Abstract:Digital watermarking has been widely studied as a method of protecting the intellectual property rights of digital images, which are high value-added contents. Recently, studies implementing these techniques with neural networks have been conducted. This paper also proposes a neural network to perform a robust, invisible blind watermarking for digital images. It is a convolutional neural network (CNN)-based scheme that consists of pre-processing networks for both host image and watermark, a watermark embedding network, an attack simulation for training, and a watermark extraction network to extract watermark whenever necessary. It has three peculiarities for the application aspect: The first is the host image resolution’s adaptability. This is to apply the proposed method to any resolution of the host image and is performed by composing the network without using any resolution-dependent layer or component. The second peculiarity is the adaptability of the watermark information. This is to provide usability of any user-defined watermark data. It is conducted by using random binary data as the watermark and is changed each iteration during training. The last peculiarity is the controllability of the trade-off relationship between watermark invisibility and robustness against attacks, which provides applicability for different applications requiring different invisibility and robustness. For this, a strength scaling factor for watermark information is applied. Besides, it has the following structural or in-training peculiarities. First, the proposed network is as simple as the most profound path consists of only 13 CNN layers, which is through the pre-processing network, embedding network, and extraction network. The second is that it maintains the host’s resolution by increasing the resolution of a watermark in the watermark pre-processing network, which is to increases the invisibility of the watermark. Also, the average pooling is used in the watermark pre-processing network to properly combine the binary value of the watermark data with the host image, and it also increases the invisibility of the watermark. Finally, as the loss function, the extractor uses mean absolute error (MAE), while the embedding network uses mean square error (MSE). Because the extracted watermark information consists of binary values, the MAE between the extracted watermark and the original one is more suitable for balanced training between the embedder and the extractor. The proposed network’s performance is confirmed through training and evaluation that the proposed method has high invisibility for the watermark (WM) and high robustness against various pixel-value change attacks and geometric attacks. Each of the three peculiarities of this scheme is shown to work well with the experimental results. Besides, it is exhibited that the proposed scheme shows good performance compared to the previous methods.

Enhanced Blind Watermarking Against Black-Box Noise: Leveraging CIN Framework

Leveraging Unlabeled Data for Watermark Removal of Deep Neural Networks

Towards Blind Watermarking: Combining Invertible and Non-invertible Mechanisms

REFIT: A UnifiedWatermark Removal Framework for Deep Learning Systems with Limited Data

Multinoise-type Blind Denoising Using a Single Uniform Deep Convolutional Neural Network.

A Novel Blind Watermark Algorithm

Flow-Based Robust Watermarking with Invertible Noise Layer for Black-Box Distortions.

A Novel Two-stage Separable Deep Learning Framework for Practical Blind Watermarking

Encoded Feature Enhancement in Watermarking Network for Distortion in Real Scenes

Print-Camera Resistant Image Watermarking with Deep Noise Simulation and Constrained Learning

BlackMarks: Blackbox Multibit Watermarking for Deep Neural Networks

Picking watermarks from noise (PWFN): an improved robust watermarking model against intensive distortions

On Function-Coupled Watermarks for Deep Neural Networks

Convolutional Neural Network-Based Digital Image Watermarking Adaptive to the Resolution of Image and Watermark

An Automated and Robust Image Watermarking Scheme Based on Deep Neural Networks

SEDD: Robust Blind Image Watermarking With Single Encoder And Dual Decoders

A Robust Blind Watermarking Using Convolutional Neural Network

Universal BlackMarks: Key-Image-Free Blackbox Multi-Bit Watermarking of Deep Neural Networks

A Unique Identification-Oriented Black-Box Watermarking Scheme for Deep Classification Neural Networks

Enhanced Attention Mechanism-Based Image Watermarking With Simulated JPEG Compression

MBRS : Enhancing Robustness of DNN-based Watermarking by Mini-Batch of Real and Simulated JPEG Compression