arXiv:2511.21600cs.CRcs.LG2025-11中稿 · Statistical Learni…

为合成表格数据设计高效鲁棒的频域水印方法

Robust Spectral Watermark for Synthetic Tabular Data

  • 在频域通过傅里叶变换嵌入水印信号
  • 对五大数据集实现强可检测性与抗攻击能力
  • 支持混合类型数据,适合医疗金融场景

生成式AI推动了高保真合成表格数据在医疗、金融和公共政策等领域的广泛应用,引发数据来源追踪与滥用担忧。水印技术可解决此问题,但现有方法计算成本高、难以处理混合离散-连续数据,且对常见后处理攻击缺乏鲁棒性。为此,我们提出TAB-DRW,一种高效鲁棒的合成表格数据后编辑水印方案。该方法通过Yeo-Johnson变换与标准化统一异构特征,应用离散傅里叶变换(DFT),并依据预设伪随机比特调整自适应选择的频域虚部。为提升效率与鲁棒性,引入基于秩的伪随机比特生成方法,实现行级检索而无需存储开销。在五个基准表格数据集上的实验表明,TAB-DRW在保持高数据保真度的同时,对后处理及自适应攻击具备强可检测性与鲁棒性,全面支持混合类型特征。

原文摘要 · Abstract (English)

The rise of generative AI has enabled the production of high-fidelity synthetic tabular data across fields such as healthcare, finance, and public policy, raising growing concerns about data provenance and misuse. Watermarking offers a promising solution to address these concerns by ensuring the traceability of synthetic data, but existing methods face many limitations: they are computationally expensive due to reliance on the inverse process of large diffusion models, struggle with mixed discrete-continuous data, or lack robustness to common post-processing attacks. To address these limitations, we propose TAB-DRW, an efficient and robust post-editing watermarking scheme for synthetic tabular data. TAB-DRW embeds watermark signals in the frequency domain: it normalizes heterogeneous features via the Yeo-Johnson transformation and standardization, applies the discrete Fourier transform (DFT), and adjusts the imaginary parts of adaptively selected entries according to precomputed pseudorandom bits. To further enhance robustness and efficiency, we introduce a novel rank-based pseudorandom bit generation method that enables row-wise retrieval without incurring storage overhead. Experiments on five benchmark tabular datasets show that TAB-DRW achieves strong detectability and robustness against post-processing and adaptive attacks, while preserving high data fidelity and fully supporting mixed-type features.

数据水印合成数据表格数据频域方法

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。