DiffusionShield: A Watermark for Copyright Protection against Generative Diffusion Models
On the map: Diffusion models → Robustness, privacy and adversarial aspects
also in 1 more
Abstract (arXiv)
Recently, Generative Diffusion Models (GDMs) have showcased their remarkable capabilities in learning and generating images. A large community of GDMs has naturally emerged, further promoting the diversified applications of GDMs in various fields. However, this unrestricted proliferation has raised serious concerns about copyright protection. For example, artists including painters and photographers are becoming increasingly concerned that GDMs could effortlessly replicate their unique creative works without authorization. In response to these challenges, we introduce a novel watermarking scheme, DiffusionShield, tailored for GDMs. DiffusionShield protects images from copyright infringement by GDMs through encoding the ownership information into an imperceptible watermark and injecting it into the images. Its watermark can be easily learned by GDMs and will be reproduced in their generated images. By detecting the watermark from generated images, copyright infringement can be exposed with evidence. Benefiting from the uniformity of the watermarks and the joint optimization method, DiffusionShield ensures low distortion of the original image, high watermark detection performance, and the ability to embed lengthy messages. We conduct rigorous and comprehensive experiments to show the effectiveness of DiffusionShield in defending against infringement by GDMs and its superiority over traditional watermarking methods. The code for DiffusionShield is accessible in https://github.com/Yingqiancui/DiffusionShield.
Key facts. Cited by 41 papers in the map (data through 7 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 27 of its 47 references that are in the map. First posted on arXiv 25 May 2023.
Builds on
27 of 47 references.
Closest ancestors · 1
Same direction, newest first
Other references · 26
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2020Denoising Diffusion Probabilistic Modelscited by 20,851
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
- 2020A Simple Framework for Contrastive Learning of Visual Representationscited by 11,979
- 2018The Unreasonable Effectiveness of Deep Features as a Perceptual Metriccited by 11,029
- 2020Denoising Diffusion Implicit Modelscited by 9,655
- 2022Hierarchical Text-Conditional Image Generation with CLIP Latentscited by 6,539
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2022Classifier-Free Diffusion Guidancecited by 5,717
- 2022Generative Adversarial Networkscited by 5,603
- 2023Adding Conditional Control to Text-to-Image Diffusion Modelscited by 5,466
- 2021Improved Denoising Diffusion Probabilistic Modelscited by 3,736
14 more
- 2015LSUN: Construction of a Large-scale Image Dataset using Deep Learning with Humans in the Loopcited by 1,350
- 2016MS-Celeb-1M: A Dataset and Benchmark for Large-Scale Face Recognitioncited by 621
- 2018HiDDeN: Hiding Data With Deep Networkscited by 384
- 2019StegaStamp: Invisible Hyperlinks in Physical Photographscited by 256
- 2020Artificial Fingerprinting for Generative Models: Rooting Deepfake Attribution in Training Datacited by 200
- 2021MBRS : Enhancing Robustness of DNN-based Watermarking by Mini-Batch of Real and Simulated JPEG Compressioncited by 108
- 2020Feature Purification: How Adversarial Training Performs Robust Deep Learningcited by 107
- 2022Generating High Fidelity Data from Low-density Regions using Diffusion Modelscited by 78
- 2022Towards Blind Watermarking: Combining Invertible and Non-invertible Mechanismscited by 61
- 2023Consistent Diffusion Models: Mitigating Sampling Drift by Learning to be Consistentcited by 58
- 2020Model Watermarking for Image Processing Networkscited by 49
- 2023Don't Play Favorites: Minority Guidance for Diffusion Modelscited by 37
- 2018Invisible Steganography via Generative Adversarial Networkscited by 21
- 2020Robust Data Hiding Using Inverse Gradient Attentioncited by 5
Built on by
Citing papers per year: 2023: 11; 2024: 19; 2025: 7; 2026: 4.
41 papers.
Sort:
By area:
- 2023EditGuard: Versatile Image Watermarking for Tamper Localization and Copyright Protectioncited by 109
- 2023Robustness of AI-Image Detectors: Fundamental Limits and Practical Attackscited by 75
- 2023Toward effective protection against diffusion based mimicry through score distillationcited by 64
- 2023Leveraging Optimization for Adaptive Attacks on Image Watermarkscited by 50
- 2024AquaLoRA: Toward White-box Protection for Customized Stable Diffusion Models via Watermark LoRAcited by 42
- 2024Efficient Diffusion Models: A Comprehensive Survey from Principles to Practicescited by 39
- 2024Copyright Protection in Generative AI: A Technical Perspectivecited by 35
- 2024LLMs Meet Multimodal Generation and Editing: A Surveycited by 35
- 2024A Watermark-Conditioned Diffusion Model for IP Protectioncited by 34
- 2024The Stronger the Diffusion Model, the Easier the Backdoor: Data Poisoning to Induce Copyright Breaches Without Adjusting Finetuning Pipelinecited by 33
- 2024Conditional Image Synthesis with Diffusion Models: A Surveycited by 29
- 2024Watermark-embedded Adversarial Examples for Copyright Protection against Diffusion Modelscited by 22
29 more
- 2023On Copyright Risks of Text-to-Image Diffusion Modelscited by 20
- 2024Watermarking Techniques for Large Language Models: A Surveycited by 20
- 2023Synthetically Enhanced: Unveiling Synthetic Data's Potential in Medical Imaging Researchcited by 18
- 2024ProMark: Proactive Diffusion Watermarking for Causal Attributioncited by 16
- 2025Semantic Watermarking Reinvented: Enhancing Robustness and Generation Quality with Fourier Integritycited by 14
- 2025Provable Separations between Memorization and Generalization in Diffusion Modelscited by 14
- 2025Gaussian Shading++: Rethinking the Realistic Deployment Challenge of Performance-Lossless Image Watermark for Diffusion Modelscited by 12
- 2024Replication in Visual Diffusion Models: A Survey and Outlookcited by 11
- 2024Pixel is a Barrier: Diffusion Models Are More Adversarially Robust Than We Thinkcited by 10
- 2024Rethinking Artistic Copyright Infringements in the Era of Text-to-Image Generative Modelscited by 9
- 2024A Survey on Responsible Generative AI: What to Generate and What Notcited by 8
- 2023Warfare:Breaking the Watermark Protection of AI-Generated Contentcited by 7
- 2024U Can't Gen This? A Survey of Intellectual Property Protection Methods for Data in Generative AIcited by 7
- 2024CGI-DM: Digital Copyright Authentication for Diffusion Models via Contrasting Gradient Inversioncited by 6
- 2024CopyrightMeter: Revisiting Copyright Protection in Text-to-image Modelscited by 6
- 2023VA3: Virtually Assured Amplification Attack on Probabilistic Copyright Protection for Text-to-Image Generative Modelscited by 5
- 2023A Somewhat Robust Image Watermark against Diffusion-based Editing Modelscited by 4
- 2024FreezeAsGuard: Mitigating Illegal Adaptation of Diffusion Models via Selective Tensor Freezingcited by 4
- 2025StyleProtect: Safeguarding Artistic Identity in Fine-tuned Diffusion Modelscited by 4
- 2025Evaluating Dataset Watermarking for Fine-tuning Traceability of Customized Diffusion Models: A Comprehensive Benchmark and Removal Approachcited by 2
- 2025Guardians of Generation: Dynamic Inference-Time Copyright Shielding with Adaptive Guidance for AI Image Generationcited by 1
- 2025TraceMark-LDM: Authenticatable Watermarking for Latent Diffusion Models via Binary-Guided Rearrangementcited by 1
- 2026Safeguarding Text-to-Image Generative Models Against Unauthorized Knowledge Distillationcited by 1
- 2023DIAGNOSIS: Detecting Unauthorized Data Usages in Text-to-image Diffusion Modelscited by 0
- 2023Trustworthy Large Models in Vision: A Surveycited by 0
- 2024Exploiting Watermark-Based Defense Mechanisms in Text-to-Image Diffusion Models for Unauthorized Data Usagecited by 0
- 2026Q-Tag: Watermarking Quantum Circuit Generative Modelscited by 0
- 2026IP Protection in the Era of Visual Generative AI: A Surveycited by 0
- 2026RAPID: A Real-Time Defense Against Unauthorized Model Distillation for Text-to-Image Servicescited by 0
- 2026RAPID: A Real-Time Defense Against Unauthorized Model Distillation for Text-to-Image Services14 Sep 2026
- 2026IP Protection in the Era of Visual Generative AI: A Survey13 Aug 2026
- 2026Safeguarding Text-to-Image Generative Models Against Unauthorized Knowledge Distillation21 May 2026
- 2026Q-Tag: Watermarking Quantum Circuit Generative Models26 Feb 2026
- 2025Evaluating Dataset Watermarking for Fine-tuning Traceability of Customized Diffusion Models: A Comprehensive Benchmark and Removal Approach24 Nov 2025
- 2025Provable Separations between Memorization and Generalization in Diffusion Models5 Nov 2025
- 2025StyleProtect: Safeguarding Artistic Identity in Fine-tuned Diffusion Models17 Sep 2025
- 2025Semantic Watermarking Reinvented: Enhancing Robustness and Generation Quality with Fourier Integrity9 Sep 2025
- 2025Gaussian Shading++: Rethinking the Realistic Deployment Challenge of Performance-Lossless Image Watermark for Diffusion Models21 Apr 2025
- 2025TraceMark-LDM: Authenticatable Watermarking for Latent Diffusion Models via Binary-Guided Rearrangement30 Mar 2025
- 2025Guardians of Generation: Dynamic Inference-Time Copyright Shielding with Adaptive Guidance for AI Image Generation19 Mar 2025
- 2024Exploiting Watermark-Based Defense Mechanisms in Text-to-Image Diffusion Models for Unauthorized Data Usage22 Nov 2024
29 more
- 2024CopyrightMeter: Revisiting Copyright Protection in Text-to-image Models20 Nov 2024
- 2024Efficient Diffusion Models: A Comprehensive Survey from Principles to Practices15 Oct 2024
- 2024Conditional Image Synthesis with Diffusion Models: A Survey28 Sep 2024
- 2024Watermarking Techniques for Large Language Models: A Survey26 Aug 2024
- 2024Replication in Visual Diffusion Models: A Survey and Outlook7 Jul 2024
- 2024LLMs Meet Multimodal Generation and Editing: A Survey29 May 2024
- 2024FreezeAsGuard: Mitigating Illegal Adaptation of Diffusion Models via Selective Tensor Freezing24 May 2024
- 2024AquaLoRA: Toward White-box Protection for Customized Stable Diffusion Models via Watermark LoRA18 May 2024
- 2024U Can't Gen This? A Survey of Intellectual Property Protection Methods for Data in Generative AI22 Apr 2024
- 2024Pixel is a Barrier: Diffusion Models Are More Adversarially Robust Than We Think20 Apr 2024
- 2024Watermark-embedded Adversarial Examples for Copyright Protection against Diffusion Models15 Apr 2024
- 2024Rethinking Artistic Copyright Infringements in the Era of Text-to-Image Generative Models11 Apr 2024
- 2024A Survey on Responsible Generative AI: What to Generate and What Not8 Apr 2024
- 2024CGI-DM: Digital Copyright Authentication for Diffusion Models via Contrasting Gradient Inversion17 Mar 2024
- 2024A Watermark-Conditioned Diffusion Model for IP Protection16 Mar 2024
- 2024ProMark: Proactive Diffusion Watermarking for Causal Attribution14 Mar 2024
- 2024Copyright Protection in Generative AI: A Technical Perspective4 Feb 2024
- 2024The Stronger the Diffusion Model, the Easier the Backdoor: Data Poisoning to Induce Copyright Breaches Without Adjusting Finetuning Pipeline7 Jan 2024
- 2023EditGuard: Versatile Image Watermarking for Tamper Localization and Copyright Protection12 Dec 2023
- 2023VA3: Virtually Assured Amplification Attack on Probabilistic Copyright Protection for Text-to-Image Generative Models29 Nov 2023
- 2023A Somewhat Robust Image Watermark against Diffusion-based Editing Models22 Nov 2023
- 2023Trustworthy Large Models in Vision: A Survey16 Nov 2023
- 2023Synthetically Enhanced: Unveiling Synthetic Data's Potential in Medical Imaging Research15 Nov 2023
- 2023Toward effective protection against diffusion based mimicry through score distillation2 Oct 2023
- 2023Robustness of AI-Image Detectors: Fundamental Limits and Practical Attacks29 Sep 2023
- 2023Leveraging Optimization for Adaptive Attacks on Image Watermarks29 Sep 2023
- 2023Warfare:Breaking the Watermark Protection of AI-Generated Content27 Sep 2023
- 2023On Copyright Risks of Text-to-Image Diffusion Models15 Sep 2023
- 2023DIAGNOSIS: Detecting Unauthorized Data Usages in Text-to-image Diffusion Models6 Jul 2023
- 2023Toward effective protection against diffusion based mimicry through score distillationcited by 64
- 2024AquaLoRA: Toward White-box Protection for Customized Stable Diffusion Models via Watermark LoRAcited by 42
- 2024Efficient Diffusion Models: A Comprehensive Survey from Principles to Practicescited by 39
- 2024A Watermark-Conditioned Diffusion Model for IP Protectioncited by 34
- 2024The Stronger the Diffusion Model, the Easier the Backdoor: Data Poisoning to Induce Copyright Breaches Without Adjusting Finetuning Pipelinecited by 33
- 2024Conditional Image Synthesis with Diffusion Models: A Surveycited by 29
- 2024Watermark-embedded Adversarial Examples for Copyright Protection against Diffusion Modelscited by 22
- 2023On Copyright Risks of Text-to-Image Diffusion Modelscited by 20
- 2023Synthetically Enhanced: Unveiling Synthetic Data's Potential in Medical Imaging Researchcited by 18
- 2025Semantic Watermarking Reinvented: Enhancing Robustness and Generation Quality with Fourier Integritycited by 14
- 2025Provable Separations between Memorization and Generalization in Diffusion Modelscited by 14
- 2025Gaussian Shading++: Rethinking the Realistic Deployment Challenge of Performance-Lossless Image Watermark for Diffusion Modelscited by 12
12 most cited of 25 All 25 (JSON)
- 2026RAPID: A Real-Time Defense Against Unauthorized Model Distillation for Text-to-Image Services14 Sep 2026
- 2025Evaluating Dataset Watermarking for Fine-tuning Traceability of Customized Diffusion Models: A Comprehensive Benchmark and Removal Approach24 Nov 2025
- 2025Provable Separations between Memorization and Generalization in Diffusion Models5 Nov 2025
- 2025StyleProtect: Safeguarding Artistic Identity in Fine-tuned Diffusion Models17 Sep 2025
- 2025Semantic Watermarking Reinvented: Enhancing Robustness and Generation Quality with Fourier Integrity9 Sep 2025
- 2025Gaussian Shading++: Rethinking the Realistic Deployment Challenge of Performance-Lossless Image Watermark for Diffusion Models21 Apr 2025
- 2025TraceMark-LDM: Authenticatable Watermarking for Latent Diffusion Models via Binary-Guided Rearrangement30 Mar 2025
- 2024Exploiting Watermark-Based Defense Mechanisms in Text-to-Image Diffusion Models for Unauthorized Data Usage22 Nov 2024
- 2024CopyrightMeter: Revisiting Copyright Protection in Text-to-image Models20 Nov 2024
- 2024Efficient Diffusion Models: A Comprehensive Survey from Principles to Practices15 Oct 2024
- 2024Conditional Image Synthesis with Diffusion Models: A Survey28 Sep 2024
- 2024Replication in Visual Diffusion Models: A Survey and Outlook7 Jul 2024
12 newest of 25 All 25 (JSON)
- 2023Robustness of AI-Image Detectors: Fundamental Limits and Practical Attackscited by 75
- 2024Watermarking Techniques for Large Language Models: A Surveycited by 20
- 2024ProMark: Proactive Diffusion Watermarking for Causal Attributioncited by 16
- 2023Warfare:Breaking the Watermark Protection of AI-Generated Contentcited by 7
- 2024Watermarking Techniques for Large Language Models: A Survey26 Aug 2024
- 2024ProMark: Proactive Diffusion Watermarking for Causal Attribution14 Mar 2024
- 2023Robustness of AI-Image Detectors: Fundamental Limits and Practical Attacks29 Sep 2023
- 2023Warfare:Breaking the Watermark Protection of AI-Generated Content27 Sep 2023
- 2023EditGuard: Versatile Image Watermarking for Tamper Localization and Copyright Protectioncited by 109
- 2023Leveraging Optimization for Adaptive Attacks on Image Watermarkscited by 50
- 2024Copyright Protection in Generative AI: A Technical Perspectivecited by 35
- 2024LLMs Meet Multimodal Generation and Editing: A Surveycited by 35
- 2024A Survey on Responsible Generative AI: What to Generate and What Notcited by 8
- 2024U Can't Gen This? A Survey of Intellectual Property Protection Methods for Data in Generative AIcited by 7
- 2023VA3: Virtually Assured Amplification Attack on Probabilistic Copyright Protection for Text-to-Image Generative Modelscited by 5
- 2025Guardians of Generation: Dynamic Inference-Time Copyright Shielding with Adaptive Guidance for AI Image Generationcited by 1
- 2026Safeguarding Text-to-Image Generative Models Against Unauthorized Knowledge Distillationcited by 1
- 2023Trustworthy Large Models in Vision: A Surveycited by 0
- 2026Q-Tag: Watermarking Quantum Circuit Generative Modelscited by 0
- 2026IP Protection in the Era of Visual Generative AI: A Surveycited by 0
- 2026IP Protection in the Era of Visual Generative AI: A Survey13 Aug 2026
- 2026Safeguarding Text-to-Image Generative Models Against Unauthorized Knowledge Distillation21 May 2026
- 2026Q-Tag: Watermarking Quantum Circuit Generative Models26 Feb 2026
- 2025Guardians of Generation: Dynamic Inference-Time Copyright Shielding with Adaptive Guidance for AI Image Generation19 Mar 2025
- 2024LLMs Meet Multimodal Generation and Editing: A Survey29 May 2024
- 2024U Can't Gen This? A Survey of Intellectual Property Protection Methods for Data in Generative AI22 Apr 2024
- 2024A Survey on Responsible Generative AI: What to Generate and What Not8 Apr 2024
- 2024Copyright Protection in Generative AI: A Technical Perspective4 Feb 2024
- 2023EditGuard: Versatile Image Watermarking for Tamper Localization and Copyright Protection12 Dec 2023
- 2023VA3: Virtually Assured Amplification Attack on Probabilistic Copyright Protection for Text-to-Image Generative Models29 Nov 2023
- 2023Trustworthy Large Models in Vision: A Survey16 Nov 2023
- 2023Leveraging Optimization for Adaptive Attacks on Image Watermarks29 Sep 2023
Similar, not cited
Close in wording, no citation either way
- 2025Visual Watermarking in the Era of Diffusion Models: Advances and Challenges
- 2024CopyrightShield: Enhancing Diffusion Model Security against Copyright Infringement Attacks
- 2023Intellectual Property Protection of Diffusion Models via the Watermark Diffusion Process
- 2024Embedding Watermarks in Diffusion Process for Model Intellectual Property Protection
- 2025Image Watermarking of Generative Diffusion Models
- 2024DiffuseTrace: A Transparent and Flexible Watermarking Scheme for Latent Diffusion Model
- 2023Hey That's Mine Imperceptible Watermarks are Preserved in Diffusion Generated Outputs
- 2025Harnessing Frequency Spectrum Insights for Image Copyright Protection Against Diffusion Models