arXiv:2605.19511cs.CV2026-05

让带水印图像可编辑且不损水印,实现可信内容溯源

Are Watermarked Images Editable? SafeMark for Watermark-Preserving Text-Guided Image Editing

论文配图:Are Watermarked Images Editable? SafeMark for Watermark-Preserving Text-Guided Image Editing
图 1 · 摘自论文原文
  • 在扩散模型编辑中加入水印解码损失,确保编辑时水印不失真
  • 多数据集测试显示水印位准确率超95%,编辑质量仍保持高水准
  • 适用于多种编辑工具,无需改动架构,适合内容安全领域

本文探讨了一个基础却未被充分研究的问题:带有水印的图像能否在不破坏水印完整性的情况下进行编辑?我们提出SafeMark框架,实现水印保留的文本引导图像编辑。该框架将阈值化水印解码损失直接引入扩散编辑器的训练目标,通过微调使语义合理的编辑同时保持最终输出中的嵌入水印。这一设计具有清晰的信息论依据:在编辑图像上保持高比特准确率,可下界约束编辑通道对水印与输出间互信息的保留能力,这直接决定水印可恢复性。SafeMark兼容多种基于可微分扩散的编辑器,无需架构修改。在多个数据集、编辑方法和后处理失真设置下的广泛评估表明,SafeMark在多样化编辑场景中均实现高水印位准确率,同时保持高质量语义编辑,并不牺牲对常见后处理失真的鲁棒性。结果证明,语义可编辑性与水印完整性根本相容,为生成式编辑流水线提供了可信的内容溯源能力。

原文摘要 · Abstract (English)

This paper investigates a fundamental yet underexplored question: can watermarked images remain editable without compromising watermark integrity? We propose SafeMark, a framework for watermark-preserving text-guided image manipulation that explicitly integrates watermark integrity into the editing process. Specifically, SafeMark adds a thresholded watermark-decoding loss directly to the diffusion editor's training objective, fine-tuning the editor so that semantically valid edits also preserve the embedded watermark at the final output. This design admits a clean information-theoretic justification: maintaining high bit-accuracy on the edited image lower-bounds the mutual information that the editor channel preserves between watermark and edited output, the quantity that fundamentally controls watermark recoverability. SafeMark is compatible with differentiable diffusion-based editors, and requires no architectural modification. Extensive evaluations across multiple datasets, text-guided editing methods, and post-edit distortion settings demonstrate that SafeMark achieves high watermark bit accuracy across diverse editing settings while maintaining high-quality semantic edits, without sacrificing robustness to common post-edit distortions. These results demonstrate that semantic editability and watermark integrity are fundamentally compatible, enabling trustworthy image provenance in generative editing pipelines.

图像编辑水印保护扩散模型内容溯源

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。