Saved in:
| Main Authors: | , , , , , , |
|---|---|
| Format: | Preprint |
| Published: |
2026
|
| Subjects: | |
| Online Access: | https://arxiv.org/abs/2604.22220 |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| _version_ | 1866913058953101312 |
|---|---|
| author | Wang, Chunpeng Qu, Binyan Wang, Xiaoyu Xia, Zhiqiu Zhang, Shanshan Liu, Yunan Li, Qi |
| author_facet | Wang, Chunpeng Qu, Binyan Wang, Xiaoyu Xia, Zhiqiu Zhang, Shanshan Liu, Yunan Li, Qi |
| contents | Digital image watermarking has advanced rapidly for copyright protection of generative AI, yet the comparatively limited progress in watermark attack techniques has broken the attack-defense balance and hindered further advances in the field. In this paper, we propose FMDiffWA, a frequency-domain modulated diffusion framework for watermark attacks. Specifically, we introduce a frequency-domain watermark modulation (FWM) module and incorporate it into the sampling stages both the forward and reverse diffusion processes. This mechanism enables selective modulation of watermark-related frequency components, thereby allowing FMDiffWA to effectively neutralize the invisible watermark signals while preserving the perceptual quality of the attacked watermarked images. To achieve a better trade-off between attack efficacy and visual fidelity, we reformulate the training strategy of conventional diffusion models by augmenting the canonical noise estimation objective with an auxiliary refinement constraint. Comprehensive experiments demonstrate that FMDiffWA achieves superior visual fidelity compared to existing watermark attacks, while exhibiting strong generalization across diverse watermarking schemes. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2604_22220 |
| institution | arXiv |
| publishDate | 2026 |
| record_format | arxiv |
| spellingShingle | Breaking Watermarks in the Frequency Domain: A Modulated Diffusion Attack Framework Wang, Chunpeng Qu, Binyan Wang, Xiaoyu Xia, Zhiqiu Zhang, Shanshan Liu, Yunan Li, Qi Computer Vision and Pattern Recognition Digital image watermarking has advanced rapidly for copyright protection of generative AI, yet the comparatively limited progress in watermark attack techniques has broken the attack-defense balance and hindered further advances in the field. In this paper, we propose FMDiffWA, a frequency-domain modulated diffusion framework for watermark attacks. Specifically, we introduce a frequency-domain watermark modulation (FWM) module and incorporate it into the sampling stages both the forward and reverse diffusion processes. This mechanism enables selective modulation of watermark-related frequency components, thereby allowing FMDiffWA to effectively neutralize the invisible watermark signals while preserving the perceptual quality of the attacked watermarked images. To achieve a better trade-off between attack efficacy and visual fidelity, we reformulate the training strategy of conventional diffusion models by augmenting the canonical noise estimation objective with an auxiliary refinement constraint. Comprehensive experiments demonstrate that FMDiffWA achieves superior visual fidelity compared to existing watermark attacks, while exhibiting strong generalization across diverse watermarking schemes. |
| title | Breaking Watermarks in the Frequency Domain: A Modulated Diffusion Attack Framework |
| topic | Computer Vision and Pattern Recognition |
| url | https://arxiv.org/abs/2604.22220 |