AI 中文总结
针对屏幕拍摄威胁机密信息保护及多屏幕勾结攻击问题,提出CoMSMark框架。通过风格调制纳入屏幕ID、引入勾结抑制损失及采用图像无关编码范式,有效抵抗水印去除和伪造,在多种条件下有高水印准确率和鲁棒性。
AI 中文摘要
屏幕拍摄对机密信息保护构成重大威胁。现有屏幕拍摄水印方法虽能进行版权验证,但不同屏幕上带有相同版权水印的图像往往呈现高度相似且可估计的水印模式,易被用于水印去除和伪造,即多屏幕勾结攻击。为减轻此威胁,我们提出CoMSMark,一种用于多屏幕拍摄的抗勾结图像无关水印框架,通过减少屏幕间共享的残余成分来抵御多屏幕勾结攻击。具体而言,通过风格调制机制纳入屏幕ID,使编码器生成特定于屏幕的水印残余以进行可靠的源归属。还引入勾结抑制损失以减少共享残余成分并鼓励对伪造样本的高熵预测,提高抗勾结攻击能力。最后,为实现高效大规模分发,采用与图像内容无关的编码范式独立生成水印残余。大量实验表明,CoMSMark有效抵抗基于勾结的水印去除和伪造,在去除攻击下平均水印准确率高于90%,伪造水印准确率接近50%,在不同拍摄条件下也具有竞争力的鲁棒性。
英文摘要
Screen-shooting poses a significant threat to confidential information protection. While existing screen-shooting watermarking methods enable copyright verification, the copyrighted images carrying the same copyright watermark across different screens often exhibit highly similar and estimable watermark patterns. These shared patterns can be exploited for watermark removal and forgery, a threat we term the multi-screen collusion attack. To mitigate this threat, we propose CoMSMark, a collusion-resistant image-agnostic watermarking framework for multi-screen shooting, which reduces shared residual components across screens to resist multi-screen collusion attacks. Specifically, we incorporate screen ID through a style modulation mechanism, enabling the encoder to generate screen-specific watermark residuals for reliable source attribution. We further introduce a collusion suppression loss that reduces shared residual components and encourages high-entropy predictions for forged samples, improving resistance to collusion attacks. Finally, to enable efficient large-scale distribution, CoMSMark employs an image-agnostic encoding paradigm that generates watermark residuals independently of image content. Extensive experiments demonstrate that CoMSMark effectively resists both collusion-based watermark removal and forgery. It maintains an average watermark accuracy above 90% under removal attacks while keeping forged-watermark accuracy near 50%. Moreover, CoMSMark achieves competitive robustness under diverse screen-shooting conditions, including varying capture distances and angles.