Rel-Zero: Harnessing Patch-Pair Invariance for Robust Zero-Watermarking Against AI Editing
On the map: Diffusion models → Robustness, privacy and adversarial aspects
also in 1 more
Abstract (arXiv)
Recent advancements in diffusion-based image editing pose a significant threat to the authenticity of digital visual content. Traditional embedding-based watermarking methods often introduce perceptible perturbations to maintain robustness, inevitably compromising visual fidelity. Meanwhile, existing zero-watermarking approaches, typically relying on global image features, struggle to withstand sophisticated manipulations. In this work, we uncover a key observation: while individual image patches undergo substantial alterations during AI-based editing, the relational distance between patch pairs remains relatively invariant. Leveraging this property, we propose Relational Zero-Watermarking (Rel-Zero), a novel framework that requires no modification to the original image but derives a unique zero-watermark from these editing-invariant patch relations. By grounding the watermark in intrinsic structural consistency rather than absolute appearance, Rel-Zero provides a non-invasive yet resilient mechanism for content authentication. Extensive experiments demonstrate that Rel-Zero achieves substantially improved robustness across diverse editing models and manipulations compared to prior zero-watermarking approaches.
Key facts. Cited by 1 paper in the map (data through 14 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 31 of its 45 references that are in the map. First posted on arXiv 18 Mar 2026.
Builds on
31 of 45 references.
Closest ancestors · 1
Same direction, newest first
Other references · 30
- 2015Deep Residual Learning for Image Recognitioncited by 52,096
- 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 30,186
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,863
- 2014Microsoft COCO: Common Objects in Contextcited by 17,608
- 2018The Unreasonable Effectiveness of Deep Features as a Perceptual Metriccited by 11,177
- 2017Graph Attention Networkscited by 8,923
- 2022Classifier-Free Diffusion Guidancecited by 5,847
- 2023Adding Conditional Control to Text-to-Image Diffusion Modelscited by 5,503
- 2022DreamBooth: Fine Tuning Text-to-Image Diffusion Models for Subject-Driven Generationcited by 3,300
- 2022InstructPix2Pix: Learning to Follow Image Editing Instructionscited by 2,611
- 2022Prompt-to-Prompt Image Editing with Cross Attention Controlcited by 2,431
- 2022Imagic: Text-Based Real Image Editing with Diffusion Modelscited by 1,178
18 more
- 2022DPM-Solver++: Fast Solver for Guided Sampling of Diffusion Probabilistic Modelscited by 938
- 2023MagicBrush: A Manually Annotated Dataset for Instruction-Guided Image Editingcited by 624
- 2018HiDDeN: Hiding Data With Deep Networkscited by 397
- 2024Vista: A Generalizable Driving World Model with High Fidelity and Versatile Controllabilitycited by 347
- 2024Diffusion for World Modeling: Visual Details Matter in Ataricited by 300
- 2024UltraEdit: Instruction-based Fine-Grained Image Editing at Scalecited by 268
- 2023DiffIR: Efficient Diffusion Model for Image Restorationcited by 255
- 2020Artificial Fingerprinting for Generative Models: Rooting Deepfake Attribution in Training Datacited by 201
- 2023Single-Stage Diffusion NeRF: A Unified Approach to 3D Generation and Reconstructioncited by 180
- 2023EditGuard: Versatile Image Watermarking for Tamper Localization and Copyright Protectioncited by 111
- 2021MBRS : Enhancing Robustness of DNN-based Watermarking by Mini-Batch of Real and Simulated JPEG Compressioncited by 110
- 2024Robust Watermarking Using Generative Priors Against Image Editing: From Benchmarking to Advancescited by 110
- 2022Towards Blind Watermarking: Combining Invertible and Non-invertible Mechanismscited by 61
- 2023TrustMark: Universal Watermarking for Arbitrary Resolution Imagescited by 51
- 2024Robust-Wide: Robust Watermarking against Instruction-driven Image Editingcited by 22
- 2024Benchmarking the Robustness of Panoptic Segmentation for Automated Drivingcited by 3
- 2025Synthesizing and Identifying Noise Levels in Autonomous Vehicle Camera Radar Datasetscited by 1
- 2026DRGW: Learning Disentangled Representations for Robust Graph Watermarkingcited by 1
Built on by
Citing papers per year: 2026: 1.
1 paper.
Similar, not cited
Close in wording, no citation either way
- 2026MarkNull: Model-Agnostic Watermark Removal in AI-Generated Images via On-Manifold Latent Manipulation
- 2026RAVEN: Erasing Invisible Watermarks via Novel View Synthesis
- 2026RecoverMark: Robust Watermarking for Localization and Recovery of Manipulated Faces
- 2026Editing Away the Evidence: Diffusion-Based Image Manipulation and the Failure Modes of Robust Watermarking
- 2024InvisMark: Invisible and Robust Watermarking for AI-generated Image Provenance
- 2026Are Watermarked Images Editable? SafeMark for Watermark-Preserving Text-Guided Image Editing
- 2026TIACam: Text-Anchored Invariant Feature Learning with Auto-Augmentation for Camera-Robust Zero-Watermarking
- 2026MarkCleaner: High-Fidelity Watermark Removal via Imperceptible Micro-Geometric Perturbation