mlsanityData to 14 Oct 2026

IConMark: Robust Interpretable Concept-Based Watermark For AI Images

arXiv 2507.13407 ↗First posted 17 Jul 2025cs.CV cs.AI cs.CRcited by 3

On the map: LLM safety and security → Watermarking generated content and models

Abstract (arXiv)

With the rapid rise of generative AI and synthetic media, distinguishing AI-generated images from real ones has become crucial in safeguarding against misinformation and ensuring digital authenticity. Traditional watermarking techniques have shown vulnerabilities to adversarial attacks, undermining their effectiveness in the presence of attackers. We propose IConMark, a novel in-generation robust semantic watermarking method that embeds interpretable concepts into AI-generated images, as a first step toward interpretable watermarking. Unlike traditional methods, which rely on adding noise or perturbations to AI-generated images, IConMark incorporates meaningful semantic attributes, making it interpretable to humans and hence, resilient to adversarial manipulation. This method is not only robust against various image augmentations but also human-readable, enabling manual verification of watermarks. We demonstrate a detailed evaluation of IConMark's effectiveness, demonstrating its superiority in terms of detection accuracy and maintaining image quality. Moreover, IConMark can be combined with existing watermarking techniques to further enhance and complement its robustness. We introduce IConMark+SS and IConMark+TM, hybrid approaches combining IConMark with StegaStamp and TrustMark, respectively, to further bolster robustness against multiple types of image manipulations. Our base watermarking technique (IConMark) and its variants (+TM and +SS) achieve 10.8%, 14.5%, and 15.9% higher mean area under the receiver operating characteristic curve (AUROC) scores for watermark detection, respectively, compared to the best baseline on various datasets.

Key facts. Cited by 3 papers in the map (data through 14 Oct 2026). Placed in Watermarking generated content and models, one of 12 directions in LLM safety and security. Builds on 18 of its 26 references that are in the map. First posted on arXiv 17 Jul 2025.

Builds on

18 of 26 references.

Closest ancestors · 5

Same direction, newest first

  1. 2024An Undetectable Watermark for Generative Image Models9 Oct
  2. 2023Robustness of AI-Image Detectors: Fundamental Limits and Practical Attacks29 Sep
  3. 2023Tree-Ring Watermarks: Fingerprints for Diffusion Images that are Invisible and Robust31 May
  4. 2023The Stable Signature: Rooting Watermarks in Latent Diffusion Models27 Mar
  5. 2023Can AI-Generated Text be Reliably Detected?17 Mar

Other references · 13

  1. 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
  2. 2014Microsoft COCO: Common Objects in Contextcited by 17,608
  3. 2024The Llama 3 Herd of Modelscited by 14,715
  4. 2021CLIPScore: A Reference-free Evaluation Metric for Image Captioningcited by 2,424
  5. 2023ImageReward: Learning and Evaluating Human Preferences for Text-to-Image Generationcited by 1,045
  6. 2019StegaStamp: Invisible Hyperlinks in Physical Photographscited by 265
  7. 2024Building and better understanding vision-language models: insights and future directionscited by 173
  8. 2024WAVES: Benchmarking the Robustness of Image Watermarkscited by 97
  9. 2024Watermark Anything with Localized Messagescited by 53
  10. 2023TrustMark: Universal Watermarking for Arbitrary Resolution Imagescited by 51
  11. 2024Consistency-diversity-realism Pareto fronts of conditional image generative modelscited by 36
  12. 2024Securing the Future of GenAI: Policy and Technologycited by 4
1 more
  1. 2024DREW : Towards Robust Data Provenance by Leveraging Error-Controlled Watermarkingcited by 2

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 2; 2026: 1.

3 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2025Secure and Robust Watermarking for AI-generated Images: A Comprehensive Survey
  2. 2023Evading Watermark based Detection of AI-Generated Content
  3. 2024SoK: Watermarking for AI-Generated Content
  4. 2025SEAL: Semantic Aware Image Watermarking
  5. 2026FeatMark: Feature-level Watermark Protection against Mimicry Attacks with Diffusion Models
  6. 2025Watermarking across Modalities for Content Tracing and Generative AI
  7. 2025Watermarking for AI Content Detection: A Review on Text, Visual, and Audio Modalities
  8. 2026TokenTrace: Multi-Concept Attribution through Watermarked Token Recovery