用频谱投影实现鲁棒隐形图像水印,抗多种攻击
SpecGuard: Spectral Projection-based Advanced Invisible Watermarking
- 将水印嵌入高频波段的频域,通过傅里叶变换高效转换
- 在对抗攻击、几何变换和重生成下仍能准确提取水印
- 适合版权保护场景,代码开源可复现
水印技术通过在图像中嵌入不可察觉的模式实现真实性验证。然而,现有方法在面对各类变换(包括失真、图像再生和对抗扰动)时往往缺乏鲁棒性,带来实际应用挑战。本文提出SpecGuard,一种新型鲁棒且不可见的图像水印方法。不同于以往方法,我们通过小波投影分解出高频带,并利用频谱投影将空间域数据转化为频域,在隐藏卷积层中嵌入信息。频谱投影采用快速傅里叶变换近似,高效实现域转换。编码阶段引入强度因子,增强对对抗、几何及再生类失真的抗性,保障版权信息完整性。解码阶段利用Parseval定理有效学习并提取水印模式,即使在复杂变换下也能精准恢复。我们在不可见性、容量与鲁棒性三方面评估SpecGuard,实验表明其优于当前最优模型。为确保可复现性,完整代码已发布于GitHub。
原文摘要 · Abstract (English)
Watermarking embeds imperceptible patterns into images for authenticity verification. However, existing methods often lack robustness against various transformations primarily including distortions, image regeneration, and adversarial perturbation, creating real-world challenges. In this work, we introduce SpecGuard, a novel watermarking approach for robust and invisible image watermarking. Unlike prior approaches, we embed the message inside hidden convolution layers by converting from the spatial domain to the frequency domain using spectral projection of a higher frequency band that is decomposed by wavelet projection. Spectral projection employs Fast Fourier Transform approximation to transform spatial data into the frequency domain efficiently. In the encoding phase, a strength factor enhances resilience against diverse attacks, including adversarial, geometric, and regeneration-based distortions, ensuring the preservation of copyrighted information. Meanwhile, the decoder leverages Parseval's theorem to effectively learn and extract the watermark pattern, enabling accurate retrieval under challenging transformations. We evaluate the proposed SpecGuard based on the embedded watermark's invisibility, capacity, and robustness. Comprehensive experiments demonstrate the proposed SpecGuard outperforms the state-of-the-art models. To ensure reproducibility, the full code is released on \href{https://github.com/inzamamulDU/SpecGuard_ICCV_2025}{\textcolor{blue}{\textbf{GitHub}}}.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。