arXiv:2507.13407cs.CVcs.AI2025-07中稿 · ICLR被引 3

用可理解的语义概念为AI图像加水印,防篡改还易人工查验。

IConMark: Robust Interpretable Concept-Based Watermark For AI Images

  • 将有意义的语义特征嵌入图像,替代传统噪声水印
  • 在多种攻击下仍保持10.8%以上AUROC提升
  • 适合需要可解释性和抗攻击性的数字认证场景

随着生成式AI和合成媒体的快速发展,区分AI生成图像与真实图像对防止虚假信息、保障数字真实性至关重要。传统水印技术在对抗性攻击下易失效。我们提出IConMark,一种在生成过程中嵌入可解释语义概念的鲁棒语义水印方法,是迈向可解释水印的第一步。不同于依赖噪声或扰动的传统方法,IConMark引入人类可读的语义属性,使其既具抗攻击性又便于人工验证。实验表明,该方法在多种图像增强下均表现优异,检测准确率显著提升。此外,IConMark可与现有技术结合,形成IConMark+SS和IConMark+TM两种混合方案,进一步增强对多种篡改操作的鲁棒性。在多个数据集上,IConMark、IConMark+TM和IConMark+SS相比最优基线,平均受试者工作特征曲线下面积(AUROC)分别提高10.8%、14.5%和15.9%。

原文摘要 · Abstract (English)

With the rapid rise of generative AI and synthetic media, distinguishing AI-generated images from real ones has become crucial in safeguarding against misinformation and ensuring digital authenticity. Traditional watermarking techniques have shown vulnerabilities to adversarial attacks, undermining their effectiveness in the presence of attackers. We propose IConMark, a novel in-generation robust semantic watermarking method that embeds interpretable concepts into AI-generated images, as a first step toward interpretable watermarking. Unlike traditional methods, which rely on adding noise or perturbations to AI-generated images, IConMark incorporates meaningful semantic attributes, making it interpretable to humans and hence, resilient to adversarial manipulation. This method is not only robust against various image augmentations but also human-readable, enabling manual verification of watermarks. We demonstrate a detailed evaluation of IConMark's effectiveness, demonstrating its superiority in terms of detection accuracy and maintaining image quality. Moreover, IConMark can be combined with existing watermarking techniques to further enhance and complement its robustness. We introduce IConMark+SS and IConMark+TM, hybrid approaches combining IConMark with StegaStamp and TrustMark, respectively, to further bolster robustness against multiple types of image manipulations. Our base watermarking technique (IConMark) and its variants (+TM and +SS) achieve 10.8%, 14.5%, and 15.9% higher mean area under the receiver operating characteristic curve (AUROC) scores for watermark detection, respectively, compared to the best baseline on various datasets.

图像水印可解释性生成模型

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。