AI-generated Image Detection: Passive or Watermark?
On the map: LLM safety and security → Watermarking generated content and models
Abstract (arXiv)
While text-to-image models offer numerous benefits, they also pose significant societal risks. Detecting AI-generated images is crucial for mitigating these risks. Detection methods can be broadly categorized into passive and watermark-based approaches: passive detectors rely on artifacts present in AI-generated images, whereas watermark-based detectors proactively embed watermarks into such images. A key question is which type of detector performs better in terms of effectiveness, robustness, and efficiency. However, the current literature lacks a comprehensive understanding of this issue. In this work, we aim to bridge that gap by developing ImageDetectBench, the first comprehensive benchmark to compare the effectiveness, robustness, and efficiency of passive and watermark-based detectors. Our benchmark includes four datasets, each containing a mix of AI-generated and non-AI-generated images. We evaluate five passive detectors and four watermark-based detectors against eight types of common perturbations and three types of adversarial perturbations. Our benchmark results reveal several interesting findings. For instance, watermark-based detectors consistently outperform passive detectors, both in the presence and absence of perturbations. Based on these insights, we provide recommendations for detecting AI-generated images, e.g., when both types of detectors are applicable, watermark-based detectors should be the preferred choice. Our code and data are publicly available at https://github.com/moyangkuo/ImageDetectBench.git.
Key facts. Cited by 7 papers in the map (data through 14 Oct 2026). Placed in Watermarking generated content and models, one of 12 directions in LLM safety and security. Builds on 43 of its 69 references that are in the map. First posted on arXiv 20 Nov 2024.
Builds on
43 of 69 references.
Closest ancestors · 7
Same direction, newest first
- 2024Stable Signature is Unstable: Removing Image Watermark from Diffusion Models12 May
- 2024Gaussian Shading: Provable Performance-Lossless Image Watermarking for Diffusion Models7 Apr
- 2024Watermark-based Attribution of AI-Generated Content5 Apr
- 2023Robustness of AI-Image Detectors: Fundamental Limits and Practical Attacks29 Sep
- 2023Evading Watermark based Detection of AI-Generated Content5 May
- 2023The Stable Signature: Rooting Watermarks in Latent Diffusion Models27 Mar
- 2023A Watermark for Large Language Models24 Jan
Other references · 36
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
- 2014Microsoft COCO: Common Objects in Contextcited by 17,608
- 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,364
- 2018The Unreasonable Effectiveness of Deep Features as a Perceptual Metriccited by 11,177
- 2021Diffusion Models Beat GANs on Image Synthesiscited by 8,255
- 2014Explaining and Harnessing Adversarial Examplescited by 7,364
- 2022Photorealistic Text-to-Image Diffusion Models with Deep Language Understandingcited by 6,355
- 2023SDXL: Improving Latent Diffusion Models for High-Resolution Image Synthesiscited by 4,356
- 2022BLIP: Bootstrapping Language-Image Pre-training for Unified Vision-Language Understanding and Generationcited by 4,322
- 2015Flickr30k Entities: Collecting Region-to-Phrase Correspondences for Richer Image-to-Sentence Modelscited by 1,362
- 2019Certified Adversarial Robustness via Randomized Smoothingcited by 1,340
- 2023DetectGPT: Zero-Shot Machine-Generated Text Detection using Probability Curvaturecited by 726
24 more
- 2019Square Attack: a query-efficient black-box adversarial attack via random searchcited by 685
- 2018Black-box Adversarial Attacks with Limited Queries and Informationcited by 501
- 2023Towards Universal Fake Image Detectors that Generalize Across Generative Modelscited by 490
- 2017Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Modelscited by 462
- 2020TextCaps: a Dataset for Image Captioning with Reading Comprehensioncited by 400
- 2018HiDDeN: Hiding Data With Deep Networkscited by 397
- 2019HopSkipJumpAttack: A Query-Efficient Decision-Based Attackcited by 333
- 2024Hunyuan-DiT: A Powerful Multi-Resolution Diffusion Transformer with Fine-Grained Chinese Understandingcited by 298
- 2019StegaStamp: Invisible Hyperlinks in Physical Photographscited by 265
- 2022DE-FAKE: Detection and Attribution of Fake Images Generated by Text-to-Image Generation Modelscited by 168
- 2018Prior Convictions: Black-Box Adversarial Attacks with Bandits and Priorscited by 146
- 2020Adversarial Watermarking Transformer: Towards Tracing Text Provenance with Data Hidingcited by 130
- 2022Towards the Detection of Diffusion Model Deepfakescited by 111
- 2024WAVES: Benchmarking the Robustness of Image Watermarkscited by 97
- 2024Proactive Detection of Voice Cloning with Localized Watermarkingcited by 78
- 2023Detecting Voice Cloning Attacks via Timbre Watermarkingcited by 44
- 2022Deepfake Text Detection: Limitations and Opportunitiescited by 37
- 2023On the Detectability of ChatGPT Content: Benchmarking, Methodology, and Evaluation through the Lens of Academic Writingcited by 27
- 2024A Transfer Attack to Image Watermarkscited by 27
- 2015A Review Paper: Noise Models in Digital Image Processingcited by 24
- 2024AudioMarkBench: Benchmarking Robustness of Audio Watermarkingcited by 23
- 2024Organic or Diffused: Can We Distinguish Human Art from AI-generated Images?cited by 21
- 2024SafeEar: Content Privacy-Preserving Audio Deepfake Detectioncited by 21
- 2024An Analysis of Recent Advances in Deepfake Image Detection in an Evolving Threat Landscapecited by 16
Built on by
Citing papers per year: 2025: 3; 2026: 4.
7 papers.
- 2025Secure and Robust Watermarking for AI-generated Images: A Comprehensive Surveycited by 5
- 2026A Comprehensive Dataset for Human vs. AI Generated Image Detectioncited by 4
- 2025DejAIvu: Identifying and Explaining AI Art on the Web in Real-Time with Saliency Mapscited by 0
- 2025LAID: Lightweight AI-Generated Image Detection in Spatial and Spectral Domainscited by 0
- 2026Abductive Corroboration of Probabilistic AI Models for Forensic Synthetic Media Detectioncited by 0
- 2026Fusion Under Component Failure: Negative Results and Failure Modes in Ensemble AI-Generated Image Detectioncited by 0
- 2026Trustworthy synthetic visual media: Evidence across the media lifecyclecited by 0
- 2026Trustworthy synthetic visual media: Evidence across the media lifecycle28 Sep 2026
- 2026Fusion Under Component Failure: Negative Results and Failure Modes in Ensemble AI-Generated Image Detection23 Sep 2026
- 2026Abductive Corroboration of Probabilistic AI Models for Forensic Synthetic Media Detection3 Jul 2026
- 2026A Comprehensive Dataset for Human vs. AI Generated Image Detection2 Jan 2026
- 2025Secure and Robust Watermarking for AI-generated Images: A Comprehensive Survey30 Sep 2025
- 2025LAID: Lightweight AI-Generated Image Detection in Spatial and Spectral Domains7 Jul 2025
- 2025DejAIvu: Identifying and Explaining AI Art on the Web in Real-Time with Saliency Maps12 Feb 2025
Similar, not cited
Close in wording, no citation either way
- 2025Is Artificial Intelligence Generated Image Detection a Solved Problem?
- 2023GenImage: A Million-Scale Benchmark for Detecting AI-Generated Image
- 2026How well are open sourced AI-generated image detection models out-of-the-box: A comprehensive benchmark study
- 2025AI-GenBench: A New Ongoing Benchmark for AI-Generated Image Detection
- 2025Provenance of AI-Generated Images: A Vector Similarity and Blockchain-based Approach
- 2024Are Watermarks Bugs for Deepfake Detectors? Rethinking Proactive Forensics
- 2025Visual Watermarking in the Era of Diffusion Models: Advances and Challenges
- 2025Watermarking across Modalities for Content Tracing and Generative AI