GuardSplat: Efficient and Robust Watermarking for 3D Gaussian Splatting
Not on the map. Why?
Abstract (arXiv)
3D Gaussian Splatting (3DGS) has recently created impressive 3D assets for various applications. However, considering security, capacity, invisibility, and training efficiency, the copyright of 3DGS assets is not well protected as existing watermarking methods are unsuited for its rendering pipeline. In this paper, we propose GuardSplat, an innovative and efficient framework for watermarking 3DGS assets. Specifically, 1) We propose a CLIP-guided pipeline for optimizing the message decoder with minimal costs. The key objective is to achieve high-accuracy extraction by leveraging CLIP's aligning capability and rich representations, demonstrating exceptional capacity and efficiency. 2) We tailor a Spherical-Harmonic-aware (SH-aware) Message Embedding module for 3DGS, seamlessly embedding messages into the SH features of each 3D Gaussian while preserving the original 3D structure. This enables watermarking 3DGS assets with minimal fidelity trade-offs and prevents malicious users from removing the watermarks from the model files, meeting the demands for invisibility and security. 3) We present an Anti-distortion Message Extraction module to improve robustness against various distortions. Experiments demonstrate that GuardSplat outperforms state-of-the-art and achieves fast optimization speed. Project page is at https://narcissusex.github.io/GuardSplat, and Code is at https://github.com/NarcissusEx/GuardSplat.
Key facts. Cited by 18 papers in the map (data through 14 Oct 2026). Builds on 56 of its 77 references that are in the map. First posted on arXiv 29 Nov 2024.
Builds on
56 of 77 references.
References · 56
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
- 2020Denoising Diffusion Probabilistic Modelscited by 21,076
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,863
- 2018The Unreasonable Effectiveness of Deep Features as a Perceptual Metriccited by 11,177
- 2020Denoising Diffusion Implicit Modelscited by 9,781
- 2023Segment Anythingcited by 8,234
- 2022Photorealistic Text-to-Image Diffusion Models with Deep Language Understandingcited by 6,355
- 20233D Gaussian Splatting for Real-Time Radiance Field Renderingcited by 6,226
- 2022Instant Neural Graphics Primitives with a Multiresolution Hash Encodingcited by 3,723
- 2023Grounding DINO: Marrying DINO with Grounded Pre-Training for Open-Set Object Detectioncited by 3,332
- 2022DreamFusion: Text-to-3D using 2D Diffusioncited by 3,025
- 2021Mip-NeRF 360: Unbounded Anti-Aliased Neural Radiance Fieldscited by 2,032
38 more
- 2021Mip-NeRF: A Multiscale Representation for Anti-Aliasing Neural Radiance Fieldscited by 1,964
- 2020pixelNeRF: Neural Radiance Fields from One or Few Imagescited by 1,584
- 2022TensoRF: Tensorial Radiance Fieldscited by 1,280
- 2023ProlificDreamer: High-Fidelity and Diverse Text-to-3D Generation with Variational Score Distillationcited by 1,219
- 2023DreamGaussian: Generative Gaussian Splatting for Efficient 3D Content Creationcited by 843
- 2020GIRAFFE: Representing Scenes as Compositional Generative Neural Feature Fieldscited by 785
- 2021Depth-supervised NeRF: Fewer Views and Faster Training for Freecited by 735
- 2020GRAF: Generative Radiance Fields for 3D-Aware Image Synthesiscited by 689
- 2019Local Light Field Fusion: Practical View Synthesis with Prescriptive Sampling Guidelinescited by 672
- 2023Mip-Splatting: Alias-free 3D Gaussian Splattingcited by 667
- 2023SuGaR: Surface-Aligned Gaussian Splatting for Efficient 3D Mesh Reconstruction and High-Quality Mesh Renderingcited by 616
- 2021Ref-NeRF: Structured View-Dependent Appearance for Neural Radiance Fieldscited by 575
- 2023Gaussian Splatting SLAMcited by 415
- 2018HiDDeN: Hiding Data With Deep Networkscited by 397
- 2023Splatter Image: Ultra-Fast Single-View 3D Reconstructioncited by 364
- 2021Neural RGB-D Surface Reconstructioncited by 313
- 2023The Stable Signature: Rooting Watermarks in Latent Diffusion Modelscited by 304
- 2023LucidDreamer: Towards High-Fidelity Text-to-3D Generation via Interval Score Matchingcited by 290
- 2023GS-SLAM: Dense Visual SLAM with 3D Gaussian Splattingcited by 278
- 2019StegaStamp: Invisible Hyperlinks in Physical Photographscited by 265
- 2023Triplane Meets Gaussian Splatting: Fast and Generalizable Single-View 3D Reconstruction with Transformerscited by 258
- 2023GaussianDreamer: Fast Generation from Text to 3D Gaussians by Bridging 2D and 3D Diffusion Modelscited by 255
- 2023SparseNeRF: Distilling Depth Ranking for Few-shot Novel View Synthesiscited by 247
- 2021Point-Based Neural Rendering with Per-View Optimizationcited by 190
- 2024SplattingAvatar: Realistic Real-Time Human Avatars with Mesh-Embedded Gaussian Splattingcited by 172
- 2023TensoIR: Tensorial Inverse Renderingcited by 168
- 2023Invisible Image Watermarks Are Provably Removable Using Generative AIcited by 134
- 2021Watermarking Images in Self-Supervised Latent Spacescited by 94
- 2020Distortion Agnostic Deep Watermarkingcited by 90
- 2023GAvatar: Animatable 3D Gaussian Avatars with Implicit Mesh Learningcited by 63
- 2022Towards Blind Watermarking: Combining Invertible and Non-invertible Mechanismscited by 61
- 2021DVMark: A Deep Multiscale Framework for Video Watermarkingcited by 46
- 2023CopyRNeRF: Protecting the CopyRight of Neural Radiance Fieldscited by 34
- 2023CuNeRF: Cube-Based Neural Radiance Field for Zero-Shot Medical Image Arbitrary-Scale Super Resolutioncited by 28
- 2024WateRF: Robust Watermarks in Radiance Fields for Protection of Copyrightscited by 26
- 2024GS-Hider: Hiding Messages into 3D Gaussian Splattingcited by 26
- 2014StegExpose - A Tool for Detecting LSB Steganographycited by 25
- 2021Deep 3D-to-2D Watermarking: Embedding Messages in 3D Meshes and Extracting Them from 2D Renderingscited by 23
50 most cited of 56 All 56 (JSON)
Built on by
Citing papers per year: 2025: 4; 2026: 14.
18 papers.
Sort:
By area:
- 2025AdLift: Lifting Adversarial Perturbations to Safeguard 3D Gaussian Splatting Assets Against Instruction-Driven Editingcited by 10
- 2025SegmentDreamer: Towards High-fidelity Text-to-3D Synthesis with Segmented Consistency Trajectory Distillationcited by 5
- 2026Intellectual Property Protection for 3D Gaussian Splatting Assets: A Surveycited by 2
- 2025X-SG2S: Safe and Generalizable Gaussian Splatting with X-dimensional Watermarkscited by 1
- 2025RDSplat: Robust Watermarking for 3D Gaussian Splatting Against 2D and 3D Diffusion Editingcited by 1
- 2026Fake3DGS: A Benchmark for 3D Manipulation Detection in Neural Renderingcited by 1
- 2026Rotation-Invariant Spherical Watermarking via Third-Order SO(3) Representation Couplingcited by 1
- 2026Position: 3D Gaussian Splatting Watermarking Should Be Scenario-Driven and Threat-Model Explicitcited by 0
- 2026StegoNGP: 3D Cryptographic Steganography using Instant-NGPcited by 0
- 2026PatchPoison: Poisoning Multi-View Datasets to Degrade 3D Reconstructioncited by 0
- 2026Splats in Splats++: Robust and Generalizable 3D Gaussian Splatting Steganographycited by 0
- 2026GuardMarkGS: Unified Ownership Tracing and Edit Deterrence for 3D Gaussian Splattingcited by 0
6 more
- 20264D-GSW: Kinematic-Aware Spatio-Temporal Consistent Watermarking for 4D Gaussian Splattingcited by 0
- 2026Characterizing Detectability in 3DGS Poisoning: A Stage-wise Benchmarkcited by 0
- 2026IBRSteG: Learning a Generalizable Steganography Framework for 3D Gaussian Splattingcited by 0
- 2026EvTrajGS: Accurate and Efficient 3D Gaussian Splatting from Unposed Event Streamscited by 0
- 2026NGS-Marker: Robust Native Watermarking for 3D Gaussian Splattingcited by 0
- 2026MoSign: Challenge-Response Motion-Watermark Authentication for Anonymous Virtual-Reality Userscited by 0
- 2026MoSign: Challenge-Response Motion-Watermark Authentication for Anonymous Virtual-Reality Users30 Aug 2026
- 2026NGS-Marker: Robust Native Watermarking for 3D Gaussian Splatting18 Aug 2026
- 2026EvTrajGS: Accurate and Efficient 3D Gaussian Splatting from Unposed Event Streams9 Aug 2026
- 2026IBRSteG: Learning a Generalizable Steganography Framework for 3D Gaussian Splatting29 Jun 2026
- 2026Characterizing Detectability in 3DGS Poisoning: A Stage-wise Benchmark2 Jun 2026
- 2026Rotation-Invariant Spherical Watermarking via Third-Order SO(3) Representation Coupling26 May 2026
- 20264D-GSW: Kinematic-Aware Spatio-Temporal Consistent Watermarking for 4D Gaussian Splatting21 May 2026
- 2026GuardMarkGS: Unified Ownership Tracing and Edit Deterrence for 3D Gaussian Splatting13 May 2026
- 2026Fake3DGS: A Benchmark for 3D Manipulation Detection in Neural Rendering30 Apr 2026
- 2026Splats in Splats++: Robust and Generalizable 3D Gaussian Splatting Steganography17 Apr 2026
- 2026PatchPoison: Poisoning Multi-View Datasets to Degrade 3D Reconstruction14 Apr 2026
- 2026StegoNGP: 3D Cryptographic Steganography using Instant-NGP1 Mar 2026
6 more
- 2026Intellectual Property Protection for 3D Gaussian Splatting Assets: A Survey2 Feb 2026
- 2026Position: 3D Gaussian Splatting Watermarking Should Be Scenario-Driven and Threat-Model Explicit1 Feb 2026
- 2025AdLift: Lifting Adversarial Perturbations to Safeguard 3D Gaussian Splatting Assets Against Instruction-Driven Editing8 Dec 2025
- 2025RDSplat: Robust Watermarking for 3D Gaussian Splatting Against 2D and 3D Diffusion Editing7 Dec 2025
- 2025SegmentDreamer: Towards High-fidelity Text-to-3D Synthesis with Segmented Consistency Trajectory Distillation7 Jul 2025
- 2025X-SG2S: Safe and Generalizable Gaussian Splatting with X-dimensional Watermarks13 Feb 2025
- 2025AdLift: Lifting Adversarial Perturbations to Safeguard 3D Gaussian Splatting Assets Against Instruction-Driven Editingcited by 10
- 2025SegmentDreamer: Towards High-fidelity Text-to-3D Synthesis with Segmented Consistency Trajectory Distillationcited by 5
- 2026Intellectual Property Protection for 3D Gaussian Splatting Assets: A Surveycited by 2
- 2025X-SG2S: Safe and Generalizable Gaussian Splatting with X-dimensional Watermarkscited by 1
- 2025RDSplat: Robust Watermarking for 3D Gaussian Splatting Against 2D and 3D Diffusion Editingcited by 1
- 2026Fake3DGS: A Benchmark for 3D Manipulation Detection in Neural Renderingcited by 1
- 2026Rotation-Invariant Spherical Watermarking via Third-Order SO(3) Representation Couplingcited by 1
- 2026StegoNGP: 3D Cryptographic Steganography using Instant-NGPcited by 0
- 2026PatchPoison: Poisoning Multi-View Datasets to Degrade 3D Reconstructioncited by 0
- 2026Splats in Splats++: Robust and Generalizable 3D Gaussian Splatting Steganographycited by 0
- 20264D-GSW: Kinematic-Aware Spatio-Temporal Consistent Watermarking for 4D Gaussian Splattingcited by 0
- 2026IBRSteG: Learning a Generalizable Steganography Framework for 3D Gaussian Splattingcited by 0
12 most cited of 15 All 15 (JSON)
- 2026MoSign: Challenge-Response Motion-Watermark Authentication for Anonymous Virtual-Reality Users30 Aug 2026
- 2026NGS-Marker: Robust Native Watermarking for 3D Gaussian Splatting18 Aug 2026
- 2026EvTrajGS: Accurate and Efficient 3D Gaussian Splatting from Unposed Event Streams9 Aug 2026
- 2026IBRSteG: Learning a Generalizable Steganography Framework for 3D Gaussian Splatting29 Jun 2026
- 2026Rotation-Invariant Spherical Watermarking via Third-Order SO(3) Representation Coupling26 May 2026
- 20264D-GSW: Kinematic-Aware Spatio-Temporal Consistent Watermarking for 4D Gaussian Splatting21 May 2026
- 2026Fake3DGS: A Benchmark for 3D Manipulation Detection in Neural Rendering30 Apr 2026
- 2026Splats in Splats++: Robust and Generalizable 3D Gaussian Splatting Steganography17 Apr 2026
- 2026PatchPoison: Poisoning Multi-View Datasets to Degrade 3D Reconstruction14 Apr 2026
- 2026StegoNGP: 3D Cryptographic Steganography using Instant-NGP1 Mar 2026
- 2026Intellectual Property Protection for 3D Gaussian Splatting Assets: A Survey2 Feb 2026
- 2025AdLift: Lifting Adversarial Perturbations to Safeguard 3D Gaussian Splatting Assets Against Instruction-Driven Editing8 Dec 2025
12 newest of 15 All 15 (JSON)
Similar, not cited
Close in wording, no citation either way
- 2025MarkSplatter: Generalizable Watermarking for 3D Gaussian Splatting Model via Splatter Image Structure
- 2024WATER-GS: Toward Copyright Protection for 3D Gaussian Splatting via Universal Watermarking
- 2025GS-Marker: Generalizable and Robust Watermarking for 3D Gaussian Splatting
- 2025Can Protective Watermarking Safeguard the Copyright of 3D Gaussian Splatting?
- 2025CompMarkGS: Robust Watermarking for Compressed 3D Gaussian Splatting
- 2026BitC-3DGS: High-Capacity 3D Gaussian Splatting Watermarking via Bit Compression
- 20243D-GSW: 3D Gaussian Splatting for Robust Watermarking
- 2025GaussianSeal: Rooting Adaptive Watermarks for 3D Gaussian Generation Model