mlsanityData to 14 Oct 2026

ONRW: Optimizing inversion noise for high-quality and robust watermark

arXiv 2601.17388 ↗First posted 24 Jan 2026cs.CV cs.AIcited by 0

On the map: Diffusion models → Robustness, privacy and adversarial aspects

Abstract (arXiv)

Watermarking methods have always been effective means of protecting intellectual property, yet they face significant challenges. Although existing deep learning-based watermarking systems can hide watermarks in images with minimal impact on image quality, they often lack robustness when encountering image corruptions during transmission, which undermines their practical application value. To this end, we propose a high-quality and robust watermark framework based on the diffusion model. Our method first converts the clean image into inversion noise through a null-text optimization process, and after optimizing the inversion noise in the latent space, it produces a high-quality watermarked image through an iterative denoising process of the diffusion model. The iterative denoising process serves as a powerful purification mechanism, ensuring both the visual quality of the watermarked image and enhancing the robustness of the watermark against various corruptions. To prevent the optimizing of inversion noise from distorting the original semantics of the image, we specifically introduced self-attention constraints and pseudo-mask strategies. Extensive experimental results demonstrate the superior performance of our method against various image corruptions. In particular, our method outperforms the stable signature method by an average of 10% across 12 different image transformations on COCO datasets. Our codes are available at https://github.com/920927/ONRW.

Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 23 of its 46 references that are in the map. First posted on arXiv 24 Jan 2026.

Builds on

23 of 46 references.

Closest ancestors · 2

Same direction, newest first

  1. 2023Diffusion Models for Imperceptible and Transferable Adversarial Attack14 May
  2. 2023A Recipe for Watermarking Diffusion Models17 Mar

Other references · 21

  1. 2014Microsoft COCO: Common Objects in Contextcited by 17,608
  2. 2020Denoising Diffusion Implicit Modelscited by 9,781
  3. 2015Deep Unsupervised Learning using Nonequilibrium Thermodynamicscited by 7,058
  4. 2022Hierarchical Text-Conditional Image Generation with CLIP Latentscited by 6,585
  5. 2022Photorealistic Text-to-Image Diffusion Models with Deep Language Understandingcited by 6,355
  6. 2017Neural Discrete Representation Learningcited by 4,712
  7. 2019Generative Modeling by Estimating Gradients of the Data Distributioncited by 4,101
  8. 2022DreamBooth: Fine Tuning Text-to-Image Diffusion Models for Subject-Driven Generationcited by 3,300
  9. 2022Prompt-to-Prompt Image Editing with Cross Attention Controlcited by 2,431
  10. 2020Improved Techniques for Training Score-Based Generative Modelscited by 1,043
  11. 2018Joint Autoregressive and Hierarchical Priors for Learned Image Compressioncited by 664
  12. 2020Learned Image Compression with Discretized Gaussian Mixture Likelihoods and Attention Modulescited by 590
9 more
  1. 2018HiDDeN: Hiding Data With Deep Networkscited by 397
  2. 2020Artificial Fingerprinting for Generative Models: Rooting Deepfake Attribution in Training Datacited by 201
  3. 2019Robust Invisible Video Watermarking with Attentioncited by 149
  4. 2021MBRS : Enhancing Robustness of DNN-based Watermarking by Mini-Batch of Real and Simulated JPEG Compressioncited by 110
  5. 2021Watermarking Images in Self-Supervised Latent Spacescited by 94
  6. 2017Generating Steganographic Images via Adversarial Trainingcited by 58
  7. 2020An Automated and Robust Image Watermarking Scheme Based on Deep Neural Networkscited by 15
  8. 2023Securing Deep Generative Models with Universal Adversarial Signaturecited by 14
  9. 2023Information-containing Adversarial Perturbation for Combating Facial Manipulation Systemscited by 9

Built on by

Not cited yet.

Similar, not cited

Close in wording, no citation either way

  1. 2025T2SMark: Balancing Robustness and Diversity in Noise-as-Watermark for Diffusion Models
  2. 2025OptMark: Robust Multi-bit Diffusion Watermarking via Inference Time Optimization
  3. 2025Saliency-Aware Diffusion Reconstruction for Effective Invisible Watermark Removal
  4. 2026FARI: Robust One-Step Inversion for Watermarking in Diffusion Models
  5. 2026ShapeMark: Robust and Diversity-Preserving Watermarking for Diffusion Models
  6. 2024Picking watermarks from noise (PWFN): an improved robust watermarking model against intensive distortions
  7. 2024Hidden in the Noise: Two-Stage Robust Watermarking for Images
  8. 2024SuperMark: Robust and Training-free Image Watermarking via Diffusion-based Super-Resolution