{"id":"https://openalex.org/W7164896179","doi":"https://doi.org/10.1145/3785353.3815071","title":"Watermark Degradation Across Model Iterations","display_name":"Watermark Degradation Across Model Iterations","publication_year":2026,"publication_date":"2026-06-16","ids":{"openalex":"https://openalex.org/W7164896179","doi":"https://doi.org/10.1145/3785353.3815071"},"language":null,"primary_location":{"id":"doi:10.1145/3785353.3815071","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3785353.3815071","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2026 ACM Workshop on Information Hiding and Multimedia Security","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3785353.3815071","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5119999385","display_name":"Michel Meintz","orcid":null},"institutions":[{"id":"https://openalex.org/I4210128801","display_name":"Helmholtz Center for Information Security","ror":"https://ror.org/02njgxr09","country_code":"DE","type":"facility","lineage":["https://openalex.org/I1305996414","https://openalex.org/I4210128801"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Michel Meintz","raw_affiliation_strings":["CISPA Helmholtz Center for Information Security, Saarbr\u00fccken, Germany"],"raw_orcid":"https://orcid.org/0009-0006-6945-343X","affiliations":[{"raw_affiliation_string":"CISPA Helmholtz Center for Information Security, Saarbr\u00fccken, Germany","institution_ids":["https://openalex.org/I4210128801"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138711337","display_name":"Maitri Vignesh Shah","orcid":"https://orcid.org/0009-0004-5805-9424"},"institutions":[{"id":"https://openalex.org/I4210128801","display_name":"Helmholtz Center for Information Security","ror":"https://ror.org/02njgxr09","country_code":"DE","type":"facility","lineage":["https://openalex.org/I1305996414","https://openalex.org/I4210128801"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Maitri Vignesh Shah","raw_affiliation_strings":["CISPA Helmholtz Center for Information Security, Saarbr\u00fccken, Germany"],"raw_orcid":"https://orcid.org/0009-0004-5805-9424","affiliations":[{"raw_affiliation_string":"CISPA Helmholtz Center for Information Security, Saarbr\u00fccken, Germany","institution_ids":["https://openalex.org/I4210128801"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5079046940","display_name":"Bihe Zhao","orcid":"https://orcid.org/0000-0001-8349-4533"},"institutions":[{"id":"https://openalex.org/I4210128801","display_name":"Helmholtz Center for Information Security","ror":"https://ror.org/02njgxr09","country_code":"DE","type":"facility","lineage":["https://openalex.org/I1305996414","https://openalex.org/I4210128801"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Bihe Zhao","raw_affiliation_strings":["CISPA Helmholtz Center for Information Security, Saarbr\u00fccken, Germany"],"raw_orcid":"https://orcid.org/0000-0001-8349-4533","affiliations":[{"raw_affiliation_string":"CISPA Helmholtz Center for Information Security, Saarbr\u00fccken, Germany","institution_ids":["https://openalex.org/I4210128801"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5119999384","display_name":"Louis Kerner","orcid":null},"institutions":[{"id":"https://openalex.org/I4210128801","display_name":"Helmholtz Center for Information Security","ror":"https://ror.org/02njgxr09","country_code":"DE","type":"facility","lineage":["https://openalex.org/I1305996414","https://openalex.org/I4210128801"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Louis Kerner","raw_affiliation_strings":["CISPA Helmholtz Center for Information Security, Saarb\u00fccken, Germany"],"raw_orcid":"https://orcid.org/0009-0009-2681-6714","affiliations":[{"raw_affiliation_string":"CISPA Helmholtz Center for Information Security, Saarb\u00fccken, Germany","institution_ids":["https://openalex.org/I4210128801"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5039583147","display_name":"Franziska Boenisch","orcid":"https://orcid.org/0000-0002-2111-2234"},"institutions":[{"id":"https://openalex.org/I4210128801","display_name":"Helmholtz Center for Information Security","ror":"https://ror.org/02njgxr09","country_code":"DE","type":"facility","lineage":["https://openalex.org/I1305996414","https://openalex.org/I4210128801"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Franziska Boenisch","raw_affiliation_strings":["CISPA Helmholtz Center for Information Security, Saarbr\u00fccken, Canada"],"raw_orcid":"https://orcid.org/0000-0002-2111-2234","affiliations":[{"raw_affiliation_string":"CISPA Helmholtz Center for Information Security, Saarbr\u00fccken, Canada","institution_ids":["https://openalex.org/I4210128801"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5044067668","display_name":"Adam Dziedzic","orcid":"https://orcid.org/0000-0001-9786-2296"},"institutions":[{"id":"https://openalex.org/I4210128801","display_name":"Helmholtz Center for Information Security","ror":"https://ror.org/02njgxr09","country_code":"DE","type":"facility","lineage":["https://openalex.org/I1305996414","https://openalex.org/I4210128801"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Adam Dziedzic","raw_affiliation_strings":["CISPA Helmholtz Center for Information Security, Saarbr\u00fccken, Germany"],"raw_orcid":"https://orcid.org/0000-0001-9786-2296","affiliations":[{"raw_affiliation_string":"CISPA Helmholtz Center for Information Security, Saarbr\u00fccken, Germany","institution_ids":["https://openalex.org/I4210128801"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I4210128801"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.88701109,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"177","last_page":"182"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10775","display_name":"Generative Adversarial Networks and Image Synthesis","score":0.4009999930858612,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10775","display_name":"Generative Adversarial Networks and Image Synthesis","score":0.4009999930858612,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12859","display_name":"Cell Image Analysis Techniques","score":0.2222999930381775,"subfield":{"id":"https://openalex.org/subfields/1304","display_name":"Biophysics"},"field":{"id":"https://openalex.org/fields/13","display_name":"Biochemistry, Genetics and Molecular Biology"},"domain":{"id":"https://openalex.org/domains/1","display_name":"Life Sciences"}},{"id":"https://openalex.org/T10388","display_name":"Advanced Steganography and Watermarking Techniques","score":0.1476999968290329,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/watermark","display_name":"Watermark","score":0.8604999780654907},{"id":"https://openalex.org/keywords/digital-watermarking","display_name":"Digital watermarking","score":0.8131999969482422},{"id":"https://openalex.org/keywords/embedding","display_name":"Embedding","score":0.6021000146865845},{"id":"https://openalex.org/keywords/generative-model","display_name":"Generative model","score":0.6007999777793884},{"id":"https://openalex.org/keywords/image","display_name":"Image (mathematics)","score":0.4803999960422516},{"id":"https://openalex.org/keywords/statistical-model","display_name":"Statistical model","score":0.4740000069141388},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.4602999985218048},{"id":"https://openalex.org/keywords/generative-grammar","display_name":"Generative grammar","score":0.45669999718666077},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.44609999656677246}],"concepts":[{"id":"https://openalex.org/C164112704","wikidata":"https://www.wikidata.org/wiki/Q7974348","display_name":"Watermark","level":3,"score":0.8604999780654907},{"id":"https://openalex.org/C150817343","wikidata":"https://www.wikidata.org/wiki/Q875932","display_name":"Digital watermarking","level":3,"score":0.8131999969482422},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6845999956130981},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6205000281333923},{"id":"https://openalex.org/C41608201","wikidata":"https://www.wikidata.org/wiki/Q980509","display_name":"Embedding","level":2,"score":0.6021000146865845},{"id":"https://openalex.org/C167966045","wikidata":"https://www.wikidata.org/wiki/Q5532625","display_name":"Generative model","level":3,"score":0.6007999777793884},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.517799973487854},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.4803999960422516},{"id":"https://openalex.org/C114289077","wikidata":"https://www.wikidata.org/wiki/Q3284399","display_name":"Statistical model","level":2,"score":0.4740000069141388},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.4602999985218048},{"id":"https://openalex.org/C39890363","wikidata":"https://www.wikidata.org/wiki/Q36108","display_name":"Generative grammar","level":2,"score":0.45669999718666077},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.44609999656677246},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.4260999858379364},{"id":"https://openalex.org/C77618280","wikidata":"https://www.wikidata.org/wiki/Q1155772","display_name":"Scheme (mathematics)","level":2,"score":0.37880000472068787},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.3718999922275543},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.3495999872684479},{"id":"https://openalex.org/C160920958","wikidata":"https://www.wikidata.org/wiki/Q7662746","display_name":"Synthetic data","level":2,"score":0.34549999237060547},{"id":"https://openalex.org/C134261354","wikidata":"https://www.wikidata.org/wiki/Q938438","display_name":"Statistical inference","level":2,"score":0.34380000829696655},{"id":"https://openalex.org/C2778712577","wikidata":"https://www.wikidata.org/wiki/Q3505966","display_name":"Retraining","level":2,"score":0.30469998717308044},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.30090001225471497},{"id":"https://openalex.org/C2779679103","wikidata":"https://www.wikidata.org/wiki/Q5251805","display_name":"Degradation (telecommunications)","level":2,"score":0.2971999943256378},{"id":"https://openalex.org/C2777211547","wikidata":"https://www.wikidata.org/wiki/Q17141490","display_name":"Training (meteorology)","level":2,"score":0.287200003862381},{"id":"https://openalex.org/C3073032","wikidata":"https://www.wikidata.org/wiki/Q15912075","display_name":"Information hiding","level":3,"score":0.28290000557899475},{"id":"https://openalex.org/C9417928","wikidata":"https://www.wikidata.org/wiki/Q1070689","display_name":"Image processing","level":3,"score":0.28290000557899475},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.27570000290870667},{"id":"https://openalex.org/C106430172","wikidata":"https://www.wikidata.org/wiki/Q6002272","display_name":"Image restoration","level":4,"score":0.2632000148296356},{"id":"https://openalex.org/C99498987","wikidata":"https://www.wikidata.org/wiki/Q2210247","display_name":"Noise (video)","level":3,"score":0.25850000977516174},{"id":"https://openalex.org/C108801101","wikidata":"https://www.wikidata.org/wiki/Q15032","display_name":"Steganography","level":3,"score":0.257099986076355}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3785353.3815071","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3785353.3815071","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2026 ACM Workshop on Information Hiding and Multimedia Security","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3785353.3815071","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3785353.3815071","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2026 ACM Workshop on Information Hiding and Multimedia Security","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":7,"referenced_works":["https://openalex.org/W2535690855","https://openalex.org/W4399362834","https://openalex.org/W4400949264","https://openalex.org/W4413145894","https://openalex.org/W4415796345","https://openalex.org/W7133185348","https://openalex.org/W7133250524"],"related_works":[],"abstract_inverted_index":{"Modern":[0],"image":[1,89],"generative":[2,33],"models":[3],"are":[4,20,24,120,175],"capable":[5],"of":[6,31,37,74,95,131,148],"producing":[7],"photorealistic":[8],"images":[9,19],"that":[10,104,174],"become":[11],"increasingly":[12],"indistinguishable":[13],"from":[14],"real":[15],"data.":[16],"As":[17],"those":[18],"published":[21],"online,":[22],"they":[23],"often":[25],"scraped":[26],"for":[27,169,180],"subsequent":[28,137],"training":[29,38,143,150],"runs":[30],"new":[32],"models.":[34],"This":[35],"practice":[36],"on":[39],"generated":[40,61],"data":[41,69,144,182],"has":[42],"been":[43],"shown":[44],"to":[45,63,177],"degrade":[46,91,155],"model":[47,96],"performance":[48],"and":[49,67,159],"amplify":[50],"existing":[51],"biases.":[52],"A":[53],"possible":[54],"mitigation":[55],"lies":[56],"in":[57,136],"embedding":[58],"watermarks":[59,75,90,154],"into":[60],"content":[62,66],"identify":[64],"synthetic":[65],"enable":[68],"provenance.":[70,183],"However,":[71],"the":[72,141,149,167],"persistence":[73],"through":[76],"iterative":[77],"training-generation":[78],"cycles":[79],"remains":[80],"poorly":[81],"understood.":[82],"In":[83],"this":[84],"work,":[85],"we":[86],"investigate":[87],"how":[88],"across":[92,126],"multiple":[93],"generations":[94,158],"training.":[97],"We":[98,122],"adopt":[99],"a":[100,161],"dataset":[101],"inference":[102],"framework":[103],"aggregates":[105],"weak":[106],"per-sample":[107],"signals":[108],"via":[109],"statistical":[110],"hypothesis":[111],"testing,":[112],"enabling":[113],"reliable":[114,181],"detection":[115],"even":[116,139],"when":[117,140],"watermark":[118],"traces":[119],"subtle.":[121],"observe":[123],"disparate":[124],"behavior":[125],"watermarking":[127,172],"methods":[128,173],"with":[129],"one":[130],"them":[132],"remaining":[133],"highly":[134],"detectable":[135],"generations,":[138],"watermarked":[142],"constitutes":[145],"only":[146],"1%":[147],"data,":[151],"while":[152],"other":[153],"severely":[156],"throughout":[157],"have":[160],"finite":[162],"lifetime.":[163],"Our":[164],"findings":[165],"highlight":[166],"need":[168],"more":[170],"robust":[171],"designed":[176],"withstand":[178],"retraining":[179]},"counts_by_year":[],"updated_date":"2026-06-26T08:34:08.712188","created_date":"2026-06-17T00:00:00"}