TAG-WM: Tamper-Aware Generative Image Watermarking via Diffusion Inversion Sensitivity
On the map: LLM safety and security → Watermarking generated content and models
Abstract (arXiv)
AI-generated content (AIGC) enables efficient visual creation but raises copyright and authenticity risks. As a common technique for integrity verification and source tracing, digital image watermarking is regarded as a potential solution to above issues. However, the widespread adoption and advancing capabilities of generative image editing tools have amplified malicious tampering risks, while simultaneously posing new challenges to passive tampering detection and watermark robustness. To address these challenges, this paper proposes a Tamper-Aware Generative image WaterMarking method named TAG-WM. The proposed method comprises four key modules: a dual-mark joint sampling (DMJS) algorithm for embedding copyright and localization watermarks into the latent space while preserving generative quality, the watermark latent reconstruction (WLR) utilizing reversed DMJS, a dense variation region detector (DVRD) leveraging diffusion inversion sensitivity to identify tampered areas via statistical deviation analysis, and the tamper-aware decoding (TAD) guided by localization results. The experimental results demonstrate that TAG-WM achieves state-of-the-art performance in both tampering robustness and localization capability even under distortion, while preserving lossless generation quality and maintaining a watermark capacity of 256 bits. The code is available at: https://github.com/Suchenl/TAG-WM.
Key facts. Cited by 7 papers in the map (data through 14 Oct 2026). Placed in Watermarking generated content and models, one of 12 directions in LLM safety and security. Builds on 23 of its 39 references that are in the map. First posted on arXiv 30 Jun 2025.
Builds on
23 of 39 references.
Closest ancestors · 4
Same direction, newest first
- 2024Gaussian Shading: Provable Performance-Lossless Image Watermarking for Diffusion Models7 Apr
- 2023Tree-Ring Watermarks: Fingerprints for Diffusion Images that are Invisible and Robust31 May
- 2023SepMark: Deep Separable Watermarking for Unified Source Tracing and Deepfake Detection10 May
- 2023The Stable Signature: Rooting Watermarks in Latent Diffusion Models27 Mar
Other references · 19
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
- 2020Denoising Diffusion Probabilistic Modelscited by 21,076
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,863
- 2020Denoising Diffusion Implicit Modelscited by 9,781
- 2023Adding Conditional Control to Text-to-Image Diffusion Modelscited by 5,503
- 2023SDXL: Improving Latent Diffusion Models for High-Resolution Image Synthesiscited by 4,356
- 2022DPM-Solver: A Fast ODE Solver for Diffusion Probabilistic Model Sampling in Around 10 Stepscited by 1,979
- 2022Pseudo Numerical Methods for Diffusion Models on Manifoldscited by 700
- 2022Fast Sampling of Diffusion Models with Exponential Integratorcited by 532
- 2023UniPC: A Unified Predictor-Corrector Framework for Fast Sampling of Diffusion Modelscited by 450
- 2018HiDDeN: Hiding Data With Deep Networkscited by 397
- 2022MAT: Mask-Aware Transformer for Large Hole Image Inpaintingcited by 218
7 more
- 2019Robust Invisible Video Watermarking with Attentioncited by 149
- 2023Hierarchical Fine-Grained Image Forgery Detection and Localizationcited by 134
- 2021PSCC-Net: Progressive Spatio-Channel Correlation Network for Image Manipulation Detection and Localizationcited by 133
- 2021MVSS-Net: Multi-View Multi-Scale Supervised Networks for Image Manipulation Detectioncited by 117
- 2023EditGuard: Versatile Image Watermarking for Tamper Localization and Copyright Protectioncited by 111
- 2021MBRS : Enhancing Robustness of DNN-based Watermarking by Mini-Batch of Real and Simulated JPEG Compressioncited by 110
- 2023MaLP: Manipulation Localization Using a Proactive Schemecited by 26
Built on by
Citing papers per year: 2026: 7.
7 papers.
- 2026OSI: One-step Inversion Excels in Extracting Diffusion Watermarkscited by 2
- 2026Understanding Semantic Perturbations on In-Processing Generative Image Watermarkscited by 1
- 2026Rethinking Forgery Attacks on Semantic Watermarks in Black-Box Settings: A Geometric Distortion Perspectivecited by 1
- 2026RaMark: Radioactive Watermarking for Generated Tabular Datacited by 0
- 2026High-Capacity Robust Watermarking Technology for High-Resolution Imagescited by 0
- 2026SPFM-Net: Semantic-Prior-Guided Frequency-Constrained Mamba for Invisible Watermark Attackcited by 0
- 2026Residual Transferability in Neural Image Watermarkingcited by 0
- 2026Residual Transferability in Neural Image Watermarking26 Sep 2026
- 2026SPFM-Net: Semantic-Prior-Guided Frequency-Constrained Mamba for Invisible Watermark Attack30 Jul 2026
- 2026High-Capacity Robust Watermarking Technology for High-Resolution Images19 Jul 2026
- 2026RaMark: Radioactive Watermarking for Generated Tabular Data10 Jul 2026
- 2026Rethinking Forgery Attacks on Semantic Watermarks in Black-Box Settings: A Geometric Distortion Perspective29 Jun 2026
- 2026Understanding Semantic Perturbations on In-Processing Generative Image Watermarks29 Mar 2026
- 2026OSI: One-step Inversion Excels in Extracting Diffusion Watermarks10 Feb 2026
Similar, not cited
Close in wording, no citation either way
- 2025GenPTW: Latent Image Watermarking for Provenance Tracing and Tamper Localization
- 2026Dual-Guard: Dual-Channel Latent Watermarking for Provenance and Tamper Localization in Diffusion Images
- 2024WMAdapter: Adding WaterMark Control to Latent Diffusion Models
- 2025StableGuard: Towards Unified Copyright Protection and Tamper Localization in Latent Diffusion Models
- 2025SWA-LDM: Toward Stealthy Watermarks for Latent Diffusion Models
- 2025TraceMark-LDM: Authenticatable Watermarking for Latent Diffusion Models via Binary-Guided Rearrangement
- 2025WMCopier: Forging Invisible Image Watermarks on Arbitrary Images
- 2025Image Watermarking of Generative Diffusion Models