Supervised GAN Watermarking for Intellectual Property Protection
Not on the map. Why?
Abstract (arXiv)
We propose a watermarking method for protecting the Intellectual Property (IP) of Generative Adversarial Networks (GANs). The aim is to watermark the GAN model so that any image generated by the GAN contains an invisible watermark (signature), whose presence inside the image can be checked at a later stage for ownership verification. To achieve this goal, a pre-trained CNN watermarking decoding block is inserted at the output of the generator. The generator loss is then modified by including a watermark loss term, to ensure that the prescribed watermark can be extracted from the generated images. The watermark is embedded via fine-tuning, with reduced time complexity. Results show that our method can effectively embed an invisible watermark inside the generated images. Moreover, our method is a general one and can work with different GAN architectures, different tasks, and different resolutions of the output image. We also demonstrate the good robustness performance of the embedded watermark against several post-processing, among them, JPEG compression, noise addition, blurring, and color transformations.
Key facts. Cited by 39 papers in the map (data through 7 Oct 2026). Builds on 14 of its 26 references that are in the map. First posted on arXiv 7 Sep 2022.
Builds on
14 of 26 references.
References · 14
- 2018A Style-Based Generator Architecture for Generative Adversarial Networkscited by 5,986
- 2016Image-to-Image Translation with Conditional Adversarial Networkscited by 4,510
- 2014Deep Learning Face Attributes in the Wildcited by 3,679
- 2019Analyzing and Improving the Image Quality of StyleGANcited by 3,580
- 2017Progressive Growing of GANs for Improved Quality, Stability, and Variationcited by 2,967
- 2015LSUN: Construction of a Large-scale Image Dataset using Deep Learning with Humans in the Loopcited by 1,350
- 2018HiDDeN: Hiding Data With Deep Networkscited by 384
- 2018Turning Your Weakness Into a Strength: Watermarking Deep Neural Networks by Backdooringcited by 334
- 2019StegaStamp: Invisible Hyperlinks in Physical Photographscited by 256
- 2017Embedding Watermarks into Deep Neural Networkscited by 227
- 2020Artificial Fingerprinting for Generative Models: Rooting Deepfake Attribution in Training Datacited by 200
- 2021A survey of deep neural network watermarking techniquescited by 69
Built on by
Citing papers per year: 2023: 16; 2024: 10; 2025: 11; 2026: 2.
39 papers.
Sort:
By area:
- 2023The Stable Signature: Rooting Watermarks in Latent Diffusion Modelscited by 289
- 2023Self-Consuming Generative Models Go MADcited by 239
- 2023Tree-Ring Watermarks: Fingerprints for Diffusion Images that are Invisible and Robustcited by 179
- 2023A Recipe for Watermarking Diffusion Modelscited by 136
- 2023Watermarks in the Sand: Impossibility of Strong Watermarking for Generative Modelscited by 77
- 2024Watermark Anything with Localized Messagescited by 49
- 2025CO-SPY: Combining Semantic and Pixel Features to Detect Synthetic Images by AIcited by 42
- 2024Copyright Protection in Generative AI: A Technical Perspectivecited by 35
- 2023A Survey on ChatGPT: AI-Generated Contents, Challenges, and Solutionscited by 34
- 2024Watermark-embedded Adversarial Examples for Copyright Protection against Diffusion Modelscited by 22
- 2023Intellectual Property Protection of Diffusion Models via the Watermark Diffusion Processcited by 17
- 2023Copyright Protection and Accountability of Generative AI:Attack, Watermarking and Attributioncited by 15
27 more
- 2023Challenges and Remedies to Privacy and Security in AIGC: Exploring the Potential of Privacy Computing, Blockchain, and Beyondcited by 14
- 2023Wide Flat Minimum Watermarking for Robust Ownership Verification of GANscited by 10
- 2023Invisible Watermarking for Audio Generation Diffusion Modelscited by 7
- 2023Warfare:Breaking the Watermark Protection of AI-Generated Contentcited by 7
- 2024FreqMark: Invisible Image Watermarking via Frequency Based Optimization in Latent Spacecited by 7
- 2023Robust Retraining-free GAN Fingerprinting via Personalized Normalizationcited by 6
- 2024Deepfake Media Forensics: State of the Art and Challenges Aheadcited by 6
- 2024Adversarial Robustness of AI-Generated Image Detectors in the Real Worldcited by 6
- 2025Safe-VAR: Safe Visual Autoregressive Model for Text-to-Image Generative Watermarkingcited by 4
- 2024Investigating Deep Watermark Security: An Adversarial Transferability Perspectivecited by 3
- 2024Evaluating Durability: Benchmark Insights into Multimodal Watermarkingcited by 3
- 2024Hide and Seek: How Does Watermarking Impact Face Recognition?cited by 2
- 2025Hiding Images in Diffusion Models by Editing Learned Score Functionscited by 2
- 2025SpecGuard: Spectral Projection-based Advanced Invisible Watermarkingcited by 2
- 2023Reversible Quantization Index Modulation for Static Deep Neural Network Watermarkingcited by 1
- 2024An Efficient Watermarking Method for Latent Diffusion Models via Low-Rank Adaptation and Dynamic Loss Weightingcited by 1
- 2025VIDSTAMP: A Temporally-Aware Watermark for Ownership and Integrity in Video Diffusion Modelscited by 1
- 2025The Coding Limits of Robust Watermarking for Generative Modelscited by 1
- 2025Of-SemWat: High-payload text embedding for semantic watermarking of AI-generated images with arbitrary sizecited by 1
- 2023From Zero to Hero: Detecting Leaked Data through Synthetic Data Injection and Model Queryingcited by 0
- 2023Trustworthy Large Models in Vision: A Surveycited by 0
- 2025Dynamic watermarks in images generated by diffusion modelscited by 0
- 2025Embedding Trust at Scale: Physics-Aware Neural Watermarking for Secure and Verifiable Data Pipelinescited by 0
- 2025Learning Generalizable and Efficient Image Watermarking via Hierarchical Two-Stage Optimizationcited by 0
- 2025MOLM: Mixture of LoRA Markerscited by 0
- 2026Efficient, Robust, and Anti-Collusion Fingerprinting of Image Diffusion Modelscited by 0
- 2026An Efficient and Effective Watermarking Scheme for the Protection of the Intellectual Property Rights of Video Generative Modelscited by 0
- 2026An Efficient and Effective Watermarking Scheme for the Protection of the Intellectual Property Rights of Video Generative Models20 Sep 2026
- 2026Efficient, Robust, and Anti-Collusion Fingerprinting of Image Diffusion Models11 Jun 2026
- 2025SpecGuard: Spectral Projection-based Advanced Invisible Watermarking8 Oct 2025
- 2025MOLM: Mixture of LoRA Markers30 Sep 2025
- 2025Of-SemWat: High-payload text embedding for semantic watermarking of AI-generated images with arbitrary size29 Sep 2025
- 2025The Coding Limits of Robust Watermarking for Generative Models11 Sep 2025
- 2025Learning Generalizable and Efficient Image Watermarking via Hierarchical Two-Stage Optimization12 Aug 2025
- 2025Embedding Trust at Scale: Physics-Aware Neural Watermarking for Secure and Verifiable Data Pipelines22 May 2025
- 2025VIDSTAMP: A Temporally-Aware Watermark for Ownership and Integrity in Video Diffusion Models2 May 2025
- 2025Hiding Images in Diffusion Models by Editing Learned Score Functions24 Mar 2025
- 2025CO-SPY: Combining Semantic and Pixel Features to Detect Synthetic Images by AI24 Mar 2025
- 2025Safe-VAR: Safe Visual Autoregressive Model for Text-to-Image Generative Watermarking14 Mar 2025
27 more
- 2025Dynamic watermarks in images generated by diffusion models13 Feb 2025
- 2024Watermark Anything with Localized Messages11 Nov 2024
- 2024FreqMark: Invisible Image Watermarking via Frequency Based Optimization in Latent Space28 Oct 2024
- 2024An Efficient Watermarking Method for Latent Diffusion Models via Low-Rank Adaptation and Dynamic Loss Weighting26 Oct 2024
- 2024Adversarial Robustness of AI-Generated Image Detectors in the Real World2 Oct 2024
- 2024Deepfake Media Forensics: State of the Art and Challenges Ahead1 Aug 2024
- 2024Evaluating Durability: Benchmark Insights into Multimodal Watermarking6 Jun 2024
- 2024Hide and Seek: How Does Watermarking Impact Face Recognition?29 Apr 2024
- 2024Watermark-embedded Adversarial Examples for Copyright Protection against Diffusion Models15 Apr 2024
- 2024Investigating Deep Watermark Security: An Adversarial Transferability Perspective26 Feb 2024
- 2024Copyright Protection in Generative AI: A Technical Perspective4 Feb 2024
- 2023Trustworthy Large Models in Vision: A Survey16 Nov 2023
- 2023Robust Retraining-free GAN Fingerprinting via Personalized Normalization9 Nov 2023
- 2023Watermarks in the Sand: Impossibility of Strong Watermarking for Generative Models7 Nov 2023
- 2023Wide Flat Minimum Watermarking for Robust Ownership Verification of GANs25 Oct 2023
- 2023From Zero to Hero: Detecting Leaked Data through Synthetic Data Injection and Model Querying6 Oct 2023
- 2023Warfare:Breaking the Watermark Protection of AI-Generated Content27 Sep 2023
- 2023Invisible Watermarking for Audio Generation Diffusion Models22 Sep 2023
- 2023Self-Consuming Generative Models Go MAD4 Jul 2023
- 2023Intellectual Property Protection of Diffusion Models via the Watermark Diffusion Process6 Jun 2023
- 2023Challenges and Remedies to Privacy and Security in AIGC: Exploring the Potential of Privacy Computing, Blockchain, and Beyond1 Jun 2023
- 2023Tree-Ring Watermarks: Fingerprints for Diffusion Images that are Invisible and Robust31 May 2023
- 2023Reversible Quantization Index Modulation for Static Deep Neural Network Watermarking29 May 2023
- 2023A Survey on ChatGPT: AI-Generated Contents, Challenges, and Solutions25 May 2023
- 2023The Stable Signature: Rooting Watermarks in Latent Diffusion Models27 Mar 2023
- 2023A Recipe for Watermarking Diffusion Models17 Mar 2023
- 2023Copyright Protection and Accountability of Generative AI:Attack, Watermarking and Attribution15 Mar 2023
- 2023The Stable Signature: Rooting Watermarks in Latent Diffusion Modelscited by 289
- 2023Tree-Ring Watermarks: Fingerprints for Diffusion Images that are Invisible and Robustcited by 179
- 2023A Recipe for Watermarking Diffusion Modelscited by 136
- 2024Watermark-embedded Adversarial Examples for Copyright Protection against Diffusion Modelscited by 22
- 2023Intellectual Property Protection of Diffusion Models via the Watermark Diffusion Processcited by 17
- 2023Invisible Watermarking for Audio Generation Diffusion Modelscited by 7
- 2025Hiding Images in Diffusion Models by Editing Learned Score Functionscited by 2
- 2024An Efficient Watermarking Method for Latent Diffusion Models via Low-Rank Adaptation and Dynamic Loss Weightingcited by 1
- 2025VIDSTAMP: A Temporally-Aware Watermark for Ownership and Integrity in Video Diffusion Modelscited by 1
- 2025Dynamic watermarks in images generated by diffusion modelscited by 0
- 2026Efficient, Robust, and Anti-Collusion Fingerprinting of Image Diffusion Modelscited by 0
- 2026Efficient, Robust, and Anti-Collusion Fingerprinting of Image Diffusion Models11 Jun 2026
- 2025VIDSTAMP: A Temporally-Aware Watermark for Ownership and Integrity in Video Diffusion Models2 May 2025
- 2025Hiding Images in Diffusion Models by Editing Learned Score Functions24 Mar 2025
- 2025Dynamic watermarks in images generated by diffusion models13 Feb 2025
- 2024An Efficient Watermarking Method for Latent Diffusion Models via Low-Rank Adaptation and Dynamic Loss Weighting26 Oct 2024
- 2024Watermark-embedded Adversarial Examples for Copyright Protection against Diffusion Models15 Apr 2024
- 2023Invisible Watermarking for Audio Generation Diffusion Models22 Sep 2023
- 2023Intellectual Property Protection of Diffusion Models via the Watermark Diffusion Process6 Jun 2023
- 2023Tree-Ring Watermarks: Fingerprints for Diffusion Images that are Invisible and Robust31 May 2023
- 2023The Stable Signature: Rooting Watermarks in Latent Diffusion Models27 Mar 2023
- 2023A Recipe for Watermarking Diffusion Models17 Mar 2023
- 2023Watermarks in the Sand: Impossibility of Strong Watermarking for Generative Modelscited by 77
- 2023Copyright Protection and Accountability of Generative AI:Attack, Watermarking and Attributioncited by 15
- 2023Warfare:Breaking the Watermark Protection of AI-Generated Contentcited by 7
- 2023Robust Retraining-free GAN Fingerprinting via Personalized Normalizationcited by 6
- 2025Safe-VAR: Safe Visual Autoregressive Model for Text-to-Image Generative Watermarkingcited by 4
- 2025The Coding Limits of Robust Watermarking for Generative Modelscited by 1
- 2025MOLM: Mixture of LoRA Markerscited by 0
- 2026An Efficient and Effective Watermarking Scheme for the Protection of the Intellectual Property Rights of Video Generative Modelscited by 0
- 2026An Efficient and Effective Watermarking Scheme for the Protection of the Intellectual Property Rights of Video Generative Models20 Sep 2026
- 2025MOLM: Mixture of LoRA Markers30 Sep 2025
- 2025The Coding Limits of Robust Watermarking for Generative Models11 Sep 2025
- 2025Safe-VAR: Safe Visual Autoregressive Model for Text-to-Image Generative Watermarking14 Mar 2025
- 2023Robust Retraining-free GAN Fingerprinting via Personalized Normalization9 Nov 2023
- 2023Watermarks in the Sand: Impossibility of Strong Watermarking for Generative Models7 Nov 2023
- 2023Warfare:Breaking the Watermark Protection of AI-Generated Content27 Sep 2023
- 2023Copyright Protection and Accountability of Generative AI:Attack, Watermarking and Attribution15 Mar 2023
- 2023Self-Consuming Generative Models Go MADcited by 239
- 2024Watermark Anything with Localized Messagescited by 49
- 2025CO-SPY: Combining Semantic and Pixel Features to Detect Synthetic Images by AIcited by 42
- 2024Copyright Protection in Generative AI: A Technical Perspectivecited by 35
- 2023A Survey on ChatGPT: AI-Generated Contents, Challenges, and Solutionscited by 34
- 2023Challenges and Remedies to Privacy and Security in AIGC: Exploring the Potential of Privacy Computing, Blockchain, and Beyondcited by 14
- 2023Wide Flat Minimum Watermarking for Robust Ownership Verification of GANscited by 10
- 2024FreqMark: Invisible Image Watermarking via Frequency Based Optimization in Latent Spacecited by 7
- 2024Deepfake Media Forensics: State of the Art and Challenges Aheadcited by 6
- 2024Adversarial Robustness of AI-Generated Image Detectors in the Real Worldcited by 6
- 2024Investigating Deep Watermark Security: An Adversarial Transferability Perspectivecited by 3
- 2024Evaluating Durability: Benchmark Insights into Multimodal Watermarkingcited by 3
12 most cited of 20 All 20 (JSON)
- 2025SpecGuard: Spectral Projection-based Advanced Invisible Watermarking8 Oct 2025
- 2025Of-SemWat: High-payload text embedding for semantic watermarking of AI-generated images with arbitrary size29 Sep 2025
- 2025Learning Generalizable and Efficient Image Watermarking via Hierarchical Two-Stage Optimization12 Aug 2025
- 2025Embedding Trust at Scale: Physics-Aware Neural Watermarking for Secure and Verifiable Data Pipelines22 May 2025
- 2025CO-SPY: Combining Semantic and Pixel Features to Detect Synthetic Images by AI24 Mar 2025
- 2024Watermark Anything with Localized Messages11 Nov 2024
- 2024FreqMark: Invisible Image Watermarking via Frequency Based Optimization in Latent Space28 Oct 2024
- 2024Adversarial Robustness of AI-Generated Image Detectors in the Real World2 Oct 2024
- 2024Deepfake Media Forensics: State of the Art and Challenges Ahead1 Aug 2024
- 2024Evaluating Durability: Benchmark Insights into Multimodal Watermarking6 Jun 2024
- 2024Hide and Seek: How Does Watermarking Impact Face Recognition?29 Apr 2024
- 2024Investigating Deep Watermark Security: An Adversarial Transferability Perspective26 Feb 2024
12 newest of 20 All 20 (JSON)