RDSplat 通过低频嵌入抵御2D/3D扩散编辑,实现100位水印高鲁棒性。
RDSplat: Robust Watermarking for 3D Gaussian Splatting Against 2D and 3D Diffusion Editing
- 将水印嵌入低频高斯素元,利用频率感知选择机制
- 在7种2D扩散攻击下保持0.701比特准确率,3分钟内完成训练
- 适合需保护3D资产版权的创作者与工业应用
3D高斯点云(3DGS)已成为高质量3D资产的主要表示方式,但其数字水印保护仍是开放挑战。现有3DGS水印方法仅对传统失真鲁棒,无法应对在2D图像和3D场景层面操作的扩散编辑,后者能隐蔽擦除水印同时保持视觉合理性。本文提出RDSplat,首个可抵御2D与3D扩散编辑的3DGS水印框架。核心观察:扩散模型作为低通滤波器,保留低频结构并重生成高频细节。RDSplat据此将100位水印仅嵌入通过频率感知素元选择(FAPS)识别的低频高斯素元,其余素元冻结。通过用高斯模糊替代昂贵的扩散前向传播,实现高效训练。专用解码器GeoMark基于ViT-S/16,结合空间周期性密钥嵌入,联合抵抗扩散编辑与新视角渲染中的几何变换。在四个基准上七种2D扩散攻击及迭代3D编辑下,实验显示经典鲁棒性(比特准确率0.811)与竞争性扩散鲁棒性(比特准确率0.701),100位容量下仅需单张RTX 4090 GPU 3~7分钟完成微调。
原文摘要 · Abstract (English)
3D Gaussian Splatting (3DGS) has become a leading representation for high-fidelity 3D assets, yet protecting these assets via digital watermarking remains an open challenge. Existing 3DGS watermarking methods are robust only to classical distortions and fail under diffusion editing, which operates at both the 2D image level and the 3D scene level, covertly erasing embedded watermarks while preserving visual plausibility. We present RDSplat, the first 3DGS watermarking framework designed to withstand both 2D and 3D diffusion editing. Our key observation is that diffusion models act as low-pass filters that preserve low-frequency structures while regenerating high-frequency details. RDSplat exploits this by embedding 100-bit watermarks exclusively into low-frequency Gaussian primitives identified through Frequency-Aware Primitive Selection (FAPS), which combines the Mip score and directional balance score, while freezing all other primitives. Training efficiency is achieved through a surrogate strategy that replaces costly diffusion forward passes with Gaussian blur augmentation. A dedicated decoder, GeoMark, built on ViT-S/16 with spatially periodic secret embedding, jointly resists diffusion editing and the geometric transformations inherent to novel-view rendering. Extensive experiments on four benchmarks under seven 2D diffusion attacks and iterative 3D editing demonstrate strong classical robustness (bit accuracy 0.811) and competitive diffusion robustness (bit accuracy 0.701) at 100-bit capacity, while completing fine-tuning in 3 to 7 minutes on a single RTX 4090 GPU.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。