English
Related papers

Related papers: Decoupling Defense Strategies for Robust Image Wat…

200 papers

Invisible watermarking for autoregressive (AR) image generation has recently gained attention as a means of protecting image ownership and tracing AI-generated content. However, existing approaches suffer from three key limitations: (1)…

Computer Vision and Pattern Recognition · Computer Science 2026-04-15 Yigit Yilmaz , Elena Petrova , Mehmet Kaya , Lucia Rossi , Amir Rahman

Machine Learning models are vulnerable to adversarial attacks that rely on perturbing the input data. This work proposes a novel strategy using Autoencoder Deep Neural Networks to defend a machine learning model against two gradient-based…

Machine Learning · Computer Science 2018-12-10 Rajeev Sahay , Rehana Mahfuz , Aly El Gamal

Adversarial training is a popular defense strategy against attack threat models with bounded Lp norms. However, it often degrades the model performance on normal images and the defense does not generalize well to novel attacks. Given the…

Computer Vision and Pattern Recognition · Computer Science 2020-09-08 Wei-An Lin , Chun Pong Lau , Alexander Levine , Rama Chellappa , Soheil Feizi

Digital information revolution has brought about many advantages and new issues. The protection of ownership and the prevention of unauthorized manipulation of digital audio, image, and video materials has become an important concern due to…

Multimedia · Computer Science 2013-09-30 Anumol Joseph , K. Anusudha

The proliferation of autoregressive (AR) image generators demands reliable detection and attribution of their outputs to mitigate misinformation, and to filter synthetic images from training data to prevent model collapse. To address this…

Computer Vision and Pattern Recognition · Computer Science 2026-04-14 Andreas Müller , Denis Lukovnikov , Shingo Kodama , Minh Pham , Anubhav Jain , Jonathan Petit , Niv Cohen , Asja Fischer

Recent research has demonstrated that adding some imperceptible perturbations to original images can fool deep learning models. However, the current adversarial perturbations are usually shown in the form of noises, and thus have no…

Cryptography and Security · Computer Science 2020-09-01 Xiaojun Jia , Xingxing Wei , Xiaochun Cao , Xiaoguang Han

With the rapid development of deep learning, object detectors have demonstrated impressive performance; however, vulnerabilities still exist in certain scenarios. Current research exploring the vulnerabilities using adversarial patches…

Computer Vision and Pattern Recognition · Computer Science 2025-03-04 Boming Miao , Chunxiao Li , Yao Zhu , Weixiang Sun , Zizhe Wang , Xiaoyi Wang , Chuanlong Xie

The fact that deep neural networks are susceptible to crafted perturbations severely impacts the use of deep learning in certain domains of application. Among many developed defense models against such attacks, adversarial training emerges…

Machine Learning · Computer Science 2020-07-13 Anh Bui , Trung Le , He Zhao , Paul Montague , Olivier deVel , Tamas Abraham , Dinh Phung

The rapid growth of Artificial Intelligence-Generated Content (AIGC) raises concerns about the authenticity of digital media. In this context, image self-recovery, reconstructing original content from its manipulated version, offers a…

Computer Vision and Pattern Recognition · Computer Science 2025-12-01 Minyoung Kim , Paul Hongsuck Seo

To address the security risk caused by fixed offset mapping and the limited recoverability of random mapping used in image watermarking, we propose an image self-embedding fragile watermarking algorithm based on deneighborhood mapping.…

Cryptography and Security · Computer Science 2022-01-26 Yilong Wang , Zhenyu Li , Daofu Gong , Haoyu Lu , Fenlin Liu

With rich visual data, such as images, becoming readily associated with items, visually-aware recommendation systems (VARS) have been widely used in different applications. Recent studies have shown that VARS are vulnerable to item-image…

Computer Vision and Pattern Recognition · Computer Science 2025-06-10 Minglei Yin , Bin Liu , Neil Zhenqiang Gong , Xin Li

With the rise of Machine Learning as a Service (MLaaS) platforms,safeguarding the intellectual property of deep learning models is becoming paramount. Among various protective measures, trigger set watermarking has emerged as a flexible and…

Cryptography and Security · Computer Science 2024-04-23 Hongyu Zhu , Sichu Liang , Wentao Hu , Fangqi Li , Ju Jia , Shilin Wang

Invisible watermarking is essential for tracing the provenance of digital content. However, training state-of-the-art models remains notoriously difficult, with current approaches often struggling to balance robustness against true…

Computer Vision and Pattern Recognition · Computer Science 2025-12-19 Tomáš Souček , Pierre Fernandez , Hady Elsahar , Sylvestre-Alvise Rebuffi , Valeriu Lacatusu , Tuan Tran , Tom Sander , Alexandre Mourachko

Vision Language Models (VLMs) have shown remarkable capabilities in multimodal understanding, yet their susceptibility to perturbations poses a significant threat to their reliability in real-world applications. Despite often being…

Computer Vision and Pattern Recognition · Computer Science 2025-06-05 Jia Fu , Yongtao Wu , Yihang Chen , Kunyu Peng , Xiao Zhang , Volkan Cevher , Sepideh Pashami , Anders Holst

Digital watermarking is the process of embedding secret information by altering images in an undetectable way to the human eye. To increase the robustness of the model, many deep learning-based watermarking methods use the…

Multimedia · Computer Science 2024-05-20 Sijing Xie , Chengxin Zhao , Nan Sun , Wei Li , Hefei Ling

We present the first undetectable watermarking scheme for generative image models. Undetectability ensures that no efficient adversary can distinguish between watermarked and un-watermarked images, even after making many adaptive queries.…

Cryptography and Security · Computer Science 2025-04-23 Sam Gunn , Xuandong Zhao , Dawn Song

Security concerns surrounding text-to-image diffusion models have driven researchers to unlearn inappropriate concepts through fine-tuning. Recent fine-tuning methods typically align the prediction distributions of unsafe prompts with those…

Machine Learning · Computer Science 2025-01-03 Mengnan Zhao , Lihe Zhang , Xingyi Yang , Tianhang Zheng , Baocai Yin

In unsecured network environments, ownership protection of digital contents, such as images, is becoming a growing concern. Different watermarking methods have been proposed to address the copyright protection of digital materials.…

Multimedia · Computer Science 2020-04-08 Mahsa Kadkhodaei , Shadrokh Samavi

While deep neural networks have proven to be a powerful tool for many recognition and classification tasks, their stability properties are still not well understood. In the past, image classifiers have been shown to be vulnerable to…

Computer Vision and Pattern Recognition · Computer Science 2019-01-14 Rima Alaifari , Giovanni S. Alberti , Tandri Gauksson

Well-performed deep neural networks (DNNs) generally require massive labelled data and computational resources for training. Various watermarking techniques are proposed to protect such intellectual properties (IPs), wherein the DNN…

Computer Vision and Pattern Recognition · Computer Science 2023-04-04 Xiangyu Wen , Yu Li , Wei Jiang , Qiang Xu