MarkSplatter: Generalizable Watermarking for 3D Gaussian Splatting Model via Splatter Image Structure
On the map: LLM safety and security → Watermarking generated content and models
Abstract (arXiv)
The growing popularity of 3D Gaussian Splatting (3DGS) has intensified the need for effective copyright protection. Current 3DGS watermarking methods rely on computationally expensive fine-tuning procedures for each predefined message. We propose the first generalizable watermarking framework that enables efficient protection of Splatter Image-based 3DGS models through a single forward pass. We introduce GaussianBridge that transforms unstructured 3D Gaussians into Splatter Image format, enabling direct neural processing for arbitrary message embedding. To ensure imperceptibility, we design a Gaussian-Uncertainty-Perceptual heatmap prediction strategy for preserving visual quality. For robust message recovery, we develop a dense segmentation-based extraction mechanism that maintains reliable extraction even when watermarked objects occupy minimal regions in rendered views. Project page: https://kevinhuangxf.github.io/marksplatter.
Key facts. Cited by 10 papers in the map (data through 14 Oct 2026). Placed in Watermarking generated content and models, one of 12 directions in LLM safety and security. Builds on 34 of its 63 references that are in the map. First posted on arXiv 31 Aug 2025.
Builds on
34 of 63 references.
References · 34
- 2017Attention Is All You Needcited by 60,361
- 2015Deep Residual Learning for Image Recognitioncited by 52,096
- 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 30,186
- 2018The Unreasonable Effectiveness of Deep Features as a Perceptual Metriccited by 11,177
- 20233D Gaussian Splatting for Real-Time Radiance Field Renderingcited by 6,226
- 2020pixelNeRF: Neural Radiance Fields from One or Few Imagescited by 1,584
- 2023LRM: Large Reconstruction Model for Single Image to 3Dcited by 849
- 2023DreamGaussian: Generative Gaussian Splatting for Efficient 3D Content Creationcited by 843
- 2024LGM: Large Multi-View Gaussian Model for High-Resolution 3D Content Creationcited by 739
- 2021Depth-supervised NeRF: Fewer Views and Faster Training for Freecited by 735
- 2021IBRNet: Learning Multi-View Image-Based Renderingcited by 703
- 2022Google Scanned Objects: A High-Quality Dataset of 3D Scanned Household Itemscited by 612
22 more
- 2022Latent-NeRF for Shape-Guided Generation of 3D Shapes and Texturescited by 506
- 2018HiDDeN: Hiding Data With Deep Networkscited by 397
- 2023Splatter Image: Ultra-Fast Single-View 3D Reconstructioncited by 364
- 2019StegaStamp: Invisible Hyperlinks in Physical Photographscited by 265
- 2023Triplane Meets Gaussian Splatting: Fast and Generalizable Single-View 3D Reconstruction with Transformerscited by 258
- 2023ImageDream: Image-Prompt Multi-view Diffusion for 3D Generationcited by 257
- 2022SPARF: Neural Radiance Fields from Sparse and Noisy Posescited by 195
- 2019Robust Invisible Video Watermarking with Attentioncited by 149
- 2021MBRS : Enhancing Robustness of DNN-based Watermarking by Mini-Batch of Real and Simulated JPEG Compressioncited by 110
- 2023Neural Point Catacaustics for Novel-View Synthesis of Reflectionscited by 82
- 2023FisherRF: Active View Selection and Uncertainty Quantification for Radiance Fields using Fisher Informationcited by 64
- 2022Towards Blind Watermarking: Combining Invertible and Non-invertible Mechanismscited by 61
- 2022Unifying Approaches in Active Learning and Active Sampling via Fisher Information and Information-Theoretic Quantitiescited by 28
- 2024WateRF: Robust Watermarks in Radiance Fields for Protection of Copyrightscited by 26
- 2021Deep 3D-to-2D Watermarking: Embedding Messages in 3D Meshes and Extracting Them from 2D Renderingscited by 23
- 2023Mimic3D: Thriving 3D-Aware GANs via 3D-to-2D Imitationcited by 18
- 2024Geometry Cloak: Preventing TGS-based 3D Reconstruction from Copyrighted Imagescited by 15
- 2023ColNeRF: Collaboration for Generalizable Sparse Input Neural Radiance Fieldcited by 11
- 2025Stereo-GS: Multi-View Stereo Vision Model for Generalizable 3D Gaussian Splatting Reconstructioncited by 8
- 2024Spy-Watermark: Robust Invisible Watermarking for Backdoor Attackcited by 7
- 2024Depth-Guided Robust and Fast Point Cloud Fusion NeRF for Sparse Input Viewscited by 6
- 2020Robust Data Hiding Using Inverse Gradient Attentioncited by 5
Built on by
Citing papers per year: 2025: 4; 2026: 6.
10 papers.
- 2025AdLift: Lifting Adversarial Perturbations to Safeguard 3D Gaussian Splatting Assets Against Instruction-Driven Editingcited by 10
- 2025ImageSentinel: Protecting Visual Datasets from Unauthorized Retrieval-Augmented Image Generationcited by 4
- 2025GS-Checker: Tampering Localization for 3D Gaussian Splattingcited by 3
- 2026Intellectual Property Protection for 3D Gaussian Splatting Assets: A Surveycited by 2
- 2025Creating Blank Canvas Against AI-enabled Image Forgerycited by 1
- 2026Fake3DGS: A Benchmark for 3D Manipulation Detection in Neural Renderingcited by 1
- 2026GaussTrace: Provenance Analysis of 3D Gaussian Splatting Models with Evidence-based LLM Reasoningcited by 1
- 2026Position: 3D Gaussian Splatting Watermarking Should Be Scenario-Driven and Threat-Model Explicitcited by 0
- 2026IBRSteG: Learning a Generalizable Steganography Framework for 3D Gaussian Splattingcited by 0
- 2026Geometry-Preserving Blind Watermarking for Raw 3D Point Cloudscited by 0
- 2026Geometry-Preserving Blind Watermarking for Raw 3D Point Clouds26 Sep 2026
- 2026IBRSteG: Learning a Generalizable Steganography Framework for 3D Gaussian Splatting29 Jun 2026
- 2026GaussTrace: Provenance Analysis of 3D Gaussian Splatting Models with Evidence-based LLM Reasoning9 Jun 2026
- 2026Fake3DGS: A Benchmark for 3D Manipulation Detection in Neural Rendering30 Apr 2026
- 2026Intellectual Property Protection for 3D Gaussian Splatting Assets: A Survey2 Feb 2026
- 2026Position: 3D Gaussian Splatting Watermarking Should Be Scenario-Driven and Threat-Model Explicit1 Feb 2026
- 2025AdLift: Lifting Adversarial Perturbations to Safeguard 3D Gaussian Splatting Assets Against Instruction-Driven Editing8 Dec 2025
- 2025Creating Blank Canvas Against AI-enabled Image Forgery27 Nov 2025
- 2025GS-Checker: Tampering Localization for 3D Gaussian Splatting25 Nov 2025
- 2025ImageSentinel: Protecting Visual Datasets from Unauthorized Retrieval-Augmented Image Generation14 Oct 2025
Similar, not cited
Close in wording, no citation either way
- 2025GS-Marker: Generalizable and Robust Watermarking for 3D Gaussian Splatting
- 2024GuardSplat: Efficient and Robust Watermarking for 3D Gaussian Splatting
- 2024GaussianMarker: Uncertainty-Aware Copyright Protection of 3D Gaussian Splatting
- 2025X-SG2S: Safe and Generalizable Gaussian Splatting with X-dimensional Watermarks
- 2026NGS-Marker: Robust Native Watermarking for 3D Gaussian Splatting
- 2024WATER-GS: Toward Copyright Protection for 3D Gaussian Splatting via Universal Watermarking
- 2025Can Protective Watermarking Safeguard the Copyright of 3D Gaussian Splatting?
- 20243D-GSW: 3D Gaussian Splatting for Robust Watermarking