arXiv:2605.06153cs.CRcs.CV2026-05

提出可理论验证的扩散模型水印方法,摆脱对具体模型的依赖。

Secure Seed-Based Multi-bit Watermarking for Diffusion Models from First Principles

论文配图:Secure Seed-Based Multi-bit Watermarking for Diffusion Models from First Principles
图 1 · 摘自论文原文
  • 从生成模型中解耦水印决策机制,实现理论分析。
  • 构建安全-鲁棒性-保真度三重权衡的特征曲面,可精确比较方案。
  • 新方法SSB可自由调控水印性能,无需大量实测验证。

生成图像模型的快速发展催生了专用水印技术,尤其是基于种子的嵌入方法。然而,当前评估仍高度依赖具体模型架构,缺乏严格的理论基础,难以对水印方案的有效性(尤其是安全性)做出明确结论。为此,我们主张水印方案的有效性应通过严谨的理论分析确立。通过将模型相关部分与水印决策机制解耦,我们建立了一个基于安全、鲁棒性和保真度的正式评估框架。该框架以特征曲面形式呈现三者之间的权衡关系,独立于任何生成模型,实现不同水印系统的精确对比。基于此,我们提出SSB方法,它扩展了以往基于种子的方法,可在特征曲面上任意达到所需的安全部分-鲁棒性-保真度组合。本工作为设计具备理论保障的现代水印系统铺平道路,无需耗费成本的实证测试。

原文摘要 · Abstract (English)

The rapid emergence of generative image models has led to the development of specialized watermarking techniques, particularly in-generation methods such as seed-based embedding. However, current evaluations in this area remain largely empirical, making them heavily reliant on the specific model architectures used for generation and inversion. This prevents any clear conclusion on the performance of any method, especially regarding security, for which a rigorous definition is lacking. Against this approach, we argue that the effectiveness of a watermarking scheme should be established purely through a thorough theoretical analysis. This is enabled by decoupling the model-dependent part from the actual decision mechanism of the watermarking system. Using this decoupling, we introduce a formal evaluation framework based on security, robustness, and fidelity. This allows precise comparisons between watermarking systems through a characteristic surface representing the trade-off between these three quantities, independent of any generative model. Based on this framework, we propose SSB, a novel watermarking method that generalizes previous seed-based methods by allowing to reach any security-robustness-fidelity regime on its characteristic surface. This work opens the door to the design of modern watermarking systems with theoretical guarantees that do not necessitate any costly empirical evaluations.

水印扩散模型理论分析

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。