Spread them Apart: Towards Robust Watermarking of Generated Content

Fuente: arXiv
Salvato in:
Dettagli Bibliografici
Autori principali: Pautov, Mikhail, Ivanov, Danil, Galichin, Andrey V., Rogov, Oleg, Oseledets, Ivan
Natura: Preprint
Pubblicazione: 2025
Soggetti:
Accesso online:
Tags: Aggiungi Tag
Nessun Tag, puoi essere il primo ad aggiungerne!!
_version_ 1866915822318911488
author Pautov, Mikhail
Ivanov, Danil
Galichin, Andrey V.
Rogov, Oleg
Oseledets, Ivan
author_facet Pautov, Mikhail
Ivanov, Danil
Galichin, Andrey V.
Rogov, Oleg
Oseledets, Ivan
contents Generative models that can produce realistic images have improved significantly in recent years. The quality of the generated content has increased drastically, so sometimes it is very difficult to distinguish between the real images and the generated ones. Such an improvement comes at a price of ethical concerns about the usage of the generative models: the users of generative models can improperly claim ownership of the generated content protected by a license. In this paper, we propose an approach to embed watermarks into the generated content to allow future detection of the generated content and identification of the user who generated it. The watermark is embedded during the inference of the model, so the proposed approach does not require the retraining of the latter. We prove that watermarks embedded are guaranteed to be robust against additive perturbations of a bounded magnitude. We apply our method to watermark diffusion models and show that it matches state-of-the-art watermarking schemes in terms of robustness to different types of synthetic watermark removal attacks.
format Preprint
id arxiv_https___arxiv_org_abs_2502_07845
institution arXiv
publishDate 2025
record_format arxiv
spellingShingle Spread them Apart: Towards Robust Watermarking of Generated Content
Pautov, Mikhail
Ivanov, Danil
Galichin, Andrey V.
Rogov, Oleg
Oseledets, Ivan
Computer Vision and Pattern Recognition
Artificial Intelligence
Generative models that can produce realistic images have improved significantly in recent years. The quality of the generated content has increased drastically, so sometimes it is very difficult to distinguish between the real images and the generated ones. Such an improvement comes at a price of ethical concerns about the usage of the generative models: the users of generative models can improperly claim ownership of the generated content protected by a license. In this paper, we propose an approach to embed watermarks into the generated content to allow future detection of the generated content and identification of the user who generated it. The watermark is embedded during the inference of the model, so the proposed approach does not require the retraining of the latter. We prove that watermarks embedded are guaranteed to be robust against additive perturbations of a bounded magnitude. We apply our method to watermark diffusion models and show that it matches state-of-the-art watermarking schemes in terms of robustness to different types of synthetic watermark removal attacks.
title Spread them Apart: Towards Robust Watermarking of Generated Content
topic Computer Vision and Pattern Recognition
Artificial Intelligence
url https://arxiv.org/abs/2502.07845