Protecting NeRFs' Copyright via Plug-And-Play Watermarking Base Model
On the map: LLM safety and security → Watermarking generated content and models
Abstract (arXiv)
Neural Radiance Fields (NeRFs) have become a key method for 3D scene representation. With the rising prominence and influence of NeRF, safeguarding its intellectual property has become increasingly important. In this paper, we propose NeRFProtector, which adopts a plug-and-play strategy to protect NeRF's copyright during its creation. NeRFProtector utilizes a pre-trained watermarking base model, enabling NeRF creators to embed binary messages directly while creating their NeRF. Our plug-and-play property ensures NeRF creators can flexibly choose NeRF variants without excessive modifications. Leveraging our newly designed progressive distillation, we demonstrate performance on par with several leading-edge neural rendering methods. Our project is available at: urlhttps://qsong2001.github.io/NeRFProtector.
Key facts. Cited by 18 papers in the map (data through 7 Oct 2026). Placed in Watermarking generated content and models, one of 12 directions in LLM safety and security. Builds on 36 of its 53 references that are in the map. First posted on arXiv 10 Jul 2024.
Builds on
36 of 53 references.
Closest ancestors · 1
Same direction, newest first
Other references · 35
- 2014Adam: A Method for Stochastic Optimizationcited by 36,960
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
- 2014Microsoft COCO: Common Objects in Contextcited by 17,498
- 2018The Unreasonable Effectiveness of Deep Features as a Perceptual Metriccited by 11,029
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2017PointNet++: Deep Hierarchical Feature Learning on Point Sets in a Metric Spacecited by 4,384
- 2022Instant Neural Graphics Primitives with a Multiresolution Hash Encodingcited by 3,698
- 2022DreamFusion: Text-to-3D using 2D Diffusioncited by 3,006
- 2021Plenoxels: Radiance Fields without Neural Networkscited by 1,607
- 2020pixelNeRF: Neural Radiance Fields from One or Few Imagescited by 1,574
- 2023Zero-1-to-3: Zero-shot One Image to 3D Objectcited by 1,483
- 2022Magic3D: High-Resolution Text-to-3D Content Creationcited by 1,285
23 more
- 2022TensoRF: Tensorial Radiance Fieldscited by 1,275
- 2018Variational image compression with a scale hyperpriorcited by 910
- 2019Local Light Field Fusion: Practical View Synthesis with Prescriptive Sampling Guidelinescited by 672
- 2018Joint Autoregressive and Hierarchical Priors for Learned Image Compressioncited by 642
- 2020Learned Image Compression with Discretized Gaussian Mixture Likelihoods and Attention Modulescited by 570
- 2022Latent-NeRF for Shape-Guided Generation of 3D Shapes and Texturescited by 506
- 2018HiDDeN: Hiding Data With Deep Networkscited by 384
- 2021CLIP-NeRF: Text-and-Image Driven Manipulation of Neural Radiance Fieldscited by 369
- 2023Make-It-3D: High-Fidelity 3D Creation from A Single Image with Diffusion Priorcited by 341
- 2020Invisible Backdoor Attack with Sample-Specific Triggerscited by 338
- 2019StegaStamp: Invisible Hyperlinks in Physical Photographscited by 256
- 2021Editing Conditional Radiance Fieldscited by 222
- 2022NeRF-Editing: Geometry Editing of Neural Radiance Fieldscited by 216
- 2021MBRS : Enhancing Robustness of DNN-based Watermarking by Mini-Batch of Real and Simulated JPEG Compressioncited by 108
- 2022NeRF-SOS: Any-View Self-supervised Object Segmentation on Complex Scenescited by 71
- 2019SteganoGAN: High Capacity Image Steganography with GANscited by 70
- 2022R2L: Distilling Neural Radiance Field to Neural Light Field for Efficient Novel View Synthesiscited by 69
- 2023CopyRNeRF: Protecting the CopyRight of Neural Radiance Fieldscited by 33
- 2022StegaNeRF: Embedding Invisible Information within Neural Radiance Fieldscited by 32
- 2021Deep 3D-to-2D Watermarking: Embedding Messages in 3D Meshes and Extracting Them from 2D Renderingscited by 23
- 2024Graph Neural Network Explanations are Fragilecited by 18
- 2024Spy-Watermark: Robust Invisible Watermarking for Backdoor Attackcited by 7
- 2024Colorizing Monochromatic Radiance Fieldscited by 7
Built on by
Citing papers per year: 2024: 3; 2025: 8; 2026: 7.
18 papers.
Sort:
By area:
- 2024GaussianMarker: Uncertainty-Aware Copyright Protection of 3D Gaussian Splattingcited by 20
- 2024GuardSplat: Efficient and Robust Watermarking for 3D Gaussian Splattingcited by 18
- 2024Geometry Cloak: Preventing TGS-based 3D Reconstruction from Copyrighted Imagescited by 15
- 2025All That Glitters Is Not Gold: Key-Secured 3D Secrets within 3D Gaussian Splattingcited by 15
- 2025SecureGS: Boosting the Security and Fidelity of 3D Gaussian Splatting Steganographycited by 14
- 2025GaussianSeal: Rooting Adaptive Watermarks for 3D Gaussian Generation Modelcited by 4
- 2025FontGuard: A Robust Font Watermarking Approach Leveraging Deep Font Knowledgecited by 3
- 2025GS-Checker: Tampering Localization for 3D Gaussian Splattingcited by 3
- 2025NTK-Guided Implicit Neural Teachingcited by 2
- 2026Intellectual Property Protection for 3D Gaussian Splatting Assets: A Surveycited by 2
- 2025Creating Blank Canvas Against AI-enabled Image Forgerycited by 1
- 2026GaussTrace: Provenance Analysis of 3D Gaussian Splatting Models with Evidence-based LLM Reasoningcited by 1
6 more
- 2025MultiNeRF: Multiple Watermark Embedding for Neural Radiance Fieldscited by 0
- 2026StegoNGP: 3D Cryptographic Steganography using Instant-NGPcited by 0
- 2026Efficient, Robust, and Anti-Collusion Fingerprinting of Image Diffusion Modelscited by 0
- 2026IBRSteG: Learning a Generalizable Steganography Framework for 3D Gaussian Splattingcited by 0
- 2026NGS-Marker: Robust Native Watermarking for 3D Gaussian Splattingcited by 0
- 2026Generating Multi-view Adversarial Examples for Visual Geometry Grounded Transformercited by 0
- 2026Generating Multi-view Adversarial Examples for Visual Geometry Grounded Transformer21 Aug 2026
- 2026NGS-Marker: Robust Native Watermarking for 3D Gaussian Splatting18 Aug 2026
- 2026IBRSteG: Learning a Generalizable Steganography Framework for 3D Gaussian Splatting29 Jun 2026
- 2026Efficient, Robust, and Anti-Collusion Fingerprinting of Image Diffusion Models11 Jun 2026
- 2026GaussTrace: Provenance Analysis of 3D Gaussian Splatting Models with Evidence-based LLM Reasoning9 Jun 2026
- 2026StegoNGP: 3D Cryptographic Steganography using Instant-NGP1 Mar 2026
- 2026Intellectual Property Protection for 3D Gaussian Splatting Assets: A Survey2 Feb 2026
- 2025Creating Blank Canvas Against AI-enabled Image Forgery27 Nov 2025
- 2025GS-Checker: Tampering Localization for 3D Gaussian Splatting25 Nov 2025
- 2025NTK-Guided Implicit Neural Teaching19 Nov 2025
- 2025FontGuard: A Robust Font Watermarking Approach Leveraging Deep Font Knowledge4 Apr 2025
- 2025MultiNeRF: Multiple Watermark Embedding for Neural Radiance Fields3 Apr 2025
6 more
- 2025All That Glitters Is Not Gold: Key-Secured 3D Secrets within 3D Gaussian Splatting10 Mar 2025
- 2025SecureGS: Boosting the Security and Fidelity of 3D Gaussian Splatting Steganography8 Mar 2025
- 2025GaussianSeal: Rooting Adaptive Watermarks for 3D Gaussian Generation Model1 Mar 2025
- 2024GuardSplat: Efficient and Robust Watermarking for 3D Gaussian Splatting29 Nov 2024
- 2024GaussianMarker: Uncertainty-Aware Copyright Protection of 3D Gaussian Splatting31 Oct 2024
- 2024Geometry Cloak: Preventing TGS-based 3D Reconstruction from Copyrighted Images30 Oct 2024
- 2024GaussianMarker: Uncertainty-Aware Copyright Protection of 3D Gaussian Splattingcited by 20
- 2024GuardSplat: Efficient and Robust Watermarking for 3D Gaussian Splattingcited by 18
- 2024Geometry Cloak: Preventing TGS-based 3D Reconstruction from Copyrighted Imagescited by 15
- 2025All That Glitters Is Not Gold: Key-Secured 3D Secrets within 3D Gaussian Splattingcited by 15
- 2025SecureGS: Boosting the Security and Fidelity of 3D Gaussian Splatting Steganographycited by 14
- 2025FontGuard: A Robust Font Watermarking Approach Leveraging Deep Font Knowledgecited by 3
- 2025GS-Checker: Tampering Localization for 3D Gaussian Splattingcited by 3
- 2025NTK-Guided Implicit Neural Teachingcited by 2
- 2026Intellectual Property Protection for 3D Gaussian Splatting Assets: A Surveycited by 2
- 2025Creating Blank Canvas Against AI-enabled Image Forgerycited by 1
- 2025MultiNeRF: Multiple Watermark Embedding for Neural Radiance Fieldscited by 0
- 2026StegoNGP: 3D Cryptographic Steganography using Instant-NGPcited by 0
12 most cited of 15 All 15 (JSON)
- 2026Generating Multi-view Adversarial Examples for Visual Geometry Grounded Transformer21 Aug 2026
- 2026NGS-Marker: Robust Native Watermarking for 3D Gaussian Splatting18 Aug 2026
- 2026IBRSteG: Learning a Generalizable Steganography Framework for 3D Gaussian Splatting29 Jun 2026
- 2026StegoNGP: 3D Cryptographic Steganography using Instant-NGP1 Mar 2026
- 2026Intellectual Property Protection for 3D Gaussian Splatting Assets: A Survey2 Feb 2026
- 2025Creating Blank Canvas Against AI-enabled Image Forgery27 Nov 2025
- 2025GS-Checker: Tampering Localization for 3D Gaussian Splatting25 Nov 2025
- 2025NTK-Guided Implicit Neural Teaching19 Nov 2025
- 2025FontGuard: A Robust Font Watermarking Approach Leveraging Deep Font Knowledge4 Apr 2025
- 2025MultiNeRF: Multiple Watermark Embedding for Neural Radiance Fields3 Apr 2025
- 2025All That Glitters Is Not Gold: Key-Secured 3D Secrets within 3D Gaussian Splatting10 Mar 2025
- 2025SecureGS: Boosting the Security and Fidelity of 3D Gaussian Splatting Steganography8 Mar 2025
12 newest of 15 All 15 (JSON)