{"id":"https://openalex.org/W7160932539","doi":"https://doi.org/10.48550/arxiv.2605.09646","title":"\"Training robust watermarking model may hurt authentication!'' Exploring and Mitigating the Identity Leakage in Robust Watermarking","display_name":"\"Training robust watermarking model may hurt authentication!'' Exploring and Mitigating the Identity Leakage in Robust Watermarking","publication_year":2026,"publication_date":"2026-05-10","ids":{"openalex":"https://openalex.org/W7160932539","doi":"https://doi.org/10.48550/arxiv.2605.09646"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.09646","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.09646","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.09646","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5135963264","display_name":"Xinyu Zhang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Xinyu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5111408641","display_name":"Ziping Dong","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Dong, Ziping","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135931186","display_name":"Qingyu Liu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liu, Qingyu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135997887","display_name":"Yuan Hong","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hong, Yuan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135982175","display_name":"Zhongjie Ba","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ba, Zhongjie","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5135999404","display_name":"Kui Ren","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ren, Kui","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.5771999955177307,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.5771999955177307,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10388","display_name":"Advanced Steganography and Watermarking Techniques","score":0.3068999946117401,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10775","display_name":"Generative Adversarial Networks and Image Synthesis","score":0.030300000682473183,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/digital-watermarking","display_name":"Digital watermarking","score":0.8170999884605408},{"id":"https://openalex.org/keywords/watermark","display_name":"Watermark","score":0.7717000246047974},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.6159999966621399},{"id":"https://openalex.org/keywords/information-hiding","display_name":"Information hiding","score":0.5120999813079834},{"id":"https://openalex.org/keywords/information-leakage","display_name":"Information leakage","score":0.46639999747276306},{"id":"https://openalex.org/keywords/smoothing","display_name":"Smoothing","score":0.3935000002384186},{"id":"https://openalex.org/keywords/identity","display_name":"Identity (music)","score":0.38269999623298645},{"id":"https://openalex.org/keywords/embedding","display_name":"Embedding","score":0.3407999873161316}],"concepts":[{"id":"https://openalex.org/C150817343","wikidata":"https://www.wikidata.org/wiki/Q875932","display_name":"Digital watermarking","level":3,"score":0.8170999884605408},{"id":"https://openalex.org/C164112704","wikidata":"https://www.wikidata.org/wiki/Q7974348","display_name":"Watermark","level":3,"score":0.7717000246047974},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.6159999966621399},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6096000075340271},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5199000239372253},{"id":"https://openalex.org/C3073032","wikidata":"https://www.wikidata.org/wiki/Q15912075","display_name":"Information hiding","level":3,"score":0.5120999813079834},{"id":"https://openalex.org/C2779201187","wikidata":"https://www.wikidata.org/wiki/Q2775060","display_name":"Information leakage","level":2,"score":0.46639999747276306},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4431999921798706},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.42239999771118164},{"id":"https://openalex.org/C3770464","wikidata":"https://www.wikidata.org/wiki/Q775963","display_name":"Smoothing","level":2,"score":0.3935000002384186},{"id":"https://openalex.org/C2778355321","wikidata":"https://www.wikidata.org/wiki/Q17079427","display_name":"Identity (music)","level":2,"score":0.38269999623298645},{"id":"https://openalex.org/C41608201","wikidata":"https://www.wikidata.org/wiki/Q980509","display_name":"Embedding","level":2,"score":0.3407999873161316},{"id":"https://openalex.org/C155512373","wikidata":"https://www.wikidata.org/wiki/Q287450","display_name":"Residual","level":2,"score":0.3353999853134155},{"id":"https://openalex.org/C46304622","wikidata":"https://www.wikidata.org/wiki/Q374814","display_name":"Certification","level":2,"score":0.3330000042915344},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3181999921798706},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.302700012922287},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.26589998602867126},{"id":"https://openalex.org/C2777042071","wikidata":"https://www.wikidata.org/wiki/Q6509304","display_name":"Leakage (economics)","level":2,"score":0.2630000114440918},{"id":"https://openalex.org/C40305131","wikidata":"https://www.wikidata.org/wiki/Q2616305","display_name":"Obfuscation","level":2,"score":0.2567000091075897},{"id":"https://openalex.org/C178300618","wikidata":"https://www.wikidata.org/wiki/Q1898509","display_name":"Extant taxon","level":2,"score":0.25459998846054077},{"id":"https://openalex.org/C204241405","wikidata":"https://www.wikidata.org/wiki/Q461499","display_name":"Transformation (genetics)","level":3,"score":0.2506999969482422},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.2502000033855438}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.09646","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.09646","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.09646","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.09646","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"The":[0,82],"rapid":[1],"advancement":[2],"of":[3,84,132],"generative":[4],"AI":[5],"has":[6],"underscored":[7],"the":[8,48,62,73,101,107,169,173],"critical":[9],"need":[10],"for":[11,201],"identifying":[12],"image":[13,21,64,109],"ownership":[14],"and":[15,72,93,117,148,175,186],"protecting":[16],"copyrights.":[17],"This":[18],"makes":[19],"post-processing":[20],"watermarking":[22,96,110],"an":[23,35,67],"essential":[24],"tool":[25],"--":[26],"it":[27],"involves":[28],"embedding":[29],"a":[30,41,125,133,158,181],"specific":[31],"watermark":[32],"message":[33,43,69],"into":[34],"image,":[36],"with":[37],"successful":[38],"verification":[39],"if":[40],"similar":[42],"can":[44],"be":[45],"decoded":[46],"from":[47],"watermarked":[49,63,80,176],"image.":[50],"However,":[51],"this":[52],"method":[53],"is":[54,87,210],"susceptible":[55],"to":[56,65,151],"both":[57,91],"adversarial":[58],"attacks":[59,77],"that":[60,112,136,193],"manipulate":[61],"yield":[66],"unverified":[68],"upon":[70],"decoding,":[71],"proposed":[74],"identity":[75,85,115,154,187,206],"leakage-related":[76],"(e.g.,":[78],"forging":[79],"images).":[81],"threat":[83],"leakage":[86,188],"particularly":[88],"exacerbated":[89],"in":[90],"empirical":[92],"certified":[94,138,199],"robust":[95,134],"methods.":[97],"To":[98,119],"defend":[99],"against":[100,140],"aforementioned":[102],"attacks,":[103],"we":[104,123,156],"propose":[105,157],"W-IR,":[106],"first":[108],"framework":[111,196],"simultaneously":[113],"incorporates":[114],"protection":[116],"robustness.":[118],"enhance":[120],"model":[121],"robustness,":[122],"introduce":[124],"novel":[126],"randomized":[127],"smoothing":[128],"technique":[129],"as":[130],"part":[131],"watermarking,":[135],"offers":[137],"robustness":[139,185],"perturbations":[141],"across":[142],"two":[143],"distinct":[144],"transformation":[145],"spaces:":[146],"pixel-level":[147],"coordinate-level.":[149],"Moreover,":[150],"further":[152],"mitigate":[153],"leakage,":[155],"new":[159],"strategy":[160],"based":[161],"on":[162],"residual":[163,174],"information":[164,171],"loss,":[165],"aimed":[166],"at":[167,212],"minimizing":[168],"mutual":[170],"between":[172,184],"images.":[177],"Our":[178],"work":[179],"strikes":[180],"superior":[182],"balance":[183],"mitigation.":[189],"Extensive":[190],"experiments":[191],"demonstrate":[192],"our":[194],"W-IR":[195],"achieves":[197],"high":[198],"accuracy":[200],"authenticity":[202],"while":[203],"effectively":[204],"reducing":[205],"leakage.":[207],"\\footnote{The":[208],"code":[209],"available":[211],"https://github.com/holdrain/W-I-R.}":[213]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-05-13T00:00:00"}