TRACEMARK: Editor-Aware Watermarking for User Attribution in Text-Guided Image Editing
Read the original on arXiv Computer Vision →The Flow has not summarised this story yet — read it at arXiv Computer Vision.
The Flow has not summarised this story yet — read it at arXiv Computer Vision.
The paper explores whether images with embedded watermarks can still be edited without damaging the watermark. It introduces SafeMark, a framework that adds a watermark‑decoding loss to the training objective of diffusion editors, ensuring that semantic edits preserve watermark integrity. Experiments across datasets and editing methods show that SafeMark maintains high watermark bit accuracy while producing quality edits, proving that watermark preservation and semantic editability can coexist.
AngelFingerprint introduces a watermarking framework for text-guided image editing that embeds the editing prompt’s CLIP text embedding directly into the diffusion model’s weights via a LoRA module. The watermark is recoverable from image pixels alone, providing an explainable trace of the edit while remaining stealthy even under full white-box access. Experiments on the MagicBrush dataset show the extractor achieves 86% top‑1 accuracy in 200‑way prompt retrieval, outperforming prompt inversion methods.
arXiv:2609.39024v1 Announce Type: new Abstract: Text-to-image (T2I) generation is gaining increasing popularity with the general public, motivating the development of reliable mechanisms for copyrigh...
Text-to-image diffusion models enable data-efficient "mimicry" attacks, wherein adversaries fine-tune the model on a handful of public photos to synthesize convincing forgeries of a target individual....
arXiv:2603. 17531v2 Announce Type: replace-cross Abstract: Recent advancements in diffusion-based image editing pose a significant threat to the authenticity of digital visual content.
FeatMark is a watermarking framework that protects images from text‑to‑image diffusion model mimicry attacks by embedding small, scene‑consistent micro‑features instead of pixel‑level perturbations. It constructs domain‑specific feature banks, selects executable features, and injects them via mask‑guided concept editing to create highly localized, natural edits. Experiments on VGGFace2, CelebA‑HQ, and WikiArt show FeatMark remains robust against ten strong watermark removal attacks and several adaptive attacks, with minimal impact on perceptual quality and extending to video mimicry scenarios.