mlsanityData to 7 Oct 2026

GuardMarkGS: Unified Ownership Tracing and Edit Deterrence for 3D Gaussian Splatting

arXiv 2605.12919 ↗First posted 13 May 2026cs.CVcited by 0

On the map: LLM safety and security → Watermarking generated content and models

Abstract (arXiv)

3D Gaussian Splatting (3DGS) is becoming a practical representation for novel view synthesis, but its growing adoption, together with rapid advances in instruction-driven 3DGS editing, also exposes a dual copyright risk: once a 3DGS-based asset is released, it can be used without permission and manipulated through 3D editing. Existing protection methods address only one side of this problem. Watermarking can trace ownership after unauthorized use, but it cannot prevent malicious editing. Adversarial edit-deterrence methods can disrupt editing, but they do not provide evidence of ownership. To the best of our knowledge, we present the first unified protection framework for 3DGS that jointly optimizes ownership tracing and unauthorized editing deterrence. Our framework combines a scene-wide watermarking objective over all Gaussians with an adversarial objective for edit deterrence. The adversarial branch combines latent-anchor separation, denoising-trajectory diversion, and cross-attention diversion to divert the editing trajectory, while an update-saliency-motivated Gaussian selection strategy assigns stronger adversarial updates to mask-selected Gaussians, improving the balance among watermark recovery, edit deterrence, and rendering fidelity. Experiments on scenes from Mip-NeRF 360 and Instruct-NeRF2NeRF demonstrate that the proposed framework achieves a favorable balance among bit accuracy, edit deterrence, and rendering quality. These results suggest that practical copyright protection of 3DGS-based assets can be more effectively addressed by integrating ownership tracing and unauthorized editing deterrence into a single optimization framework.

Key facts. No citing papers in the map yet (data through 7 Oct 2026). Placed in Watermarking generated content and models, one of 12 directions in LLM safety and security. Builds on 42 of its 48 references that are in the map. First posted on arXiv 13 May 2026.

Builds on

42 of 48 references.

Closest ancestors · 2

Same direction, newest first

  1. 2024ROBIN: Robust and Invisible Watermarks for Diffusion Models with Adversarial Optimization6 Nov
  2. 2023The Stable Signature: Rooting Watermarks in Latent Diffusion Models27 Mar

Other references · 40

  1. 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
  2. 2020Denoising Diffusion Probabilistic Modelscited by 20,851
  3. 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
  4. 2018The Unreasonable Effectiveness of Deep Features as a Perceptual Metriccited by 11,029
  5. 2023Segment Anythingcited by 8,158
  6. 20233D Gaussian Splatting for Real-Time Radiance Field Renderingcited by 6,141
  7. 2022Classifier-Free Diffusion Guidancecited by 5,717
  8. 2022Instant Neural Graphics Primitives with a Multiresolution Hash Encodingcited by 3,698
  9. 2022InstructPix2Pix: Learning to Follow Image Editing Instructionscited by 2,591
  10. 2022Prompt-to-Prompt Image Editing with Cross Attention Controlcited by 2,409
  11. 2021Mip-NeRF 360: Unbounded Anti-Aliased Neural Radiance Fieldscited by 2,013
  12. 2022Null-text Inversion for Editing Real Images using Guided Diffusion Modelscited by 1,168
28 more
  1. 20242D Gaussian Splatting for Geometrically Accurate Radiance Fieldscited by 1,061
  2. 2023DreamGaussian: Generative Gaussian Splatting for Efficient 3D Content Creationcited by 837
  3. 2023Scaffold-GS: Structured 3D Gaussians for View-Adaptive Renderingcited by 684
  4. 2023Mip-Splatting: Alias-free 3D Gaussian Splattingcited by 661
  5. 2023SuGaR: Surface-Aligned Gaussian Splatting for Efficient 3D Mesh Reconstruction and High-Quality Mesh Renderingcited by 611
  6. 2023Instruct-NeRF2NeRF: Editing 3D Scenes with Instructionscited by 482
  7. 2018HiDDeN: Hiding Data With Deep Networkscited by 384
  8. 2021CLIP-NeRF: Text-and-Image Driven Manipulation of Neural Radiance Fieldscited by 369
  9. 2023GaussianEditor: Swift and Controllable 3D Editing with Gaussian Splattingcited by 331
  10. 2023GaussianDreamer: Fast Generation from Text to 3D Gaussians by Bridging 2D and 3D Diffusion Modelscited by 255
  11. 2024Gaussian Opacity Fields: Efficient Adaptive Surface Reconstruction in Unbounded Scenescited by 226
  12. 2023Glaze: Protecting Artists from Style Mimicry by Text-to-Image Modelscited by 200
  13. 2023Adversarial Example Does Good: Preventing Painting Imitation from Diffusion Models via Adversarial Examplescited by 163
  14. 2023Raising the Cost of Malicious AI-Powered Image Editingcited by 160
  15. 2023DreamEditor: Text-Driven 3D Scene Editing with Neural Fieldscited by 154
  16. 2023Vox-E: Text-guided Voxel Editing of 3D Objectscited by 114
  17. 2023Anti-DreamBooth: Protecting users from personalized text-to-image synthesiscited by 114
  18. 2024GaussCtrl: Multi-View Consistent Text-Driven 3D Gaussian Splatting Editingcited by 114
  19. 2024DGE: Direct Gaussian 3D Editing by Consistent Multi-view Editingcited by 92
  20. 2023Mist: Towards Improved Adversarial Examples for Diffusion Modelscited by 91
  21. 2024EditSplat: Multi-View Fusion and Attention-Guided Optimization for View-Consistent 3D Scene Editing with 3D Gaussian Splattingcited by 40
  22. 2023CopyRNeRF: Protecting the CopyRight of Neural Radiance Fieldscited by 33
  23. 2022StegaNeRF: Embedding Invisible Information within Neural Radiance Fieldscited by 32
  24. 2024WateRF: Robust Watermarks in Radiance Fields for Protection of Copyrightscited by 25
  25. 2024GuardSplat: Efficient and Robust Watermarking for 3D Gaussian Splattingcited by 18
  26. 20243D-GSW: 3D Gaussian Splatting for Robust Watermarkingcited by 17
  27. 2025AdvPaint: Protecting Images from Inpainting Manipulation via Adversarial Attention Disruptioncited by 11
  28. 2024FaceShield: Defending Facial Image against Deepfake Threatscited by 8

Built on by

Not cited yet.