抗多屏合谋攻击的屏幕自适应水印技术,有效防止水印被移除和伪造。
Screen-Conditioned Watermarking Against Multi-Screen Collusion Attacks

- 通过屏幕ID调制生成专属水印残差,实现源追溯。
- 在移除攻击下水印准确率超90%,伪造样本准确率接近50%。
- 图像无关编码,适用于大规模多屏场景分发。
屏幕拍摄对机密信息保护构成重大威胁。现有屏幕水印方法虽能实现版权验证,但不同屏幕携带相同水印时,其水印模式高度相似且可预测,易被用于水印移除与伪造,此即多屏合谋攻击。为此,我们提出CoMSMark——一种抵抗合谋攻击的图像无关水印框架,通过降低跨屏共享残差成分来增强安全性。具体地,引入屏幕ID的风格调制机制,使编码器生成屏幕特异的水印残差以实现可靠溯源;进一步设计合谋抑制损失,减少共享残差并促使伪造样本输出高熵结果,提升抗合谋能力;最后采用图像无关编码范式,独立于图像内容生成水印残差,支持高效大规模部署。大量实验表明,CoMSMark能有效抵御基于合谋的水印移除与伪造,在移除攻击下平均水印准确率保持90%以上,伪造水印准确率维持在50%左右。同时,在不同拍摄距离与角度等多样化条件下仍具备良好鲁棒性。
原文摘要 · Abstract (English)
Screen-shooting poses a significant threat to confidential information protection. While existing screen-shooting watermarking methods enable copyright verification, the copyrighted images carrying the same copyright watermark across different screens often exhibit highly similar and estimable watermark patterns. These shared patterns can be exploited for watermark removal and forgery, a threat we term the multi-screen collusion attack. To mitigate this threat, we propose CoMSMark, a collusion-resistant image-agnostic watermarking framework for multi-screen shooting, which reduces shared residual components across screens to resist multi-screen collusion attacks. Specifically, we incorporate screen ID through a style modulation mechanism, enabling the encoder to generate screen-specific watermark residuals for reliable source attribution. We further introduce a collusion suppression loss that reduces shared residual components and encourages high-entropy predictions for forged samples, improving resistance to collusion attacks. Finally, to enable efficient large-scale distribution, CoMSMark employs an image-agnostic encoding paradigm that generates watermark residuals independently of image content. Extensive experiments demonstrate that CoMSMark effectively resists both collusion-based watermark removal and forgery. It maintains an average watermark accuracy above 90% under removal attacks while keeping forged-watermark accuracy near 50%. Moreover, CoMSMark achieves competitive robustness under diverse screen-shooting conditions, including varying capture distances and angles.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。