo Zhang , Haotao Wang , Zhangyang Wang , Jiayu Zhou

Diffusion-based watermarking methods embed verifiable marks by manipulating the initial noise or the reverse diffusion trajectory. However, these methods share a critical assumption: verification can succeed only if the diffusion trajectory…

Computer Vision and Pattern Recognition · Computer Science 2026-04-02 Rui Bao , Zheng Gao , Xiaoyu Li , Xiaoyan Feng , Yang Song , Jiaojiao Jiang

Trigger set-based watermarking schemes have gained emerging attention as they provide a means to prove ownership for deep neural network model owners. In this paper, we argue that state-of-the-art trigger set-based watermarking algorithms…

Cryptography and Security · Computer Science 2023-01-20 Suyoung Lee , Wonho Song , Suman Jana , Meeyoung Cha , Sooel Son

State-of-the-art text-to-image models generate photorealistic images at an unprecedented speed. This work focuses on models that operate in a bitwise autoregressive manner over a discrete set of tokens that is practically infinite in size.…

Computer Vision and Pattern Recognition · Computer Science 2025-12-04 Louis Kerner , Michel Meintz , Bihe Zhao , Franziska Boenisch , Adam Dziedzic

In recent years, the adversarial vulnerability of deep neural networks (DNNs) has raised increasing attention. Among all the threat models, no-box attacks are the most practical but extremely challenging since they neither rely on any…

Computer Vision and Pattern Recognition · Computer Science 2025-02-18 Qilong Zhang , Youheng Sun , Chaoning Zhang , Chaoqun Li , Xuanhan Wang , Jingkuan Song , Lianli Gao

The ability to embed watermarks in images is a fundamental problem of interest for computer vision, and is exacerbated by the rapid rise of generated imagery in recent times. Current state-of-the-art techniques suffer from computational and…

Image and Video Processing · Electrical Eng. & Systems 2025-09-17 Vinay Shukla , Prachee Sharma , Ryan Rossi , Sungchul Kim , Tong Yu , Aditya Grover

With the development of deep learning, high-value and high-cost models have become valuable assets, and related intellectual property protection technologies have become a hot topic. However, existing model watermarking work in black-box…

Cryptography and Security · Computer Science 2024-04-16 Na Zhao , Kejiang Chen , Weiming Zhang , Nenghai Yu

As generative audio models are rapidly evolving, AI-generated audios increasingly raise concerns about copyright infringement and misinformation spread. Audio watermarking, as a proactive defense, can embed secret messages into audio for…

Cryptography and Security · Computer Science 2025-12-08 Lingfeng Yao , Chenpei Huang , Shengyao Wang , Junpei Xue , Hanqing Guo , Jiang Liu , Phone Lin , Tomoaki Ohtsuki , Miao Pan

Unauthorized screen-shooting poses a critical data leakage risk. Resisting screen-shooting attacks typically requires high-strength watermark embedding, inevitably degrading the cover image. To resolve the robustness-fidelity conflict,…

Image and Video Processing · Electrical Eng. & Systems 2026-01-21 Yufeng Wu , Xin Liao , Baowei Wang , Han Fang , Xiaoshuai Wu , Guiling Wang

Transfer-based adversarial example is one of the most important classes of black-box attacks. However, there is a trade-off between transferability and imperceptibility of the adversarial perturbation. Prior work in this direction often…

Computer Vision and Pattern Recognition · Computer Science 2022-12-29 Fangcheng Liu , Chao Zhang , Hongyang Zhang

Advanced text-to-image diffusion models raise safety concerns regarding identity privacy violation, copyright infringement, and Not Safe For Work content generation. Towards this, unlearning methods have been developed to erase these…

Computer Vision and Pattern Recognition · Computer Science 2024-05-01 Xiaoxuan Han , Songlin Yang , Wei Wang , Yang Li , Jing Dong

The rapid development of video generative models has led to a surge in highly realistic synthetic videos, raising ethical concerns related to disinformation and copyright infringement. Recently, video watermarking has been proposed as a…

Cryptography and Security · Computer Science 2025-05-29 Zhengyuan Jiang , Moyang Guo , Kecen Li , Yuepeng Hu , Yupu Wang , Zhicong Huang , Cheng Hong , Neil Zhenqiang Gong

Recently, detecting AI-generated images produced by diffusion-based models has attracted increasing attention due to their potential threat to safety. Among existing approaches, reconstruction-based methods have emerged as a prominent…

Computer Vision and Pattern Recognition · Computer Science 2026-04-15 Haoyang Jiang , Mingyang Yi , Shaolei Zhang , Junxian Cai , Qingbin Liu , Xi Chen , Ju Fan

Latent Diffusion Models (LDMs) enable a wide range of applications but raise ethical concerns regarding illegal utilization. Adding watermarks to generative model outputs is a vital technique employed for copyright tracking and mitigating…

Cryptography and Security · Computer Science 2025-06-02 Liangqi Lei , Keke Gai , Jing Yu , Liehuang Zhu

The rise of generative neural networks has triggered an increased demand for intellectual property (IP) protection in generated content. Deep watermarking techniques, recognized for their flexibility in IP protection, have garnered…

Cryptography and Security · Computer Science 2024-02-27 Biqing Qi , Junqi Gao , Yiang Luo , Jianxing Liu , Ligang Wu , Bowen Zhou

Due to the rapid growth of machine learning tools and specifically deep networks in various computer vision and image processing areas, application of Convolutional Neural Networks for watermarking have recently emerged. In this paper, we…

Transferable adversarial attack is always in the spotlight since deep learning models have been demonstrated to be vulnerable to adversarial samples. However, existing physical attack methods do not pay enough attention on transferability…

Computer Vision and Pattern Recognition · Computer Science 2022-05-20 Yu Zhang , Zhiqiang Gong , Yichuang Zhang , YongQian Li , Kangcheng Bin , Jiahao Qi , Wei Xue , Ping Zhong