Abstract:Digital watermarking has been widely studied as a method of protecting the intellectual property rights of digital images, which are high value-added contents. Recently, studies implementing these techniques with neural networks have been conducted. This paper also proposes a neural network to perform a robust, invisible blind watermarking for digital images. It is a convolutional neural network (CNN)-based scheme that consists of pre-processing networks for both host image and watermark, a watermark embedding network, an attack simulation for training, and a watermark extraction network to extract watermark whenever necessary. It has three peculiarities for the application aspect: The first is the host image resolution’s adaptability. This is to apply the proposed method to any resolution of the host image and is performed by composing the network without using any resolution-dependent layer or component. The second peculiarity is the adaptability of the watermark information. This is to provide usability of any user-defined watermark data. It is conducted by using random binary data as the watermark and is changed each iteration during training. The last peculiarity is the controllability of the trade-off relationship between watermark invisibility and robustness against attacks, which provides applicability for different applications requiring different invisibility and robustness. For this, a strength scaling factor for watermark information is applied. Besides, it has the following structural or in-training peculiarities. First, the proposed network is as simple as the most profound path consists of only 13 CNN layers, which is through the pre-processing network, embedding network, and extraction network. The second is that it maintains the host’s resolution by increasing the resolution of a watermark in the watermark pre-processing network, which is to increases the invisibility of the watermark. Also, the average pooling is used in the watermark pre-processing network to properly combine the binary value of the watermark data with the host image, and it also increases the invisibility of the watermark. Finally, as the loss function, the extractor uses mean absolute error (MAE), while the embedding network uses mean square error (MSE). Because the extracted watermark information consists of binary values, the MAE between the extracted watermark and the original one is more suitable for balanced training between the embedder and the extractor. The proposed network’s performance is confirmed through training and evaluation that the proposed method has high invisibility for the watermark (WM) and high robustness against various pixel-value change attacks and geometric attacks. Each of the three peculiarities of this scheme is shown to work well with the experimental results. Besides, it is exhibited that the proposed scheme shows good performance compared to the previous methods.

Real-time Attacks on Robust Watermarking Tools in the Wild by CNN.

Leveraging Unlabeled Data for Watermark Removal of Deep Neural Networks

REFIT: A UnifiedWatermark Removal Framework for Deep Learning Systems with Limited Data

Robust And High Capacity Watermarking For Image Based On Dwt-Svd And Cnn

Making Watermark Survive Model Extraction Attacks in Graph Neural Networks.

A Robust Blind Watermarking Using Convolutional Neural Network

Convolutional Neural Network-Based Digital Image Watermarking Adaptive to the Resolution of Image and Watermark

CADW: CGAN-Based Attack on Deep Robust Image Watermarking.

A Geometric Distortion Immunized Deep Watermarking Framework with Robustness Generalizability

Generating Image Adversarial Examples by Embedding Digital Watermarks

Resampling-Detection-Network-Based Robust Image Watermarking against Scaling and Cutting

Neural Dehydration: Effective Erasure of Black-box Watermarks from DNNs with Limited Data

On Function-Coupled Watermarks for Deep Neural Networks

Adversarial watermark: A robust and reliable watermark against removal

DiffWA: Diffusion Models for Watermark Attack

On the Robustness of the Backdoor-based Watermarking in Deep Neural Networks

Deep Neural Network Watermarking Against Model Extraction Attack

Watermarking Neural Networks with Watermarked Images

Robust Model Watermarking for Image Processing Networks via Structure Consistency

A Robust Image Watermarking System Based on Deep Neural Networks

DT CWT and Schur Decomposition Based Robust Watermarking Algorithm to Geometric Attacks.