RingID: Rethinking Tree-Ring Watermarking for Enhanced Multi-Key Identification

arXiv:2404.14055v1 Announce Type: new
Abstract: We revisit Tree-Ring Watermarking, a recent diffusion model watermarking method that demonstrates great robustness to various attacks. We conduct an in-depth study on it and reveal that the distribution shift unintentionally introduced by the watermarking process, apart from watermark pattern matching, contributes to its exceptional robustness. Our investigation further exposes inherent flaws in its original design, particularly in its ability to identify multiple distinct keys, where distribution shift offers no assistance. Based on these findings …

abstract arxiv attacks cs.cv diffusion diffusion model distribution identification key process ring robustness shift study tree type watermark watermarking