{"id":"https://openalex.org/W4405035826","doi":"https://doi.org/10.48550/arxiv.2412.02576","title":"The Efficacy of Transfer-based No-box Attacks on Image Watermarking: A Pragmatic Analysis","display_name":"The Efficacy of Transfer-based No-box Attacks on Image Watermarking: A Pragmatic Analysis","publication_year":2024,"publication_date":"2024-12-03","ids":{"openalex":"https://openalex.org/W4405035826","doi":"https://doi.org/10.48550/arxiv.2412.02576"},"language":"en","primary_location":{"id":"pmh:oai:arXiv.org:2412.02576","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2412.02576","pdf_url":"https://arxiv.org/pdf/2412.02576","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"type":"preprint","indexed_in":["arxiv","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2412.02576","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5040587076","display_name":"Qilong Wu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wu, Qilong","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5009092703","display_name":"Varun Chandrasekaran","orcid":"https://orcid.org/0000-0003-0661-6378"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chandrasekaran, Varun","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":1,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10388","display_name":"Advanced Steganography and Watermarking Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10388","display_name":"Advanced Steganography and Watermarking Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11017","display_name":"Chaos-based Image/Signal Encryption","score":0.9961000084877014,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.9945999979972839,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/digital-watermarking","display_name":"Digital watermarking","score":0.7017931342124939},{"id":"https://openalex.org/keywords/image","display_name":"Image (mathematics)","score":0.628410279750824},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5251938104629517},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.405714750289917},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.35325977206230164},{"id":"https://openalex.org/keywords/computer-vision","display_name":"Computer vision","score":0.3343323767185211}],"concepts":[{"id":"https://openalex.org/C150817343","wikidata":"https://www.wikidata.org/wiki/Q875932","display_name":"Digital watermarking","level":3,"score":0.7017931342124939},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.628410279750824},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5251938104629517},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.405714750289917},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.35325977206230164},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.3343323767185211}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:arXiv.org:2412.02576","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2412.02576","pdf_url":"https://arxiv.org/pdf/2412.02576","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2412.02576","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2412.02576","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2412.02576","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2412.02576","pdf_url":"https://arxiv.org/pdf/2412.02576","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4405035826.pdf","grobid_xml":"https://content.openalex.org/works/W4405035826.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W2772917594","https://openalex.org/W2036807459","https://openalex.org/W2058170566","https://openalex.org/W2755342338","https://openalex.org/W2166024367","https://openalex.org/W3116076068","https://openalex.org/W2229312674","https://openalex.org/W2951359407","https://openalex.org/W2079911747","https://openalex.org/W1969923398"],"abstract_inverted_index":{"Watermarking":[0],"approaches":[1],"are":[2,11],"widely":[3],"used":[4,191],"to":[5,31,109,169],"identify":[6],"if":[7],"images":[8],"being":[9],"circulated":[10],"authentic":[12],"or":[13,170],"AI-generated.":[14],"Determining":[15],"the":[16,23,27,36,49,54,75,82,131,151,157,186],"robustness":[17],"of":[18,56,80,96,153,163,177],"image":[19],"watermarking":[20,37,87],"methods":[21],"in":[22,65,116,174],"``no-box''":[24],"setting,":[25],"where":[26],"attacker":[28],"is":[29,39,46,52,133,167,196],"assumed":[30],"have":[32],"no":[33],"knowledge":[34],"about":[35],"model,":[38],"an":[40,121],"interesting":[41],"problem.":[42],"Our":[43],"main":[44],"finding":[45],"that":[47,129],"evading":[48],"no-box":[50],"setting":[51],"challenging:":[53],"success":[55,152],"optimization-based":[57,154],"transfer":[58],"attacks":[59],"(involving":[60],"training":[61,78],"surrogate":[62,86,97,146],"models)":[63],"proposed":[64],"prior":[66,165],"work~\\cite{hu2024transfer}":[67],"depends":[68],"on":[69,185],"impractical":[70],"assumptions,":[71],"including":[72],"(i)":[73],"aligning":[74],"architecture":[76],"and":[77,84,180],"configurations":[79,179],"both":[81],"victim":[83],"attacker's":[85],"models,":[88],"as":[89,91],"well":[90],"(ii)":[92],"a":[93,110,117,136,182],"large":[94,101],"number":[95],"models":[98],"with":[99,120,143],"potentially":[100],"computational":[102],"requirements.":[103],"Relaxing":[104],"these":[105],"assumptions":[106],"i.e.,":[107],"moving":[108],"more":[111],"pragmatic":[112],"threat":[113],"model":[114,147],"results":[115],"failed":[118],"attack,":[119],"evasion":[122],"rate":[123],"at":[124,198],"most":[125],"$21.1\\%$.":[126],"We":[127],"show":[128],"when":[130],"configuration":[132],"mostly":[134],"aligned,":[135],"simple":[137],"non-optimization":[138],"attack":[139],"we":[140],"propose,":[141],"OFT,":[142],"one":[144],"single":[145],"can":[148],"already":[149],"exceed":[150],"efforts.":[155],"Under":[156],"same":[158],"$\\ell_\\infty$":[159],"norm":[160],"perturbation":[161],"budget":[162],"$0.25$,":[164],"work~\\citet{hu2024transfer}":[166],"comparable":[168],"worse":[171],"than":[172],"OFT":[173],"$11$":[175],"out":[176],"$12$":[178],"has":[181],"limited":[183],"advantage":[184],"remaining":[187],"one.":[188],"The":[189],"code":[190],"for":[192],"all":[193],"our":[194],"experiments":[195],"available":[197],"\\url{https://github.com/Ardor-Wu/transfer}.":[199]},"counts_by_year":[{"year":2025,"cited_by_count":1}],"updated_date":"2026-08-26T07:47:46.906454","created_date":"2025-10-10T00:00:00"}