通过噪声对抗训练学习不变特征,实现鲁棒图像零水印
InvZW: Invariant Feature Learning via Noise-Adversarial Training for Robust Image Zero-Watermarking
- 用噪声对抗学习让特征抵抗各种失真
- 在多个数据集上达到顶尖的水印恢复准确率
- 适合需要无损保护版权的图像应用
本文提出一种基于畸变不变特征学习的深度学习框架,用于鲁棒图像零水印。作为零水印方案,该方法不修改原始图像,而是通过特征空间优化学习参考签名。框架包含两个核心模块:第一模块采用噪声对抗学习训练特征提取器,生成既对畸变保持不变又具有语义表达力的特征表示,通过对抗监督与重建约束共同实现内容保留;第二模块设计基于学习的多比特零水印机制,将训练好的不变特征投影到一组可训练的参考码上,以匹配目标二进制消息。在多种图像数据集和广泛畸变条件下进行的大量实验表明,该方法在特征稳定性和水印恢复方面均达到当前最优水平。与现有自监督及深度水印技术的对比验证进一步凸显其在泛化能力和鲁棒性上的优势。
原文摘要 · Abstract (English)
This paper introduces a novel deep learning framework for robust image zero-watermarking based on distortion-invariant feature learning. As a zero-watermarking scheme, our method leaves the original image unaltered and learns a reference signature through optimization in the feature space. The proposed framework consists of two key modules. In the first module, a feature extractor is trained via noise-adversarial learning to generate representations that are both invariant to distortions and semantically expressive. This is achieved by combining adversarial supervision against a distortion discriminator and a reconstruction constraint to retain image content. In the second module, we design a learning-based multibit zero-watermarking scheme where the trained invariant features are projected onto a set of trainable reference codes optimized to match a target binary message. Extensive experiments on diverse image datasets and a wide range of distortions show that our method achieves state-of-the-art robustness in both feature stability and watermark recovery. Comparative evaluations against existing self-supervised and deep watermarking techniques further highlight the superiority of our framework in generalization and robustness.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。