arXiv:2504.12354eess.IVcs.AI2025-04被引 1

用稳定扩散模型实现快速高保真水印,抗攻击能力强

WaterFlow: Learning Fast & Robust Watermarks using Stable Diffusion

  • 基于预训练扩散模型的潜在空间编码,生成依赖潜变量的水印
  • 在三大数据集上实现最优鲁棒性,可抵御复杂组合攻击
  • 兼顾速度与画质,适合真实场景下的图像版权保护

图像水印嵌入是计算机视觉中的基础问题,尤其在生成图像泛滥的背景下愈发重要。现有方法普遍存在计算慢、鲁棒性差或感知质量低的问题。本文提出WaterFlow(WF),一种基于学习的潜在依赖水印方案,利用预训练的潜扩散模型将任意图像编码至潜在空间,并将学习到的水印嵌入该潜变量的傅里叶域。通过可逆流层增强潜在空间表达能力,既保持图像高质量,又支持鲁棒且可追溯的检测。WaterFlow在三个主流数据集(MS-COCO、DiffusionDB、WikiArt)上验证,首次有效防御复杂组合攻击,在通用鲁棒性方面达到当前最佳水平。

原文摘要 · Abstract (English)

The ability to embed watermarks in images is a fundamental problem of interest for computer vision, and is exacerbated by the rapid rise of generated imagery in recent times. Current state-of-the-art techniques suffer from computational and statistical challenges such as the slow execution speed for practical deployments. In addition, other works trade off fast watermarking speeds but suffer greatly in their robustness or perceptual quality. In this work, we propose WaterFlow (WF), a fast and extremely robust approach for high fidelity visual watermarking based on a learned latent-dependent watermark. Our approach utilizes a pretrained latent diffusion model to encode an arbitrary image into a latent space and produces a learned watermark that is then planted into the Fourier Domain of the latent. The transformation is specified via invertible flow layers that enhance the expressivity of the latent space of the pre-trained model to better preserve image quality while permitting robust and tractable detection. Most notably, WaterFlow demonstrates state-of-the-art performance on general robustness and is the first method capable of effectively defending against difficult combination attacks. We validate our findings on three widely used real and generated datasets: MS-COCO, DiffusionDB, and WikiArt.

水印扩散模型鲁棒性

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。