DeepSignature: Digitally Signed, Content-Encoding Watermarks for Robust and Transparent Image Authentication

• URL: http://arxiv.org/abs/2604.23016v1
• Date: Fri, 24 Apr 2026 21:06:09 GMT
• Title: DeepSignature: Digitally Signed, Content-Encoding Watermarks for Robust and Transparent Image Authentication
• Abstract summary: Images that falsely appear to originate from trusted sources pose a serious threat.<n>We propose DeepSignature, a novel approach that integrates the guarantees of digital signatures with the capabilities of deep neural networks.<n>DeepSignature reliably identifies significant forgery attempts -- achieving near 100% in our experiments.
• Score: 2.6908636068441876
• License: http://creativecommons.org/licenses/by-nc-sa/4.0/
• Abstract: AI-powered generative models have significantly expanded the possibilities for editing, manipulating, and creating high-quality images. Particularly, images that falsely appear to originate from trusted sources pose a serious threat, undermining public trust in image authenticity. We propose DeepSignature, a novel approach that integrates the guarantees of digital signatures with the capabilities of deep neural networks. Neural networks are used both to generate content-encoding watermarks and to embed them imperceptibly into images while ensuring robust extraction. These watermarks are cryptographically verifiable, enabling source attribution and image integrity validation. DeepSignature is compatible with existing image formats and requires no special handling of signed images. It supports client-side verification, requiring only the signer's public key. Additionally, we introduce a novel latent-space verification approach to detect and localize tampering attempts. We evaluate DeepSignature in terms of imperceptibility, robustness to benign transformations, forgery detection, and its resilience against various attack scenarios. Our results highlight the inherent trade-offs between imperceptibility, robustness, and integrity verification. We demonstrate that DeepSignature reliably identifies significant forgery attempts -- achieving near 100\% in our experiments. Finally, we emphasize DeepSignature's modularity and tunable parameters, allowing adaptation to application-specific requirements. Code and model weights will be published.

Related papers

• SAiW: Source-Attributable Invisible Watermarking for Proactive Deepfake Defense [7.442956390854273]
  Deepfakes generated by modern generative models pose a serious threat to information integrity, digital identity, and public trust.<n>We introduce SAiW, a Source-Attributed Invisible watermarking Framework for proactive deepfake defense and media provenance verification.
  arXiv  Detail & Related papers  (2026-03-24T13:26:52Z)
• Adapter Shield: A Unified Framework with Built-in Authentication for Preventing Unauthorized Zero-Shot Image-to-Image Generation [74.5813283875938]
  Zero-shot image-to-image generation poses substantial risks related to intellectual property violations.<n>This work presents Adapter Shield, the first universal and authentication-integrated solution aimed at defending personal images from misuse.<n>Our method surpasses existing state-of-the-art defenses in blocking unauthorized zero-shot image synthesis.
  arXiv  Detail & Related papers  (2025-11-25T04:49:16Z)
• A Content-dependent Watermark for Safeguarding Image Attribution [45.90265244606734]
  We present MetaSeal, a novel framework for content-dependent watermarking with cryptographic security guarantees.<n>Our design provides forgery resistance, preventing unauthorized replication and enforcing cryptographic verification.<n>Experiments demonstrate that MetaSeal effectively mitigates forgery attempts and applies to both natural and AI-generated images.
  arXiv  Detail & Related papers  (2025-09-13T00:38:03Z)
• The NeRF Signature: Codebook-Aided Watermarking for Neural Radiance Fields [77.76790894639036]
  We propose NeRF Signature, a novel watermarking method for NeRF.<n>We employ a Codebook-aided Signature Embedding (CSE) that does not alter the model structure.<n>We also introduce a joint pose-patch encryption watermarking strategy to hide signatures into patches.
  arXiv  Detail & Related papers  (2025-02-26T13:27:49Z)
• Deep Learning-based Dual Watermarking for Image Copyright Protection and Authentication [1.6385815610837167]
  We present a Deep Learning based dual invisible watermarking technique for performing source authentication, content authentication, and protecting digital content copyright of images sent over the internet.<n>It is also impossible to imitate or overwrite watermarks because the cryptographic hash of the image and the dominant features of the image are used as watermarks.<n>Our trained model achieves high watermark extraction accuracy and to the best of our knowledge, this is the first deep learning-based dual watermarking technique proposed in the literature.
  arXiv  Detail & Related papers  (2025-02-21T07:58:39Z)
• Certifiably Robust Image Watermark [57.546016845801134]
  Generative AI raises many societal concerns such as boosting disinformation and propaganda campaigns. Watermarking AI-generated content is a key technology to address these concerns. We propose the first image watermarks with certified robustness guarantees against removal and forgery attacks.
  arXiv  Detail & Related papers  (2024-07-04T17:56:04Z)
• Robust Identity Perceptual Watermark Against Deepfake Face Swapping [9.402982368385569]
  Deepfake face swapping has caused critical privacy issues with the rapid development of deep generative models.<n>We propose a robust identity perceptual watermarking framework that concurrently performs detection and source tracing against Deepfake face swapping.
  arXiv  Detail & Related papers  (2023-11-02T16:04:32Z)
• T2IW: Joint Text to Image & Watermark Generation [74.20148555503127]
  We introduce a novel task for the joint generation of text to image and watermark (T2IW) This T2IW scheme ensures minimal damage to image quality when generating a compound image by forcing the semantic feature and the watermark signal to be compatible in pixels. We demonstrate remarkable achievements in image quality, watermark invisibility, and watermark robustness, supported by our proposed set of evaluation metrics.
  arXiv  Detail & Related papers  (2023-09-07T16:12:06Z)
• FaceSigns: Semi-Fragile Neural Watermarks for Media Authentication and Countering Deepfakes [25.277040616599336]
  Deepfakes and manipulated media are becoming a prominent threat due to the recent advances in realistic image and video synthesis techniques. We introduce a deep learning based semi-fragile watermarking technique that allows media authentication by verifying an invisible secret message embedded in the image pixels.
  arXiv  Detail & Related papers  (2022-04-05T03:29:30Z)
• Reversible Watermarking in Deep Convolutional Neural Networks for Integrity Authentication [78.165255859254]
  We propose a reversible watermarking algorithm for integrity authentication. The influence of embedding reversible watermarking on the classification performance is less than 0.5%. At the same time, the integrity of the model can be verified by applying the reversible watermarking.
  arXiv  Detail & Related papers  (2021-04-09T09:32:21Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.