{"id":"https://openalex.org/W7166682934","doi":"https://doi.org/10.48550/arxiv.2606.29807","title":"Rethinking Forgery Attacks on Semantic Watermarks in Black-Box Settings: A Geometric Distortion Perspective","display_name":"Rethinking Forgery Attacks on Semantic Watermarks in Black-Box Settings: A Geometric Distortion Perspective","publication_year":2026,"publication_date":"2026-06-29","ids":{"openalex":"https://openalex.org/W7166682934","doi":"https://doi.org/10.48550/arxiv.2606.29807"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.29807","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.29807","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.29807","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5139700210","display_name":"Cheng-Yi Lee","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Lee, Cheng-Yi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5139709836","display_name":"Yichi Zhang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Yichi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5139694258","display_name":"Yuchen Yang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yang, Yuchen","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5139643423","display_name":"Chun-Shien Lu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Lu, Chun-Shien","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5139667943","display_name":"Jun-Cheng Chen","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chen, Jun-Cheng","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.8737000226974487,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.8737000226974487,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10775","display_name":"Generative Adversarial Networks and Image Synthesis","score":0.05939999967813492,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.025200000032782555,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.5444999933242798},{"id":"https://openalex.org/keywords/fidelity","display_name":"Fidelity","score":0.5299999713897705},{"id":"https://openalex.org/keywords/perspective","display_name":"Perspective (graphical)","score":0.5248000025749207},{"id":"https://openalex.org/keywords/perspective-distortion","display_name":"Perspective distortion","score":0.49540001153945923},{"id":"https://openalex.org/keywords/distortion","display_name":"Distortion (music)","score":0.45509999990463257},{"id":"https://openalex.org/keywords/noise","display_name":"Noise (video)","score":0.3677000105381012}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6118000149726868},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.5444999933242798},{"id":"https://openalex.org/C2776459999","wikidata":"https://www.wikidata.org/wiki/Q2119376","display_name":"Fidelity","level":2,"score":0.5299999713897705},{"id":"https://openalex.org/C12713177","wikidata":"https://www.wikidata.org/wiki/Q1900281","display_name":"Perspective (graphical)","level":2,"score":0.5248000025749207},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5164999961853027},{"id":"https://openalex.org/C2779989122","wikidata":"https://www.wikidata.org/wiki/Q15889487","display_name":"Perspective distortion","level":3,"score":0.49540001153945923},{"id":"https://openalex.org/C126780896","wikidata":"https://www.wikidata.org/wiki/Q899871","display_name":"Distortion (music)","level":4,"score":0.45509999990463257},{"id":"https://openalex.org/C99498987","wikidata":"https://www.wikidata.org/wiki/Q2210247","display_name":"Noise (video)","level":3,"score":0.3677000105381012},{"id":"https://openalex.org/C112933361","wikidata":"https://www.wikidata.org/wiki/Q2845258","display_name":"Probabilistic latent semantic analysis","level":2,"score":0.3183000087738037},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3140000104904175},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.31139999628067017},{"id":"https://openalex.org/C164112704","wikidata":"https://www.wikidata.org/wiki/Q7974348","display_name":"Watermark","level":3,"score":0.30820000171661377},{"id":"https://openalex.org/C43091099","wikidata":"https://www.wikidata.org/wiki/Q1067788","display_name":"Through-the-lens metering","level":3,"score":0.2867000102996826},{"id":"https://openalex.org/C2780148112","wikidata":"https://www.wikidata.org/wiki/Q1432581","display_name":"Proxy (statistics)","level":2,"score":0.25940001010894775},{"id":"https://openalex.org/C94124525","wikidata":"https://www.wikidata.org/wiki/Q912550","display_name":"Categorization","level":2,"score":0.25189998745918274}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.29807","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.29807","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.29807","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.29807","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Recent":[0],"studies":[1],"have":[2],"shown":[3],"that":[4,128],"semantic":[5],"watermarks,":[6],"which":[7,43,85],"embed":[8],"information":[9],"into":[10],"the":[11,40,55,61,66,88,103,107,138],"initial":[12],"noise":[13],"of":[14,39,57,63,90,109,140],"latent":[15,67,104],"diffusion":[16],"models":[17],"(LDMs),":[18],"are":[19],"vulnerable":[20],"to":[21,77,150],"black-box":[22,145],"forgery":[23],"attacks.":[24],"However,":[25],"existing":[26],"methods":[27],"primarily":[28],"rely":[29],"on":[30,102],"empirical":[31],"evidence":[32],"and":[33,82,112],"lack":[34],"a":[35,124],"rigorous":[36],"theoretical":[37],"understanding":[38],"conditions":[41],"under":[42],"such":[44,58],"attacks":[45,59],"succeed":[46],"or":[47],"fail.":[48],"To":[49],"bridge":[50],"this":[51,96],"gap,":[52],"we":[53,122],"rethink":[54],"nature":[56],"through":[60],"lens":[62],"rate-distortion":[64],"in":[65,106],"space.":[68],"Our":[69],"analysis":[70],"identifies":[71],"an":[72],"irreducible":[73],"distortion":[74,97],"floor":[75],"due":[76],"structural":[78],"mismatches":[79],"between":[80],"proxy":[81],"target":[83],"models,":[84],"fundamentally":[86],"limits":[87],"fidelity":[89],"forged":[91,130],"watermarks.":[92],"We":[93],"further":[94],"characterize":[95],"as":[98],"structured":[99],"geometric":[100],"deviations":[101],"manifold,":[105],"form":[108],"global":[110],"drift":[111],"local":[113],"deformation":[114],"rather":[115],"than":[116],"stochastic":[117],"noise.":[118],"Leveraging":[119],"these":[120],"insights,":[121],"propose":[123],"scheme-agnostic":[125],"detection":[126],"method":[127,142],"distinguishes":[129],"samples":[131],"before":[132],"watermark":[133],"verification.":[134],"Extensive":[135],"experiments":[136],"demonstrate":[137],"effectiveness":[139],"our":[141],"across":[143],"diverse":[144],"scenarios,":[146],"while":[147],"preserving":[148],"robustness":[149],"common":[151],"distortions.":[152]},"counts_by_year":[],"updated_date":"2026-07-01T06:29:00.853634","created_date":"2026-07-01T00:00:00"}