Hide and Seek: How Does Watermarking Impact Face Recognition?
Not on the map. Why?
Abstract (arXiv)
The recent progress in generative models has revolutionized the synthesis of highly realistic images, including face images. This technological development has undoubtedly helped face recognition, such as training data augmentation for higher recognition accuracy and data privacy. However, it has also introduced novel challenges concerning the responsible use and proper attribution of computer generated images. We investigate the impact of digital watermarking, a technique for embedding ownership signatures into images, on the effectiveness of face recognition models. We propose a comprehensive pipeline that integrates face image generation, watermarking, and face recognition to systematically examine this question. The proposed watermarking scheme, based on an encoder-decoder architecture, successfully embeds and recovers signatures from both real and synthetic face images while preserving their visual fidelity. Through extensive experiments, we unveil that while watermarking enables robust image attribution, it results in a slight decline in face recognition accuracy, particularly evident for face images with challenging poses and expressions. Additionally, we find that directly training face recognition models on watermarked images offers only a limited alleviation of this performance decline. Our findings underscore the intricate trade off between watermarking and face recognition accuracy. This work represents a pivotal step towards the responsible utilization of generative models in face recognition and serves to initiate discussions regarding the broader implications of watermarking in biometrics.
Key facts. Cited by 2 papers in the map (data through 7 Oct 2026). Builds on 40 of its 64 references that are in the map. First posted on arXiv 29 Apr 2024.
Builds on
40 of 64 references.
References · 40
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2020Denoising Diffusion Probabilistic Modelscited by 20,851
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
- 2014Microsoft COCO: Common Objects in Contextcited by 17,498
- 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,267
- 2022Hierarchical Text-Conditional Image Generation with CLIP Latentscited by 6,539
- 2022Photorealistic Text-to-Image Diffusion Models with Deep Language Understandingcited by 6,322
- 2018A Style-Based Generator Architecture for Generative Adversarial Networkscited by 5,986
- 2019Generative Modeling by Estimating Gradients of the Data Distributioncited by 4,067
- 2023IP-Adapter: Text Compatible Image Prompt Adapter for Text-to-Image Diffusion Modelscited by 1,439
- 2020Training Generative Adversarial Networks with Limited Datacited by 1,184
- 2017StarGAN: Unified Generative Adversarial Networks for Multi-Domain Image-to-Image Translationcited by 1,036
28 more
- 2018CosFace: Large Margin Cosine Loss for Deep Face Recognitioncited by 968
- 2017VGGFace2: A dataset for recognising faces across pose and agecited by 911
- 2017SphereFace: Deep Hypersphere Embedding for Face Recognitioncited by 733
- 2023Extracting Training Data from Diffusion Modelscited by 723
- 2016MS-Celeb-1M: A Dataset and Benchmark for Large-Scale Face Recognitioncited by 621
- 2022Safe Latent Diffusion: Mitigating Inappropriate Degeneration in Diffusion Modelscited by 501
- 2014Learning Face Representation from Scratchcited by 451
- 2024InstantID: Zero-shot Identity-Preserving Generation in Secondscited by 431
- 2022Diffusion Art or Digital Forgery? Investigating Data Replication in Diffusion Modelscited by 418
- 2022AdaFace: Quality Adaptive Margin for Face Recognitioncited by 390
- 2018HiDDeN: Hiding Data With Deep Networkscited by 384
- 2023PhotoMaker: Customizing Realistic Human Photos via Stacked ID Embeddingcited by 324
- 2023The Stable Signature: Rooting Watermarks in Latent Diffusion Modelscited by 289
- 2023Stable Bias: Analyzing Societal Representations in Diffusion Modelscited by 225
- 2021WebFace260M: A Benchmark Unveiling the Power of Million-Scale Deep Face Recognitioncited by 221
- 2023Understanding and Mitigating Copying in Diffusion Modelscited by 205
- 2023To Generate or Not? Safety-Driven Unlearned Diffusion Models Are Still Easy To Generate Unsafe Images ... For Nowcited by 204
- 2020Artificial Fingerprinting for Generative Models: Rooting Deepfake Attribution in Training Datacited by 200
- 2018MobileFaceNets: Efficient CNNs for Accurate Real-Time Face Verification on Mobile Devicescited by 180
- 2023Tree-Ring Watermarks: Fingerprints for Diffusion Images that are Invisible and Robustcited by 179
- 2023DCFace: Synthetic Face Generation with Dual Condition Diffusion Modelcited by 116
- 2019SteganoGAN: High Capacity Image Steganography with GANscited by 70
- 2021Deep Model Intellectual Property Protection via Deep Watermarkingcited by 47
- 2022Supervised GAN Watermarking for Intellectual Property Protectioncited by 39
- 2018WarpGAN: Automatic Caricature Generationcited by 28
- 2017Semi-Adversarial Networks: Convolutional Autoencoders for Imparting Privacy to Face Imagescited by 20
- 2024Shake to Leak: Fine-tuning Diffusion Models Can Amplify the Generative Privacy Riskcited by 17
- 2023RS-Corrector: Correcting the Racial Stereotypes in Latent Diffusion Modelscited by 1
Built on by
Citing papers per year: 2024: 1; 2025: 1.
2 papers.