WaTeRFlow: Watermark Temporal Robustness via Flow Consistency
On the map: Diffusion models → Robustness, privacy and adversarial aspects
Abstract (arXiv)
Image watermarking supports authenticity and provenance, yet many schemes are still easy to bypass with various distortions and powerful generative edits. Deep learning-based watermarking has improved robustness to diffusion-based image editing, but a gap remains when a watermarked image is converted to video by image-to-video (I2V), in which per-frame watermark detection weakens. I2V has quickly advanced from short, jittery clips to multi-second, temporally coherent scenes, and it now serves not only content creation but also world-modeling and simulation workflows, making cross-modal watermark recovery crucial. We present WaTeRFlow, a framework tailored for robustness under I2V. It consists of (i) FUSE (Flow-guided Unified Synthesis Engine), which exposes the encoder-decoder to realistic distortions via instruction-driven edits and a fast video diffusion proxy during training, (ii) optical-flow warping with a Temporal Consistency Loss (TCL) that stabilizes per-frame predictions, and (iii) a semantic preservation loss that maintains the conditioning signal. Experiments across representative I2V models show accurate watermark recovery from frames, with higher first-frame and per-frame bit accuracy and resilience when various distortions are applied before or after video generation.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 39 of its 91 references that are in the map. First posted on arXiv 22 Dec 2025.
Builds on
39 of 91 references.
Closest ancestors · 4
Same direction, newest first
- 2025VideoShield: Regulating Diffusion-based Video Generation Models via Watermarking24 Jan
- 2024LVMark: Robust Watermark for Latent Video Diffusion Models12 Dec
- 2024ROBIN: Robust and Invisible Watermarks for Diffusion Models with Adversarial Optimization6 Nov
- 2023The Stable Signature: Rooting Watermarks in Latent Diffusion Models27 Mar
Other references · 35
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
- 2020Denoising Diffusion Probabilistic Modelscited by 21,076
- 2015U-Net: Convolutional Networks for Biomedical Image Segmentationcited by 19,713
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,863
- 2018The Unreasonable Effectiveness of Deep Features as a Perceptual Metriccited by 11,177
- 2021Diffusion Models Beat GANs on Image Synthesiscited by 8,255
- 2023DINOv2: Learning Robust Visual Features without Supervisioncited by 7,974
- 2022Scalable Diffusion Models with Transformerscited by 6,054
- 2022Classifier-Free Diffusion Guidancecited by 5,847
- 2016Image-to-Image Translation with Conditional Adversarial Networkscited by 4,527
- 2021Improved Denoising Diffusion Probabilistic Modelscited by 3,761
- 2022InstructPix2Pix: Learning to Follow Image Editing Instructionscited by 2,611
23 more
- 2023Stable Video Diffusion: Scaling Latent Video Diffusion Models to Large Datasetscited by 2,581
- 2022Prompt-to-Prompt Image Editing with Cross Attention Controlcited by 2,431
- 2020RAFT: Recurrent All-Pairs Field Transforms for Optical Flowcited by 2,415
- 2022Video Diffusion Modelscited by 2,305
- 2024CogVideoX: Text-to-Video Diffusion Models with An Expert Transformercited by 2,261
- 2023Consistency Modelscited by 1,822
- 2023Align your Latents: High-Resolution Video Synthesis with Latent Diffusion Modelscited by 1,476
- 2022Null-text Inversion for Editing Real Images using Guided Diffusion Modelscited by 1,179
- 2023Latent Consistency Models: Synthesizing High-Resolution Images with Few-Step Inferencecited by 846
- 2023MagicBrush: A Manually Annotated Dataset for Instruction-Guided Image Editingcited by 624
- 2018HiDDeN: Hiding Data With Deep Networkscited by 397
- 2024UltraEdit: Instruction-based Fine-Grained Image Editing at Scalecited by 268
- 2019StegaStamp: Invisible Hyperlinks in Physical Photographscited by 265
- 2019Robust Invisible Video Watermarking with Attentioncited by 149
- 2023Invisible Image Watermarks Are Provably Removable Using Generative AIcited by 134
- 2023VideoBooth: Diffusion-based Video Generation with Image Promptscited by 126
- 2024Robust Watermarking Using Generative Priors Against Image Editing: From Benchmarking to Advancescited by 110
- 2020Distortion Agnostic Deep Watermarkingcited by 90
- 2022Towards Blind Watermarking: Combining Invertible and Non-invertible Mechanismscited by 61
- 2024Watermark Anything with Localized Messagescited by 53
- 2024Video Seal: Open and Efficient Video Watermarkingcited by 48
- 2024AnimateLCM: Computation-Efficient Personalized Style Video Generation without Personalized Video Datacited by 42
- 2024Robust-Wide: Robust Watermarking against Instruction-driven Image Editingcited by 22
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2025WaterFlow: Learning Fast & Robust Watermarks using Stable Diffusion
- 2025LoT-Pass: Long-term-robust Image Watermarking for Image to Video Generation
- 2026FlowMark: Mask-Guided Video Watermarking
- 2025Video Signature: Implicit Watermarking for Video Diffusion Models
- 2026COVER: Codec-Robust Video Watermarking with Generative Video Priors
- 2025VideoMark: A Distortion-Free Robust Watermarking Framework for Video Diffusion Models
- 2025VIDSTAMP: A Temporally-Aware Watermark for Ownership and Integrity in Video Diffusion Models
- 2026Editing Away the Evidence: Diffusion-Based Image Manipulation and the Failure Modes of Robust Watermarking