Abstract:Digital watermarking has been widely studied as a method of protecting the intellectual property rights of digital images, which are high value-added contents. Recently, studies implementing these techniques with neural networks have been conducted. This paper also proposes a neural network to perform a robust, invisible blind watermarking for digital images. It is a convolutional neural network (CNN)-based scheme that consists of pre-processing networks for both host image and watermark, a watermark embedding network, an attack simulation for training, and a watermark extraction network to extract watermark whenever necessary. It has three peculiarities for the application aspect: The first is the host image resolution’s adaptability. This is to apply the proposed method to any resolution of the host image and is performed by composing the network without using any resolution-dependent layer or component. The second peculiarity is the adaptability of the watermark information. This is to provide usability of any user-defined watermark data. It is conducted by using random binary data as the watermark and is changed each iteration during training. The last peculiarity is the controllability of the trade-off relationship between watermark invisibility and robustness against attacks, which provides applicability for different applications requiring different invisibility and robustness. For this, a strength scaling factor for watermark information is applied. Besides, it has the following structural or in-training peculiarities. First, the proposed network is as simple as the most profound path consists of only 13 CNN layers, which is through the pre-processing network, embedding network, and extraction network. The second is that it maintains the host’s resolution by increasing the resolution of a watermark in the watermark pre-processing network, which is to increases the invisibility of the watermark. Also, the average pooling is used in the watermark pre-processing network to properly combine the binary value of the watermark data with the host image, and it also increases the invisibility of the watermark. Finally, as the loss function, the extractor uses mean absolute error (MAE), while the embedding network uses mean square error (MSE). Because the extracted watermark information consists of binary values, the MAE between the extracted watermark and the original one is more suitable for balanced training between the embedder and the extractor. The proposed network’s performance is confirmed through training and evaluation that the proposed method has high invisibility for the watermark (WM) and high robustness against various pixel-value change attacks and geometric attacks. Each of the three peculiarities of this scheme is shown to work well with the experimental results. Besides, it is exhibited that the proposed scheme shows good performance compared to the previous methods.

Highly applicable and imperceptible watermark attack network

Leveraging Unlabeled Data for Watermark Removal of Deep Neural Networks

Convolutional Neural Network-Based Digital Image Watermarking Adaptive to the Resolution of Image and Watermark

Digital Watermarking Algorithm Based on Wavelet Transform and Neural Network

On Function-Coupled Watermarks for Deep Neural Networks

A Novel Blind Watermarking Scheme Based on Neural Network in Wavelet Domain

Real-time Attacks on Robust Watermarking Tools in the Wild by CNN.

DiffWA: Diffusion Models for Watermark Attack

Making Watermark Survive Model Extraction Attacks in Graph Neural Networks.

Digital Watermarking Algorithm Based on Neural Network in Multiwavelet Domain

Robust And High Capacity Watermarking For Image Based On Dwt-Svd And Cnn

A self-supervised network for image denoising and watermark removal

Generating Image Adversarial Examples by Embedding Digital Watermarks

Watermarking Neural Networks with Watermarked Images

A novel robust digital image watermarking scheme based on attention U-Net++ structure

Concealed Attack for Robust Watermarking Based on Generative Model and Perceptual Loss

Unambiguous and High-Fidelity Backdoor Watermarking for Deep Neural Networks

Neural Dehydration: Effective Erasure of Black-box Watermarks from DNNs with Limited Data

Adversarial watermark: A robust and reliable watermark against removal

Deep Neural Network Watermarking Against Model Extraction Attack