mlsanityData to 7 Oct 2026

Deep 3D-to-2D Watermarking: Embedding Messages in 3D Meshes and Extracting Them from 2D Renderings

arXiv 2104.13450 ↗First posted 27 Apr 2021cs.CV cs.CR cs.LGcited by 23

Not on the map. Why?

Abstract (arXiv)

Digital watermarking is widely used for copyright protection. Traditional 3D watermarking approaches or commercial software are typically designed to embed messages into 3D meshes, and later retrieve the messages directly from distorted/undistorted watermarked 3D meshes. However, in many cases, users only have access to rendered 2D images instead of 3D meshes. Unfortunately, retrieving messages from 2D renderings of 3D meshes is still challenging and underexplored. We introduce a novel end-to-end learning framework to solve this problem through: 1) an encoder to covertly embed messages in both mesh geometry and textures; 2) a differentiable renderer to render watermarked 3D objects from different camera angles and under varied lighting conditions; 3) a decoder to recover the messages from 2D rendered images. From our experiments, we show that our model can learn to embed information visually imperceptible to humans, and to retrieve the embedded information from 2D renderings that undergo 3D distortions. In addition, we demonstrate that our method can also work with other renderers, such as ray tracers and real-time renderers with and without fine-tuning.

Key facts. Cited by 23 papers in the map (data through 7 Oct 2026). Builds on 19 of its 49 references that are in the map. First posted on arXiv 27 Apr 2021.

Builds on

19 of 49 references.

References · 19

  1. 2015Deep Residual Learning for Image Recognitioncited by 51,809
  2. 2015U-Net: Convolutional Networks for Biomedical Image Segmentationcited by 19,604
  3. 2016PointNet: Deep Learning on Point Sets for 3D Classification and Segmentationcited by 5,223
  4. 2017PointNet++: Deep Hierarchical Feature Learning on Point Sets in a Metric Spacecited by 4,384
  5. 2019Soft Rasterizer: A Differentiable Renderer for Image-based 3D Reasoningcited by 420
  6. 2018DeepVoxels: Learning Persistent 3D Feature Embeddingscited by 401
  7. 2018HiDDeN: Hiding Data With Deep Networkscited by 384
  8. 2018Generating 3D faces using Convolutional Mesh Autoencoderscited by 267
  9. 2019StegaStamp: Invisible Hyperlinks in Physical Photographscited by 256
  10. 2019Differentiable Surface Splatting for Point-based Geometry Processingcited by 238
  11. 2017Multi-view Supervision for Single-view Reconstruction via Differentiable Ray Consistencycited by 177
  12. 2018Unsupervised Training for 3D Morphable Model Regressioncited by 99
7 more
  1. 2020Distortion Agnostic Deep Watermarkingcited by 88
  2. 2019SteganoGAN: High Capacity Image Steganography with GANscited by 70
  3. 2017Variational Autoencoders for Deforming 3D Mesh Modelscited by 69
  4. 2018Non-Stationary Texture Synthesis by Adversarial Expansioncited by 66
  5. 2018ReDMark: Framework for Residual Diffusion Watermarking on Deep Networkscited by 55
  6. 2020Fully Convolutional Mesh Autoencoder using Efficient Spatially Varying Kernelscited by 53
  7. 2019ROMark: A Robust Watermarking System Using Adversarial Trainingcited by 17

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2021: 1; 2022: 1; 2023: 1; 2024: 10; 2025: 7; 2026: 3.

23 papers.

Sort:

By area:

  1. 2023CopyRNeRF: Protecting the CopyRight of Neural Radiance Fieldscited by 33
  2. 2024GS-Hider: Hiding Messages into 3D Gaussian Splattingcited by 26
  3. 2024WateRF: Robust Watermarks in Radiance Fields for Protection of Copyrightscited by 25
  4. 2021Data Hiding with Deep Learning: A Survey Unifying Digital Watermarking and Steganographycited by 23
  5. 2024GaussianMarker: Uncertainty-Aware Copyright Protection of 3D Gaussian Splattingcited by 20
  6. 2024Protecting NeRFs' Copyright via Plug-And-Play Watermarking Base Modelcited by 18
  7. 2024GuardSplat: Efficient and Robust Watermarking for 3D Gaussian Splattingcited by 18
  8. 2025All That Glitters Is Not Gold: Key-Secured 3D Secrets within 3D Gaussian Splattingcited by 15
  9. 2025SecureGS: Boosting the Security and Fidelity of 3D Gaussian Splatting Steganographycited by 14
  10. 2024GaussianStego: A Generalizable Stenography Pipeline for Generative 3D Gaussians Splattingcited by 11
  11. 2025The NeRF Signature: Codebook-Aided Watermarking for Neural Radiance Fieldscited by 10
  12. 2025MarkSplatter: Generalizable Watermarking for 3D Gaussian Splatting Model via Splatter Image Structurecited by 10
11 more
  1. 2024GeometrySticker: Enabling Ownership Claim of Recolorized Neural Radiance Fieldscited by 6
  2. 2025GS-Marker: Generalizable and Robust Watermarking for 3D Gaussian Splattingcited by 6
  3. 2022Be Careful with Rotation: A Uniform Backdoor Pattern for 3D Shapecited by 4
  4. 2025GaussianSeal: Rooting Adaptive Watermarks for 3D Gaussian Generation Modelcited by 4
  5. 2024Certifiably Robust Image Watermarkcited by 3
  6. 2024Proactive Schemes: A Survey of Adversarial Attacks for Social Goodcited by 2
  7. 2024Towards Secure and Usable 3D Assets: A Novel Framework for Automatic Visible Watermarkingcited by 1
  8. 2025X-SG2S: Safe and Generalizable Gaussian Splatting with X-dimensional Watermarkscited by 1
  9. 20264D-GSW: Kinematic-Aware Spatio-Temporal Consistent Watermarking for 4D Gaussian Splattingcited by 0
  10. 2026NGS-Marker: Robust Native Watermarking for 3D Gaussian Splattingcited by 0
  11. 2026ReconSplat: Generalizable 3D Scene Reconstruction Beyond Observed Viewscited by 0