通过扩散模型反推敏感性,实现抗篡改的图像水印嵌入与定位。
TAG-WM: Tamper-Aware Generative Image Watermarking via Diffusion Inversion Sensitivity
- 利用双重水印联合采样,在隐空间嵌入版权与定位信息。
- 在失真条件下仍保持256比特水印容量和无损生成质量。
- 基于扩散反推敏感性检测篡改区域,适合内容安全与版权保护场景。
AI生成内容(AIGC)虽提升视觉创作效率,却带来版权与真实性风险。数字图像水印作为完整性验证与溯源手段,面临生成编辑工具泛滥带来的恶意篡改挑战,对被动检测与水印鲁棒性提出新要求。本文提出一种名为TAG-WM的抗篡改生成图像水印方法,包含四个核心模块:双水印联合采样(DMJS)算法在隐空间嵌入版权与定位水印,同时保持生成质量;水印隐向量重建(WLR)通过逆向DMJS实现;密集变化区域检测器(DVRD)利用扩散反推敏感性,通过统计偏差分析识别篡改区域;以及由定位结果引导的抗篡改解码(TAD)。实验表明,即使在失真条件下,TAG-WM仍实现最优的篡改鲁棒性与定位能力,且保持无损生成质量与256比特水印容量。代码已开源:https://github.com/Suchenl/TAG-WM。
原文摘要 · Abstract (English)
AI-generated content (AIGC) enables efficient visual creation but raises copyright and authenticity risks. As a common technique for integrity verification and source tracing, digital image watermarking is regarded as a potential solution to above issues. However, the widespread adoption and advancing capabilities of generative image editing tools have amplified malicious tampering risks, while simultaneously posing new challenges to passive tampering detection and watermark robustness. To address these challenges, this paper proposes a Tamper-Aware Generative image WaterMarking method named TAG-WM. The proposed method comprises four key modules: a dual-mark joint sampling (DMJS) algorithm for embedding copyright and localization watermarks into the latent space while preserving generative quality, the watermark latent reconstruction (WLR) utilizing reversed DMJS, a dense variation region detector (DVRD) leveraging diffusion inversion sensitivity to identify tampered areas via statistical deviation analysis, and the tamper-aware decoding (TAD) guided by localization results. The experimental results demonstrate that TAG-WM achieves state-of-the-art performance in both tampering robustness and localization capability even under distortion, while preserving lossless generation quality and maintaining a watermark capacity of 256 bits. The code is available at: https://github.com/Suchenl/TAG-WM.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。