Deep 3D-to-2D Watermarking: Embedding Messages in 3D Meshes and Extracting Them from 2D Renderings
Not on the map. Why?
Abstract (arXiv)
Digital watermarking is widely used for copyright protection. Traditional 3D watermarking approaches or commercial software are typically designed to embed messages into 3D meshes, and later retrieve the messages directly from distorted/undistorted watermarked 3D meshes. However, in many cases, users only have access to rendered 2D images instead of 3D meshes. Unfortunately, retrieving messages from 2D renderings of 3D meshes is still challenging and underexplored. We introduce a novel end-to-end learning framework to solve this problem through: 1) an encoder to covertly embed messages in both mesh geometry and textures; 2) a differentiable renderer to render watermarked 3D objects from different camera angles and under varied lighting conditions; 3) a decoder to recover the messages from 2D rendered images. From our experiments, we show that our model can learn to embed information visually imperceptible to humans, and to retrieve the embedded information from 2D renderings that undergo 3D distortions. In addition, we demonstrate that our method can also work with other renderers, such as ray tracers and real-time renderers with and without fine-tuning.
Key facts. Cited by 23 papers in the map (data through 7 Oct 2026). Builds on 19 of its 49 references that are in the map. First posted on arXiv 27 Apr 2021.
Builds on
19 of 49 references.
References · 19
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2015U-Net: Convolutional Networks for Biomedical Image Segmentationcited by 19,604
- 2016PointNet: Deep Learning on Point Sets for 3D Classification and Segmentationcited by 5,223
- 2017PointNet++: Deep Hierarchical Feature Learning on Point Sets in a Metric Spacecited by 4,384
- 2019Soft Rasterizer: A Differentiable Renderer for Image-based 3D Reasoningcited by 420
- 2018DeepVoxels: Learning Persistent 3D Feature Embeddingscited by 401
- 2018HiDDeN: Hiding Data With Deep Networkscited by 384
- 2018Generating 3D faces using Convolutional Mesh Autoencoderscited by 267
- 2019StegaStamp: Invisible Hyperlinks in Physical Photographscited by 256
- 2019Differentiable Surface Splatting for Point-based Geometry Processingcited by 238
- 2017Multi-view Supervision for Single-view Reconstruction via Differentiable Ray Consistencycited by 177
- 2018Unsupervised Training for 3D Morphable Model Regressioncited by 99
7 more
- 2020Distortion Agnostic Deep Watermarkingcited by 88
- 2019SteganoGAN: High Capacity Image Steganography with GANscited by 70
- 2017Variational Autoencoders for Deforming 3D Mesh Modelscited by 69
- 2018Non-Stationary Texture Synthesis by Adversarial Expansioncited by 66
- 2018ReDMark: Framework for Residual Diffusion Watermarking on Deep Networkscited by 55
- 2020Fully Convolutional Mesh Autoencoder using Efficient Spatially Varying Kernelscited by 53
- 2019ROMark: A Robust Watermarking System Using Adversarial Trainingcited by 17
Built on by
Citing papers per year: 2021: 1; 2022: 1; 2023: 1; 2024: 10; 2025: 7; 2026: 3.
23 papers.
Sort:
By area:
- 2023CopyRNeRF: Protecting the CopyRight of Neural Radiance Fieldscited by 33
- 2024GS-Hider: Hiding Messages into 3D Gaussian Splattingcited by 26
- 2024WateRF: Robust Watermarks in Radiance Fields for Protection of Copyrightscited by 25
- 2021Data Hiding with Deep Learning: A Survey Unifying Digital Watermarking and Steganographycited by 23
- 2024GaussianMarker: Uncertainty-Aware Copyright Protection of 3D Gaussian Splattingcited by 20
- 2024Protecting NeRFs' Copyright via Plug-And-Play Watermarking Base Modelcited by 18
- 2024GuardSplat: Efficient and Robust Watermarking for 3D Gaussian Splattingcited by 18
- 2025All That Glitters Is Not Gold: Key-Secured 3D Secrets within 3D Gaussian Splattingcited by 15
- 2025SecureGS: Boosting the Security and Fidelity of 3D Gaussian Splatting Steganographycited by 14
- 2024GaussianStego: A Generalizable Stenography Pipeline for Generative 3D Gaussians Splattingcited by 11
- 2025The NeRF Signature: Codebook-Aided Watermarking for Neural Radiance Fieldscited by 10
- 2025MarkSplatter: Generalizable Watermarking for 3D Gaussian Splatting Model via Splatter Image Structurecited by 10
11 more
- 2024GeometrySticker: Enabling Ownership Claim of Recolorized Neural Radiance Fieldscited by 6
- 2025GS-Marker: Generalizable and Robust Watermarking for 3D Gaussian Splattingcited by 6
- 2022Be Careful with Rotation: A Uniform Backdoor Pattern for 3D Shapecited by 4
- 2025GaussianSeal: Rooting Adaptive Watermarks for 3D Gaussian Generation Modelcited by 4
- 2024Certifiably Robust Image Watermarkcited by 3
- 2024Proactive Schemes: A Survey of Adversarial Attacks for Social Goodcited by 2
- 2024Towards Secure and Usable 3D Assets: A Novel Framework for Automatic Visible Watermarkingcited by 1
- 2025X-SG2S: Safe and Generalizable Gaussian Splatting with X-dimensional Watermarkscited by 1
- 20264D-GSW: Kinematic-Aware Spatio-Temporal Consistent Watermarking for 4D Gaussian Splattingcited by 0
- 2026NGS-Marker: Robust Native Watermarking for 3D Gaussian Splattingcited by 0
- 2026ReconSplat: Generalizable 3D Scene Reconstruction Beyond Observed Viewscited by 0
- 2026ReconSplat: Generalizable 3D Scene Reconstruction Beyond Observed Views28 Aug 2026
- 2026NGS-Marker: Robust Native Watermarking for 3D Gaussian Splatting18 Aug 2026
- 20264D-GSW: Kinematic-Aware Spatio-Temporal Consistent Watermarking for 4D Gaussian Splatting21 May 2026
- 2025MarkSplatter: Generalizable Watermarking for 3D Gaussian Splatting Model via Splatter Image Structure31 Aug 2025
- 2025GS-Marker: Generalizable and Robust Watermarking for 3D Gaussian Splatting24 Mar 2025
- 2025All That Glitters Is Not Gold: Key-Secured 3D Secrets within 3D Gaussian Splatting10 Mar 2025
- 2025SecureGS: Boosting the Security and Fidelity of 3D Gaussian Splatting Steganography8 Mar 2025
- 2025GaussianSeal: Rooting Adaptive Watermarks for 3D Gaussian Generation Model1 Mar 2025
- 2025The NeRF Signature: Codebook-Aided Watermarking for Neural Radiance Fields26 Feb 2025
- 2025X-SG2S: Safe and Generalizable Gaussian Splatting with X-dimensional Watermarks13 Feb 2025
- 2024GuardSplat: Efficient and Robust Watermarking for 3D Gaussian Splatting29 Nov 2024
- 2024GaussianMarker: Uncertainty-Aware Copyright Protection of 3D Gaussian Splatting31 Oct 2024
11 more
- 2024Proactive Schemes: A Survey of Adversarial Attacks for Social Good24 Sep 2024
- 2024Towards Secure and Usable 3D Assets: A Novel Framework for Automatic Visible Watermarking31 Aug 2024
- 2024GeometrySticker: Enabling Ownership Claim of Recolorized Neural Radiance Fields18 Jul 2024
- 2024Protecting NeRFs' Copyright via Plug-And-Play Watermarking Base Model10 Jul 2024
- 2024Certifiably Robust Image Watermark4 Jul 2024
- 2024GaussianStego: A Generalizable Stenography Pipeline for Generative 3D Gaussians Splatting1 Jul 2024
- 2024GS-Hider: Hiding Messages into 3D Gaussian Splatting24 May 2024
- 2024WateRF: Robust Watermarks in Radiance Fields for Protection of Copyrights3 May 2024
- 2023CopyRNeRF: Protecting the CopyRight of Neural Radiance Fields21 Jul 2023
- 2022Be Careful with Rotation: A Uniform Backdoor Pattern for 3D Shape28 Nov 2022
- 2021Data Hiding with Deep Learning: A Survey Unifying Digital Watermarking and Steganography20 Jul 2021
- 2023CopyRNeRF: Protecting the CopyRight of Neural Radiance Fieldscited by 33
- 2024GS-Hider: Hiding Messages into 3D Gaussian Splattingcited by 26
- 2024WateRF: Robust Watermarks in Radiance Fields for Protection of Copyrightscited by 25
- 2021Data Hiding with Deep Learning: A Survey Unifying Digital Watermarking and Steganographycited by 23
- 2024GaussianMarker: Uncertainty-Aware Copyright Protection of 3D Gaussian Splattingcited by 20
- 2024GuardSplat: Efficient and Robust Watermarking for 3D Gaussian Splattingcited by 18
- 2025All That Glitters Is Not Gold: Key-Secured 3D Secrets within 3D Gaussian Splattingcited by 15
- 2025SecureGS: Boosting the Security and Fidelity of 3D Gaussian Splatting Steganographycited by 14
- 2024GaussianStego: A Generalizable Stenography Pipeline for Generative 3D Gaussians Splattingcited by 11
- 2025The NeRF Signature: Codebook-Aided Watermarking for Neural Radiance Fieldscited by 10
- 2024GeometrySticker: Enabling Ownership Claim of Recolorized Neural Radiance Fieldscited by 6
- 2025GS-Marker: Generalizable and Robust Watermarking for 3D Gaussian Splattingcited by 6
12 most cited of 20 All 20 (JSON)
- 2026ReconSplat: Generalizable 3D Scene Reconstruction Beyond Observed Views28 Aug 2026
- 2026NGS-Marker: Robust Native Watermarking for 3D Gaussian Splatting18 Aug 2026
- 20264D-GSW: Kinematic-Aware Spatio-Temporal Consistent Watermarking for 4D Gaussian Splatting21 May 2026
- 2025GS-Marker: Generalizable and Robust Watermarking for 3D Gaussian Splatting24 Mar 2025
- 2025All That Glitters Is Not Gold: Key-Secured 3D Secrets within 3D Gaussian Splatting10 Mar 2025
- 2025SecureGS: Boosting the Security and Fidelity of 3D Gaussian Splatting Steganography8 Mar 2025
- 2025The NeRF Signature: Codebook-Aided Watermarking for Neural Radiance Fields26 Feb 2025
- 2025X-SG2S: Safe and Generalizable Gaussian Splatting with X-dimensional Watermarks13 Feb 2025
- 2024GuardSplat: Efficient and Robust Watermarking for 3D Gaussian Splatting29 Nov 2024
- 2024GaussianMarker: Uncertainty-Aware Copyright Protection of 3D Gaussian Splatting31 Oct 2024
- 2024Proactive Schemes: A Survey of Adversarial Attacks for Social Good24 Sep 2024
- 2024Towards Secure and Usable 3D Assets: A Novel Framework for Automatic Visible Watermarking31 Aug 2024
12 newest of 20 All 20 (JSON)