提出新水印框架,让扩散模型生成图更难被发现和破解。
SWA-LDM: Toward Stealthy Watermarks for Latent Diffusion Models
- 利用扩散模型固有的高斯噪声动态随机化水印,每图唯一
- 实验显示水印隐蔽性平均提升20%,图像质量不受影响
- 适合需要版权保护的AI图像生成场景
潜在扩散模型(LDM)在图像生成领域日益重要,能生成高度逼真的图像。但其广泛应用引发了版权侵犯和内容滥用的担忧。水印技术作为解决方案,通过在生成图像中嵌入不可察觉的标记来实现版权识别与滥用追踪。其中,基于潜空间的水印方法尤为有前景,因其直接在潜空间噪声中嵌入水印,无需修改原始模型架构。本文首次系统分析了输出图像的统计模式,揭示了此类潜空间水印在实际应用中的可检测性和脆弱性。为此,我们提出轻量级框架SWA-LDM(Stealthy Watermark for LDM),通过利用扩散模型固有的高斯分布潜噪声,动态随机化嵌入水印。每张图像嵌入独特且无模式的签名,消除可检测痕迹,同时保持图像质量和提取鲁棒性。实验表明,相较于现有最优方法,该方案在隐蔽性上平均提升20%,支持水印生成式AI在真实场景中的安全部署。
原文摘要 · Abstract (English)
Latent Diffusion Models (LDMs) have established themselves as powerful tools in the rapidly evolving field of image generation, capable of producing highly realistic images. However, their widespread adoption raises critical concerns about copyright infringement and the misuse of generated content. Watermarking techniques have emerged as a promising solution, enabling copyright identification and misuse tracing through imperceptible markers embedded in generated images. Among these, latent-based watermarking techniques are particularly promising, as they embed watermarks directly into the latent noise without altering the underlying LDM architecture. In this work, we demonstrate that such latent-based watermarks are practically vulnerable to detection and compromise through systematic analysis of output images' statistical patterns for the first time. To counter this, we propose SWA-LDM (Stealthy Watermark for LDM), a lightweight framework that enhances stealth by dynamically randomizing the embedded watermarks using the Gaussian-distributed latent noise inherent to diffusion models. By embedding unique, pattern-free signatures per image, SWA-LDM eliminates detectable artifacts while preserving image quality and extraction robustness. Experiments demonstrate an average of 20% improvement in stealth over state-of-the-art methods, enabling secure deployment of watermarked generative AI in real-world applications.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。