{"id":"https://openalex.org/W7164902688","doi":"https://doi.org/10.1145/3785353.3815079","title":"Watermarking Large Vision-Language Models: The Vision Encoder is all You Need","display_name":"Watermarking Large Vision-Language Models: The Vision Encoder is all You Need","publication_year":2026,"publication_date":"2026-06-16","ids":{"openalex":"https://openalex.org/W7164902688","doi":"https://doi.org/10.1145/3785353.3815079"},"language":null,"primary_location":{"id":"doi:10.1145/3785353.3815079","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3785353.3815079","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2026 ACM Workshop on Information Hiding and Multimedia Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3785353.3815079","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5051235844","display_name":"Boussad Addad","orcid":"https://orcid.org/0000-0001-7951-1273"},"institutions":[{"id":"https://openalex.org/I2801356230","display_name":"Thales (Australia)","ror":"https://ror.org/00f7vya03","country_code":"AU","type":"company","lineage":["https://openalex.org/I2801356230","https://openalex.org/I4210140930"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Boussad Addad","raw_affiliation_strings":["cortAIx Labs, Thales, Palaiseau, France"],"raw_orcid":"https://orcid.org/0000-0001-7951-1273","affiliations":[{"raw_affiliation_string":"cortAIx Labs, Thales, Palaiseau, France","institution_ids":["https://openalex.org/I2801356230"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5060291347","display_name":"Katarzyna Kapusta","orcid":"https://orcid.org/0000-0003-0963-4782"},"institutions":[{"id":"https://openalex.org/I2801356230","display_name":"Thales (Australia)","ror":"https://ror.org/00f7vya03","country_code":"AU","type":"company","lineage":["https://openalex.org/I2801356230","https://openalex.org/I4210140930"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Katarzyna Kapusta","raw_affiliation_strings":["cortAIx Labs, Thales, Palaiseau, France"],"raw_orcid":"https://orcid.org/0000-0003-0963-4782","affiliations":[{"raw_affiliation_string":"cortAIx Labs, Thales, Palaiseau, France","institution_ids":["https://openalex.org/I2801356230"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5028754666","display_name":"Olivier Bettan","orcid":"https://orcid.org/0000-0003-1562-496X"},"institutions":[{"id":"https://openalex.org/I2801356230","display_name":"Thales (Australia)","ror":"https://ror.org/00f7vya03","country_code":"AU","type":"company","lineage":["https://openalex.org/I2801356230","https://openalex.org/I4210140930"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Olivier Bettan","raw_affiliation_strings":["cortAIx Labs, Thales, Palaiseau, France"],"raw_orcid":"https://orcid.org/0000-0003-1562-496X","affiliations":[{"raw_affiliation_string":"cortAIx Labs, Thales, Palaiseau, France","institution_ids":["https://openalex.org/I2801356230"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I2801356230"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"189","last_page":"194"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.4133000075817108,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.4133000075817108,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11714","display_name":"Multimodal Machine Learning Applications","score":0.16339999437332153,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10775","display_name":"Generative Adversarial Networks and Image Synthesis","score":0.14550000429153442,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/digital-watermarking","display_name":"Digital watermarking","score":0.8779000043869019},{"id":"https://openalex.org/keywords/encoder","display_name":"Encoder","score":0.7110999822616577},{"id":"https://openalex.org/keywords/watermark","display_name":"Watermark","score":0.6039000153541565},{"id":"https://openalex.org/keywords/resource","display_name":"Resource (disambiguation)","score":0.37560001015663147},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.3709000051021576},{"id":"https://openalex.org/keywords/machine-vision","display_name":"Machine vision","score":0.3691999912261963},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.3650999963283539}],"concepts":[{"id":"https://openalex.org/C150817343","wikidata":"https://www.wikidata.org/wiki/Q875932","display_name":"Digital watermarking","level":3,"score":0.8779000043869019},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7698000073432922},{"id":"https://openalex.org/C118505674","wikidata":"https://www.wikidata.org/wiki/Q42586063","display_name":"Encoder","level":2,"score":0.7110999822616577},{"id":"https://openalex.org/C164112704","wikidata":"https://www.wikidata.org/wiki/Q7974348","display_name":"Watermark","level":3,"score":0.6039000153541565},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.567300021648407},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5649999976158142},{"id":"https://openalex.org/C206345919","wikidata":"https://www.wikidata.org/wiki/Q20380951","display_name":"Resource (disambiguation)","level":2,"score":0.37560001015663147},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.3709000051021576},{"id":"https://openalex.org/C5339829","wikidata":"https://www.wikidata.org/wiki/Q1425977","display_name":"Machine vision","level":2,"score":0.3691999912261963},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.3650999963283539},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.36059999465942383},{"id":"https://openalex.org/C14103023","wikidata":"https://www.wikidata.org/wiki/Q11681459","display_name":"Pairing","level":3,"score":0.33820000290870667},{"id":"https://openalex.org/C77618280","wikidata":"https://www.wikidata.org/wiki/Q1155772","display_name":"Scheme (mathematics)","level":2,"score":0.29350000619888306},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.2761000096797943},{"id":"https://openalex.org/C193470923","wikidata":"https://www.wikidata.org/wiki/Q5276026","display_name":"Digital Watermarking Alliance","level":4,"score":0.26840001344680786},{"id":"https://openalex.org/C71745522","wikidata":"https://www.wikidata.org/wiki/Q2476929","display_name":"Confidentiality","level":2,"score":0.2630999982357025},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.25769999623298645}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3785353.3815079","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3785353.3815079","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2026 ACM Workshop on Information Hiding and Multimedia Security","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3785353.3815079","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3785353.3815079","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2026 ACM Workshop on Information Hiding and Multimedia Security","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":2,"referenced_works":["https://openalex.org/W3216556018","https://openalex.org/W4405868527"],"related_works":[],"abstract_inverted_index":{"As":[0],"large":[1],"vision-language":[2],"models":[3,21,113],"(VLMs)":[4],"see":[5],"increasing":[6],"adoption,":[7],"the":[8,44,48,52,57,90,127,133],"need":[9,128],"for":[10],"robust":[11],"ownership":[12],"verification":[13],"becomes":[14],"essential.":[15],"However,":[16],"training":[17],"or":[18,131],"fine-tuning":[19],"these":[20],"is":[22,87],"computationally":[23],"intensive,":[24],"making":[25],"traditional":[26],"watermarking":[27,38],"approaches":[28],"impractical.":[29],"To":[30],"address":[31],"this,":[32],"we":[33],"introduce":[34],"a":[35,69,74],"lightweight,":[36],"black-box":[37],"technique":[39],"that":[40],"focuses":[41],"solely":[42],"on":[43,111],"vision":[45],"encoder":[46],"of":[47,60],"VLM,":[49],"significantly":[50],"reducing":[51],"resource":[53],"requirements.":[54],"By":[55],"leveraging":[56],"bi-modal":[58],"capabilities":[59],"VLMs,":[61],"our":[62,109],"method":[63],"embeds":[64],"owner-specific":[65],"information":[66],"by":[67],"pairing":[68],"particular":[70],"text":[71],"prompt":[72],"with":[73,79],"relevant":[75],"image.":[76],"When":[77],"presented":[78],"this":[80],"unique":[81],"text-image":[82],"combination":[83],"and":[84,114,120],"asked,":[85],"\"Who":[86],"your":[88],"owner?\",":[89],"model":[91,105],"produces":[92],"an":[93],"explicit":[94],"answer":[95],"identifying":[96],"its":[97],"owner.":[98],"This":[99],"does":[100],"not":[101],"require":[102],"access":[103],"to":[104,129],"weights.":[106],"We":[107],"validated":[108],"approach":[110],"several":[112],"demonstrated":[115],"how":[116],"it":[117],"enables":[118],"efficient":[119],"reliable":[121],"watermark":[122],"verification,":[123],"all":[124],"while":[125],"bypassing":[126],"retrain":[130],"fine-tune":[132],"entire":[134],"model.":[135]},"counts_by_year":[],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2026-06-17T00:00:00"}