Where is the Watermark? Interpretable Watermark Detection at the Block Level
Not on the map. Why?
Abstract (arXiv)
Recent advances in generative AI have enabled the creation of highly realistic digital content, raising concerns around authenticity, ownership, and misuse. While watermarking has become an increasingly important mechanism to trace and protect digital media, most existing image watermarking schemes operate as black boxes, producing global detection scores without offering any insight into how or where the watermark is present. This lack of transparency impacts user trust and makes it difficult to interpret the impact of tampering. In this paper, we present a post-hoc image watermarking method that combines localised embedding with region-level interpretability. Our approach embeds watermark signals in the discrete wavelet transform domain using a statistical block-wise strategy. This allows us to generate detection maps that reveal which regions of an image are likely watermarked or altered. We show that our method achieves strong robustness against common image transformations while remaining sensitive to semantic manipulations. At the same time, the watermark remains highly imperceptible. Compared to prior post-hoc methods, our approach offers more interpretable detection while retaining competitive robustness. For example, our watermarks are robust to cropping up to half the image.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 24 of its 48 references that are in the map. First posted on arXiv 17 Dec 2025.
Builds on
24 of 48 references.
References · 24
- 2020Denoising Diffusion Probabilistic Modelscited by 21,076
- 2014Microsoft COCO: Common Objects in Contextcited by 17,608
- 2021Zero-Shot Text-to-Image Generationcited by 4,288
- 2017Towards A Rigorous Science of Interpretable Machine Learningcited by 1,416
- 2018Variational image compression with a scale hyperpriorcited by 935
- 2023A Watermark for Large Language Modelscited by 725
- 2020Learned Image Compression with Discretized Gaussian Mixture Likelihoods and Attention Modulescited by 590
- 2019Fooling LIME and SHAP: Adversarial Attacks on Post hoc Explanation Methodscited by 443
- 2022DiffusionDB: A Large-scale Prompt Gallery Dataset for Text-to-Image Generative Modelscited by 379
- 2023The Stable Signature: Rooting Watermarks in Latent Diffusion Modelscited by 304
- 2019StegaStamp: Invisible Hyperlinks in Physical Photographscited by 265
- 2023Glaze: Protecting Artists from Style Mimicry by Text-to-Image Modelscited by 205
12 more
- 2019Robust Invisible Video Watermarking with Attentioncited by 149
- 2023EditGuard: Versatile Image Watermarking for Tamper Localization and Copyright Protectioncited by 111
- 2021Watermarking Images in Self-Supervised Latent Spacescited by 94
- 2024Proactive Detection of Voice Cloning with Localized Watermarkingcited by 78
- 2022Towards Blind Watermarking: Combining Invertible and Non-invertible Mechanismscited by 61
- 2024Watermark Anything with Localized Messagescited by 53
- 2023WavMark: Watermarking for Audio Generationcited by 50
- 2024Explanation as a Watermark: Towards Harmless and Multi-bit Model Ownership Verification via Watermarking Feature Attributioncited by 40
- 2024Attack-Resilient Image Watermarking Using Stable Diffusioncited by 35
- 2024JIGMARK: A Black-Box Approach for Enhancing Image Watermarks against Diffusion Model Editscited by 9
- 2024TabularMark: Watermarking Tabular Datasets for Machine Learningcited by 8
- 2025IConMark: Robust Interpretable Concept-Based Watermark For AI Imagescited by 3
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2024Invisible Watermarks: Attacks and Robustness
- 2025SEAL: Semantic Aware Image Watermarking
- 2025Transferable Black-Box One-Shot Forging of Watermarks via Image Preference Models
- 2025Image Watermarking of Generative Diffusion Models
- 2025Watermarking across Modalities for Content Tracing and Generative AI
- 2023Evading Watermark based Detection of AI-Generated Content
- 2026Learning to Watermark in the Latent Space of Generative Models
- 2025Dynamic watermarks in images generated by diffusion models