English
Related papers

Related papers: When There Is No Decoder: Removing Watermarks from…

200 papers

Copyright protection for deep neural networks (DNNs) is an urgent need for AI corporations. To trace illegally distributed model copies, DNN watermarking is an emerging technique for embedding and verifying secret identity messages in the…

Cryptography and Security · Computer Science 2023-03-20 Yifan Yan , Xudong Pan , Mi Zhang , Min Yang

The state of the art performance of deep learning models comes at a high cost for companies and institutions, due to the tedious data collection and the heavy processing requirements. Recently, [35, 22] proposed to watermark convolutional…

Cryptography and Security · Computer Science 2021-04-14 Erwan Le Merrer , Patrick Perez , Gilles Trédan

In recent years, there has been significant advancement in the field of model watermarking techniques. However, the protection of image-processing neural networks remains a challenge, with only a limited number of methods being developed.…

Cryptography and Security · Computer Science 2023-02-20 Huajie Chen , Tianqing Zhu , Chi Liu , Shui Yu , Wanlei Zhou

Motivated by the problem of detecting AI-generated text, we consider the problem of watermarking the output of language models with provable guarantees. We aim for watermarks which satisfy: (a) undetectability, a cryptographic notion…

Cryptography and Security · Computer Science 2025-05-29 Noah Golowich , Ankur Moitra

Watermarking technology has gained significant attention due to the increasing importance of intellectual property (IP) rights, particularly with the growing deployment of large language models (LLMs) on billions resource-constrained edge…

Cryptography and Security · Computer Science 2025-07-14 Qingxiao Guo , Xinjie Zhu , Yilong Ma , Hui Jin , Yunhao Wang , Weifeng Zhang , Xiaobing Guo

Watermarking has been widely adopted for protecting the intellectual property (IP) of Deep Neural Networks (DNN) to defend the unauthorized distribution. Unfortunately, the popular data-poisoning DNN watermarking scheme relies on target…

Cryptography and Security · Computer Science 2022-10-18 Run Wang , Jixing Ren , Boheng Li , Tianyi She , Chenhao Lin , Liming Fang , Jing Chen , Chao Shen , Lina Wang

We propose a novel multi-bit box-free watermarking method for the protection of Intellectual Property Rights (IPR) of GANs with improved robustness against white-box attacks like fine-tuning, pruning, quantization, and surrogate model…

Computer Vision and Pattern Recognition · Computer Science 2023-10-27 Jianwei Fei , Zhihua Xia , Benedetta Tondi , Mauro Barni

Reports regarding the misuse of Generative AI (GenAI) to create deepfakes are frequent. Defensive watermarking enables GenAI providers to hide fingerprints in their images and use them later for deepfake detection. Yet, its potential has…

Cryptography and Security · Computer Science 2024-11-25 Andre Kassis , Urs Hengartner

The rapid growth of transformer-based models increases the concerns about their integrity and ownership insurance. Watermarking addresses this issue by embedding a unique identifier into the model, while preserving its performance. However,…

Cryptography and Security · Computer Science 2024-01-19 Pierre Fernandez , Guillaume Couairon , Teddy Furon , Matthijs Douze

Recent advances in the capabilities of large language models such as GPT-4 have spurred increasing concern about our ability to detect AI-generated text. Prior works have suggested methods of embedding watermarks in model outputs, by…

Cryptography and Security · Computer Science 2023-06-16 Miranda Christ , Sam Gunn , Or Zamir

As policy catches up with the capabilities of generative AI, watermarking is central to content provenance efforts. Inference-time watermarks for autoregressive models are unfit for continuous modalities due to discretization…

Machine Learning · Computer Science 2026-05-26 Georgios Milis , Yubin Qin , Yihan Wu , Heng Huang

As diffusion models (DMs) enable photorealistic image generation at unprecedented scale, watermarking techniques have become essential for provenance establishment and accountability. Existing methods face challenges: sampling-based…

Computer Vision and Pattern Recognition · Computer Science 2026-03-24 Hong-Hanh Nguyen-Le , Van-Tuan Tran , Thuc D. Nguyen , Nhien-An Le-Khac

Trigger set-based watermarking schemes have gained emerging attention as they provide a means to prove ownership for deep neural network model owners. In this paper, we argue that state-of-the-art trigger set-based watermarking algorithms…

Cryptography and Security · Computer Science 2023-01-20 Suyoung Lee , Wonho Song , Suman Jana , Meeyoung Cha , Sooel Son

In this work, we introduce a novel deep learning-based approach to text-in-image watermarking, a method that embeds and extracts textual information within images to enhance data security and integrity. Leveraging the capabilities of deep…

Multimedia · Computer Science 2024-04-23 Bishwa Karki , Chun-Hua Tsai , Pei-Chi Huang , Xin Zhong

The goal of 3D mesh watermarking is to embed the message in 3D meshes that can withstand various attacks imperceptibly and reconstruct the message accurately from watermarked meshes. The watermarking algorithm is supposed to withstand…

Cryptography and Security · Computer Science 2023-12-19 Xingyu Zhu , Guanhui Ye , Xiapu Luo , Xuetao Wei

Model watermarking techniques can embed watermark information into the protected model for ownership declaration by constructing specific input-output pairs. However, existing watermarks are easily removed when facing model stealing…

Cryptography and Security · Computer Science 2025-11-13 Yunfei Yang , Xiaojun Chen , Yuexin Xuan , Zhendong Zhao , Xin Zhao , He Li

Digital watermarking techniques are crucial for copyright protection and source identification of images, especially in the era of generative AI models. However, many existing watermarking methods, particularly content-agnostic approaches…

Computer Vision and Pattern Recognition · Computer Science 2024-06-14 Pei Yang , Hai Ci , Yiren Song , Mike Zheng Shou

Invisible watermarking for autoregressive (AR) image generation has recently gained attention as a means of protecting image ownership and tracing AI-generated content. However, existing approaches suffer from three key limitations: (1)…

Computer Vision and Pattern Recognition · Computer Science 2026-04-15 Yigit Yilmaz , Elena Petrova , Mehmet Kaya , Lucia Rossi , Amir Rahman

Watermarks for AI-generated images are meant to support downstream decisions about provenance, manipulation, and trust. In the settings that motivate watermark removal, therefore, success means more than causing the watermark test to fail.…

Cryptography and Security · Computer Science 2026-05-12 Yevin Nikhel Goonatilake , Giuseppe Ateniese

Recently, diffusion models (DMs) have become the state-of-the-art method for image synthesis. Editing models based on DMs, known for their high fidelity and precision, have inadvertently introduced new challenges related to image copyright…

Cryptography and Security · Computer Science 2023-12-11 Mingtian Tan , Tianhao Wang , Somesh Jha