mlsanityData to 14 Oct 2026

Provenance Detection for AI-Generated Images: Combining Perceptual Hashing, Homomorphic Encryption, and AI Detection Models

arXiv 2503.11195 ↗First posted 14 Mar 2025cs.CVcited by 1

On the map: LLM safety and security → Watermarking generated content and models

Abstract (arXiv)

As AI-generated sensitive images become more prevalent, identifying their source is crucial for distinguishing them from real images. Conventional image watermarking methods are vulnerable to common transformations like filters, lossy compression, and screenshots, often applied during social media sharing. Watermarks can also be faked or removed if models are open-sourced or leaked since images can be rewatermarked. We have developed a three-part framework for secure, transformation-resilient AI content provenance detection, to address these limitations. We develop an adversarially robust state-of-the-art perceptual hashing model, DinoHash, derived from DINOV2, which is robust to common transformations like filters, compression, and crops. Additionally, we integrate a Multi-Party Fully Homomorphic Encryption~(MP-FHE) scheme into our proposed framework to ensure the protection of both user queries and registry privacy. Furthermore, we improve previous work on AI-generated media detection. This approach is useful in cases where the content is absent from our registry. DinoHash significantly improves average bit accuracy by 12% over state-of-the-art watermarking and perceptual hashing methods while maintaining superior true positive rate (TPR) and false positive rate (FPR) tradeoffs across various transformations. Our AI-generated media detection results show a 25% improvement in classification accuracy on commonly used real-world AI image generators over existing algorithms. By combining perceptual hashing, MP-FHE, and an AI content detection model, our proposed framework provides better robustness and privacy compared to previous work.

Key facts. Cited by 1 paper in the map (data through 14 Oct 2026). Placed in Watermarking generated content and models, one of 12 directions in LLM safety and security. Builds on 43 of its 84 references that are in the map. First posted on arXiv 14 Mar 2025.

Builds on

43 of 84 references.

References · 43

  1. 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
  2. 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 30,186
  3. 2014Microsoft COCO: Common Objects in Contextcited by 17,608
  4. 2023DINOv2: Learning Robust Visual Features without Supervisioncited by 7,974
  5. 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
  6. 2023SDXL: Improving Latent Diffusion Models for High-Resolution Image Synthesiscited by 4,356
  7. 2022BLIP: Bootstrapping Language-Image Pre-training for Unified Vision-Language Understanding and Generationcited by 4,322
  8. 2023Sigmoid Loss for Language Image Pre-Trainingcited by 3,109
  9. 2020Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attackscited by 1,451
  10. 2019Certified Adversarial Robustness via Randomized Smoothingcited by 1,340
  11. 2018Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examplescited by 1,268
  12. 2019CNN-generated images are surprisingly easy to spot... for nowcited by 847
31 more
  1. 2015Distillation as a Defense to Adversarial Perturbations against Deep Neural Networkscited by 678
  2. 2020Leveraging Frequency Analysis for Deep Fake Image Recognitioncited by 504
  3. 2023Towards Universal Fake Image Detectors that Generalize Across Generative Modelscited by 490
  4. 2017Feature Squeezing: Detecting Adversarial Examples in Deep Neural Networkscited by 486
  5. 2018HiDDeN: Hiding Data With Deep Networkscited by 397
  6. 2018Defense-GAN: Protecting Classifiers Against Adversarial Attacks Using Generative Modelscited by 362
  7. 2022On the detection of synthetic images generated by diffusion modelscited by 283
  8. 2020Watch your Up-Convolution: CNN Based Generative Deep Neural Networks are Failing to Reproduce Spectral Distributionscited by 280
  9. 2020What makes fake images detectable? Understanding properties that generalizecited by 273
  10. 2023Data Filtering Networkscited by 250
  11. 2023Raising the Bar of AI-generated Image Detection with CLIPcited by 164
  12. 2019Fourier Spectrum Discrepancies in Deep Network Generated Imagescited by 139
  13. 2021Are GAN generated images easy to detect? A critical analysis of the state-of-the-artcited by 139
  14. 2024Robust CLIP: Unsupervised Adversarial Fine-Tuning of Vision Embeddings for Robust Large Vision-Language Modelscited by 120
  15. 2018ForensicTransfer: Weakly-supervised Domain Adaptation for Forgery Detectioncited by 104
  16. 2024WAVES: Benchmarking the Robustness of Image Watermarkscited by 97
  17. 2023Getting ViT in Shape: Scaling Laws for Compute-Optimal Model Designcited by 89
  18. 2024LAA-Net: Localized Artifact Attention Network for Quality-Agnostic and Generalizable Deepfake Detectioncited by 89
  19. 2019Incremental learning for the detection and classification of GAN-generated imagescited by 58
  20. 2022Detecting GAN-generated Images by Orthogonal Training of Multiple CNNscited by 46
  21. 2024A Single Simple Patch is All You Need for AI-generated Image Detectioncited by 44
  22. 2021A Survey on Locality Sensitive Hashing Algorithms and their Applicationscited by 40
  23. 2022DISCO: Adversarial Defense with Local Implicit Functionscited by 34
  24. 2023Parents and Children: Distinguishing Multimodal DeepFakes from Natural Imagescited by 29
  25. 2020T-GD: Transferable GAN-generated Images Detection Frameworkcited by 28
  26. 2021Learning to Break Deep Perceptual Hashing: The Use Case NeuralHashcited by 25
  27. 2015Deep Semantic Ranking Based Hashing for Multi-Label Image Retrievalcited by 24
  28. 2024DET-LSH: A Locality-Sensitive Hashing Scheme with Dynamic Encoding Tree for Approximate Nearest Neighbor Searchcited by 6
  29. 2016SSDH: Semi-supervised Deep Hashing for Large Scale Image Retrievalcited by 4
  30. 2024Large-Scale MPC: Scaling Private Iris Code Uniqueness Checks to Millions of Userscited by 4
  31. 2023Janus: Safe Biometric Deduplication for Humanitarian Aid Distributioncited by 2

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2026: 1.

1 paper.

Similar, not cited

Close in wording, no citation either way

  1. 2024InvisMark: Invisible and Robust Watermarking for AI-generated Image Provenance
  2. 2025Secure and Robust Watermarking for AI-generated Images: A Comprehensive Survey
  3. 2026Media Integrity and Authentication: Status, Directions, and Futures
  4. 2025Provenance of AI-Generated Images: A Vector Similarity and Blockchain-based Approach
  5. 2026Data Provenance for Image Auto-Regressive Generation
  6. 2023Evading Watermark based Detection of AI-Generated Content
  7. 2023Robustness of AI-Image Detectors: Fundamental Limits and Practical Attacks
  8. 2024Protect-Your-IP: Scalable Source-Tracing and Attribution against Personalized Generation