mlsanityData to 14 Oct 2026

TraceMark-LDM: Authenticatable Watermarking for Latent Diffusion Models via Binary-Guided Rearrangement

arXiv 2503.23332 ↗First posted 30 Mar 2025cs.CVcited by 1

On the map: Diffusion models → Robustness, privacy and adversarial aspects

also in 1 more
Abstract (arXiv)

Image generation algorithms are increasingly integral to diverse aspects of human society, driven by their practical applications. However, insufficient oversight in artificial Intelligence generated content (AIGC) can facilitate the spread of malicious content and increase the risk of copyright infringement. Among the diverse range of image generation models, the Latent Diffusion Model (LDM) is currently the most widely used, dominating the majority of the Text-to-Image model market. Currently, most attribution methods for LDMs rely on directly embedding watermarks into the generated images or their intermediate noise, a practice that compromises both the quality and the robustness of the generated content. To address these limitations, we introduce TraceMark-LDM, an novel algorithm that integrates watermarking to attribute generated images while guaranteeing non-destructive performance. Unlike current methods, TraceMark-LDM leverages watermarks as guidance to rearrange random variables sampled from a Gaussian distribution. To mitigate potential deviations caused by inversion errors, the small absolute elements are grouped and rearranged. Additionally, we fine-tune the LDM encoder to enhance the robustness of the watermark. Experimental results show that images synthesized using TraceMark-LDM exhibit superior quality and attribution accuracy compared to state-of-the-art (SOTA) techniques. Notably, TraceMark-LDM demonstrates exceptional robustness against various common attack methods, consistently outperforming SOTA methods.

Key facts. Cited by 1 paper in the map (data through 14 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 7 of its 52 references that are in the map. First posted on arXiv 30 Mar 2025.

Builds on

7 of 52 references.

Closest ancestors · 2

Same direction, newest first

  1. 2024AquaLoRA: Toward White-box Protection for Customized Stable Diffusion Models via Watermark LoRA18 May
  2. 2023DiffusionShield: A Watermark for Copyright Protection against Generative Diffusion Models25 May

Other references · 5

  1. 2013Auto-Encoding Variational Bayescited by 4,053
  2. 2018HiDDeN: Hiding Data With Deep Networkscited by 397
  3. 2019Robust Invisible Video Watermarking with Attentioncited by 149
  4. 2023Invisible Image Watermarks Are Provably Removable Using Generative AIcited by 134
  5. 2024Detecting Multimedia Generated by Large AI Models: A Surveycited by 76

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2026: 1.

1 paper.

Similar, not cited

Close in wording, no citation either way

  1. 2025SWA-LDM: Toward Stealthy Watermarks for Latent Diffusion Models
  2. 2024DiffuseTrace: A Transparent and Flexible Watermarking Scheme for Latent Diffusion Model
  3. 2023The Stable Signature: Rooting Watermarks in Latent Diffusion Models
  4. 2024SAT-LDM: Provably Generalizable Image Watermarking for Latent Diffusion Models with Self-Augmented Training
  5. 2024MarkPlugger: Generalizable Watermark Framework for Latent Diffusion Models without Retraining
  6. 2025MarkDiffusion: An Open-Source Toolkit for Generative Watermarking of Latent Diffusion Models
  7. 2023A Recipe for Watermarking Diffusion Models
  8. 2025Image Watermarking of Generative Diffusion Models