PT-Mark: Invisible Watermarking for Text-to-image Diffusion Models via Semantic-aware Pivotal Tuning
On the map: Diffusion models → Robustness, privacy and adversarial aspects
also in 1 more
Abstract (arXiv)
Watermarking for diffusion images has drawn considerable attention due to the widespread use of text-to-image diffusion models and the increasing need for their copyright protection. Recently, advanced watermarking techniques, such as Tree Ring, integrate watermarks by embedding traceable patterns (e.g., Rings) into the latent distribution during the diffusion process. Such methods disrupt the original semantics of the generated images due to the inevitable distribution shift caused by the watermarks, thereby limiting their practicality, particularly in digital art creation. In this work, we present Semantic-aware Pivotal Tuning Watermarks (PT-Mark), a novel invisible watermarking method that preserves both the semantics of diffusion images and the traceability of the watermark. PT-Mark preserves the original semantics of the watermarked image by gradually aligning the generation trajectory with the original (pivotal) trajectory while maintaining the traceable watermarks during whole diffusion denoising process. To achieve this, we first compute the salient regions of the watermark at each diffusion denoising step as a spatial prior to identify areas that can be aligned without disrupting the watermark pattern. Guided by the region, we then introduce an additional pivotal tuning branch that optimizes the text embedding to align the semantics while preserving the watermarks. Extensive evaluations demonstrate that PT-Mark can preserve the original semantics of the diffusion images while integrating robust watermarks. It achieves a 10% improvement in the performance of semantic preservation (i.e., SSIM, PSNR, and LPIPS) compared to state-of-the-art watermarking methods, while also showing comparable robustness against real-world perturbations and four times greater efficiency.
Key facts. Cited by 2 papers in the map (data through 14 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 48 of its 65 references that are in the map. First posted on arXiv 15 Apr 2025.
Builds on
48 of 65 references.
Closest ancestors · 9
Same direction, newest first
- 2024TraSCE: Trajectory Steering for Concept Erasure10 Dec
- 2024SleeperMark: Towards Robust Watermark against Fine-Tuning Text-to-image Diffusion Models6 Dec
- 2024ROBIN: Robust and Invisible Watermarks for Diffusion Models with Adversarial Optimization6 Nov
- 2024AquaLoRA: Toward White-box Protection for Customized Stable Diffusion Models via Watermark LoRA18 May
- 2024DiffuseTrace: A Transparent and Flexible Watermarking Scheme for Latent Diffusion Model4 May
- 2024Attack-Resilient Image Watermarking Using Stable Diffusion8 Jan
- 2023Tree-Ring Watermarks: Fingerprints for Diffusion Images that are Invisible and Robust31 May
- 2023The Stable Signature: Rooting Watermarks in Latent Diffusion Models27 Mar
- 2023A Recipe for Watermarking Diffusion Models17 Mar
Other references · 39
- 2020Denoising Diffusion Probabilistic Modelscited by 21,076
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,863
- 2014Microsoft COCO: Common Objects in Contextcited by 17,608
- 2018The Unreasonable Effectiveness of Deep Features as a Perceptual Metriccited by 11,177
- 2020Denoising Diffusion Implicit Modelscited by 9,781
- 2023Segment Anythingcited by 8,234
- 2022Hierarchical Text-Conditional Image Generation with CLIP Latentscited by 6,585
- 2022Photorealistic Text-to-Image Diffusion Models with Deep Language Understandingcited by 6,355
- 2022Classifier-Free Diffusion Guidancecited by 5,847
- 2023Adding Conditional Control to Text-to-Image Diffusion Modelscited by 5,503
- 2023SDXL: Improving Latent Diffusion Models for High-Resolution Image Synthesiscited by 4,356
- 2021GLIDE: Towards Photorealistic Image Generation and Editing with Text-Guided Diffusion Modelscited by 3,614
27 more
- 2022InstructPix2Pix: Learning to Follow Image Editing Instructionscited by 2,611
- 2023Stable Video Diffusion: Scaling Latent Video Diffusion Models to Large Datasetscited by 2,581
- 2022Prompt-to-Prompt Image Editing with Cross Attention Controlcited by 2,431
- 2022Video Diffusion Modelscited by 2,305
- 2023Align your Latents: High-Resolution Video Synthesis with Latent Diffusion Modelscited by 1,476
- 2022Null-text Inversion for Editing Real Images using Guided Diffusion Modelscited by 1,179
- 2018Variational image compression with a scale hyperpriorcited by 935
- 2023Muse: Text-To-Image Generation via Masked Generative Transformerscited by 648
- 2022DiffEdit: Diffusion-based semantic image editing with mask guidancecited by 647
- 2020Learned Image Compression with Discretized Gaussian Mixture Likelihoods and Attention Modulescited by 590
- 2018HiDDeN: Hiding Data With Deep Networkscited by 397
- 2022DiffusionDB: A Large-scale Prompt Gallery Dataset for Text-to-Image Generative Modelscited by 379
- 2019StegaStamp: Invisible Hyperlinks in Physical Photographscited by 265
- 2023DiffIR: Efficient Diffusion Model for Image Restorationcited by 255
- 2022SpaText: Spatio-Textual Representation for Controllable Image Generationcited by 217
- 2023A Survey on Video Diffusion Modelscited by 206
- 2024Semantic Image Inversion and Editing using Rectified Stochastic Differential Equationscited by 165
- 2019Robust Invisible Video Watermarking with Attentioncited by 149
- 2024RingID: Rethinking Tree-Ring Watermarking for Enhanced Multi-Key Identificationcited by 91
- 2024Efficient Diffusion Model for Image Restoration by Residual Shiftingcited by 64
- 2023Lightning-Fast Image Inversion and Editing for Text-to-Image Diffusion Modelscited by 35
- 2022Draw Your Art Dream: Diverse Digital Art Synthesis with Multimodal Guided Diffusioncited by 30
- 2024Noise Map Guidance: Inversion with Spatial Context for Real Image Editingcited by 25
- 2024Diffusion-Based Visual Art Creation: A Survey and New Perspectivescited by 17
- 2024TiNO-Edit: Timestep and Noise Optimization for Robust Diffusion-Based Image Editingcited by 16
- 2024Generalized Consistency Trajectory Models for Image Manipulationcited by 11
- 2025Pathology-Aware Adaptive Watermarking for Text-Driven Medical Image Synthesiscited by 1
Built on by
Citing papers per year: 2026: 2.
2 papers.
Similar, not cited
Close in wording, no citation either way
- 2026Editing Away the Evidence: Diffusion-Based Image Manipulation and the Failure Modes of Robust Watermarking
- 2026IRIS: Visual-Semantic Binding for Forgery-Resistant Watermarking of Diffusion Images
- 2026When Denoising Becomes Unsigning: Theoretical and Empirical Analysis of Watermark Fragility Under Diffusion-Based Image Editing
- 2025MarkDiffusion: An Open-Source Toolkit for Generative Watermarking of Latent Diffusion Models
- 2025Diffusion-Based Image Editing: An Unforeseen Adversary to Robust Invisible Watermarks
- 2026Vanishing Watermarks: Diffusion-Based Image Editing Undermines Robust Invisible Watermarking
- 2024Black-Box Forgery Attacks on Semantic Watermarks for Diffusion Models
- 2025SWA-LDM: Toward Stealthy Watermarks for Latent Diffusion Models