ADD:一种多比特图像水印方法
阅读原文· arxiv.org针对生成式模型带来的虚假信息风险,研究人员提出多比特图像水印方案ADD(Add, Dot, Decode),采用"添加-点积-解码"两阶段机制嵌入可溯源信息。在MS-COCO基准48比特水印测试中,ADD达成100%解码准确率,面对各类图像失真时性能衰减控制在2%以内,远优于现有方法14%的平均降幅。该方法嵌入效率提升2倍,解码速度提升7.4倍,并提供理论分析支撑其有效性。
As generative models enable rapid creation of high-fidelity images, societal concerns about misinformation and authenticity have intensified. A promising remedy is multi-bit image watermarking, which embeds a multi-bit message into an image so that a verifier can later detect whether the image is generated by someone and further identify the source by decoding the embedded message. Existing approaches often fall short in capacity, resilience to common image distortions, and theoretical justification. To address these limitations, we propose ADD (Add, Dot, Decode), a multi-bit image watermarking method with two stages: learning a watermark to be linearly combined with the multi-bit message and added to the image, and decoding through inner products between the watermarked image and the learned watermark. On the standard MS-COCO benchmark, we demonstrate that for the challenging task of 48-bit watermarking, ADD achieves 100\% decoding accuracy, with performance dropping by at most 2\% under a wide range of image distortions, substantially smaller than the 14\% average drop of state-of-the-art methods. In addition, ADD achieves substantial computational gains, with 2-fold faster embedding and 7.4-fold faster decoding than the fastest existing method. We further provide a theoretical analysis explaining why the learned watermark and the corresponding decoding rule are effective.