Share your thoughts, 1 month free Claude Pro on usSee more
WorkDL logo mark

Towards Robust Content Watermarking Against Removal and Forgery Attacks

About

Generated contents have raised serious concerns about copyright protection, image provenance, and credit attribution. A potential solution for these problems is watermarking. Recently, content watermarking for text-to-image diffusion models has been studied extensively for its effective detection utility and robustness. However, these watermarking techniques are vulnerable to potential adversarial attacks, such as removal attacks and forgery attacks. In this paper, we build a novel watermarking paradigm called Instance-Specific watermarking with Two-Sided detection (ISTS) to resist removal and forgery attacks. Specifically, we introduce a strategy that dynamically controls the injection time and watermarking patterns based on the semantics of users' prompts. Furthermore, we propose a new two-sided detection approach to enhance robustness in watermark detection. Experiments have demonstrated the superiority of our watermarking against removal and forgery attacks.

Yifan Zhu, Yihan Wang, Xiao-Shan Gao• 2026

Related benchmarks

TaskDatasetResultRank
Watermark DetectionStable Diffusion Avg-Removal 2.1
AUC99
16
Watermark DetectionStable Diffusion Original 2-1
AUC1
16
Watermark DetectionStable Diffusion Imp-Removal 2.1
AUC82.1
8
Watermark DetectionStable Diffusion Removal Attacks Worst-Case 2.1
AUC82.1
8
Watermark DetectionStable Diffusion VAE-Removal 2.1
AUC0.9979
8
Watermark DetectionStable Diffusion Avg-Forgery 2-1
AUC47.37
8
Watermark DetectionStable Diffusion VAE-Forgery 2-1
AUC0.9491
8
Watermark DetectionStable Diffusion Imp-Forgery 2-1
AUC0.634
8
Watermark DetectionStable Diffusion Forgery Attacks Summary 2-1
Average AUC68.56
8
Watermarking DetectionImage Distortions (Rotation, Noise, Blurring, Cropping, JPEG, Diffpure)
Average AUC97.42
6
Showing 10 of 10 rows

Other info

Follow for update