轻量级水印移除方法,低算力下有效去痕且不伤画质。
Low-Compute Watermark Removal via Dual-Domain Natural Projection
- 通过频域与语义域双重投影,对齐自然图像先验抑制水印信号。
- 在多类水印方案中均实现高移除率,感知失真仅轻微增加。
- 无需训练、计算成本极低,适合实际部署场景使用。
有效的语义水印移除需兼顾高移除成功率、低感知失真和低计算开销三者。然而,现有单图攻击通常仅优化前两项,虽能强效压制水印,但依赖昂贵的多步优化,限制了实际应用。本文指出该权衡是根本性的:当前方法无法同时满足三项要求。我们提出 extsc{DAWN},一种轻量级、免训练的攻击方法,专为低开销场景设计,在保持竞争性移除性能的同时显著降低计算成本。 extsc{DAWN} 通过将含水印图像投影到互补的频率与语义空间中的自然图像先验,抑制偏离自然统计特性的水印信号,并采用解耦的感知对齐步骤恢复视觉一致性,几乎无额外伪影。在多种像素域、频域及潜在空间水印方案上, extsc{DAWN} 均持续降低可检测性,同时保留结构与语义保真度,证明了高效、低资源水印移除的可行性,仅带来轻微感知退化。代码已开源:https://github.com/Pragati-Meshram/DAWN。
原文摘要 · Abstract (English)
Effective removal of semantic watermarks requires balancing three competing objectives: \emph{high removal success}, \emph{low perceptual distortion}, and \emph{low computational cost}. However, existing single-image attacks typically optimize only for the first two, achieving strong watermark suppression but relying on expensive, multi-step optimization that limits practical deployment. In this work, we show that this trade-off is fundamental: no current approach achieves all three properties simultaneously. We introduce \textsc{DAWN}, a lightweight, training-free attack that explicitly targets the low-cost regime while maintaining competitive removal performance. \textsc{DAWN} works by projecting a watermarked image onto natural-image priors in complementary frequency and semantic spaces, suppressing watermark signals that deviate from natural statistics, and then applying a decoupled perceptual-alignment step to restore visual consistency with minimal artifact. Across diverse pixel-, frequency-, and latent-space watermarking schemes, \textsc{DAWN} consistently reduces detectability while preserving structural and semantic fidelity, demonstrating that efficient, low-resource watermark removal is feasible with only modest perceptual degradation. Our code is available at https://github.com/Pragati-Meshram/DAWN.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。