mlsanityData to 14 Oct 2026

ImageSentinel: Protecting Visual Datasets from Unauthorized Retrieval-Augmented Image Generation

arXiv 2510.12119 ↗First posted 14 Oct 2025cs.CVcited by 4

On the map: LLM safety and security → Watermarking generated content and models

Abstract (arXiv)

The widespread adoption of Retrieval-Augmented Image Generation (RAIG) has raised significant concerns about the unauthorized use of private image datasets. While these systems have shown remarkable capabilities in enhancing generation quality through reference images, protecting visual datasets from unauthorized use in such systems remains a challenging problem. Traditional digital watermarking approaches face limitations in RAIG systems, as the complex feature extraction and recombination processes fail to preserve watermark signals during generation. To address these challenges, we propose ImageSentinel, a novel framework for protecting visual datasets in RAIG. Our framework synthesizes sentinel images that maintain visual consistency with the original dataset. These sentinels enable protection verification through randomly generated character sequences that serve as retrieval keys. To ensure seamless integration, we leverage vision-language models to generate the sentinel images. Experimental results demonstrate that ImageSentinel effectively detects unauthorized dataset usage while preserving generation quality for authorized applications. Code is available at https://github.com/luo-ziyuan/ImageSentinel.

Key facts. Cited by 4 papers in the map (data through 14 Oct 2026). Placed in Watermarking generated content and models, one of 12 directions in LLM safety and security. Builds on 43 of its 53 references that are in the map. First posted on arXiv 14 Oct 2025.

Builds on

43 of 53 references.

Closest ancestors · 8

Same direction, newest first

  1. 2025MarkSplatter: Generalizable Watermarking for 3D Gaussian Splatting Model via Splatter Image Structure31 Aug
  2. 2025Dataset Protection via Watermarked Canaries in Retrieval-Augmented LLMs15 Feb
  3. 2024AquaLoRA: Toward White-box Protection for Customized Stable Diffusion Models via Watermark LoRA18 May
  4. 2024Gaussian Shading: Provable Performance-Lossless Image Watermarking for Diffusion Models7 Apr
  5. 2024CPR: Retrieval Augmented Generation for Copyright Protection27 Mar
  6. 2024Watermarking Makes Language Models Radioactive22 Feb
  7. 2024Proving membership in LLM pretraining data via data watermarks16 Feb
  8. 2023The Stable Signature: Rooting Watermarks in Latent Diffusion Models27 Mar

Other references · 35

  1. 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
  2. 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,863
  3. 2020Retrieval-Augmented Generation for Knowledge-Intensive NLP Taskscited by 9,297
  4. 2023Visual Instruction Tuningcited by 7,869
  5. 2019Momentum Contrast for Unsupervised Visual Representation Learningcited by 7,513
  6. 2021Emerging Properties in Self-Supervised Vision Transformerscited by 6,968
  7. 2024GPT-4o System Cardcited by 4,588
  8. 2023SDXL: Improving Latent Diffusion Models for High-Resolution Image Synthesiscited by 4,356
  9. 2022BLIP: Bootstrapping Language-Image Pre-training for Unified Vision-Language Understanding and Generationcited by 4,322
  10. 2023Sigmoid Loss for Language Image Pre-Trainingcited by 3,109
  11. 2023Retrieval-Augmented Generation for Large Language Models: A Surveycited by 2,212
  12. 2023IP-Adapter: Text Compatible Image Prompt Adapter for Text-to-Image Diffusion Modelscited by 1,464
23 more
  1. 2023In-Context Retrieval-Augmented Language Modelscited by 702
  2. 2024AgentPoison: Red-teaming LLM Agents via Poisoning Memory or Knowledge Basescited by 429
  3. 2018HiDDeN: Hiding Data With Deep Networkscited by 397
  4. 2024OmniGen: Unified Image Generationcited by 394
  5. 2023ReMoDiffuse: Retrieval-Augmented Motion Diffusion Modelcited by 287
  6. 2024PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Modelscited by 267
  7. 2022Re-Imagen: Retrieval-Augmented Text-to-Image Generatorcited by 210
  8. 2022KNN-Diffusion: Image Generation via Large-Scale Retrievalcited by 137
  9. 2023EditGuard: Versatile Image Watermarking for Tamper Localization and Copyright Protectioncited by 111
  10. 2021MBRS : Enhancing Robustness of DNN-based Watermarking by Mini-Batch of Real and Simulated JPEG Compressioncited by 110
  11. 2024TrojanRAG: Retrieval-Augmented Generation Can Be Backdoor Driver in Large Language Modelscited by 67
  12. 2024Instruct-Imagen: Image Generation with Multi-modal Instructioncited by 65
  13. 2022Towards Blind Watermarking: Combining Invertible and Non-invertible Mechanismscited by 61
  14. 2024Is My Data in Your Retrieval Database? Membership Inference Attacks Against Retrieval Augmented Generationcited by 44
  15. 2020Products-10K: A Large-scale Product Recognition Datasetcited by 42
  16. 2023CopyRNeRF: Protecting the CopyRight of Neural Radiance Fieldscited by 34
  17. 2024FairRAG: Fair Human Generation via Fair Retrieval Augmentationcited by 34
  18. 2024Mask-based Membership Inference Attacks for Retrieval-Augmented Generationcited by 29
  19. 2024Generating Is Believing: Membership Inference Attacks against Retrieval-Augmented Generationcited by 25
  20. 2025ImageRAG: Dynamic Image Retrieval for Reference-Guided Image Generationcited by 21
  21. 2024Ward: Provable RAG Dataset Inference via LLM Watermarkscited by 16
  22. 2025Towards AI-driven Sign Language Generation with Non-manual Markerscited by 13
  23. 2025The NeRF Signature: Codebook-Aided Watermarking for Neural Radiance Fieldscited by 10

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 3; 2026: 1.

4 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2024EnTruth: Enhancing the Traceability of Unauthorized Dataset Usage in Text-to-image Diffusion Models with Minimal and Robust Alterations
  2. 2024Exploiting Watermark-Based Defense Mechanisms in Text-to-Image Diffusion Models for Unauthorized Data Usage
  3. 2025MetaSeal: Defending Against Image Attribution Forgery Through Content-Dependent Cryptographic Watermarks
  4. 2024Detecting Dataset Abuse in Fine-Tuning Stable Diffusion Models for Text-to-Image Synthesis
  5. 2025Safeguarding Multimodal Knowledge Copyright in the RAG-as-a-Service Environment
  6. 2025A Watermark for Auto-Regressive Image Generation Models
  7. 2024CopyrightMeter: Revisiting Copyright Protection in Text-to-image Models
  8. 2025Secure and Robust Watermarking for AI-generated Images: A Comprehensive Survey