SAiW: Source-Attributable Invisible Watermarking for Proactive Deepfake Defense
On the map: LLM safety and security → Watermarking generated content and models
Abstract (arXiv)
Deepfakes generated by modern generative models pose a serious threat to information integrity, digital identity, and public trust. Existing detection methods are largely reactive, attempting to identify manipulations after they occur and often failing to generalize across evolving generation techniques. This motivates the need for proactive mechanisms that secure media authenticity at the time of creation. In this work, we introduce SAiW, a Source-Attributed Invisible watermarking Framework for proactive deepfake defense and media provenance verification. Unlike conventional watermarking methods that treat watermark payloads as generic signals, SAiW formulates watermark embedding as a source-conditioned representation learning problem, where watermark identity encodes the originating source and modulates the embedding process to produce discriminative and traceable signatures. The framework integrates feature-wise linear modulation to inject source identity into the embedding network, enabling scalable multi-source watermark generation. A perceptual guidance module derived from human visual system priors ensures that watermark perturbations remain visually imperceptible while maintaining robustness. In addition, a dual-purpose forensic decoder simultaneously reconstructs the embedded watermark and performs source attribution, providing both automated verification and interpretable forensic evidence. Extensive experiments across multiple deepfake datasets demonstrate that SAiW achieves high perceptual quality while maintaining strong robustness against compression, filtering, noise, geometric transformations, and adversarial perturbations. By binding digital media to its origin through invisible yet verifiable markers, SAiW enables reliable authentication and source attribution, providing a scalable foundation for proactive deepfake defense and trustworthy media provenance.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Placed in Watermarking generated content and models, one of 12 directions in LLM safety and security. Builds on 26 of its 44 references that are in the map. First posted on arXiv 24 Mar 2026.
Builds on
26 of 44 references.
Closest ancestors · 4
Same direction, newest first
- 2024LampMark: Proactive Deepfake Detection via Training-Free Landmark Perceptual Watermarks26 Nov
- 2024Social Media Authentication and Combating Deepfakes using Semi-fragile Invisible Image Watermarking2 Oct
- 2023Robust Identity Perceptual Watermark Against Deepfake Face Swapping2 Nov
- 2023SepMark: Deep Separable Watermarking for Unified Source Tracing and Deepfake Detection10 May
Other references · 22
- 2021Swin Transformer: Hierarchical Vision Transformer using Shifted Windowscited by 12,082
- 2018The Unreasonable Effectiveness of Deep Features as a Perceptual Metriccited by 11,029
- 2014Deep Learning Face Attributes in the Wildcited by 3,679
- 2022A ConvNet for the 2020scited by 3,545
- 2016Xception: Deep Learning with Depthwise Separable Convolutionscited by 2,320
- 2017FiLM: Visual Reasoning with a General Conditioning Layercited by 2,286
- 2019FaceForensics++: Learning to Detect Manipulated Facial Imagescited by 1,095
- 2018HiDDeN: Hiding Data With Deep Networkscited by 384
- 2019FSGAN: Subject Agnostic Face Swapping and Reenactmentcited by 319
- 2020Lips Don't Lie: A Generalisable and Robust Approach to Face Forgery Detectioncited by 286
- 2019StegaStamp: Invisible Hyperlinks in Physical Photographscited by 256
- 2021SimSwap: An Efficient Framework For High Fidelity Face Swappingcited by 243
10 more
- 2020Artificial Fingerprinting for Generative Models: Rooting Deepfake Attribution in Training Datacited by 200
- 2019Robust Invisible Video Watermarking with Attentioncited by 144
- 2018FaceForensics: A Large-scale Video Dataset for Forgery Detection in Human Facescited by 118
- 2021MBRS : Enhancing Robustness of DNN-based Watermarking by Mini-Batch of Real and Simulated JPEG Compressioncited by 108
- 2019Deep Learning for Deepfakes Creation and Detection: A Surveycited by 102
- 2024Watermark Anything with Localized Messagescited by 49
- 2022FaceDancer: Pose- and Occlusion-Aware High Fidelity Face Swappingcited by 44
- 2022Anti-Forgery: Towards a Stealthy and Robust DeepFake Disruption Attack via Adversarial Perceptual-aware Perturbationscited by 39
- 2020Split then Refine: Stacked Attention-guided ResUNets for Blind Single Image Visible Watermark Removalcited by 20
- 2021VPN: Video Provenance Network for Robust Content Attributioncited by 7
Built on by
Not cited yet.