Can Protective Watermarking Safeguard the Copyright of 3D Gaussian Splatting?

• URL: http://arxiv.org/abs/2511.22262v1
• Date: Thu, 27 Nov 2025 09:39:51 GMT
• Title: Can Protective Watermarking Safeguard the Copyright of 3D Gaussian Splatting?
• Authors: Wenkai Huang, Yijia Guo, Gaolei Li, Lei Ma, Hang Zhang, Liwen Hu, Jiazheng Wang, Jianhua Li, Tiejun Huang,
• Abstract summary: 3D Gaussian Splatting (3DGS) has emerged as a powerful representation for 3D scenes, widely adopted due to its exceptional efficiency and high-fidelity visual quality.<n>Recent works have introduced specialized watermarking schemes to ensure copyright protection and ownership verification.<n>We propose GSPure, the first watermark purification framework specifically for 3DGS watermarking representations.
• Score: 32.5671407737127
• License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/
• Abstract: 3D Gaussian Splatting (3DGS) has emerged as a powerful representation for 3D scenes, widely adopted due to its exceptional efficiency and high-fidelity visual quality. Given the significant value of 3DGS assets, recent works have introduced specialized watermarking schemes to ensure copyright protection and ownership verification. However, can existing 3D Gaussian watermarking approaches genuinely guarantee robust protection of the 3D assets? In this paper, for the first time, we systematically explore and validate possible vulnerabilities of 3DGS watermarking frameworks. We demonstrate that conventional watermark removal techniques designed for 2D images do not effectively generalize to the 3DGS scenario due to the specialized rendering pipeline and unique attributes of each gaussian primitives. Motivated by this insight, we propose GSPure, the first watermark purification framework specifically for 3DGS watermarking representations. By analyzing view-dependent rendering contributions and exploiting geometrically accurate feature clustering, GSPure precisely isolates and effectively removes watermark-related Gaussian primitives while preserving scene integrity. Extensive experiments demonstrate that our GSPure achieves the best watermark purification performance, reducing watermark PSNR by up to 16.34dB while minimizing degradation to original scene fidelity with less than 1dB PSNR loss. Moreover, it consistently outperforms existing methods in both effectiveness and generalization.

Related papers

• AdLift: Lifting Adversarial Perturbations to Safeguard 3D Gaussian Splatting Assets Against Instruction-Driven Editing [109.07334219188222]
  We propose the first editing safeguard for 3DGS, termed AdLift, which prevents instruction-driven editing across arbitrary views and dimensions.<n>We alternate between gradient truncation and image-to-Gaussian fitting, yielding consistent adversarial-based protection performance across different viewpoints.
  arXiv  Detail & Related papers  (2025-12-08T07:41:23Z)
• RDSplat: Robust Watermarking Against Diffusion Editing for 3D Gaussian Splatting [86.86361440345861]
  3DGS watermarking methods remain highly vulnerable to diffusion-based editing.<n>This paper introduces RDSplat, a Robust watermarking paradigm against diffusion-based editing.<n> RDSplat embeds watermarks into 3DGS components that diffusion-based editing inherently preserve.
  arXiv  Detail & Related papers  (2025-12-07T10:26:35Z)
• MarkSplatter: Generalizable Watermarking for 3D Gaussian Splatting Model via Splatter Image Structure [27.59237608604465]
  Current 3DGS watermarking methods rely on computationally expensive fine-tuning procedures for each predefined message.<n>We propose the first generalizable watermarking framework that enables efficient protection of Splatter Image-based 3DGS models through a single forward pass.
  arXiv  Detail & Related papers  (2025-08-31T09:12:06Z)
• Learning Generalizable and Efficient Image Watermarking via Hierarchical Two-Stage Optimization [90.13049455759358]
  We propose a two-stage optimization that enable a watermarking model to simultaneously achieve three criteria.<n>HiWL effectively learns generalizable latent-space watermark representations while maintaining broad applicability.<n>It achieves 7.6% higher accuracy in watermark extraction than existing methods, while maintaining extremely low latency (100K images processed in 8s)
  arXiv  Detail & Related papers  (2025-08-12T06:21:27Z)
• Fading the Digital Ink: A Universal Black-Box Attack Framework for 3DGS Watermarking Systems [15.347933983222914]
  This paper introduces the first universal black-box attack framework, the Group-based Multi-objective Evolutionary Attack (GMEA)<n>We formulate the attack as a large-scale multi-objective optimization problem, balancing watermark removal with visual quality.<n>Experiments demonstrate that our framework effectively removes both 1D and 2D watermarks from mainstream 3DGS watermarking methods.
  arXiv  Detail & Related papers  (2025-08-10T09:31:01Z)
• Optimization-Free Universal Watermark Forgery with Regenerative Diffusion Models [50.73220224678009]
  Watermarking can be used to verify the origin of synthetic images generated by artificial intelligence models.<n>Recent studies demonstrate the capability to forge watermarks from a target image onto cover images via adversarial techniques.<n>In this paper, we uncover a greater risk of an optimization-free and universal watermark forgery.<n>Our approach significantly broadens the scope of attacks, presenting a greater challenge to the security of current watermarking techniques.
  arXiv  Detail & Related papers  (2025-06-06T12:08:02Z)
• GS-Marker: Generalizable and Robust Watermarking for 3D Gaussian Splatting [17.880821149078066]
  We propose a single-pass watermarking approach for 3D Gaussian Splatting (3DGS), a well-known yet underexplored representation for watermarking.<n>Our framework, named GS-Marker, incorporates a 3D encoder to embed messages, distortion layers to enhance resilience against various distortions, and a 2D decoder to extract watermarks from renderings.
  arXiv  Detail & Related papers  (2025-03-24T14:29:14Z)
• CompMarkGS: Robust Watermarking for Compressed 3D Gaussian Splatting [22.938962106203505]
  We propose a compression-tolerant 3DGS watermarking method that preserves watermark integrity and rendering quality.<n>Our approach utilizes an anchor-based 3DGS, embedding the watermark into anchor attributes, particularly the anchor feature.<n>We also propose a quantization distortion layer that injects quantization noise during training, preserving the watermark after compression.
  arXiv  Detail & Related papers  (2025-03-17T05:32:15Z)
• WATER-GS: Toward Copyright Protection for 3D Gaussian Splatting via Universal Watermarking [44.335142946449245]
  WATER-GS is a novel method designed to protect 3DGS copyrights through a universal watermarking strategy.<n>We introduce a pre-trained watermark decoder, treating raw 3DGS generative modules as potential watermarks to ensure imperceptibility.<n>We implement novel 3D distortion layers to enhance the robustness of the embedded watermark against common real-world distortions of point cloud data.
  arXiv  Detail & Related papers  (2024-12-07T16:44:22Z)
• GuardSplat: Efficient and Robust Watermarking for 3D Gaussian Splatting [70.81218231206617]
  GuardSplat is an innovative and efficient framework for watermarking 3DGS assets.<n>Message Embedding module seamlessly embeds messages into the SH features of each 3D Gaussian while preserving the original 3D structure.<n>Anti-distortion Message Extraction module improves robustness against various distortions.
  arXiv  Detail & Related papers  (2024-11-29T17:59:03Z)
• GaussianMarker: Uncertainty-Aware Copyright Protection of 3D Gaussian Splatting [41.90891053671943]
  Digital watermarking techniques can be applied to embed ownership information discreetly within 3DGS models. Naively embedding the watermark on a pre-trained 3DGS can cause obvious distortion in rendered images. We propose an uncertainty-based method that constrains the perturbation of model parameters to achieve invisible watermarking for 3DGS.
  arXiv  Detail & Related papers  (2024-10-31T08:08:54Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.