Robust Image Self-Recovery against Tampering using Watermark Generation with Pixel Shuffling
On the map: LLM safety and security → Watermarking generated content and models
Abstract (arXiv)
The rapid growth of Artificial Intelligence-Generated Content (AIGC) raises concerns about the authenticity of digital media. In this context, image self-recovery, reconstructing original content from its manipulated version, offers a practical solution for understanding the attacker's intent and restoring trustworthy data. However, existing methods often fail to accurately recover tampered regions, falling short of the primary goal of self-recovery. To address this challenge, we propose ReImage, a neural watermarking-based self-recovery framework that embeds a shuffled version of the target image into itself as a watermark. We design a generator that produces watermarks optimized for neural watermarking and introduce an image enhancement module to refine the recovered image. We further analyze and resolve key limitations of shuffled watermarking, enabling its effective use in self-recovery. We demonstrate that ReImage achieves state-of-the-art performance across diverse tampering scenarios, consistently producing high-quality recovered images. The code and pretrained models will be released upon publication.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in Watermarking generated content and models, one of 12 directions in LLM safety and security. Builds on 22 of its 39 references that are in the map. First posted on arXiv 28 Nov 2025.
Builds on
22 of 39 references.
Closest ancestors · 1
Same direction, newest first
Other references · 21
- 2017Attention Is All You Needcited by 60,361
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,863
- 2014Microsoft COCO: Common Objects in Contextcited by 17,608
- 2018The Unreasonable Effectiveness of Deep Features as a Perceptual Metriccited by 11,177
- 2014ImageNet Large Scale Visual Recognition Challengecited by 8,498
- 2023Segment Anythingcited by 8,234
- 2016Densely Connected Convolutional Networkscited by 6,720
- 2023SDXL: Improving Latent Diffusion Models for High-Resolution Image Synthesiscited by 4,356
- 2023Stable Video Diffusion: Scaling Latent Video Diffusion Models to Large Datasetscited by 2,581
- 2016Density estimation using Real NVPcited by 2,042
- 2014NICE: Non-linear Independent Components Estimationcited by 1,058
- 2023Structure and Content-Guided Video Synthesis with Diffusion Modelscited by 590
9 more
- 2024Sora: A Review on Background, Technology, Limitations, and Opportunities of Large Vision Modelscited by 477
- 2023VideoFusion: Decomposed Diffusion Models for High-Quality Video Generationcited by 331
- 2022CelebV-HQ: A Large-Scale Video Facial Attributes Datasetcited by 250
- 2023EditGuard: Versatile Image Watermarking for Tamper Localization and Copyright Protectioncited by 111
- 2024Watermark Anything with Localized Messagescited by 53
- 2024OmniGuard: Hybrid Manipulation Localization via Augmented Versatile Deep Image Watermarkingcited by 35
- 2018CNN Based Adversarial Embedding with Minimum Alteration for Image Steganographycited by 22
- 2022Learning to Immunize Images for Tamper Localization and Self-Recoverycited by 19
- 2025CATANet: Efficient Content-Aware Token Aggregation for Lightweight Image Super-Resolutioncited by 16
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2026Vanishing Watermarks: Diffusion-Based Image Editing Undermines Robust Invisible Watermarking
- 2025Diffusion-Based Image Editing for Breaking Robust Watermarks
- 2025Diffusion-Based Image Editing: An Unforeseen Adversary to Robust Invisible Watermarks
- 2023Invisible Image Watermarks Are Provably Removable Using Generative AI
- 2025On the Information-Theoretic Fragility of Robust Watermarking under Diffusion Editing
- 2026RecoverMark: Robust Watermarking for Localization and Recovery of Manipulated Faces
- 2024InvisMark: Invisible and Robust Watermarking for AI-generated Image Provenance
- 2026Editing Away the Evidence: Diffusion-Based Image Manipulation and the Failure Modes of Robust Watermarking