arXiv:2610.03166v1 Announce Type: cross
Abstract: Digital watermarking supports source attribution for AI-generated images, but its reliability depends on resistance to removal attacks. Some attacks...
By Saibo Ye, Huajie Chen, Xin Guo, Le Yang, Chi Liu, Xiangyu Hu, Jingjing Guo, Tianqing Zhu
arXiv:2608. 10166v1 Announce Type: cross Abstract: Digital watermarking has emerged as a critical technique for provenance and copyright attribution in AI-generated imagery, yet its robustness against realistic, model-agnostic removal attacks remains poorly explored.
By Jie Cao, Qi Li, Zelin Zhang, Xiaodong Wu, Lingshuang Liu, Xiangman Li, Jianbing Ni
arXiv:2610.12952v1 Announce Type: cross
Abstract: Image watermarking enables provenance tracing for photorealistic images generated by diffusion models. However, state-of-the-art (SOTA) removal attac...
By Jie Cao, Qi Li, Chaklam Cheong, Yutong Jin, Enze Yu, Zelin Zhang, Jianbing Ni
The paper proposes a defense against watermark forgery in generative models by randomizing the selection of watermark keys for each query and accepting content only if exactly one key detects a watermark. This approach provides a sample‑count‑independent upper bound on forgery success for blind attackers while preserving model utility. Experiments show a dramatic drop in forgery success rates—from 87% to 1% with four keys for text and from 100% to 2% for images—without significant computational overhead.
By Toluwani Aremu, Noor Hussein, Munachiso Nwadike, Samuele Poppi, Jie Zhang, Karthik Nandakumar, Neil Gong, Nils Lukas
IRIS is a training‑free watermarking scheme for diffusion‑generated images that binds a watermark to the image’s visual semantics. It derives an intrinsic ring identifier from a content code of the non‑watermarked image and injects it late in the generation trajectory, ensuring the mark survives common processing while breaking under semantic changes or foreign images. Experiments on three prompt datasets show IRIS reliably detects watermarks, maintains fidelity to the original image, and resists forgery techniques that defeat other marks.
By Xiaoyan Feng, Zheng Gao, Tong Guan, Rui Bao, Bokang Zeng, Xiaoyu Li, Jiaojiao Jiang
arXiv:2608.29212v1 Announce Type: cross
Abstract: Existing video watermarking systems are symmetric: the party that can verify a mark holds the extractor weights or generator secret and can therefore...
By Guang Yang, Fengchen Liu