FT-Shield: A Watermark Against Unauthorized Fine-tuning in Text-to-Image Diffusion Models

Fuente: arXiv
Gespeichert in:
Bibliographische Detailangaben
Hauptverfasser: Cui, Yingqian, Ren, Jie, Lin, Yuping, Xu, Han, He, Pengfei, Xing, Yue, Lyu, Lingjuan, Fan, Wenqi, Liu, Hui, Tang, Jiliang
Format: Preprint
Veröffentlicht: 2023
Schlagworte:
Online-Zugang:
Tags: Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
_version_ 1866909188888723456
author Cui, Yingqian
Ren, Jie
Lin, Yuping
Xu, Han
He, Pengfei
Xing, Yue
Lyu, Lingjuan
Fan, Wenqi
Liu, Hui
Tang, Jiliang
author_facet Cui, Yingqian
Ren, Jie
Lin, Yuping
Xu, Han
He, Pengfei
Xing, Yue
Lyu, Lingjuan
Fan, Wenqi
Liu, Hui
Tang, Jiliang
contents Text-to-image generative models, especially those based on latent diffusion models (LDMs), have demonstrated outstanding ability in generating high-quality and high-resolution images from textual prompts. With this advancement, various fine-tuning methods have been developed to personalize text-to-image models for specific applications such as artistic style adaptation and human face transfer. However, such advancements have raised copyright concerns, especially when the data are used for personalization without authorization. For example, a malicious user can employ fine-tuning techniques to replicate the style of an artist without consent. In light of this concern, we propose FT-Shield, a watermarking solution tailored for the fine-tuning of text-to-image diffusion models. FT-Shield addresses copyright protection challenges by designing new watermark generation and detection strategies. In particular, it introduces an innovative algorithm for watermark generation. It ensures the seamless transfer of watermarks from training images to generated outputs, facilitating the identification of copyrighted material use. To tackle the variability in fine-tuning methods and their impact on watermark detection, FT-Shield integrates a Mixture of Experts (MoE) approach for watermark detection. Comprehensive experiments validate the effectiveness of our proposed FT-Shield.
format Preprint
id arxiv_https___arxiv_org_abs_2310_02401
institution arXiv
publishDate 2023
record_format arxiv
spellingShingle FT-Shield: A Watermark Against Unauthorized Fine-tuning in Text-to-Image Diffusion Models
Cui, Yingqian
Ren, Jie
Lin, Yuping
Xu, Han
He, Pengfei
Xing, Yue
Lyu, Lingjuan
Fan, Wenqi
Liu, Hui
Tang, Jiliang
Computer Vision and Pattern Recognition
Cryptography and Security
Text-to-image generative models, especially those based on latent diffusion models (LDMs), have demonstrated outstanding ability in generating high-quality and high-resolution images from textual prompts. With this advancement, various fine-tuning methods have been developed to personalize text-to-image models for specific applications such as artistic style adaptation and human face transfer. However, such advancements have raised copyright concerns, especially when the data are used for personalization without authorization. For example, a malicious user can employ fine-tuning techniques to replicate the style of an artist without consent. In light of this concern, we propose FT-Shield, a watermarking solution tailored for the fine-tuning of text-to-image diffusion models. FT-Shield addresses copyright protection challenges by designing new watermark generation and detection strategies. In particular, it introduces an innovative algorithm for watermark generation. It ensures the seamless transfer of watermarks from training images to generated outputs, facilitating the identification of copyrighted material use. To tackle the variability in fine-tuning methods and their impact on watermark detection, FT-Shield integrates a Mixture of Experts (MoE) approach for watermark detection. Comprehensive experiments validate the effectiveness of our proposed FT-Shield.
title FT-Shield: A Watermark Against Unauthorized Fine-tuning in Text-to-Image Diffusion Models
topic Computer Vision and Pattern Recognition
Cryptography and Security
url https://arxiv.org/abs/2310.02401