Abstract:With the extensive adoption of generative models across various domains, the protection of copyright for these models has become increasingly vital. Some researchers suggest embedding watermarks in the images generated by these models as a means of preserving IP rights. In this paper, we find that existing generative model watermarking introduces high-frequency artifacts in the high-frequency spectrum of the marked images, thereby compromising the imperceptibility and security of the generative model watermarking system. Given this revelation, we propose an innovative image watermarking technology that takes into account frequency-domain imperceptibility. Our approach abandons the conventional convolutional neural network (CNN) structure typically used as the watermarking embedding network in popular watermarking techniques. This helps the image watermarking system to avoid the inherent high-frequency artifacts commonly produced by CNNs. In addition, we design a frequency perturbation generation network to generate low-frequency perturbations. These perturbations are subsequently added as watermarks to the low-frequency components of the carrier image, thus minimizing the impact of the watermark embedding process on the high-frequency properties of the image. The results show that our proposed watermarking framework can effectively embed low-frequency perturbation watermarks into images and effectively suppress high-frequency artifacts in images, thus significantly improving the frequency-domain imperceptibility and security of the image watermarking system. The introduced approach enhances the average invisibility performance in the frequency domain by up to 24.9% when contrasted with prior methods. Moreover, the method attains superior image quality (>50 dB) in the spatial domain, accompanied by a 100% success rate in watermark extraction in the absence of attacks. This underscores its capability to uphold the efficacy of the protected network and preserve the integrity of the watermarking process. It always maintains excellent imperceptibility and robustness. Thus, the framework shows great potential as a state-of-the-art solution for protecting intellectual property.

Suppressing High-Frequency Artifacts for Generative Model Watermarking by Anti-Aliasing

Generative Model Watermarking Suppressing High-Frequency Artifacts

High-Frequency Artifacts-Resistant Image Watermarking Applicable to Image Processing Models

Warfare:Breaking the Watermark Protection of AI-Generated Content

Robust and High-Fidelity Image Watermarking with Mutual Mapping and Antispectral Aliasing.

Robust Image Watermarking Based on Generative Adversarial Network

Invisible Image Watermarks Are Provably Removable Using Generative AI

An undetectable watermark for generative image models

Making Watermark Survive Model Extraction Attacks in Graph Neural Networks.

Watermarks in the Sand: Impossibility of Strong Watermarking for Generative Models

Image Watermarks are Removable Using Controllable Regeneration from Clean Noise

Generative Model Watermarking Based on Human Visual System

Robustness of Watermarking on Text-to-Image Diffusion Models

Towards Photo-Realistic Visible Watermark Removal with Conditional Generative Adversarial Networks

Robust Adversarial Watermark Defending Against GAN Synthesization Attack

Generative Watermarking Against Unauthorized Subject-Driven Image Synthesis

Concealed Attack for Robust Watermarking Based on Generative Model and Perceptual Loss

ARWGAN: Attention-Guided Robust Image Watermarking Model Based on GAN

Watermark-embedded Adversarial Examples for Copyright Protection against Diffusion Models

Invisible Watermarks: Attacks and Robustness