GaussianMarker: Uncertainty-Aware Copyright Protection of 3D Gaussian Splatting
Not on the map. Why?
Abstract (arXiv)
3D Gaussian Splatting (3DGS) has become a crucial method for acquiring 3D assets. To protect the copyright of these assets, digital watermarking techniques can be applied to embed ownership information discreetly within 3DGS models. However, existing watermarking methods for meshes, point clouds, and implicit radiance fields cannot be directly applied to 3DGS models, as 3DGS models use explicit 3D Gaussians with distinct structures and do not rely on neural networks. Naively embedding the watermark on a pre-trained 3DGS can cause obvious distortion in rendered images. In our work, we propose an uncertainty-based method that constrains the perturbation of model parameters to achieve invisible watermarking for 3DGS. At the message decoding stage, the copyright messages can be reliably extracted from both 3D Gaussians and 2D rendered images even under various forms of 3D and 2D distortions. We conduct extensive experiments on the Blender, LLFF and MipNeRF-360 datasets to validate the effectiveness of our proposed method, demonstrating state-of-the-art performance on both message decoding accuracy and view synthesis quality.
Key facts. Cited by 21 papers in the map (data through 14 Oct 2026). Builds on 31 of its 54 references that are in the map. First posted on arXiv 31 Oct 2024.
Builds on
31 of 54 references.
References · 31
- 2015Deep Residual Learning for Image Recognitioncited by 52,096
- 2018The Unreasonable Effectiveness of Deep Features as a Perceptual Metriccited by 11,177
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
- 20233D Gaussian Splatting for Real-Time Radiance Field Renderingcited by 6,226
- 2016PointNet: Deep Learning on Point Sets for 3D Classification and Segmentationcited by 5,248
- 2021Mip-NeRF 360: Unbounded Anti-Aliased Neural Radiance Fieldscited by 2,032
- 2023Dynamic 3D Gaussians: Tracking by Persistent Dynamic View Synthesiscited by 737
- 2019Local Light Field Fusion: Practical View Synthesis with Prescriptive Sampling Guidelinescited by 672
- 2023Mip-Splatting: Alias-free 3D Gaussian Splattingcited by 667
- 2023SuGaR: Surface-Aligned Gaussian Splatting for Efficient 3D Mesh Reconstruction and High-Quality Mesh Renderingcited by 616
- 2023LightGaussian: Unbounded 3D Gaussian Compression with 15x Reduction and 200+ FPScited by 436
- 2018HiDDeN: Hiding Data With Deep Networkscited by 397
19 more
- 2022Decomposing NeRF for Editing via Feature Field Distillationcited by 371
- 2023GaussianEditor: Swift and Controllable 3D Editing with Gaussian Splattingcited by 335
- 2019StegaStamp: Invisible Hyperlinks in Physical Photographscited by 265
- 2019Differentiable Surface Splatting for Point-based Geometry Processingcited by 239
- 20233DGS-Avatar: Animatable Avatars via Deformable 3D Gaussian Splattingcited by 195
- 2019Robust Invisible Video Watermarking with Attentioncited by 149
- 20213D-aware Image Synthesis via Learning Structural and Textural Representationscited by 109
- 2023Neural Point Catacaustics for Novel-View Synthesis of Reflectionscited by 82
- 2023FisherRF: Active View Selection and Uncertainty Quantification for Radiance Fields using Fisher Informationcited by 64
- 2018ReDMark: Framework for Residual Diffusion Watermarking on Deep Networkscited by 57
- 2023CopyRNeRF: Protecting the CopyRight of Neural Radiance Fieldscited by 34
- 2022Unifying Approaches in Active Learning and Active Sampling via Fisher Information and Information-Theoretic Quantitiescited by 28
- 2021Deep 3D-to-2D Watermarking: Embedding Messages in 3D Meshes and Extracting Them from 2D Renderingscited by 23
- 2023Mimic3D: Thriving 3D-Aware GANs via 3D-to-2D Imitationcited by 18
- 2024Protecting NeRFs' Copyright via Plug-And-Play Watermarking Base Modelcited by 18
- 2024Imaging Interiors: An Implicit Solution to Electromagnetic Inverse Scattering Problemscited by 8
- 2024Spy-Watermark: Robust Invisible Watermarking for Backdoor Attackcited by 7
- 2024GeometrySticker: Enabling Ownership Claim of Recolorized Neural Radiance Fieldscited by 6
- 2024Event Trojan: Asynchronous Event-based Backdoor Attackscited by 3
Built on by
Citing papers per year: 2024: 1; 2025: 8; 2026: 12.
21 papers.
Sort:
By area:
- 2024GuardSplat: Efficient and Robust Watermarking for 3D Gaussian Splattingcited by 18
- 2025AdLift: Lifting Adversarial Perturbations to Safeguard 3D Gaussian Splatting Assets Against Instruction-Driven Editingcited by 10
- 2025Stereo-GS: Multi-View Stereo Vision Model for Generalizable 3D Gaussian Splatting Reconstructioncited by 8
- 2025GS-Marker: Generalizable and Robust Watermarking for 3D Gaussian Splattingcited by 6
- 2025StealthAttack: Robust 3D Gaussian Splatting Poisoning via Density-Guided Illusionscited by 6
- 2025GaussianSeal: Rooting Adaptive Watermarks for 3D Gaussian Generation Modelcited by 4
- 2025CompMarkGS: Robust Watermarking for Compressed 3D Gaussian Splattingcited by 2
- 2025Align 3D Representation and Text Embedding for 3D Content Personalizationcited by 2
- 2026Intellectual Property Protection for 3D Gaussian Splatting Assets: A Surveycited by 2
- 2025X-SG2S: Safe and Generalizable Gaussian Splatting with X-dimensional Watermarkscited by 1
- 2026Immunizing 3D Gaussian Generative Models Against Unauthorized Fine-Tuning via Attribute-Space Trapscited by 1
- 2026GaussTrace: Provenance Analysis of 3D Gaussian Splatting Models with Evidence-based LLM Reasoningcited by 1
9 more
- 2026Position: 3D Gaussian Splatting Watermarking Should Be Scenario-Driven and Threat-Model Explicitcited by 0
- 2026PatchPoison: Poisoning Multi-View Datasets to Degrade 3D Reconstructioncited by 0
- 2026Splats in Splats++: Robust and Generalizable 3D Gaussian Splatting Steganographycited by 0
- 2026Denoising-GS: Gaussian Splatting with Spatial-aware Denoisingcited by 0
- 20264D-GSW: Kinematic-Aware Spatio-Temporal Consistent Watermarking for 4D Gaussian Splattingcited by 0
- 2026IBRSteG: Learning a Generalizable Steganography Framework for 3D Gaussian Splattingcited by 0
- 2026NGS-Marker: Robust Native Watermarking for 3D Gaussian Splattingcited by 0
- 2026Geometry-Preserving Blind Watermarking for Raw 3D Point Cloudscited by 0
- 2026Rethinking Visual Provenance: Detection and Watermarking Across Direct Visual Generation and LLM-Driven Code Renderingcited by 0
- 2026Rethinking Visual Provenance: Detection and Watermarking Across Direct Visual Generation and LLM-Driven Code Rendering6 Oct 2026
- 2026Geometry-Preserving Blind Watermarking for Raw 3D Point Clouds26 Sep 2026
- 2026NGS-Marker: Robust Native Watermarking for 3D Gaussian Splatting18 Aug 2026
- 2026IBRSteG: Learning a Generalizable Steganography Framework for 3D Gaussian Splatting29 Jun 2026
- 2026GaussTrace: Provenance Analysis of 3D Gaussian Splatting Models with Evidence-based LLM Reasoning9 Jun 2026
- 20264D-GSW: Kinematic-Aware Spatio-Temporal Consistent Watermarking for 4D Gaussian Splatting21 May 2026
- 2026Denoising-GS: Gaussian Splatting with Spatial-aware Denoising14 May 2026
- 2026Splats in Splats++: Robust and Generalizable 3D Gaussian Splatting Steganography17 Apr 2026
- 2026PatchPoison: Poisoning Multi-View Datasets to Degrade 3D Reconstruction14 Apr 2026
- 2026Immunizing 3D Gaussian Generative Models Against Unauthorized Fine-Tuning via Attribute-Space Traps6 Apr 2026
- 2026Intellectual Property Protection for 3D Gaussian Splatting Assets: A Survey2 Feb 2026
- 2026Position: 3D Gaussian Splatting Watermarking Should Be Scenario-Driven and Threat-Model Explicit1 Feb 2026
9 more
- 2025AdLift: Lifting Adversarial Perturbations to Safeguard 3D Gaussian Splatting Assets Against Instruction-Driven Editing8 Dec 2025
- 2025StealthAttack: Robust 3D Gaussian Splatting Poisoning via Density-Guided Illusions2 Oct 2025
- 2025Align 3D Representation and Text Embedding for 3D Content Personalization23 Aug 2025
- 2025Stereo-GS: Multi-View Stereo Vision Model for Generalizable 3D Gaussian Splatting Reconstruction20 Jul 2025
- 2025GS-Marker: Generalizable and Robust Watermarking for 3D Gaussian Splatting24 Mar 2025
- 2025CompMarkGS: Robust Watermarking for Compressed 3D Gaussian Splatting17 Mar 2025
- 2025GaussianSeal: Rooting Adaptive Watermarks for 3D Gaussian Generation Model1 Mar 2025
- 2025X-SG2S: Safe and Generalizable Gaussian Splatting with X-dimensional Watermarks13 Feb 2025
- 2024GuardSplat: Efficient and Robust Watermarking for 3D Gaussian Splatting29 Nov 2024
- 2025GaussianSeal: Rooting Adaptive Watermarks for 3D Gaussian Generation Modelcited by 4
- 2026Position: 3D Gaussian Splatting Watermarking Should Be Scenario-Driven and Threat-Model Explicitcited by 0
- 2026Rethinking Visual Provenance: Detection and Watermarking Across Direct Visual Generation and LLM-Driven Code Renderingcited by 0
- 2026Rethinking Visual Provenance: Detection and Watermarking Across Direct Visual Generation and LLM-Driven Code Rendering6 Oct 2026
- 2026Position: 3D Gaussian Splatting Watermarking Should Be Scenario-Driven and Threat-Model Explicit1 Feb 2026
- 2025GaussianSeal: Rooting Adaptive Watermarks for 3D Gaussian Generation Model1 Mar 2025
- 2024GuardSplat: Efficient and Robust Watermarking for 3D Gaussian Splattingcited by 18
- 2025AdLift: Lifting Adversarial Perturbations to Safeguard 3D Gaussian Splatting Assets Against Instruction-Driven Editingcited by 10
- 2025Stereo-GS: Multi-View Stereo Vision Model for Generalizable 3D Gaussian Splatting Reconstructioncited by 8
- 2025GS-Marker: Generalizable and Robust Watermarking for 3D Gaussian Splattingcited by 6
- 2025StealthAttack: Robust 3D Gaussian Splatting Poisoning via Density-Guided Illusionscited by 6
- 2025CompMarkGS: Robust Watermarking for Compressed 3D Gaussian Splattingcited by 2
- 2025Align 3D Representation and Text Embedding for 3D Content Personalizationcited by 2
- 2026Intellectual Property Protection for 3D Gaussian Splatting Assets: A Surveycited by 2
- 2025X-SG2S: Safe and Generalizable Gaussian Splatting with X-dimensional Watermarkscited by 1
- 2026Immunizing 3D Gaussian Generative Models Against Unauthorized Fine-Tuning via Attribute-Space Trapscited by 1
- 2026PatchPoison: Poisoning Multi-View Datasets to Degrade 3D Reconstructioncited by 0
- 2026Splats in Splats++: Robust and Generalizable 3D Gaussian Splatting Steganographycited by 0
12 most cited of 17 All 17 (JSON)
- 2026Geometry-Preserving Blind Watermarking for Raw 3D Point Clouds26 Sep 2026
- 2026NGS-Marker: Robust Native Watermarking for 3D Gaussian Splatting18 Aug 2026
- 2026IBRSteG: Learning a Generalizable Steganography Framework for 3D Gaussian Splatting29 Jun 2026
- 20264D-GSW: Kinematic-Aware Spatio-Temporal Consistent Watermarking for 4D Gaussian Splatting21 May 2026
- 2026Denoising-GS: Gaussian Splatting with Spatial-aware Denoising14 May 2026
- 2026Splats in Splats++: Robust and Generalizable 3D Gaussian Splatting Steganography17 Apr 2026
- 2026PatchPoison: Poisoning Multi-View Datasets to Degrade 3D Reconstruction14 Apr 2026
- 2026Immunizing 3D Gaussian Generative Models Against Unauthorized Fine-Tuning via Attribute-Space Traps6 Apr 2026
- 2026Intellectual Property Protection for 3D Gaussian Splatting Assets: A Survey2 Feb 2026
- 2025AdLift: Lifting Adversarial Perturbations to Safeguard 3D Gaussian Splatting Assets Against Instruction-Driven Editing8 Dec 2025
- 2025StealthAttack: Robust 3D Gaussian Splatting Poisoning via Density-Guided Illusions2 Oct 2025
- 2025Align 3D Representation and Text Embedding for 3D Content Personalization23 Aug 2025
12 newest of 17 All 17 (JSON)
Similar, not cited
Close in wording, no citation either way
- 2025Can Protective Watermarking Safeguard the Copyright of 3D Gaussian Splatting?
- 2024WATER-GS: Toward Copyright Protection for 3D Gaussian Splatting via Universal Watermarking
- 2025MarkSplatter: Generalizable Watermarking for 3D Gaussian Splatting Model via Splatter Image Structure
- 2025ConcealGS: Concealing Invisible Copyright Information in 3D Gaussian Splatting
- 20243D-GSW: 3D Gaussian Splatting for Robust Watermarking
- 2025RDSplat: Robust Watermarking for 3D Gaussian Splatting Against 2D and 3D Diffusion Editing
- 2026Where, What, Why: Toward Explainable 3D-GS Watermarking
- 2026GuardMarkGS: Unified Ownership Tracing and Edit Deterrence for 3D Gaussian Splatting