An Efficient Watermarking Method for Latent Diffusion Models via Low-Rank Adaptation and Dynamic Loss Weighting
On the map: Diffusion models → Robustness, privacy and adversarial aspects
also in 1 more
Abstract (arXiv)
The rapid proliferation of Deep Neural Networks (DNNs) is driving a surge in model watermarking technologies, as the trained models themselves constitute valuable intellectual property. Existing watermarking approaches primarily focus on modifying model parameters or altering sampling behaviors. However, with the emergence of increasingly large models, improving the efficiency of watermark embedding becomes essential to manage increasing computational demands. Prioritizing efficiency not only optimizes resource utilization, making the watermarking process more applicable for large models, but also mitigates potential degradation of model performance. In this paper, we propose an efficient watermarking method for Latent Diffusion Models (LDMs) based on Low-Rank Adaptation (LoRA). The core idea is to introduce trainable low-rank parameters into the frozen LDM to embed watermark, thereby preserving the integrity of the original model weights. Furthermore, a dynamic loss weight scheduler is designed to adaptively balance the objectives of generative quality and watermark fidelity, enabling the model to achieve effective watermark embedding with minimal impact on quality of the generated images. Experimental results show that the proposed method ensures fast and accurate watermark embedding and a high quality of the generated images, at the same time maintaining a level of robustness aligned - in some cases superior - with state-of-the-art approaches. Moreover, the method generalizes well across different datasets and base LDMs. Codes are available at: https://github.com/MrDongdongLin/EW-LoRA.
Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 35 of its 54 references that are in the map. First posted on arXiv 26 Oct 2024.
Builds on
35 of 54 references.
Closest ancestors · 3
Same direction, newest first
- 2024WMAdapter: Adding WaterMark Control to Latent Diffusion Models12 Jun
- 2024AquaLoRA: Toward White-box Protection for Customized Stable Diffusion Models via Watermark LoRA18 May
- 2023The Stable Signature: Rooting Watermarks in Latent Diffusion Models27 Mar
Other references · 32
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
- 2014Microsoft COCO: Common Objects in Contextcited by 17,498
- 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,084
- 2018The Unreasonable Effectiveness of Deep Features as a Perceptual Metriccited by 11,029
- 2022Scalable Diffusion Models with Transformerscited by 5,931
- 2023SDXL: Improving Latent Diffusion Models for High-Resolution Image Synthesiscited by 4,290
- 2024Scaling Rectified Flow Transformers for High-Resolution Image Synthesiscited by 4,094
- 2014Deep Learning Face Attributes in the Wildcited by 3,679
- 2018Variational image compression with a scale hyperpriorcited by 910
- 2020Learned Image Compression with Discretized Gaussian Mixture Likelihoods and Attention Modulescited by 570
- 2018HiDDeN: Hiding Data With Deep Networkscited by 384
- 2019SinGAN: Learning a Generative Model from a Single Natural Imagecited by 348
20 more
- 2023VeRA: Vector-based Random Matrix Adaptationcited by 294
- 2024PiSSA: Principal Singular Values and Singular Vectors Adaptation of Large Language Modelscited by 261
- 2019StegaStamp: Invisible Hyperlinks in Physical Photographscited by 256
- 2017Embedding Watermarks into Deep Neural Networkscited by 227
- 2020Artificial Fingerprinting for Generative Models: Rooting Deepfake Attribution in Training Datacited by 200
- 2021FedPara: Low-Rank Hadamard Product for Communication-Efficient Federated Learningcited by 140
- 2024Scalable High-Resolution Pixel-Space Image Synthesis with Hourglass Diffusion Transformerscited by 116
- 2021Watermarking Images in Self-Supervised Latent Spacescited by 90
- 2021A survey of deep neural network watermarking techniquescited by 69
- 2019How to Prove Your Model Belongs to You: A Blind-Watermark based Framework to Protect Intellectual Property of DNNcited by 58
- 2018ReDMark: Framework for Residual Diffusion Watermarking on Deep Networkscited by 55
- 2023RoSteALS: Robust Steganography using Autoencoder Latent Spacecited by 54
- 2021Deep Model Intellectual Property Protection via Deep Watermarkingcited by 47
- 2020Passport-aware Normalization for Deep Model Protectioncited by 42
- 2020A Loss Function for Generative Neural Networks Based on Watson's Perceptual Modelcited by 39
- 2022Supervised GAN Watermarking for Intellectual Property Protectioncited by 39
- 2020Intellectual Property Protection for Deep Learning Models: Taxonomy, Methods, Attacks, and Evaluationscited by 30
- 2024LaWa: Using Latent Space for In-Generation Image Watermarkingcited by 27
- 2022ArtELingo: A Million Emotion Annotations of WikiArt with Emphasis on Diversity over Language and Culturecited by 17
- 2024ProMark: Proactive Diffusion Watermarking for Causal Attributioncited by 16
Built on by
Citing papers per year: 2026: 1.
1 paper.
Similar, not cited
Close in wording, no citation either way
- 2025Secure and Efficient Watermarking for Latent Diffusion Models in Model Distribution Scenarios
- 2025SWA-LDM: Toward Stealthy Watermarks for Latent Diffusion Models
- 2025TraceMark-LDM: Authenticatable Watermarking for Latent Diffusion Models via Binary-Guided Rearrangement
- 2025Image Watermarking of Generative Diffusion Models
- 2024SAT-LDM: Provably Generalizable Image Watermarking for Latent Diffusion Models with Self-Augmented Training
- 2024LVMark: Robust Watermark for Latent Video Diffusion Models
- 2024MarkPlugger: Generalizable Watermark Framework for Latent Diffusion Models without Retraining
- 2025LoRAGuard: An Effective Black-box Watermarking Approach for LoRAs