Machine learning attack on copy detection patterns: are 1x1 patterns cloneable?

• URL: http://arxiv.org/abs/2110.02176v2
• Date: Wed, 6 Oct 2021 11:22:32 GMT
• Title: Machine learning attack on copy detection patterns: are 1x1 patterns cloneable?
• Abstract summary: We consider a copy attack against the copy detection patterns (CDP) based on machine learning. The experimental based on samples produced on two industrial printers demonstrate that simple detection metrics used in the CDP authentication cannot reliably distinguish the original CDP from their fakes.
• Score: 14.784426936848604
• License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/
• Abstract: Nowadays, the modern economy critically requires reliable yet cheap protection solutions against product counterfeiting for the mass market. Copy detection patterns (CDP) are considered as such solution in several applications. It is assumed that being printed at the maximum achievable limit of a printing resolution of an industrial printer with the smallest symbol size 1x1 elements, the CDP cannot be copied with sufficient accuracy and thus are unclonable. In this paper, we challenge this hypothesis and consider a copy attack against the CDP based on machine learning. The experimental based on samples produced on two industrial printers demonstrate that simple detection metrics used in the CDP authentication cannot reliably distinguish the original CDP from their fakes. Thus, the paper calls for a need of careful reconsideration of CDP cloneability and search for new authentication techniques and CDP optimization because of the current attack.

Related papers

• Mitigating Memorization in Text-to-Image Diffusion via Region-Aware Prompt Augmentation and Multimodal Copy Detection [53.789057575175065]
  Region-Aware Prompt Augmentation (RAPTA) and Attention-Driven Multimodal Copy Detection (ADMCD) are presented.<n>RAPTA uses an object detector to find salient regions and turn them into semantically grounded prompt variants.<n>ADMCD aggregates local patch, global semantic, and texture cues with a lightweight transformer to produce a fused representation.<n>Experiments show that RAPTA reduces overfitting while maintaining high synthesis quality, and that ADMCD reliably detects copying, outperforming single-modal metrics.
  arXiv  Detail & Related papers  (2026-03-13T15:16:27Z)
• Diffusion-Based Authentication of Copy Detection Patterns: A Multimodal Framework with Printer Signature Conditioning [24.87648457099111]
  Formulating authentication as multi-class printer classification over printer signatures lets our model capture fine-grained, device-specific features.<n>We extend ControlNet by repurposing the denoising process for class-conditioned noise prediction.<n>Results show the framework generalises to counterfeit types unseen during training.
  arXiv  Detail & Related papers  (2026-03-09T22:33:44Z)
• SWAP: Towards Copyright Auditing of Soft Prompts via Sequential Watermarking [58.475471437150674]
  We propose sequential watermarking for soft prompts (SWAP)<n>SWAP encodes watermarks through a specific order of defender-specified out-of-distribution classes.<n>Experiments on 11 datasets demonstrate SWAP's effectiveness, harmlessness, and robustness against potential adaptive attacks.
  arXiv  Detail & Related papers  (2025-11-05T13:48:48Z)
• Consultant Decoding: Yet Another Synergistic Mechanism [49.996656694586164]
  Consultant Decoding (CD) verifies candidate drafts using token-level likelihoods computed solely by the large language model.<n>CD achieves up to a 2.5-fold increase in inference speed compared to the target model, while maintaining comparable generation quality.
  arXiv  Detail & Related papers  (2025-06-03T03:13:27Z)
• CopyJudge: Automated Copyright Infringement Identification and Mitigation in Text-to-Image Diffusion Models [58.58208005178676]
  We propose CopyJudge, a novel automated infringement identification framework.<n>We employ an abstraction-filtration-comparison test framework to assess the likelihood of infringement.<n>We introduce a general LVLM-based mitigation strategy that automatically optimize infringing prompts.
  arXiv  Detail & Related papers  (2025-02-21T08:09:07Z)
• CopyrightShield: Spatial Similarity Guided Backdoor Defense against Copyright Infringement in Diffusion Models [61.06621533874629]
  diffusion model is a prime target for copyright infringement attacks. This paper provides an in-depth analysis of the spatial similarity of replication in diffusion model. We propose a novel defense method specifically targeting copyright infringement attacks.
  arXiv  Detail & Related papers  (2024-12-02T14:19:44Z)
• Explaining and Improving Contrastive Decoding by Extrapolating the Probabilities of a Huge and Hypothetical LM [93.8400683020273]
  Contrastive decoding (CD) improves the next-token distribution of a large expert language model (LM) using a small amateur LM. We propose a new unsupervised decoding method called $mathbfA$symptotic $mathbfP$robability $mathbfD$ecoding (APD) APD explicitly extrapolates the probability curves from the LMs of different sizes to infer the probabilities from an infinitely large LM without inducing more inference costs than CD.
  arXiv  Detail & Related papers  (2024-11-03T15:31:44Z)
• CopyBench: Measuring Literal and Non-Literal Reproduction of Copyright-Protected Text in Language Model Generation [132.00910067533982]
  We introduce CopyBench, a benchmark designed to measure both literal and non-literal copying in LM generations. We find that, although literal copying is relatively rare, two types of non-literal copying -- event copying and character copying -- occur even in models as small as 7B parameters.
  arXiv  Detail & Related papers  (2024-07-09T17:58:18Z)
• CPR: Retrieval Augmented Generation for Copyright Protection [101.15323302062562]
  We introduce CopyProtected generation with Retrieval (CPR), a new method for RAG with strong copyright protection guarantees. CPR allows to condition the output of diffusion models on a set of retrieved images. We prove that CPR satisfies Near Access Freeness (NAF) which bounds the amount of information an attacker may be able to extract from the generated images.
  arXiv  Detail & Related papers  (2024-03-27T18:09:55Z)
• UniPC: A Unified Predictor-Corrector Framework for Fast Sampling of Diffusion Models [92.43617471204963]
  Diffusion probabilistic models (DPMs) have demonstrated a very promising ability in high-resolution image synthesis. We develop a unified corrector (UniC) that can be applied after any existing DPM sampler to increase the order of accuracy. We propose a unified predictor-corrector framework called UniPC for the fast sampling of DPMs.
  arXiv  Detail & Related papers  (2023-02-09T18:59:48Z)
• Mathematical model of printing-imaging channel for blind detection of fake copy detection patterns [10.292065384528799]
  We propose a new mathematical model of printing-imaging channel for the authentication of CDP. The results show that even deep learning created copy fakes unknown at the training stage can be reliably authenticated.
  arXiv  Detail & Related papers  (2022-12-14T16:46:54Z)
• Printing variability of copy detection patterns [10.292065384528799]
  Copy detection pattern (CDP) is a novel solution for products' protection against counterfeiting. CDP attracts the anti-counterfeiting industry due to its numerous benefits in comparison to alternative protection techniques. This paper presents a new dataset produced by two industrial HP Indigo printers.
  arXiv  Detail & Related papers  (2022-10-11T11:09:14Z)
• Anomaly localization for copy detection patterns through print estimations [10.292065384528799]
  Copy detection patterns (CDP) are recent technologies for protecting products from counterfeiting. Deep learning-based fakes have shown to be hardly distinguishable from originals by traditional authentication systems. In this work, we design a machine learning (ML) based authentication system that only requires digital templates and printed original CDP for training.
  arXiv  Detail & Related papers  (2022-09-29T13:18:57Z)
• Authentication of Copy Detection Patterns under Machine Learning Attacks: A Supervised Approach [10.292065384528799]
  Copy detection patterns (CDP) are an attractive technology that allows manufacturers to defend their products against counterfeiting. Previous works have shown that Machine Learning (ML) based attacks can produce high-quality fakes. In this work, we study such a performance assuming a supervised learning (SL) setting.
  arXiv  Detail & Related papers  (2022-06-23T15:58:28Z)
• Revisiting Consistency Regularization for Semi-supervised Change Detection in Remote Sensing Images [60.89777029184023]
  We propose a semi-supervised CD model in which we formulate an unsupervised CD loss in addition to the supervised Cross-Entropy (CE) loss. Experiments conducted on two publicly available CD datasets show that the proposed semi-supervised CD method can reach closer to the performance of supervised CD.
  arXiv  Detail & Related papers  (2022-04-18T17:59:01Z)
• Mobile authentication of copy detection patterns [11.4928367384196]
  This paper aims at investigating the authentication aspects and the resistances to illegal copying of copy detection patterns (CDP) from machine learning perspectives. A special attention is paid to a reliable authentication under the real life verification conditions when the codes are printed on an industrial printer and enrolled via modern mobile phones. The obtained results show that the modern machine-learning approaches and the technical capacities of modern mobile phones allow to reliably authenticate CDP on end-user mobile phones under the considered classes of fakes.
  arXiv  Detail & Related papers  (2022-03-04T16:07:26Z)
• Adversarial EXEmples: A Survey and Experimental Evaluation of Practical Attacks on Machine Learning for Windows Malware Detection [67.53296659361598]
  adversarial EXEmples can bypass machine learning-based detection by perturbing relatively few input bytes. We develop a unifying framework that does not only encompass and generalize previous attacks against machine-learning models, but also includes three novel attacks. These attacks, named Full DOS, Extend and Shift, inject the adversarial payload by respectively manipulating the DOS header, extending it, and shifting the content of the first section.
  arXiv  Detail & Related papers  (2020-08-17T07:16:57Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.