Watermark Faker: Towards Forgery of Digital Image Watermarking
Not on the map. Why?
Abstract (arXiv)
Digital watermarking has been widely used to protect the copyright and integrity of multimedia data. Previous studies mainly focus on designing watermarking techniques that are robust to attacks of destroying the embedded watermarks. However, the emerging deep learning based image generation technology raises new open issues that whether it is possible to generate fake watermarked images for circumvention. In this paper, we make the first attempt to develop digital image watermark fakers by using generative adversarial learning. Suppose that a set of paired images of original and watermarked images generated by the targeted watermarker are available, we use them to train a watermark faker with U-Net as the backbone, whose input is an original image, and after a domain-specific preprocessing, it outputs a fake watermarked image. Our experiments show that the proposed watermark faker can effectively crack digital image watermarkers in both spatial and frequency domains, suggesting the risk of such forgery attacks.
Key facts. Cited by 7 papers in the map (data through 7 Oct 2026). Builds on 13 of its 24 references that are in the map. First posted on arXiv 23 Mar 2021.
Builds on
13 of 24 references.
References · 13
- 2016Image-to-Image Translation with Conditional Adversarial Networkscited by 4,510
- 2014Conditional Generative Adversarial Netscited by 2,152
- 2019Semantic Image Synthesis with Spatially-Adaptive Normalizationcited by 1,295
- 2017High-Resolution Image Synthesis and Semantic Manipulation with Conditional GANscited by 1,176
- 2019StarGAN v2: Diverse Image Synthesis for Multiple Domainscited by 1,095
- 2017StarGAN: Unified Generative Adversarial Networks for Multi-Domain Image-to-Image Translationcited by 1,036
- 2016Least Squares Generative Adversarial Networkscited by 1,000
- 2018HiDDeN: Hiding Data With Deep Networkscited by 384
- 2018Diverse Image-to-Image Translation via Disentangled Representationscited by 296
- 2017Toward Multimodal Image-to-Image Translationcited by 295
- 2020Cross-domain Correspondence Learning for Exemplar-based Image Translationcited by 116
- 2021A Brief Survey on Deep Learning Based Data Hidingcited by 9
Built on by
Citing papers per year: 2023: 1; 2024: 3; 2025: 3.
7 papers.
- 2024Black-Box Forgery Attacks on Semantic Watermarks for Diffusion Modelscited by 48
- 2024How to Trace Latent Generative Model Generated Images without Artificial Watermark?cited by 25
- 2025Forging and Removing Latent-Noise Diffusion Watermarks Using a Single Imagecited by 12
- 2025Transferable Black-Box One-Shot Forging of Watermarks via Image Preference Modelscited by 10
- 2023Warfare:Breaking the Watermark Protection of AI-Generated Contentcited by 7
- 2025WMCopier: Forging Invisible Image Watermarks on Arbitrary Imagescited by 5
- 2024Certifiably Robust Image Watermarkcited by 3
- 2025Transferable Black-Box One-Shot Forging of Watermarks via Image Preference Models23 Oct 2025
- 2025Forging and Removing Latent-Noise Diffusion Watermarks Using a Single Image27 Apr 2025
- 2025WMCopier: Forging Invisible Image Watermarks on Arbitrary Images28 Mar 2025
- 2024Black-Box Forgery Attacks on Semantic Watermarks for Diffusion Models4 Dec 2024
- 2024Certifiably Robust Image Watermark4 Jul 2024
- 2024How to Trace Latent Generative Model Generated Images without Artificial Watermark?22 May 2024
- 2023Warfare:Breaking the Watermark Protection of AI-Generated Content27 Sep 2023