arXivDaily arXiv每日学术速递 周一至周五更新
arXiv周末暂无论文更新,休息一下吧,周末愉快~~
arXiv 2008.06255cs.MMcs.CRcs.CV

从攻击到保护:利用水印攻击网络实现先进的附加式水印

From Attack to Protection: Leveraging Watermarking Attack Network for Advanced Add-on Watermarking

Seung-Hun Nam;Jihyeon Kang;Daesik Kim;Namhyuk Ahn;Wonhyuk Ahn

Seung-Hun Nam, Jihyeon Kang, Daesik Kim, Namhyuk Ahn, Wonhyuk Ahn

AI总结:

本文提出可训练的水印攻击网络WAN,利用残差密集块架构在保持视觉质量的同时破坏多位水印系统,并进一步将其转化为附加式水印机制AoW,以增强现有水印方案的鲁棒性与不可感知性。

摘要:

多位水印(MW)旨在增强对水印攻击的抵抗能力,例如信号处理操作和几何失真。已有多种基准工具通过在水印图像上施加模拟攻击来评估这种鲁棒性。然而,这些工具往往未能充分利用目标多位水印的独特属性,并且通常忽视视觉质量这一实际应用中的关键因素。为克服这些不足,我们提出了一种水印攻击网络(WAN),这是一种完全可训练的基准工具,旨在挖掘多位水印系统中的漏洞并引发水印比特翻转,从而显著降低水印的可提取性。所提出的WAN采用基于残差密集块的架构,擅长局部和全局特征学习,从而在保持高视觉质量的同时阻碍嵌入信息的提取。实验结果表明,WAN能够有效破坏多种基于块的多位水印系统,同时最大限度地减少攻击造成的视觉退化。这得益于我们专门设计用于破坏这些系统的新型水印攻击损失。WAN不仅可作为基准测试工具,还可作为附加式水印(AoW)机制,在无需详细方法上下文的情况下增强已有通用水印方案的鲁棒性或不可感知性,并适应动态水印需求。大量实验结果表明,AoW通过独立增强不可感知性和鲁棒性,补充了目标多位水印系统的性能。

英文摘要:

Multi-bit watermarking (MW) has been designed to enhance resistance against watermarking attacks, such as signal processing operations and geometric distortions. Various benchmark tools exist to assess this robustness through simulated attacks on watermarked images. However, these tools often fail to capitalize on the unique attributes of the targeted MW and typically neglect the aspect of visual quality, a critical factor in practical applications. To overcome these shortcomings, we introduce a watermarking attack network (WAN), a fully trainable watermarking benchmark tool designed to exploit vulnerabilities within MW systems and induce watermark bit inversions, significantly diminishing watermark extractability. The proposed WAN employs an architecture based on residual dense blocks, which is adept at both local and global feature learning, thereby maintaining high visual quality while obstructing the extraction of embedded information. Our empirical results demonstrate that the WAN effectively undermines various block-based MW systems while minimizing visual degradation caused by attacks. This is facilitated by our novel watermarking attack loss, which is specifically crafted to compromise these systems. The WAN functions not only as a benchmarking tool but also as an add-on watermarking (AoW) mechanism, augmenting established universal watermarking schemes by enhancing robustness or imperceptibility without requiring detailed method context and adapting to dynamic watermarking requirements. Extensive experimental results show that AoW complements the performance of the targeted MW system by independently enhancing both imperceptibility and robustness.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑