GuardMarkGS: Unified Ownership Tracing and Edit Deterrence for 3D Gaussian Splatting
On the map: LLM safety and security → Watermarking generated content and models
Abstract (arXiv)
3D Gaussian Splatting (3DGS) is becoming a practical representation for novel view synthesis, but its growing adoption, together with rapid advances in instruction-driven 3DGS editing, also exposes a dual copyright risk: once a 3DGS-based asset is released, it can be used without permission and manipulated through 3D editing. Existing protection methods address only one side of this problem. Watermarking can trace ownership after unauthorized use, but it cannot prevent malicious editing. Adversarial edit-deterrence methods can disrupt editing, but they do not provide evidence of ownership. To the best of our knowledge, we present the first unified protection framework for 3DGS that jointly optimizes ownership tracing and unauthorized editing deterrence. Our framework combines a scene-wide watermarking objective over all Gaussians with an adversarial objective for edit deterrence. The adversarial branch combines latent-anchor separation, denoising-trajectory diversion, and cross-attention diversion to divert the editing trajectory, while an update-saliency-motivated Gaussian selection strategy assigns stronger adversarial updates to mask-selected Gaussians, improving the balance among watermark recovery, edit deterrence, and rendering fidelity. Experiments on scenes from Mip-NeRF 360 and Instruct-NeRF2NeRF demonstrate that the proposed framework achieves a favorable balance among bit accuracy, edit deterrence, and rendering quality. These results suggest that practical copyright protection of 3DGS-based assets can be more effectively addressed by integrating ownership tracing and unauthorized editing deterrence into a single optimization framework.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Placed in Watermarking generated content and models, one of 12 directions in LLM safety and security. Builds on 42 of its 48 references that are in the map. First posted on arXiv 13 May 2026.
Builds on
42 of 48 references.
Closest ancestors · 2
Same direction, newest first
- 2024ROBIN: Robust and Invisible Watermarks for Diffusion Models with Adversarial Optimization6 Nov
- 2023The Stable Signature: Rooting Watermarks in Latent Diffusion Models27 Mar
Other references · 40
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
- 2020Denoising Diffusion Probabilistic Modelscited by 20,851
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
- 2018The Unreasonable Effectiveness of Deep Features as a Perceptual Metriccited by 11,029
- 2023Segment Anythingcited by 8,158
- 20233D Gaussian Splatting for Real-Time Radiance Field Renderingcited by 6,141
- 2022Classifier-Free Diffusion Guidancecited by 5,717
- 2022Instant Neural Graphics Primitives with a Multiresolution Hash Encodingcited by 3,698
- 2022InstructPix2Pix: Learning to Follow Image Editing Instructionscited by 2,591
- 2022Prompt-to-Prompt Image Editing with Cross Attention Controlcited by 2,409
- 2021Mip-NeRF 360: Unbounded Anti-Aliased Neural Radiance Fieldscited by 2,013
- 2022Null-text Inversion for Editing Real Images using Guided Diffusion Modelscited by 1,168
28 more
- 20242D Gaussian Splatting for Geometrically Accurate Radiance Fieldscited by 1,061
- 2023DreamGaussian: Generative Gaussian Splatting for Efficient 3D Content Creationcited by 837
- 2023Scaffold-GS: Structured 3D Gaussians for View-Adaptive Renderingcited by 684
- 2023Mip-Splatting: Alias-free 3D Gaussian Splattingcited by 661
- 2023SuGaR: Surface-Aligned Gaussian Splatting for Efficient 3D Mesh Reconstruction and High-Quality Mesh Renderingcited by 611
- 2023Instruct-NeRF2NeRF: Editing 3D Scenes with Instructionscited by 482
- 2018HiDDeN: Hiding Data With Deep Networkscited by 384
- 2021CLIP-NeRF: Text-and-Image Driven Manipulation of Neural Radiance Fieldscited by 369
- 2023GaussianEditor: Swift and Controllable 3D Editing with Gaussian Splattingcited by 331
- 2023GaussianDreamer: Fast Generation from Text to 3D Gaussians by Bridging 2D and 3D Diffusion Modelscited by 255
- 2024Gaussian Opacity Fields: Efficient Adaptive Surface Reconstruction in Unbounded Scenescited by 226
- 2023Glaze: Protecting Artists from Style Mimicry by Text-to-Image Modelscited by 200
- 2023Adversarial Example Does Good: Preventing Painting Imitation from Diffusion Models via Adversarial Examplescited by 163
- 2023Raising the Cost of Malicious AI-Powered Image Editingcited by 160
- 2023DreamEditor: Text-Driven 3D Scene Editing with Neural Fieldscited by 154
- 2023Vox-E: Text-guided Voxel Editing of 3D Objectscited by 114
- 2023Anti-DreamBooth: Protecting users from personalized text-to-image synthesiscited by 114
- 2024GaussCtrl: Multi-View Consistent Text-Driven 3D Gaussian Splatting Editingcited by 114
- 2024DGE: Direct Gaussian 3D Editing by Consistent Multi-view Editingcited by 92
- 2023Mist: Towards Improved Adversarial Examples for Diffusion Modelscited by 91
- 2024EditSplat: Multi-View Fusion and Attention-Guided Optimization for View-Consistent 3D Scene Editing with 3D Gaussian Splattingcited by 40
- 2023CopyRNeRF: Protecting the CopyRight of Neural Radiance Fieldscited by 33
- 2022StegaNeRF: Embedding Invisible Information within Neural Radiance Fieldscited by 32
- 2024WateRF: Robust Watermarks in Radiance Fields for Protection of Copyrightscited by 25
- 2024GuardSplat: Efficient and Robust Watermarking for 3D Gaussian Splattingcited by 18
- 20243D-GSW: 3D Gaussian Splatting for Robust Watermarkingcited by 17
- 2025AdvPaint: Protecting Images from Inpainting Manipulation via Adversarial Attention Disruptioncited by 11
- 2024FaceShield: Defending Facial Image against Deepfake Threatscited by 8
Built on by
Not cited yet.