A Transfer Attack to Image Watermarks

An introduction to the bootstrap

Bradley Efron and Robert J Tibshirani · 1994

Earlier work this paper cites.

Robust template matching for affine resistant image watermarks

S. Pereira and T. Pun · 2000

Earlier work this paper cites.

Combined dwt-dct digital image watermarking

Ali Al-Haj · 2007

Earlier work this paper cites.

Robust image watermarking based on multiband wavelets and empirical mode decomposition

Ning Bi, Qiyu Sun, Daren Huang, Zhihua Yang, and Jiwu Huang · 2007

Earlier work this paper cites.

Efficient general print-scanning resilient data hiding based on uniform log-polar mapping

Xiangui Kang, Jiwu Huang, and Wenjun Zeng · 2010

Earlier work this paper cites.

Explaining and harnessing adversarial examples

Original

Ian J Goodfellow, Jonathon Shlens, and Christian Szegedy · 2014

Earlier work this paper cites.

Delving into transferable adversarial examples and black-box attacks

Yanpei Liu, Xinyun Chen, Chang Liu, and Dawn Song · 2017

Earlier work this paper cites.

Towards deep learning models resistant to adversarial attacks

Aleksander Madry, Aleksandar Makelov, Ludwig Schmidt, Dimitris Tsipras, and Adrian Vladu · 2018

Earlier work this paper cites.

Increasing the capturing angle in print-cam robust watermarking

Anu Pramila, Anja Keskinarkaus, and Tapio Seppänen · 2018

Earlier work this paper cites.

Hidden: Hiding data with deep networks

Jiren Zhu, Russell Kaplan, Justin Johnson, and Li Fei-Fei · 2018

Earlier work this paper cites.

A robust image watermarking system based on deep neural networks

Original

Xin Zhong and Frank Y. Shih · 2019

Earlier work this paper cites.

Stegastamp: Invisible hyperlinks in physical photographs

Matthew Tancik, Ben Mildenhall, and Ren Ng · 2020

Cited alongside, same era.

Udh: Universal deep hiding for steganography, watermarking, and light field messaging

Chaoning Zhang, Philipp Benz, Adil Karjauv, Geng Sun, and In So Kweon · 2020

Cited alongside, same era.

Adversarial watermarking transformer: Towards tracing text provenance with data hiding

Sahar Abdelnabi and Mario Fritz · 2021

Cited alongside, same era.

Zero-shot text-to-image generation

Aditya Ramesh, Mikhail Pavlov, Gabriel Goh, Scott Gray, Chelsea Voss, Alec Radford, Mark Chen, and Ilya Sutskever · 2021

Cited alongside, same era.

Diffusion models for adversarial purification

Weili Nie, Brandon Guo, Yujia Huang, Chaowei Xiao, Arash Vahdat, and Anima Anandkumar · 2022

Cited alongside, same era.

Stable diffusion watermark decoder

Robin Rombach · 2022

A watermark for large language models

John Kirchenbauer, Jonas Geiping, Yuxin Wen, Jonathan Katz, Ian Miers, and Tom Goldstein · 2023

Later among the works it cites.

DiffusionDB: A large-scale prompt gallery dataset for text-to-image generative models

Zijie J. Wang, Evan Montoya, David Munechika, Haoyang Yang, Benjamin Hoover, and Duen Horng Chau · 2023

Later among the works it cites.

Invisible image watermarks are provably removable using generative ai

Original

Xuandong Zhao, Kexun Zhang, Zihao Su, Saastha Vasan, Ilya Grishchenko, Christopher Kruegel, Giovanni Vigna, Yu-Xiang Wang, and Lei Li · 2023

Later among the works it cites.

Benchmarking the robustness of image watermarks

Original

Bang An, Mucong Ding, Tahseen Rabbani, Aakriti Agrawal, Yuancheng Xu, Chenghao Deng, Sicheng Zhu, Abdirisak Mohamed, Yuxin Wen, Tom Goldstein, et al · 2024

Closest in time.

Rethinking model ensemble in transfer-based adversarial attacks

Huanran Chen, Yichi Zhang, Yinpeng Dong, and Jun Zhu · 2024