<p>Research on watermark attacking is essential to reinforce robust watermarking methods by providing new attacking benchmarks. Recently, there is an emergence of attacking methods based on deep learning, in which perceptual loss and watermark loss are utilized to train the neural networks for the imperceptibility of watermarked images and the disruption of attacked watermarks. In this work, we propose a novel randomness-anchored attacking network (RAN) based on deep learning. In RAN, we introduce an alternative watermark loss to attack the watermarks into random noises by anchoring to randomness rather than the original watermarks. Extensive attacking experiments of comparisons with attacking schemes show that the proposed RAN models can achieve satisfying performance in preserving the visual fidelity of attacked watermarked images with competitive attacking ability. The proposed methods add new inspirations to the design of stealthy and effective attacking models based on deep learning, with significant implications for developing robust watermarking. The source code and data is shared at <a href="https://github.com/kq409/Watermark-Attack">https://github.com/kq409/Watermark-Attack</a>.</p>

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

RAN: A randomness-anchored watermark attacking network with stealth and effectiveness

  • Fan Li,
  • Du Li,
  • Kunqi Li,
  • Yanyu Jiang,
  • Yanlin Leng,
  • Kai Zhou,
  • Yong Tang

摘要

Research on watermark attacking is essential to reinforce robust watermarking methods by providing new attacking benchmarks. Recently, there is an emergence of attacking methods based on deep learning, in which perceptual loss and watermark loss are utilized to train the neural networks for the imperceptibility of watermarked images and the disruption of attacked watermarks. In this work, we propose a novel randomness-anchored attacking network (RAN) based on deep learning. In RAN, we introduce an alternative watermark loss to attack the watermarks into random noises by anchoring to randomness rather than the original watermarks. Extensive attacking experiments of comparisons with attacking schemes show that the proposed RAN models can achieve satisfying performance in preserving the visual fidelity of attacked watermarked images with competitive attacking ability. The proposed methods add new inspirations to the design of stealthy and effective attacking models based on deep learning, with significant implications for developing robust watermarking. The source code and data is shared at https://github.com/kq409/Watermark-Attack.