arXiv:2504.18906cs.CV2025-04AAAI被引 4

提出无监督噪声层,提升屏幕-相机水印在真实场景下的鲁棒性。

Sim-to-Real: An Unsupervised Noise Layer for Screen-Camera Watermarking Robustness

  • 用无监督方法学习模拟与真实噪声分布的差异,避免直接重建图像细节。
  • 实验表明水印鲁棒性和泛化能力优于现有最优方法。
  • 适合做屏幕-相机水印保护的研究者和安全系统开发者。

未经授权的屏幕捕获和传播构成严重安全威胁,如数据泄露和信息窃取。已有研究提出鲁棒水印方法以追踪屏幕-相机(SC)图像版权,支持侵权事后认证。这些方法通常采用启发式数学建模或有监督神经网络拟合作为噪声层,以增强对SC的鲁棒性。然而,两者均无法从根本上有效逼近SC噪声:数学模拟因噪声分解不完整且各分量间缺乏关联而存在偏差;有监督网络需成对数据训练,难以学习噪声全部特征。为此,本文提出仿真到现实(S2R)方法。具体而言,无监督噪声层利用无配对数据学习模拟噪声分布与真实SC噪声分布之间的差异,而非直接学习从清晰图像到真实图像的映射。学习从仿真到现实的转换本质上更简单,主要聚焦于弥合噪声分布差距,而非重建精细图像细节。大量实验验证了该方法的有效性,其水印鲁棒性和泛化能力显著优于当前最先进方法。

原文摘要 · Abstract (English)

Unauthorized screen capturing and dissemination pose severe security threats such as data leakage and information theft. Several studies propose robust watermarking methods to track the copyright of Screen-Camera (SC) images, facilitating post-hoc certification against infringement. These techniques typically employ heuristic mathematical modeling or supervised neural network fitting as the noise layer, to enhance watermarking robustness against SC. However, both strategies cannot fundamentally achieve an effective approximation of SC noise. Mathematical simulation suffers from biased approximations due to the incomplete decomposition of the noise and the absence of interdependence among the noise components. Supervised networks require paired data to train the noise-fitting model, and it is difficult for the model to learn all the features of the noise. To address the above issues, we propose Simulation-to-Real (S2R). Specifically, an unsupervised noise layer employs unpaired data to learn the discrepancy between the modeled simulated noise distribution and the real-world SC noise distribution, rather than directly learning the mapping from sharp images to real-world images. Learning this transformation from simulation to reality is inherently simpler, as it primarily involves bridging the gap in noise distributions, instead of the complex task of reconstructing fine-grained image details. Extensive experimental results validate the efficacy of the proposed method, demonstrating superior watermark robustness and generalization compared to state-of-the-art methods.

水印无监督鲁棒性

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。