{"id":"https://openalex.org/W4416214887","doi":"https://doi.org/10.1109/tmm.2025.3632696","title":"Fast and Effective Overwrite Attack Against DNN-Based Image Watermarking Models","display_name":"Fast and Effective Overwrite Attack Against DNN-Based Image Watermarking Models","publication_year":2025,"publication_date":"2025-11-14","ids":{"openalex":"https://openalex.org/W4416214887","doi":"https://doi.org/10.1109/tmm.2025.3632696"},"language":null,"primary_location":{"id":"doi:10.1109/tmm.2025.3632696","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tmm.2025.3632696","pdf_url":null,"source":{"id":"https://openalex.org/S137030581","display_name":"IEEE Transactions on Multimedia","issn_l":"1520-9210","issn":["1520-9210","1941-0077"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Multimedia","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5111236480","display_name":"S. Y. Li","orcid":"https://orcid.org/0009-0007-0893-1300"},"institutions":[{"id":"https://openalex.org/I158842170","display_name":"Chongqing University","ror":"https://ror.org/023rhb549","country_code":"CN","type":"education","lineage":["https://openalex.org/I158842170"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shaoxin Li","raw_affiliation_strings":["College of Computer Science, Chongqing University, Chongqing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Computer Science, Chongqing University, Chongqing, China","institution_ids":["https://openalex.org/I158842170"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5022342592","display_name":"Xiaofeng Liao","orcid":"https://orcid.org/0000-0002-3566-8161"},"institutions":[{"id":"https://openalex.org/I158842170","display_name":"Chongqing University","ror":"https://ror.org/023rhb549","country_code":"CN","type":"education","lineage":["https://openalex.org/I158842170"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaofeng Liao","raw_affiliation_strings":["College of Computer Science, Chongqing University, Chongqing, China"],"raw_orcid":"https://orcid.org/0000-0002-3566-8161","affiliations":[{"raw_affiliation_string":"College of Computer Science, Chongqing University, Chongqing, China","institution_ids":["https://openalex.org/I158842170"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5052379053","display_name":"Qiqi Zhang","orcid":"https://orcid.org/0009-0007-4456-216X"},"institutions":[{"id":"https://openalex.org/I98251732","display_name":"McMaster University","ror":"https://ror.org/02fa3aq29","country_code":"CA","type":"education","lineage":["https://openalex.org/I98251732"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Qiqi Zhang","raw_affiliation_strings":["Department of Computing and Software, McMaster University, Hamilton, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computing and Software, McMaster University, Hamilton, Canada","institution_ids":["https://openalex.org/I98251732"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Yuanqi Xue","orcid":null},"institutions":[{"id":"https://openalex.org/I98251732","display_name":"McMaster University","ror":"https://ror.org/02fa3aq29","country_code":"CA","type":"education","lineage":["https://openalex.org/I98251732"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Yuanqi Xue","raw_affiliation_strings":["Department of Computing and Software, McMaster University, Hamilton, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computing and Software, McMaster University, Hamilton, Canada","institution_ids":["https://openalex.org/I98251732"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5007946897","display_name":"Lingyang Chu","orcid":"https://orcid.org/0000-0002-8937-1750"},"institutions":[{"id":"https://openalex.org/I98251732","display_name":"McMaster University","ror":"https://ror.org/02fa3aq29","country_code":"CA","type":"education","lineage":["https://openalex.org/I98251732"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Lingyang Chu","raw_affiliation_strings":["Department of Computing and Software, McMaster University, Hamilton, Canada"],"raw_orcid":"https://orcid.org/0000-0002-8937-1750","affiliations":[{"raw_affiliation_string":"Department of Computing and Software, McMaster University, Hamilton, Canada","institution_ids":["https://openalex.org/I98251732"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.1241597,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"28","issue":null,"first_page":"1119","last_page":"1132"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9390000104904175,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9390000104904175,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10775","display_name":"Generative Adversarial Networks and Image Synthesis","score":0.013100000098347664,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.013100000098347664,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/digital-watermarking","display_name":"Digital watermarking","score":0.8898000121116638},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.6883000135421753},{"id":"https://openalex.org/keywords/watermark","display_name":"Watermark","score":0.5899999737739563},{"id":"https://openalex.org/keywords/noise","display_name":"Noise (video)","score":0.548799991607666},{"id":"https://openalex.org/keywords/image","display_name":"Image (mathematics)","score":0.5223000049591064},{"id":"https://openalex.org/keywords/watermarking-attack","display_name":"Watermarking attack","score":0.435699999332428},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.42660000920295715},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.4253000020980835}],"concepts":[{"id":"https://openalex.org/C150817343","wikidata":"https://www.wikidata.org/wiki/Q875932","display_name":"Digital watermarking","level":3,"score":0.8898000121116638},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8618000149726868},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.6883000135421753},{"id":"https://openalex.org/C164112704","wikidata":"https://www.wikidata.org/wiki/Q7974348","display_name":"Watermark","level":3,"score":0.5899999737739563},{"id":"https://openalex.org/C99498987","wikidata":"https://www.wikidata.org/wiki/Q2210247","display_name":"Noise (video)","level":3,"score":0.548799991607666},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5390999913215637},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.5223000049591064},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.5128999948501587},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.44350001215934753},{"id":"https://openalex.org/C122760801","wikidata":"https://www.wikidata.org/wiki/Q2552011","display_name":"Watermarking attack","level":5,"score":0.435699999332428},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.42660000920295715},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.4253000020980835},{"id":"https://openalex.org/C2988773926","wikidata":"https://www.wikidata.org/wiki/Q25104379","display_name":"Generative adversarial network","level":3,"score":0.3321000039577484},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.32420000433921814},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.29899999499320984},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.2955000102519989},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.2858999967575073},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.2745000123977661},{"id":"https://openalex.org/C2780581891","wikidata":"https://www.wikidata.org/wiki/Q15738686","display_name":"Copy protection","level":4,"score":0.2743000090122223},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.26980000734329224},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.2628999948501587},{"id":"https://openalex.org/C131426668","wikidata":"https://www.wikidata.org/wiki/Q849203","display_name":"Electronic countermeasure","level":3,"score":0.2563999891281128},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.25279998779296875}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tmm.2025.3632696","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tmm.2025.3632696","pdf_url":null,"source":{"id":"https://openalex.org/S137030581","display_name":"IEEE Transactions on Multimedia","issn_l":"1520-9210","issn":["1520-9210","1941-0077"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Multimedia","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2304842078","display_name":"\u79fb\u52a8\u793e\u4f1a\u5a92\u4f53\u5927\u6570\u636e\u5171\u4eab\u4ea4\u6362\u4e2d\u7684\u9690\u79c1\u4fdd\u62a4\u7814\u7a76","funder_award_id":"61932006","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G6150497912","display_name":null,"funder_award_id":"CSTB2023NSCQ-LZX0149","funder_id":"https://openalex.org/F4320323172","funder_display_name":"Natural Science Foundation of Chongqing"},{"id":"https://openalex.org/G6734358560","display_name":null,"funder_award_id":"2023CDJKYJH019","funder_id":"https://openalex.org/F4320335787","funder_display_name":"Fundamental Research Funds for the Central Universities"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320323172","display_name":"Natural Science Foundation of Chongqing","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320335787","display_name":"Fundamental Research Funds for the Central Universities","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":40,"referenced_works":["https://openalex.org/W1677182931","https://openalex.org/W1861492603","https://openalex.org/W2040006905","https://openalex.org/W2069827024","https://openalex.org/W2108598243","https://openalex.org/W2183341477","https://openalex.org/W2194775991","https://openalex.org/W2543927648","https://openalex.org/W2764207733","https://openalex.org/W2883233582","https://openalex.org/W2886641317","https://openalex.org/W2963857521","https://openalex.org/W2970373593","https://openalex.org/W3034856584","https://openalex.org/W3035671550","https://openalex.org/W3143336910","https://openalex.org/W3193750732","https://openalex.org/W3203538342","https://openalex.org/W3208993340","https://openalex.org/W4210825863","https://openalex.org/W4224918846","https://openalex.org/W4285205648","https://openalex.org/W4287199676","https://openalex.org/W4299396942","https://openalex.org/W4304091667","https://openalex.org/W4312786328","https://openalex.org/W4312933868","https://openalex.org/W4327810912","https://openalex.org/W4371783954","https://openalex.org/W4383503849","https://openalex.org/W4385562457","https://openalex.org/W4385565289","https://openalex.org/W4385815557","https://openalex.org/W4388858443","https://openalex.org/W4390872921","https://openalex.org/W4392405568","https://openalex.org/W4403843400","https://openalex.org/W4406939962","https://openalex.org/W4411337494","https://openalex.org/W4415798628"],"related_works":[],"abstract_inverted_index":{"Deep":[0],"neural":[1],"network":[2],"(DNN)-based":[3],"image":[4,70,212],"watermarking":[5,87,213],"models":[6,28],"have":[7],"been":[8,36],"widely":[9],"recognized":[10],"as":[11],"an":[12,127,165],"effective":[13,121],"way":[14],"to":[15,29,65,71,94,147,157,182,192],"manage":[16],"the":[17,24,41,47,86,95,100,103,176,190,218],"huge":[18],"amount":[19],"of":[20,26,32,44,59,83,106,116,168,178,202,210,225],"AI-generated":[21],"images.":[22],"However,":[23],"vulnerability":[25],"such":[27],"different":[30,158],"forms":[31,43,105],"adversarial":[33],"attacks":[34,45,50,54,78,197],"has":[35],"a":[37,56,67,81,113,140,199,206],"critical":[38],"concern.":[39],"Among":[40],"existing":[42,104],"in":[46,102,108,160],"literature,":[48],"image-dependent":[49],"cannot":[51],"launch":[52],"real-time":[53],"on":[55,198],"large":[57,200],"number":[58,201],"watermarked":[60,75,149,203],"images,":[61,150,204],"because":[62],"they":[63],"need":[64],"train":[66],"new":[68,74,207],"noise":[69,142,172],"attack":[72,117,123,130,134,185,220],"each":[73],"image;":[76],"image-regeneration":[77],"either":[79],"require":[80],"lot":[82],"information":[84],"about":[85],"system":[88],"or":[89],"cause":[90],"too":[91],"much":[92],"damage":[93],"attacked":[96],"image.":[97],"To":[98],"fill":[99],"gap":[101],"attacks,":[107],"this":[109],"paper,":[110],"we":[111,138],"propose":[112],"novel":[114],"form":[115],"named":[118],"\u201cfast":[119],"and":[120,132,174,180,223],"overwrite":[122,152,196],"(FEOA)\u201d,":[124],"which":[125,170],"achieves":[126],"extremely":[128],"fast":[129],"speed":[131],"strong":[133],"effectiveness.":[135,186],"In":[136],"particular,":[137],"discovered":[139],"single":[141],"image,":[143],"when":[144],"directly":[145],"added":[146],"many":[148],"can":[151],"their":[153],"true":[154],"watermark":[155],"messages":[156],"ones":[159],"milliseconds.":[161],"We":[162],"also":[163],"develop":[164],"adaptive":[166],"version":[167],"FEOA,":[169],"trains$k$different":[171],"images":[173],"applies":[175],"principle":[177],"divide":[179],"conquer":[181],"significantly":[183],"improve":[184],"Our":[187],"work":[188],"opens":[189],"door":[191],"quickly":[193],"launching":[194],"massive":[195],"revealing":[205],"robustness":[208],"issue":[209],"DNN-based":[211],"models.":[214],"Extensive":[215],"experiments":[216],"demonstrate":[217],"outstanding":[219],"time":[221],"efficiency":[222],"effectiveness":[224],"our":[226],"methods.":[227]},"counts_by_year":[],"updated_date":"2026-07-29T09:40:50.615796","created_date":"2025-11-14T00:00:00"}