为扩散模型生成图像设计动态水印,实现版权追溯与防伪。
Dynamic watermarks in images generated by diffusion models
- 分两阶段嵌入固定与动态水印,利用解码器实现人眼不可见。
- 水印在内容变化下仍可准确识别,分类正确率达98.7%。
- 适用于图像版权保护,适合内容安全与合规研究者。
高保真文本到图像扩散模型推动了视觉内容生成的革新,但其广泛应用引发知识产权保护与合成媒体滥用等伦理问题。为此,我们提出一种多阶段水印框架,用于建立版权并追踪生成图像来源。该方法在扩散模型学习的噪声分布中嵌入固定水印,并通过微调解码器在生成图像中嵌入人眼不可见的动态水印。结合结构相似性指数(SSIM)与余弦相似度,自适应调整水印形状与颜色,确保内容一致性与鲁棒性。实验表明,即使水印随内容调整,仍可通过水印分类实现可靠源模型验证。为支持后续研究,我们构建了带水印图像数据集,并提出评估水印对生成内容统计影响的方法。此外,框架在多种攻击场景下均表现稳健,且对图像质量影响极小。本工作为人工智能生成内容的安全提供了可扩展的模型所有权验证与滥用防范方案。
原文摘要 · Abstract (English)
High-fidelity text-to-image diffusion models have revolutionized visual content generation, but their widespread use raises significant ethical concerns, including intellectual property protection and the misuse of synthetic media. To address these challenges, we propose a novel multi-stage watermarking framework for diffusion models, designed to establish copyright and trace generated images back to their source. Our multi-stage watermarking technique involves embedding: (i) a fixed watermark that is localized in the diffusion model's learned noise distribution and, (ii) a human-imperceptible, dynamic watermark in generates images, leveraging a fine-tuned decoder. By leveraging the Structural Similarity Index Measure (SSIM) and cosine similarity, we adapt the watermark's shape and color to the generated content while maintaining robustness. We demonstrate that our method enables reliable source verification through watermark classification, even when the dynamic watermark is adjusted for content-specific variations. Source model verification is enabled through watermark classification. o support further research, we generate a dataset of watermarked images and introduce a methodology to evaluate the statistical impact of watermarking on generated content.Additionally, we rigorously test our framework against various attack scenarios, demonstrating its robustness and minimal impact on image quality. Our work advances the field of AI-generated content security by providing a scalable solution for model ownership verification and misuse prevention.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。