mlsanityData to 14 Oct 2026

AI-generated Image Detection: Passive or Watermark?

arXiv 2411.13553 ↗First posted 20 Nov 2024cs.CR cs.CV cs.LGcited by 7

On the map: LLM safety and security → Watermarking generated content and models

Abstract (arXiv)

While text-to-image models offer numerous benefits, they also pose significant societal risks. Detecting AI-generated images is crucial for mitigating these risks. Detection methods can be broadly categorized into passive and watermark-based approaches: passive detectors rely on artifacts present in AI-generated images, whereas watermark-based detectors proactively embed watermarks into such images. A key question is which type of detector performs better in terms of effectiveness, robustness, and efficiency. However, the current literature lacks a comprehensive understanding of this issue. In this work, we aim to bridge that gap by developing ImageDetectBench, the first comprehensive benchmark to compare the effectiveness, robustness, and efficiency of passive and watermark-based detectors. Our benchmark includes four datasets, each containing a mix of AI-generated and non-AI-generated images. We evaluate five passive detectors and four watermark-based detectors against eight types of common perturbations and three types of adversarial perturbations. Our benchmark results reveal several interesting findings. For instance, watermark-based detectors consistently outperform passive detectors, both in the presence and absence of perturbations. Based on these insights, we provide recommendations for detecting AI-generated images, e.g., when both types of detectors are applicable, watermark-based detectors should be the preferred choice. Our code and data are publicly available at https://github.com/moyangkuo/ImageDetectBench.git.

Key facts. Cited by 7 papers in the map (data through 14 Oct 2026). Placed in Watermarking generated content and models, one of 12 directions in LLM safety and security. Builds on 43 of its 69 references that are in the map. First posted on arXiv 20 Nov 2024.

Builds on

43 of 69 references.

Closest ancestors · 7

Same direction, newest first

  1. 2024Stable Signature is Unstable: Removing Image Watermark from Diffusion Models12 May
  2. 2024Gaussian Shading: Provable Performance-Lossless Image Watermarking for Diffusion Models7 Apr
  3. 2024Watermark-based Attribution of AI-Generated Content5 Apr
  4. 2023Robustness of AI-Image Detectors: Fundamental Limits and Practical Attacks29 Sep
  5. 2023Evading Watermark based Detection of AI-Generated Content5 May
  6. 2023The Stable Signature: Rooting Watermarks in Latent Diffusion Models27 Mar
  7. 2023A Watermark for Large Language Models24 Jan

Other references · 36

  1. 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
  2. 2014Microsoft COCO: Common Objects in Contextcited by 17,608
  3. 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,364
  4. 2018The Unreasonable Effectiveness of Deep Features as a Perceptual Metriccited by 11,177
  5. 2021Diffusion Models Beat GANs on Image Synthesiscited by 8,255
  6. 2014Explaining and Harnessing Adversarial Examplescited by 7,364
  7. 2022Photorealistic Text-to-Image Diffusion Models with Deep Language Understandingcited by 6,355
  8. 2023SDXL: Improving Latent Diffusion Models for High-Resolution Image Synthesiscited by 4,356
  9. 2022BLIP: Bootstrapping Language-Image Pre-training for Unified Vision-Language Understanding and Generationcited by 4,322
  10. 2015Flickr30k Entities: Collecting Region-to-Phrase Correspondences for Richer Image-to-Sentence Modelscited by 1,362
  11. 2019Certified Adversarial Robustness via Randomized Smoothingcited by 1,340
  12. 2023DetectGPT: Zero-Shot Machine-Generated Text Detection using Probability Curvaturecited by 726
24 more
  1. 2019Square Attack: a query-efficient black-box adversarial attack via random searchcited by 685
  2. 2018Black-box Adversarial Attacks with Limited Queries and Informationcited by 501
  3. 2023Towards Universal Fake Image Detectors that Generalize Across Generative Modelscited by 490
  4. 2017Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Modelscited by 462
  5. 2020TextCaps: a Dataset for Image Captioning with Reading Comprehensioncited by 400
  6. 2018HiDDeN: Hiding Data With Deep Networkscited by 397
  7. 2019HopSkipJumpAttack: A Query-Efficient Decision-Based Attackcited by 333
  8. 2024Hunyuan-DiT: A Powerful Multi-Resolution Diffusion Transformer with Fine-Grained Chinese Understandingcited by 298
  9. 2019StegaStamp: Invisible Hyperlinks in Physical Photographscited by 265
  10. 2022DE-FAKE: Detection and Attribution of Fake Images Generated by Text-to-Image Generation Modelscited by 168
  11. 2018Prior Convictions: Black-Box Adversarial Attacks with Bandits and Priorscited by 146
  12. 2020Adversarial Watermarking Transformer: Towards Tracing Text Provenance with Data Hidingcited by 130
  13. 2022Towards the Detection of Diffusion Model Deepfakescited by 111
  14. 2024WAVES: Benchmarking the Robustness of Image Watermarkscited by 97
  15. 2024Proactive Detection of Voice Cloning with Localized Watermarkingcited by 78
  16. 2023Detecting Voice Cloning Attacks via Timbre Watermarkingcited by 44
  17. 2022Deepfake Text Detection: Limitations and Opportunitiescited by 37
  18. 2023On the Detectability of ChatGPT Content: Benchmarking, Methodology, and Evaluation through the Lens of Academic Writingcited by 27
  19. 2024A Transfer Attack to Image Watermarkscited by 27
  20. 2015A Review Paper: Noise Models in Digital Image Processingcited by 24
  21. 2024AudioMarkBench: Benchmarking Robustness of Audio Watermarkingcited by 23
  22. 2024Organic or Diffused: Can We Distinguish Human Art from AI-generated Images?cited by 21
  23. 2024SafeEar: Content Privacy-Preserving Audio Deepfake Detectioncited by 21
  24. 2024An Analysis of Recent Advances in Deepfake Image Detection in an Evolving Threat Landscapecited by 16

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 3; 2026: 4.

7 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2025Is Artificial Intelligence Generated Image Detection a Solved Problem?
  2. 2023GenImage: A Million-Scale Benchmark for Detecting AI-Generated Image
  3. 2026How well are open sourced AI-generated image detection models out-of-the-box: A comprehensive benchmark study
  4. 2025AI-GenBench: A New Ongoing Benchmark for AI-Generated Image Detection
  5. 2025Provenance of AI-Generated Images: A Vector Similarity and Blockchain-based Approach
  6. 2024Are Watermarks Bugs for Deepfake Detectors? Rethinking Proactive Forensics
  7. 2025Visual Watermarking in the Era of Diffusion Models: Advances and Challenges
  8. 2025Watermarking across Modalities for Content Tracing and Generative AI