VideoMarkBench: Benchmarking Robustness of Video Watermarking
Not on the map. Why?
Abstract (arXiv)
The rapid development of video generative models has led to a surge in highly realistic synthetic videos, raising ethical concerns related to disinformation and copyright infringement. Recently, video watermarking has been proposed as a mitigation strategy by embedding invisible marks into AI-generated videos to enable subsequent detection. However, the robustness of existing video watermarking methods against both common and adversarial perturbations remains underexplored. In this work, we introduce VideoMarkBench, the first systematic benchmark designed to evaluate the robustness of video watermarks under watermark removal and watermark forgery attacks. Our study encompasses a unified dataset generated by three state-of-the-art video generative models, across three video styles, incorporating four watermarking methods and seven aggregation strategies used during detection. We comprehensively evaluate 12 types of perturbations under white-box, black-box, and no-box threat models. Our findings reveal significant vulnerabilities in current watermarking approaches and highlight the urgent need for more robust solutions. Our code is available at https://github.com/zhengyuan-jiang/VideoMarkBench.
Key facts. Cited by 5 papers in the map (data through 14 Oct 2026). Builds on 22 of its 30 references that are in the map. First posted on arXiv 27 May 2025.
Builds on
22 of 30 references.
References · 22
- 2021Diffusion Models Beat GANs on Image Synthesiscited by 8,255
- 2014Explaining and Harnessing Adversarial Examplescited by 7,364
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
- 2013Intriguing properties of neural networkscited by 5,155
- 2017The Kinetics Human Action Video Datasetcited by 1,909
- 2024HunyuanVideo: A Systematic Framework For Large Video Generative Modelscited by 1,660
- 2019Square Attack: a query-efficient black-box adversarial attack via random searchcited by 685
- 2022Diffusion Models for Adversarial Purificationcited by 476
- 2018HiDDeN: Hiding Data With Deep Networkscited by 397
- 2019StegaStamp: Invisible Hyperlinks in Physical Photographscited by 265
- 2023Tree-Ring Watermarks: Fingerprints for Diffusion Images that are Invisible and Robustcited by 187
- 2023Invisible Image Watermarks Are Provably Removable Using Generative AIcited by 134
10 more
- 2024WAVES: Benchmarking the Robustness of Image Watermarkscited by 97
- 2023Robustness of AI-Image Detectors: Fundamental Limits and Practical Attackscited by 81
- 2023Evading Watermark based Detection of AI-Generated Contentcited by 78
- 2023Leveraging Optimization for Adaptive Attacks on Image Watermarkscited by 52
- 2021Triangle Attack: A Query-efficient Decision-based Adversarial Attackcited by 48
- 2024Video Seal: Open and Efficient Video Watermarkingcited by 48
- 2025VideoShield: Regulating Diffusion-based Video Generation Models via Watermarkingcited by 34
- 2024A Transfer Attack to Image Watermarkscited by 27
- 2024Stable Signature is Unstable: Removing Image Watermark from Diffusion Modelscited by 20
- 2024Securing the Future of GenAI: Policy and Technologycited by 4
Built on by
Citing papers per year: 2025: 1; 2026: 4.
5 papers.
- 2025RobustSora: De-Watermarked Benchmark for Robust AI-Generated Video Detectioncited by 3
- 2026Who Gets Flagged? The Pluralistic Evaluation Gap in AI Content Watermarkingcited by 2
- 2026Unifying Watermarking via Dimension-Aware Mappingcited by 1
- 2026Asymmetric Phase Coding Video Watermarkingcited by 0
- 2026Rethinking Visual Provenance: Detection and Watermarking Across Direct Visual Generation and LLM-Driven Code Renderingcited by 0
- 2026Rethinking Visual Provenance: Detection and Watermarking Across Direct Visual Generation and LLM-Driven Code Rendering6 Oct 2026
- 2026Asymmetric Phase Coding Video Watermarking29 Aug 2026
- 2026Who Gets Flagged? The Pluralistic Evaluation Gap in AI Content Watermarking15 Apr 2026
- 2026Unifying Watermarking via Dimension-Aware Mapping3 Feb 2026
- 2025RobustSora: De-Watermarked Benchmark for Robust AI-Generated Video Detection11 Dec 2025
Similar, not cited
Close in wording, no citation either way
- 2024Robust Watermarking Using Generative Priors Against Image Editing: From Benchmarking to Advances
- 2026WARP: A Unified Benchmark for Invisible Image Watermarking -- Robustness and Protection Against Attacks
- 2024LVMark: Robust Watermark for Latent Video Diffusion Models
- 2025LoT-Pass: Long-term-robust Image Watermarking for Image to Video Generation
- 2025Pixel Seal: Adversarial-only training for invisible image and video watermarking
- 2025VideoMark: A Distortion-Free Robust Watermarking Framework for Video Diffusion Models
- 2026An Efficient and Effective Watermarking Scheme for the Protection of the Intellectual Property Rights of Video Generative Models
- 2025BitMark: Watermarking Bitwise Autoregressive Image Generative Models