首次统一保护3D高斯点云版权,既能溯源又能防恶意编辑。
GuardMarkGS: Unified Ownership Tracing and Edit Deterrence for 3D Gaussian Splatting

- 联合优化水印嵌入与对抗性编辑干扰,实现双重防护。
- 在Mip-NeRF 360和Instruct-NeRF2NeRF数据集上实现高保真渲染与强抗编辑性。
- 适合关注3D内容版权保护的开发者与创作者使用。
3D高斯点云(3DGS)正成为新视角合成的实用表示方式,但其广泛应用与指令驱动的3D编辑技术快速发展,也带来了双重版权风险:一旦3DGS资产发布,便可能被未经授权使用并进行恶意编辑。现有保护方法仅解决其中一方面——水印可追溯所有权,但无法阻止编辑;对抗性防编辑方法能干扰编辑过程,却无法提供所有权证据。据我们所知,本文首次提出统一保护框架,同时优化所有权溯源与未经授权编辑的威慑。该框架在所有高斯点上施加全局水印目标,并结合对抗性编辑干扰目标。对抗分支采用潜在锚点分离、去噪轨迹偏移与交叉注意力偏移策略,有效偏离编辑路径;更新显著性驱动的高斯选择策略将更强对抗更新分配给掩码选定的高斯点,提升水印恢复、编辑干扰与渲染保真度之间的平衡。在Mip-NeRF 360与Instruct-NeRF2NeRF数据集上的实验表明,该框架在比特准确率、编辑威慑力与渲染质量间取得良好平衡。结果表明,将所有权溯源与非法编辑威慑整合进单一优化框架,是更有效应对3DGS资产版权保护的可行路径。
原文摘要 · Abstract (English)
3D Gaussian Splatting (3DGS) is becoming a practical representation for novel view synthesis, but its growing adoption, together with rapid advances in instruction-driven 3DGS editing, also exposes a dual copyright risk: once a 3DGS-based asset is released, it can be used without permission and manipulated through 3D editing. Existing protection methods address only one side of this problem. Watermarking can trace ownership after unauthorized use, but it cannot prevent malicious editing. Adversarial edit-deterrence methods can disrupt editing, but they do not provide evidence of ownership. To the best of our knowledge, we present the first unified protection framework for 3DGS that jointly optimizes ownership tracing and unauthorized editing deterrence. Our framework combines a scene-wide watermarking objective over all Gaussians with an adversarial objective for edit deterrence. The adversarial branch combines latent-anchor separation, denoising-trajectory diversion, and cross-attention diversion to divert the editing trajectory, while an update-saliency-motivated Gaussian selection strategy assigns stronger adversarial updates to mask-selected Gaussians, improving the balance among watermark recovery, edit deterrence, and rendering fidelity. Experiments on scenes from Mip-NeRF 360 and Instruct-NeRF2NeRF demonstrate that the proposed framework achieves a favorable balance among bit accuracy, edit deterrence, and rendering quality. These results suggest that practical copyright protection of 3DGS-based assets can be more effectively addressed by integrating ownership tracing and unauthorized editing deterrence into a single optimization framework.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。