WAVES: Benchmarking the Robustness of Image Watermarks
About
In the burgeoning age of generative AI, watermarks act as identifiers of provenance and artificial content. We present WAVES (Watermark Analysis Via Enhanced Stress-testing), a benchmark for assessing image watermark robustness, overcoming the limitations of current evaluation methods. WAVES integrates detection and identification tasks and establishes a standardized evaluation protocol comprised of a diverse range of stress tests. The attacks in WAVES range from traditional image distortions to advanced, novel variations of diffusive, and adversarial attacks. Our evaluation examines two pivotal dimensions: the degree of image quality degradation and the efficacy of watermark detection after attacks. Our novel, comprehensive evaluation reveals previously undetected vulnerabilities of several modern watermarking algorithms. We envision WAVES as a toolkit for the future development of robust watermarks. The project is available at https://wavesbench.github.io/
Related benchmarks
| Task | Dataset | Result | Rank | |
|---|---|---|---|---|
| Post-attack image integrity | OpenImage | PSNR30.15 | 24 | |
| Post-attack image integrity | COCO | PSNR27.98 | 24 | |
| Watermark Removal Attack | SS in-processing watermarking scheme | Bit Accuracy87.2 | 13 | |
| Watermark Removal Attack | SS Watermarking Scheme | PSNR32.12 | 9 | |
| Watermark Removal Attack | Yu Watermarking Scheme | PSNR33.38 | 9 | |
| Watermark Removal Attack | PTW Watermarking Scheme | PSNR32.3 | 9 | |
| Watermark Removal Attack | HiDDeN Watermarking Scheme | PSNR29.93 | 9 | |
| Watermark Removal | HiDDeN Watermarking Scheme | Bit Accuracy52.2 | 8 | |
| Watermark Removal | PTW Watermarking Scheme | Bit Accuracy66.38 | 8 | |
| Watermark Removal | Yu Watermarking Scheme | BA0.5694 | 8 |