Screen-Conditioned Watermarking Against Multi-Screen Collusion Attacks

• URL: http://arxiv.org/abs/2607.23553v2
• Date: Fri, 31 Jul 2026 07:54:53 GMT
• Title: Screen-Conditioned Watermarking Against Multi-Screen Collusion Attacks
• Abstract summary: CoMSMark is an image-agnostic watermarking framework for multi-screen shooting.<n>CoMSMark effectively resists both collusion-based watermark removal and forgery.
• Score: 35.10184009610582
• License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/
• Abstract: Screen-shooting poses a significant threat to confidential information protection. While existing screen-shooting watermarking methods enable copyright verification, the copyrighted images carrying the same copyright watermark across different screens often exhibit highly similar and estimable watermark patterns. These shared patterns can be exploited for watermark removal and forgery, a threat we term the multi-screen collusion attack. To mitigate this threat, we propose CoMSMark, a collusion-resistant image-agnostic watermarking framework for multi-screen shooting, which reduces shared residual components across screens to resist multi-screen collusion attacks. Specifically, we incorporate screen ID through a style modulation mechanism, enabling the encoder to generate screen-specific watermark residuals for reliable source attribution. We further introduce a collusion suppression loss that reduces shared residual components and encourages high-entropy predictions for forged samples, improving resistance to collusion attacks. Finally, to enable efficient large-scale distribution, CoMSMark employs an image-agnostic encoding paradigm that generates watermark residuals independently of image content. Extensive experiments demonstrate that CoMSMark effectively resists both collusion-based watermark removal and forgery. It maintains an average watermark accuracy above 90% under removal attacks while keeping forged-watermark accuracy near 50%. Moreover, CoMSMark achieves competitive robustness under diverse screen-shooting conditions, including varying capture distances and angles.

Related papers

• SpreadMark: Robust Image Watermarking via Spread-Spectrum Embedding [35.24760637584417]
  We revisit spread-spectrum embedding, a classical watermarking principle, inside a modern neural post-hoc watermarking architecture.<n>Our starting point is a measurement: in existing encoder-decoder schemes each message bit occupies only a small fraction of the image.<n> SpreadMark spreads each bit as a dense pseudo-random codeword over the whole image and recovers it by matched-filtering a learned cover-suppressed chip representation.
  arXiv  Detail & Related papers  (2026-08-04T05:52:17Z)
• "Training robust watermarking model may hurt authentication!'' Exploring and Mitigating the Identity Leakage in Robust Watermarking [37.002160328787454]
  W-IR is the first image watermarking framework that simultaneously incorporates identity protection and robustness.<n>Our work strikes a superior balance between robustness and identity leakage mitigation.
  arXiv  Detail & Related papers  (2026-05-10T16:44:50Z)
• CSGuard: Toward Forgery-Resistant Watermarking in Diffusion Models via Compressed Sensing Constraint [20.49818370567961]
  Latent-based diffusion model watermarking embeds watermarks into generated images' latent space to enable content attribution.<n>However, attackers can extract the watermark by inverting the watermarked image and re-generating it with an arbitrary prompt, thereby enabling false attribution on malicious content.<n>We propose the CSGuard, the first forgery-resistant watermarking schema that leverages compressed sensing to bind the watermarked image generation and verification to a secret matrix.
  arXiv  Detail & Related papers  (2026-05-02T14:54:09Z)
• SemBind: Binding Diffusion Watermarks to Semantics Against Black-Box Forgery Attacks [74.76909939060833]
  Black-box forgery attacks pose outsized risk to provenance and trust.<n>We propose SemBind, a framework for latent-based watermarks that resists black-box forgery.<n>We show that SemBind-enabled anti-forgery variants markedly reduce false acceptance under black-box forgery.
  arXiv  Detail & Related papers  (2026-01-28T07:02:40Z)
• Character-Level Perturbations Disrupt LLM Watermarks [64.60090923837701]
  We formalize the system model for Large Language Model (LLM) watermarking.<n>We characterize two realistic threat models constrained on limited access to the watermark detector.<n>We demonstrate character-level perturbations are significantly more effective for watermark removal under the most restrictive threat model.<n> Experiments confirm the superiority of character-level perturbations and the effectiveness of the Genetic Algorithm (GA) in removing watermarks under realistic constraints.
  arXiv  Detail & Related papers  (2025-09-11T02:50:07Z)
• TAG-WM: Tamper-Aware Generative Image Watermarking via Diffusion Inversion Sensitivity [76.98973481600002]
  This paper proposes a Tamper-Aware Generative image WaterMarking method named TAG-WM.<n>The proposed method comprises four key modules: a dual-mark joint sampling (DMJS) algorithm for embedding copyright and localization watermarks into the latent space while preserving generative quality.<n>The experimental results demonstrate that TAG-WM achieves state-of-the-art performance in both tampering robustness and localization capability even under distortion.
  arXiv  Detail & Related papers  (2025-06-30T03:14:07Z)
• ScreenMark: Watermarking Arbitrary Visual Content on Screen [16.068813541247636]
  Visual Screen Content (VSC) is particularly susceptible to theft and leakage through screenshots.<n>We propose ScreenMark, a robust and practical watermarking method designed specifically for arbitrary VSC protection.<n>To validate the effectiveness of ScreenMark, we compiled a dataset comprising 100,000 screenshots from various devices and resolutions.
  arXiv  Detail & Related papers  (2024-09-05T12:52:24Z)
• Invisible Image Watermarks Are Provably Removable Using Generative AI [47.25747266531665]
  Invisible watermarks safeguard images' copyrights by embedding hidden messages only detectable by owners. We propose a family of regeneration attacks to remove these invisible watermarks. The proposed attack method first adds random noise to an image to destroy the watermark and then reconstructs the image.
  arXiv  Detail & Related papers  (2023-06-02T23:29:28Z)
• DiffusionShield: A Watermark for Copyright Protection against Generative Diffusion Models [41.81697529657049]
  We introduce a novel watermarking scheme, DiffusionShield, tailored for Generative Diffusion Models (GDMs) DiffusionShield protects images from copyright infringement by GDMs through encoding the ownership information into an imperceptible watermark and injecting it into the images. Benefiting from the uniformity of the watermarks and the joint optimization method, DiffusionShield ensures low distortion of the original image.
  arXiv  Detail & Related papers  (2023-05-25T11:59:28Z)
• Watermark Vaccine: Adversarial Attacks to Prevent Watermark Removal [69.10633149787252]
  We propose a novel defence mechanism by adversarial machine learning for good. Two types of vaccines are proposed: Disrupting Watermark Vaccine (DWV) induces to ruin the host image along with watermark after passing through watermark-removal networks. Inerasable Watermark Vaccine (IWV) works in another fashion of trying to keep the watermark not removed and still noticeable.
  arXiv  Detail & Related papers  (2022-07-17T13:50:02Z)
• Certified Neural Network Watermarks with Randomized Smoothing [64.86178395240469]
  We propose a certifiable watermarking method for deep learning models. We show that our watermark is guaranteed to be unremovable unless the model parameters are changed by more than a certain l2 threshold. Our watermark is also empirically more robust compared to previous watermarking methods.
  arXiv  Detail & Related papers  (2022-07-16T16:06:59Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.