3D-GSW: 3D Gaussian Splatting for Robust Watermarking
About
As 3D Gaussian Splatting (3D-GS) gains significant attention and its commercial usage increases, the need for watermarking technologies to prevent unauthorized use of the 3D-GS models and rendered images has become increasingly important. In this paper, we introduce a robust watermarking method for 3D-GS that secures copyright of both the model and its rendered images. Our proposed method remains robust against distortions in rendered images and model attacks while maintaining high rendering quality. To achieve these objectives, we present Frequency-Guided Densification (FGD), which removes 3D Gaussians based on their contribution to rendering quality, enhancing real-time rendering and the robustness of the message. FGD utilizes Discrete Fourier Transform to split 3D Gaussians in high-frequency areas, improving rendering quality. Furthermore, we employ a gradient mask for 3D Gaussians and design a wavelet-subband loss to enhance rendering quality. Our experiments show that our method embeds the message in the rendered images invisibly and robustly against various attacks, including model distortion. Our method achieves superior performance in both rendering quality and watermark robustness while improving real-time rendering efficiency. Project page: https://kuai-lab.github.io/cvpr20253dgsw/
Related benchmarks
| Task | Dataset | Result | Rank | |
|---|---|---|---|---|
| 3D Scene Watermarking | Blender, LLFF, and Mip-NeRF 360 | Bit Accuracy97.22 | 12 | |
| Novel View Synthesis | Consistent4D NVS (four unseen views) | LPIPS0.206 | 8 | |
| 3D Gaussian Splatting protection (Joint Watermarking and Edit Deterrence) | Mip-NeRF 360 and Instruct-NeRF2NeRF averaged scenes (novel views) | sUCPS0.7791 | 6 | |
| 3D Editing Defense | 3D Scenes evaluated via GaussianEditor (test) | CLIP Original Score1 | 5 | |
| 3D Gaussian Splatting Watermark Extraction | Blender, LLFF, and Mip-NeRF 360 (Averaged) | Bit Accuracy (No Distortion)97.22 | 4 | |
| Watermark Extraction | Blender, LLFF, and Mip-NeRF 360 Averaged (test) | Bit Accuracy (No Distortion)97.22 | 4 |