From Attack to Protection: Leveraging Watermarking Attack Network for Advanced Add-on Watermarking
This work addresses the problem of improving watermarking robustness and visual quality for practical applications in digital media protection, though it appears incremental as it builds on existing watermarking schemes.
The paper tackles the limitations of existing benchmark tools for multi-bit watermarking by introducing a watermarking attack network (WAN) that exploits vulnerabilities to reduce watermark extractability while maintaining visual quality, with empirical results showing it effectively undermines various systems and serves as an add-on mechanism to enhance robustness or imperceptibility.
Multi-bit watermarking (MW) has been designed to enhance resistance against watermarking attacks, such as signal processing operations and geometric distortions. Various benchmark tools exist to assess this robustness through simulated attacks on watermarked images. However, these tools often fail to capitalize on the unique attributes of the targeted MW and typically neglect the aspect of visual quality, a critical factor in practical applications. To overcome these shortcomings, we introduce a watermarking attack network (WAN), a fully trainable watermarking benchmark tool designed to exploit vulnerabilities within MW systems and induce watermark bit inversions, significantly diminishing watermark extractability. The proposed WAN employs an architecture based on residual dense blocks, which is adept at both local and global feature learning, thereby maintaining high visual quality while obstructing the extraction of embedded information. Our empirical results demonstrate that the WAN effectively undermines various block-based MW systems while minimizing visual degradation caused by attacks. This is facilitated by our novel watermarking attack loss, which is specifically crafted to compromise these systems. The WAN functions not only as a benchmarking tool but also as an add-on watermarking (AoW) mechanism, augmenting established universal watermarking schemes by enhancing robustness or imperceptibility without requiring detailed method context and adapting to dynamic watermarking requirements. Extensive experimental results show that AoW complements the performance of the targeted MW system by independently enhancing both imperceptibility and robustness.