通过语义信息嵌入实现无损且可验证的图像水印,提升防伪造能力。
SEAL: Semantic Aware Image Watermarking
- 将图像语义直接编码到水印中,无需依赖密钥数据库
- 利用局部敏感哈希从语义特征推导密钥,支持无损验证
- 对篡改和恶意对象插入攻击具有更强鲁棒性,适合生成式模型安全
生成模型快速进化,生成内容日益逼真,模糊了真实与人工智能生成内容的界限,亟需稳健的水印技术。传统水印需保持图像完整性、抗移除并防止非法复制。现有方法通常在扩散模型初始噪声中嵌入持久水印,但往往扭曲生成图像分布或依赖长字典检索密钥。本文提出一种新水印方法:将生成图像的语义信息直接嵌入水印,实现无失真水印,且无需存储密钥数据库。密钥可通过图像语义嵌入结合局部敏感哈希推导。此外,将水印检测条件设为原始图像内容,增强了对伪造攻击的鲁棒性。我们评估了两种被忽视的攻击策略:(i) 提取初始噪声生成新图像;(ii) 在水印图像中插入无关(可能有害)对象,同时保留水印。实验验证了本方法在这些攻击下的更强鲁棒性。结果表明,内容感知水印能有效降低生成模型带来的风险。
原文摘要 · Abstract (English)
Generative models have rapidly evolved to generate realistic outputs. However, their synthetic outputs increasingly challenge the clear distinction between natural and AI-generated content, necessitating robust watermarking techniques. Watermarks are typically expected to preserve the integrity of the target image, withstand removal attempts, and prevent unauthorized replication onto unrelated images. To address this need, recent methods embed persistent watermarks into images produced by diffusion models using the initial noise. Yet, to do so, they either distort the distribution of generated images or rely on searching through a long dictionary of used keys for detection. In this paper, we propose a novel watermarking method that embeds semantic information about the generated image directly into the watermark, enabling a distortion-free watermark that can be verified without requiring a database of key patterns. Instead, the key pattern can be inferred from the semantic embedding of the image using locality-sensitive hashing. Furthermore, conditioning the watermark detection on the original image content improves robustness against forgery attacks. To demonstrate that, we consider two largely overlooked attack strategies: (i) an attacker extracting the initial noise and generating a novel image with the same pattern; (ii) an attacker inserting an unrelated (potentially harmful) object into a watermarked image, possibly while preserving the watermark. We empirically validate our method's increased robustness to these attacks. Taken together, our results suggest that content-aware watermarks can mitigate risks arising from image-generative models.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。