mlsanityData to 7 Oct 2026

DiffusionShield: A Watermark for Copyright Protection against Generative Diffusion Models

arXiv 2306.04642 ↗First posted 25 May 2023cs.CR cs.CV cs.LGcited by 41

On the map: Diffusion models → Robustness, privacy and adversarial aspects

also in 1 more
Abstract (arXiv)

Recently, Generative Diffusion Models (GDMs) have showcased their remarkable capabilities in learning and generating images. A large community of GDMs has naturally emerged, further promoting the diversified applications of GDMs in various fields. However, this unrestricted proliferation has raised serious concerns about copyright protection. For example, artists including painters and photographers are becoming increasingly concerned that GDMs could effortlessly replicate their unique creative works without authorization. In response to these challenges, we introduce a novel watermarking scheme, DiffusionShield, tailored for GDMs. DiffusionShield protects images from copyright infringement by GDMs through encoding the ownership information into an imperceptible watermark and injecting it into the images. Its watermark can be easily learned by GDMs and will be reproduced in their generated images. By detecting the watermark from generated images, copyright infringement can be exposed with evidence. Benefiting from the uniformity of the watermarks and the joint optimization method, DiffusionShield ensures low distortion of the original image, high watermark detection performance, and the ability to embed lengthy messages. We conduct rigorous and comprehensive experiments to show the effectiveness of DiffusionShield in defending against infringement by GDMs and its superiority over traditional watermarking methods. The code for DiffusionShield is accessible in https://github.com/Yingqiancui/DiffusionShield.

Key facts. Cited by 41 papers in the map (data through 7 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 27 of its 47 references that are in the map. First posted on arXiv 25 May 2023.

Builds on

27 of 47 references.

Closest ancestors · 1

Same direction, newest first

  1. 2023A Recipe for Watermarking Diffusion Models17 Mar

Other references · 26

  1. 2015Deep Residual Learning for Image Recognitioncited by 51,809
  2. 2020Denoising Diffusion Probabilistic Modelscited by 20,851
  3. 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
  4. 2020A Simple Framework for Contrastive Learning of Visual Representationscited by 11,979
  5. 2018The Unreasonable Effectiveness of Deep Features as a Perceptual Metriccited by 11,029
  6. 2020Denoising Diffusion Implicit Modelscited by 9,655
  7. 2022Hierarchical Text-Conditional Image Generation with CLIP Latentscited by 6,539
  8. 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
  9. 2022Classifier-Free Diffusion Guidancecited by 5,717
  10. 2022Generative Adversarial Networkscited by 5,603
  11. 2023Adding Conditional Control to Text-to-Image Diffusion Modelscited by 5,466
  12. 2021Improved Denoising Diffusion Probabilistic Modelscited by 3,736
14 more
  1. 2015LSUN: Construction of a Large-scale Image Dataset using Deep Learning with Humans in the Loopcited by 1,350
  2. 2016MS-Celeb-1M: A Dataset and Benchmark for Large-Scale Face Recognitioncited by 621
  3. 2018HiDDeN: Hiding Data With Deep Networkscited by 384
  4. 2019StegaStamp: Invisible Hyperlinks in Physical Photographscited by 256
  5. 2020Artificial Fingerprinting for Generative Models: Rooting Deepfake Attribution in Training Datacited by 200
  6. 2021MBRS : Enhancing Robustness of DNN-based Watermarking by Mini-Batch of Real and Simulated JPEG Compressioncited by 108
  7. 2020Feature Purification: How Adversarial Training Performs Robust Deep Learningcited by 107
  8. 2022Generating High Fidelity Data from Low-density Regions using Diffusion Modelscited by 78
  9. 2022Towards Blind Watermarking: Combining Invertible and Non-invertible Mechanismscited by 61
  10. 2023Consistent Diffusion Models: Mitigating Sampling Drift by Learning to be Consistentcited by 58
  11. 2020Model Watermarking for Image Processing Networkscited by 49
  12. 2023Don't Play Favorites: Minority Guidance for Diffusion Modelscited by 37
  13. 2018Invisible Steganography via Generative Adversarial Networkscited by 21
  14. 2020Robust Data Hiding Using Inverse Gradient Attentioncited by 5

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2023: 11; 2024: 19; 2025: 7; 2026: 4.

41 papers.

Sort:

By area:

  1. 2023EditGuard: Versatile Image Watermarking for Tamper Localization and Copyright Protectioncited by 109
  2. 2023Robustness of AI-Image Detectors: Fundamental Limits and Practical Attackscited by 75
  3. 2023Toward effective protection against diffusion based mimicry through score distillationcited by 64
  4. 2023Leveraging Optimization for Adaptive Attacks on Image Watermarkscited by 50
  5. 2024AquaLoRA: Toward White-box Protection for Customized Stable Diffusion Models via Watermark LoRAcited by 42
  6. 2024Efficient Diffusion Models: A Comprehensive Survey from Principles to Practicescited by 39
  7. 2024Copyright Protection in Generative AI: A Technical Perspectivecited by 35
  8. 2024LLMs Meet Multimodal Generation and Editing: A Surveycited by 35
  9. 2024A Watermark-Conditioned Diffusion Model for IP Protectioncited by 34
  10. 2024The Stronger the Diffusion Model, the Easier the Backdoor: Data Poisoning to Induce Copyright Breaches Without Adjusting Finetuning Pipelinecited by 33
  11. 2024Conditional Image Synthesis with Diffusion Models: A Surveycited by 29
  12. 2024Watermark-embedded Adversarial Examples for Copyright Protection against Diffusion Modelscited by 22
29 more
  1. 2023On Copyright Risks of Text-to-Image Diffusion Modelscited by 20
  2. 2024Watermarking Techniques for Large Language Models: A Surveycited by 20
  3. 2023Synthetically Enhanced: Unveiling Synthetic Data's Potential in Medical Imaging Researchcited by 18
  4. 2024ProMark: Proactive Diffusion Watermarking for Causal Attributioncited by 16
  5. 2025Semantic Watermarking Reinvented: Enhancing Robustness and Generation Quality with Fourier Integritycited by 14
  6. 2025Provable Separations between Memorization and Generalization in Diffusion Modelscited by 14
  7. 2025Gaussian Shading++: Rethinking the Realistic Deployment Challenge of Performance-Lossless Image Watermark for Diffusion Modelscited by 12
  8. 2024Replication in Visual Diffusion Models: A Survey and Outlookcited by 11
  9. 2024Pixel is a Barrier: Diffusion Models Are More Adversarially Robust Than We Thinkcited by 10
  10. 2024Rethinking Artistic Copyright Infringements in the Era of Text-to-Image Generative Modelscited by 9
  11. 2024A Survey on Responsible Generative AI: What to Generate and What Notcited by 8
  12. 2023Warfare:Breaking the Watermark Protection of AI-Generated Contentcited by 7
  13. 2024U Can't Gen This? A Survey of Intellectual Property Protection Methods for Data in Generative AIcited by 7
  14. 2024CGI-DM: Digital Copyright Authentication for Diffusion Models via Contrasting Gradient Inversioncited by 6
  15. 2024CopyrightMeter: Revisiting Copyright Protection in Text-to-image Modelscited by 6
  16. 2023VA3: Virtually Assured Amplification Attack on Probabilistic Copyright Protection for Text-to-Image Generative Modelscited by 5
  17. 2023A Somewhat Robust Image Watermark against Diffusion-based Editing Modelscited by 4
  18. 2024FreezeAsGuard: Mitigating Illegal Adaptation of Diffusion Models via Selective Tensor Freezingcited by 4
  19. 2025StyleProtect: Safeguarding Artistic Identity in Fine-tuned Diffusion Modelscited by 4
  20. 2025Evaluating Dataset Watermarking for Fine-tuning Traceability of Customized Diffusion Models: A Comprehensive Benchmark and Removal Approachcited by 2
  21. 2025Guardians of Generation: Dynamic Inference-Time Copyright Shielding with Adaptive Guidance for AI Image Generationcited by 1
  22. 2025TraceMark-LDM: Authenticatable Watermarking for Latent Diffusion Models via Binary-Guided Rearrangementcited by 1
  23. 2026Safeguarding Text-to-Image Generative Models Against Unauthorized Knowledge Distillationcited by 1
  24. 2023DIAGNOSIS: Detecting Unauthorized Data Usages in Text-to-image Diffusion Modelscited by 0
  25. 2023Trustworthy Large Models in Vision: A Surveycited by 0
  26. 2024Exploiting Watermark-Based Defense Mechanisms in Text-to-Image Diffusion Models for Unauthorized Data Usagecited by 0
  27. 2026Q-Tag: Watermarking Quantum Circuit Generative Modelscited by 0
  28. 2026IP Protection in the Era of Visual Generative AI: A Surveycited by 0
  29. 2026RAPID: A Real-Time Defense Against Unauthorized Model Distillation for Text-to-Image Servicescited by 0

Similar, not cited

Close in wording, no citation either way

  1. 2025Visual Watermarking in the Era of Diffusion Models: Advances and Challenges
  2. 2024CopyrightShield: Enhancing Diffusion Model Security against Copyright Infringement Attacks
  3. 2023Intellectual Property Protection of Diffusion Models via the Watermark Diffusion Process
  4. 2024Embedding Watermarks in Diffusion Process for Model Intellectual Property Protection
  5. 2025Image Watermarking of Generative Diffusion Models
  6. 2024DiffuseTrace: A Transparent and Flexible Watermarking Scheme for Latent Diffusion Model
  7. 2023Hey That's Mine Imperceptible Watermarks are Preserved in Diffusion Generated Outputs
  8. 2025Harnessing Frequency Spectrum Insights for Image Copyright Protection Against Diffusion Models