无需训练即可认证的图像生成水印方法,保障版权可信验证。
Luminark: Training-free, Probabilistically-Certified Watermarking for General Vision Generative Models
- 基于像素块亮度统计定义水印,通过阈值判断匹配模式。
- 在9个生成模型上检测准确率高,抗常见图像处理干扰强。
- 无需修改模型,可通用适配扩散、自回归等各类生成模型。
本文提出Luminark,一种针对通用视觉生成模型的免训练、概率可认证水印方法。其核心是基于像素块亮度统计的新水印定义:服务方预先设定二值模式及对应块级阈值;检测时,评估每块亮度是否超过阈值,并验证结果二值模式是否匹配目标。统计分析表明该方法可有效控制误报率,实现可认证检测。为实现跨范式无缝注入,采用广泛使用的引导技术作为即插即用机制,构建水印引导(watermark guidance),使Luminark在不损失图像质量的前提下,兼容当前主流扩散、自回归与混合框架的九种生成模型。实证表明,该方法在各类模型中均保持高检测准确率、强鲁棒性及良好视觉质量。
原文摘要 · Abstract (English)
In this paper, we introduce \emph{Luminark}, a training-free and probabilistically-certified watermarking method for general vision generative models. Our approach is built upon a novel watermark definition that leverages patch-level luminance statistics. Specifically, the service provider predefines a binary pattern together with corresponding patch-level thresholds. To detect a watermark in a given image, we evaluate whether the luminance of each patch surpasses its threshold and then verify whether the resulting binary pattern aligns with the target one. A simple statistical analysis demonstrates that the false positive rate of the proposed method can be effectively controlled, thereby ensuring certified detection. To enable seamless watermark injection across different paradigms, we leverage the widely adopted guidance technique as a plug-and-play mechanism and develop the \emph{watermark guidance}. This design enables Luminark to achieve generality across state-of-the-art generative models without compromising image quality. Empirically, we evaluate our approach on nine models spanning diffusion, autoregressive, and hybrid frameworks. Across all evaluations, Luminark consistently demonstrates high detection accuracy, strong robustness against common image transformations, and good performance on visual quality.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。