mlsanityData to 13 Oct 2026

RingID: Rethinking Tree-Ring Watermarking for Enhanced Multi-Key Identification

arXiv 2404.14055 ↗First posted 22 Apr 2024cs.CVcited by 91

Not on the map. Why?

Cited by 53 in LLM safety and security, but placed by its own abstract, which didn’t fit.

Abstract (arXiv)

We revisit Tree-Ring Watermarking, a recent diffusion model watermarking method that demonstrates great robustness to various attacks. We conduct an in-depth study on it and reveal that the distribution shift unintentionally introduced by the watermarking process, apart from watermark pattern matching, contributes to its exceptional robustness. Our investigation further exposes inherent flaws in its original design, particularly in its ability to identify multiple distinct keys, where distribution shift offers no assistance. Based on these findings and analysis, we present RingID for enhanced multi-key identification. It consists of a novel multi-channel heterogeneous watermarking approach designed to seamlessly amalgamate distinctive advantages from diverse watermarks. Coupled with a series of suggested enhancements, RingID exhibits substantial advancements in multi-key identification. Github Page: https://github.com/showlab/RingID

Key facts. Cited by 91 papers in the map (data through 13 Oct 2026). Builds on 35 of its 57 references that are in the map. First posted on arXiv 22 Apr 2024.

Builds on

35 of 57 references.

References · 35

  1. 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,588
  2. 2020Denoising Diffusion Probabilistic Modelscited by 20,952
  3. 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,777
  4. 2014Microsoft COCO: Common Objects in Contextcited by 17,550
  5. 2020Denoising Diffusion Implicit Modelscited by 9,718
  6. 2020Score-Based Generative Modeling through Stochastic Differential Equationscited by 9,028
  7. 2021Diffusion Models Beat GANs on Image Synthesiscited by 8,213
  8. 2022DreamFusion: Text-to-3D using 2D Diffusioncited by 3,019
  9. 2023Stable Video Diffusion: Scaling Latent Video Diffusion Models to Large Datasetscited by 2,550
  10. 2022Make-A-Video: Text-to-Video Generation without Text-Video Datacited by 1,732
  11. 2023Zero-1-to-3: Zero-shot One Image to 3D Objectcited by 1,486
  12. 2023AnimateDiff: Animate Your Personalized Text-to-Image Diffusion Models without Specific Tuningcited by 1,422
23 more
  1. 2020DiffWave: A Versatile Diffusion Model for Audio Synthesiscited by 1,348
  2. 2022Reproducible scaling laws for contrastive language-image learningcited by 1,164
  3. 2022Human Motion Diffusion Modelcited by 1,067
  4. 2022Tune-A-Video: One-Shot Tuning of Image Diffusion Models for Text-to-Video Generationcited by 959
  5. 2018HiDDeN: Hiding Data With Deep Networkscited by 395
  6. 2023The Stable Signature: Rooting Watermarks in Latent Diffusion Modelscited by 303
  7. 2023Show-1: Marrying Pixel and Latent Diffusion Models for Text-to-Video Generationcited by 301
  8. 2019StegaStamp: Invisible Hyperlinks in Physical Photographscited by 264
  9. 2017Embedding Watermarks into Deep Neural Networkscited by 247
  10. 2020Artificial Fingerprinting for Generative Models: Rooting Deepfake Attribution in Training Datacited by 201
  11. 2023Tree-Ring Watermarks: Fingerprints for Diffusion Images that are Invisible and Robustcited by 187
  12. 2019Robust Invisible Video Watermarking with Attentioncited by 149
  13. 2023A Recipe for Watermarking Diffusion Modelscited by 141
  14. 2023Human Motion Generation: A Surveycited by 96
  15. 2024WAVES: Benchmarking the Robustness of Image Watermarkscited by 95
  16. 2021Watermarking Images in Self-Supervised Latent Spacescited by 94
  17. 2022GFPose: Learning 3D Human Pose Prior with Gradient Fieldscited by 57
  18. 2021DVMark: A Deep Multiscale Framework for Video Watermarkingcited by 46
  19. 2022Certified Neural Network Watermarks with Randomized Smoothingcited by 41
  20. 2023Watermarking Diffusion Modelcited by 37
  21. 2023Practical Deep Dispersed Watermarking with Synchronization and Fusioncited by 15
  22. 2023Enhancing Robustness of Gradient-Boosted Decision Trees through One-Hot Encoding and Regularizationcited by 4
  23. 2024Estimation and Inference in Ultrahigh Dimensional Partially Linear Single-Index Modelscited by 1

Built on by

Cited by year (2026 to 13 Oct)

Citing papers per year: 2024: 14; 2025: 41; 2026: 36.

91 papers.

Sort:

By area:

  1. 2024Robust Watermarking Using Generative Priors Against Image Editing: From Benchmarking to Advancescited by 108
  2. 2024An Undetectable Watermark for Generative Image Modelscited by 80
  3. 2025Any2AnyTryon: Leveraging Adaptive Position Embeddings for Versatile Virtual Clothing Taskscited by 62
  4. 2024Watermark Anything with Localized Messagescited by 53
  5. 2024SoK: Watermarking for AI-Generated Contentcited by 50
  6. 2024Black-Box Forgery Attacks on Semantic Watermarks for Diffusion Modelscited by 50
  7. 2024Image Watermarks are Removable Using Controllable Regeneration from Clean Noisecited by 49
  8. 2024Video Seal: Open and Efficient Video Watermarkingcited by 48
  9. 2025EEdit: Rethinking the Spatial and Temporal Redundancy for Efficient Image Editingcited by 45
  10. 2024WMAdapter: Adding WaterMark Control to Latent Diffusion Modelscited by 31
  11. 2025macOSWorld: A Multilingual Interactive Benchmark for GUI Agentscited by 31
  12. 2025ContextFlow: Training-Free Video Object Editing via Adaptive Context Enrichmentcited by 27
38 more
  1. 2025RelationAdapter: Learning and Transferring Visual Relation with Diffusion Transformerscited by 26
  2. 2025PhotoDoodle: Learning Artistic Image Editing from Few-Shot Pairwise Datacited by 24
  3. 2024Hidden in the Noise: Two-Stage Robust Watermarking for Imagescited by 21
  4. 2024DiffSim: Taming Diffusion Models for Evaluating Visual Similaritycited by 20
  5. 2025GaussMarker: Robust Dual-Domain Watermark for Diffusion Modelscited by 16
  6. 2025Watermarking Autoregressive Image Generationcited by 16
  7. 2025SEAL: Semantic Aware Image Watermarkingcited by 15
  8. 2025Pixel Seal: Adversarial-only training for invisible image and video watermarkingcited by 15
  9. 2025Semantic Watermarking Reinvented: Enhancing Robustness and Generation Quality with Fourier Integritycited by 14
  10. 2025Forging and Removing Latent-Noise Diffusion Watermarks Using a Single Imagecited by 13
  11. 2025Transferable Black-Box One-Shot Forging of Watermarks via Image Preference Modelscited by 11
  12. 2024Steganalysis on Digital Watermarking: Is Your Defense Truly Impervious?cited by 10
  13. 2025Safe-Sora: Safe Text-to-Video Generation via Graphical Watermarkingcited by 10
  14. 2025MCA-Bench: A Multimodal Benchmark for Evaluating CAPTCHA Robustness Against VLM-based Attackscited by 10
  15. 2025Autoregressive Images Watermarking through Lexical Biasing: An Approach Resistant to Regeneration Attackcited by 8
  16. 2026SLICE: Semantic Latent Injection via Compartmentalized Embedding for Image Watermarkingcited by 7
  17. 2025MaXsive: High-Capacity and Robust Training-Free Generative Image Watermarking in Diffusion Modelscited by 6
  18. 2025A Watermark for Auto-Regressive Image Generation Modelscited by 5
  19. 2025MarkDiffusion: An Open-Source Toolkit for Generative Watermarking of Latent Diffusion Modelscited by 5
  20. 2025NoisePrints: Distortion-Free Watermarks for Authorship in Private Diffusion Modelscited by 5
  21. 2024SuperMark: Robust and Training-free Image Watermarking via Diffusion-based Super-Resolutioncited by 4
  22. 2025Secure and Efficient Watermarking for Latent Diffusion Models in Model Distribution Scenarioscited by 4
  23. 2025GaussianSeal: Rooting Adaptive Watermarks for 3D Gaussian Generation Modelcited by 4
  24. 2025Safe-VAR: Safe Visual Autoregressive Model for Text-to-Image Generative Watermarkingcited by 4
  25. 2025Visual Watermarking in the Era of Diffusion Models: Advances and Challengescited by 4
  26. 2025Mitigating Watermark Forgery in Generative Models via Randomized Key Selectioncited by 4
  27. 2025Secure and Robust Watermarking for AI-generated Images: A Comprehensive Surveycited by 4
  28. 2026SHIFT: Stochastic Hidden-Trajectory Deflection for Removing Diffusion-based Watermarkcited by 4
  29. 2025Towards A Correct Usage of Cryptography in Semantic Watermarks for Diffusion Modelscited by 3
  30. 2025"That's another doom I haven't thought about": A User Study on AI Labels as a Safeguard Against Image-Based Misinformationcited by 3
  31. 2025ClusterMark: Towards Robust Watermarking for Autoregressive Image Generators with Visual Token Clusteringcited by 3
  32. 2025DiffSeg30k: A Multi-Turn Diffusion Editing Benchmark for Localized AIGC Detectioncited by 3
  33. 2025HarmonicAttack: An Adaptive Cross-Domain Audio Watermark Removalcited by 3
  34. 2025MultiMotion: Multi Subject Video Motion Transfer via Video Diffusion Transformercited by 3
  35. 2026Learning to Watermark in the Latent Space of Generative Modelscited by 3
  36. 2026Towards Robust Content Watermarking Against Removal and Forgery Attackscited by 3
  37. 2024SAT-LDM: Provably Generalizable Image Watermarking for Latent Diffusion Models with Self-Augmented Trainingcited by 2
  38. 2025PT-Mark: Invisible Watermarking for Text-to-image Diffusion Models via Semantic-aware Pivotal Tuningcited by 2

50 most cited of 91 All 91 (JSON)

Similar, not cited

Close in wording, no citation either way

  1. 2025A Crack in the Bark: Leveraging Public Knowledge to Remove Tree-Ring Watermarks
  2. 2024METR: Image Watermarking with Large Number of Unique Messages
  3. 2026IRIS: Visual-Semantic Binding for Forgery-Resistant Watermarking of Diffusion Images
  4. 2026Diffusion-Generated Image Watermarking: A Two-Axis Taxonomy and Three Protocol-Bounded Case Studies
  5. 2024Building Intelligence Identification System via Large Language Model Watermarking: A Survey and Beyond
  6. 2023Hybrid Design of Multiplicative Watermarking for Defense Against Malicious Parameter Identification ↗
  7. 2024CLUE-MARK: Watermarking Diffusion Models using CLWE
  8. 2023Watermarks in the Sand: Impossibility of Strong Watermarking for Generative Models