FreqMark: Invisible Image Watermarking via Frequency Based Optimization in Latent Space
Not on the map. Why?
Abstract (arXiv)
Invisible watermarking is essential for safeguarding digital content, enabling copyright protection and content authentication. However, existing watermarking methods fall short in robustness against regeneration attacks. In this paper, we propose a novel method called FreqMark that involves unconstrained optimization of the image latent frequency space obtained after VAE encoding. Specifically, FreqMark embeds the watermark by optimizing the latent frequency space of the images and then extracts the watermark through a pre-trained image encoder. This optimization allows a flexible trade-off between image quality with watermark robustness and effectively resists regeneration attacks. Experimental results demonstrate that FreqMark offers significant advantages in image quality and robustness, permits flexible selection of the encoding bit number, and achieves a bit accuracy exceeding 90% when encoding a 48-bit hidden message under various attack scenarios.
Key facts. Cited by 8 papers in the map (data through 14 Oct 2026). Builds on 36 of its 60 references that are in the map. First posted on arXiv 28 Oct 2024.
Builds on
36 of 60 references.
References · 36
- 2020Denoising Diffusion Probabilistic Modelscited by 21,076
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,863
- 2018The Unreasonable Effectiveness of Deep Features as a Perceptual Metriccited by 11,177
- 2020Denoising Diffusion Implicit Modelscited by 9,781
- 2021Diffusion Models Beat GANs on Image Synthesiscited by 8,255
- 2023DINOv2: Learning Robust Visual Features without Supervisioncited by 7,974
- 2023Adding Conditional Control to Text-to-Image Diffusion Modelscited by 5,503
- 2021Improved Denoising Diffusion Probabilistic Modelscited by 3,761
- 2021GLIDE: Towards Photorealistic Image Generation and Editing with Text-Guided Diffusion Modelscited by 3,614
- 2019Analyzing and Improving the Image Quality of StyleGANcited by 3,588
- 2017Progressive Growing of GANs for Improved Quality, Stability, and Variationcited by 2,988
- 2014Conditional Generative Adversarial Netscited by 2,162
24 more
- 2015Unsupervised Representation Learning with Deep Convolutional Generative Adversarial Networkscited by 2,054
- 2021VICReg: Variance-Invariance-Covariance Regularization for Self-Supervised Learningcited by 1,057
- 2018Variational image compression with a scale hyperpriorcited by 935
- 2019Image2StyleGAN: How to Embed Images Into the StyleGAN Latent Space?cited by 675
- 2020Learned Image Compression with Discretized Gaussian Mixture Likelihoods and Attention Modulescited by 590
- 2020Leveraging Frequency Analysis for Deep Fake Image Recognitioncited by 504
- 2018HiDDeN: Hiding Data With Deep Networkscited by 397
- 2022DiffusionDB: A Large-scale Prompt Gallery Dataset for Text-to-Image Generative Modelscited by 379
- 2023The Stable Signature: Rooting Watermarks in Latent Diffusion Modelscited by 304
- 2020What makes fake images detectable? Understanding properties that generalizecited by 273
- 2019Robust Invisible Video Watermarking with Attentioncited by 149
- 2023A Recipe for Watermarking Diffusion Modelscited by 141
- 2021Are GAN generated images easy to detect? A critical analysis of the state-of-the-artcited by 139
- 2021Adversarial purification with Score-based generative modelscited by 134
- 2023Invisible Image Watermarks Are Provably Removable Using Generative AIcited by 134
- 2020Adversarial Watermarking Transformer: Towards Tracing Text Provenance with Data Hidingcited by 130
- 2024WAVES: Benchmarking the Robustness of Image Watermarkscited by 97
- 2021Watermarking Images in Self-Supervised Latent Spacescited by 94
- 2020Responsible Disclosure of Generative Models Using Scalable Fingerprintingcited by 91
- 2020DeepFake Detection by Analyzing Convolutional Tracescited by 81
- 2023Robustness of AI-Image Detectors: Fundamental Limits and Practical Attackscited by 81
- 2018ReDMark: Framework for Residual Diffusion Watermarking on Deep Networkscited by 57
- 2023Leveraging Optimization for Adaptive Attacks on Image Watermarkscited by 52
- 2022Supervised GAN Watermarking for Intellectual Property Protectioncited by 40
Built on by
Citing papers per year: 2025: 3; 2026: 5.
8 papers.
- 2025Semantic Watermarking Reinvented: Enhancing Robustness and Generation Quality with Fourier Integritycited by 14
- 2026Towards Robust Content Watermarking Against Removal and Forgery Attackscited by 3
- 2025Low-Compute Watermark Removal via Dual-Domain Natural Projectioncited by 1
- 2026PhaseMark: A Post-hoc, Optimization-Free Watermarking of AI-generated Images in the Latent Frequency Domaincited by 1
- 2026Off-The-Shelf Image-to-Image Models Are All You Need To Defeat Image Protection Schemescited by 1
- 2025Multi-bit Audio Watermarkingcited by 0
- 2026Correlation-Aware and Gaussianity-Preserving Robust Latent Angular Watermarking for Diffusion Modelscited by 0
- 2026Certification of Real Images through Calibrated Content Authenticationcited by 0
- 2026Certification of Real Images through Calibrated Content Authentication5 Oct 2026
- 2026Correlation-Aware and Gaussianity-Preserving Robust Latent Angular Watermarking for Diffusion Models24 Jul 2026
- 2026Towards Robust Content Watermarking Against Removal and Forgery Attacks8 Apr 2026
- 2026Off-The-Shelf Image-to-Image Models Are All You Need To Defeat Image Protection Schemes25 Feb 2026
- 2026PhaseMark: A Post-hoc, Optimization-Free Watermarking of AI-generated Images in the Latent Frequency Domain19 Jan 2026
- 2025Low-Compute Watermark Removal via Dual-Domain Natural Projection8 Oct 2025
- 2025Multi-bit Audio Watermarking2 Oct 2025
- 2025Semantic Watermarking Reinvented: Enhancing Robustness and Generation Quality with Fourier Integrity9 Sep 2025
Similar, not cited
Close in wording, no citation either way
- 2023FreqyWM: Frequency Watermarking for the New Data Economy
- 2024An Undetectable Watermark for Generative Image Models
- 2024Invisible Watermarks: Attacks and Robustness
- 2026Exploring Weaknesses of Generative Image Watermarks against Latent Frequency Masking
- 2026DeepFreqMark: End-To-End Learnable Frequency-Domain Watermarking with Spherical Attack Simulation for Latent Diffusion Models
- 2026FDDWAN: A Frequency-Decoupled Diffusion Network for Watermarking Attack
- 2024Hidden in the Noise: Two-Stage Robust Watermarking for Images
- 2024LVMark: Robust Watermark for Latent Video Diffusion Models