MarkCleaner: High-Fidelity Watermark Removal via Imperceptible Micro-Geometric Perturbation
Not on the map. Why?
Abstract (arXiv)
Semantic watermarks exhibit strong robustness against conventional image-space attacks. In this work, we show that such robustness does not survive under micro-geometric perturbations: spatial displacements can remove watermarks by breaking the phase alignment. Motivated by this observation, we introduce MarkCleaner, a watermark removal framework that avoids semantic drift caused by regeneration-based watermark removal. Specifically, MarkCleaner is trained with micro-geometry-perturbed supervision, which encourages the model to separate semantic content from strict spatial alignment and enables robust reconstruction under subtle geometric displacements. The framework adopts a mask-guided encoder that learns explicit spatial representations and a 2D Gaussian Splatting-based decoder that explicitly parameterizes geometric perturbations while preserving semantic content. Extensive experiments demonstrate that MarkCleaner achieves superior performance in both watermark removal effectiveness and visual fidelity, while enabling efficient real-time inference. Our code will be made available upon acceptance.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Builds on 44 of its 61 references that are in the map. First posted on arXiv 2 Feb 2026.
Builds on
44 of 61 references.
References · 44
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
- 2023GPT-4 Technical Reportcited by 18,132
- 2014Microsoft COCO: Common Objects in Contextcited by 17,498
- 2018The Unreasonable Effectiveness of Deep Features as a Perceptual Metriccited by 11,029
- 2020Denoising Diffusion Implicit Modelscited by 9,655
- 20233D Gaussian Splatting for Real-Time Radiance Field Renderingcited by 6,141
- 2018A Style-Based Generator Architecture for Generative Adversarial Networkscited by 5,986
- 2023Adding Conditional Control to Text-to-Image Diffusion Modelscited by 5,466
- 2021CLIPScore: A Reference-free Evaluation Metric for Image Captioningcited by 2,388
- 2025FLUX.1 Kontext: Flow Matching for In-Context Image Generation and Editing in Latent Spacecited by 960
- 2022Tune-A-Video: One-Shot Tuning of Image Diffusion Models for Text-to-Video Generationcited by 958
- 2018Variational image compression with a scale hyperpriorcited by 910
32 more
- 2020Learned Image Compression with Discretized Gaussian Mixture Likelihoods and Attention Modulescited by 570
- 2020Learning Continuous Image Representation with Local Implicit Image Functioncited by 550
- 2020FDA: Fourier Domain Adaptation for Semantic Segmentationcited by 540
- 2023UniPC: A Unified Predictor-Corrector Framework for Fast Sampling of Diffusion Modelscited by 441
- 2019Making Convolutional Networks Shift-Invariant Againcited by 390
- 2022DiffusionDB: A Large-scale Prompt Gallery Dataset for Text-to-Image Generative Modelscited by 376
- 2023The Stable Signature: Rooting Watermarks in Latent Diffusion Modelscited by 289
- 2021A Fourier-based Framework for Domain Generalizationcited by 287
- 2020CompressAI: a PyTorch library and evaluation platform for end-to-end compression researchcited by 271
- 2019StegaStamp: Invisible Hyperlinks in Physical Photographscited by 256
- 2019Robust Invisible Video Watermarking with Attentioncited by 144
- 2024Gaussian Shading: Provable Performance-Lossless Image Watermarking for Diffusion Modelscited by 131
- 2023Invisible Image Watermarks Are Provably Removable Using Generative AIcited by 124
- 2024Robust Watermarking Using Generative Priors Against Image Editing: From Benchmarking to Advancescited by 105
- 2024GaussianImage: 1000 FPS Image Representation and Compression by 2D Gaussian Splattingcited by 97
- 2021Watermarking Images in Self-Supervised Latent Spacescited by 90
- 2021Deep Burst Super-Resolutioncited by 83
- 2023Robustness of AI-Image Detectors: Fundamental Limits and Practical Attackscited by 75
- 2022Masked Frequency Modeling for Self-Supervised Visual Pre-Trainingcited by 70
- 2024Deblurring 3D Gaussian Splattingcited by 66
- 2024Black-Box Forgery Attacks on Semantic Watermarks for Diffusion Modelscited by 48
- 2025Pixel to Gaussian: Ultra-Fast Continuous Super-Resolution with 2D Gaussian Modelingcited by 47
- 2024Image Watermarks are Removable Using Controllable Regeneration from Clean Noisecited by 43
- 2025SynthID-Image: Image watermarking at internet scalecited by 26
- 2025Generalized and Efficient 2D Gaussian Splatting for Arbitrary-scale Super-Resolutioncited by 21
- 2024UnMarker: A Universal Attack on Defensive Image Watermarkingcited by 19
- 2025Alias-Free Latent Diffusion Models: Improving Fractional Shift Equivariance of Diffusion Latent Spacecited by 14
- 2025Semantic Watermarking Reinvented: Enhancing Robustness and Generation Quality with Fourier Integritycited by 14
- 2024SoK: On the Role and Future of AIGC Watermarking in the Era of Gen-AIcited by 12
- 2025T2SMark: Balancing Robustness and Diversity in Noise-as-Watermark for Diffusion Modelscited by 7
- 2025Saliency-Aware Diffusion Reconstruction for Effective Invisible Watermark Removalcited by 6
- 20252D Gaussian Splatting with Semantic Alignment for Image Inpaintingcited by 4
Built on by
Not cited yet.