{"about":{"site":"https://codewithpapers.app","non_affiliation":"Code with Papers and Syntology are not affiliated with, endorsed by, or sponsored by Papers with Code, Meta, or the pwc-archive mirror.","licence":"CC BY-SA 4.0","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","attribution":"https://codewithpapers.app/attribution","modified":"archive material modified by Syntology; see the attribution page"},"url":"/paper/watermark-vaccine-adversarial-attacks-to","title":"Watermark Vaccine: Adversarial Attacks to Prevent Watermark Removal","arxiv_id":"2207.08178","date":"2022-07-17","proceeding":null,"authors":["Xinwei Liu","Jian Liu","Yang Bai","Jindong Gu","Tao Chen","Xiaojun Jia","Xiaochun Cao"],"abstract":"As a common security tool, visible watermarking has been widely applied to protect copyrights of digital images. However, recent works have shown that visible watermarks can be removed by DNNs without damaging their host images. Such watermark-removal techniques pose a great threat to the ownership of images. Inspired by the vulnerability of DNNs on adversarial perturbations, we propose a novel defence mechanism by adversarial machine learning for good. From the perspective of the adversary, blind watermark-removal networks can be posed as our target models; then we actually optimize an imperceptible adversarial perturbation on the host images to proactively attack against watermark-removal networks, dubbed Watermark Vaccine. Specifically, two types of vaccines are proposed. Disrupting Watermark Vaccine (DWV) induces to ruin the host image along with watermark after passing through watermark-removal networks. In contrast, Inerasable Watermark Vaccine (IWV) works in another fashion of trying to keep the watermark not removed and still noticeable. Extensive experiments demonstrate the effectiveness of our DWV/IWV in preventing watermark removal, especially on various watermark removal networks.","url_abs":"https://arxiv.org/abs/2207.08178v1","url_pdf":"https://arxiv.org/pdf/2207.08178v1.pdf","source":{"archive":"pwc-archive (Hugging Face), CC BY-SA 4.0","snapshot":"2025-07-28","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","row_kind":"abstracts"},"code_links":[{"paper_slug":"watermark-vaccine-adversarial-attacks-to","repo_url":"https://github.com/thinwayliu/watermark-vaccine","is_official":1,"mentioned_in_paper":1,"mentioned_in_github":1,"framework":"pytorch","reach":{"status":"ok"}}],"tasks":[],"methods":[],"datasets_introduced":[],"methods_introduced":[],"results":[],"syntology":{"atlas_url":"https://app.syntology.ai/?focus=2207.08178","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2207.08178"}},"developers":"https://syntology.ai/developers","read_at":"2026-09-24T18:15:14+00:00","read_at_is":"when the build read Syntology's graph, not when any sample ran","claim":"Per-sample execution status on synthesized fixtures; not a correctness claim about the paper. Samples come from repositories linked to the paper, official or community; repo_kind says which.","repos":[{"provenance":"external:paperswithcode_snapshot_2025-07-28","url":"https://github.com/thinwayliu/watermark-vaccine","reach":{"status":"ok"}},{"provenance":"deterministic:regex_extraction","url":"https://github.com/thinwayliu/Watermark-Vaccine","reach":{"status":"ok"}}],"summary":{"ran":2,"unverified":1},"by_repo_kind":{"official":{"samples":3,"ran":2,"repositories":1}},"repo_kind_vocabulary":{"official":"The archive marks this repository official for the paper","named_in_paper":"The archive records that the paper mentions this repository; it is not marked official","listed":"In the archive's code links for this paper, not marked official and not recorded as mentioned in the paper","found_in_text":"Syntology found this repository in the paper's own text; whether it is the authors' implementation is not asserted","community":"Not in the archive's code links for this paper; a community repository Syntology harvested"},"n_pointer_only_for_licence":3,"samples":[{"code_sha256_prefix":"a4bc5858aad3fa8a","entry":"generate_watermark_ori","repo":"thinwayliu/Watermark-Vaccine","repo_kind":"official","path":"model/BVMR/BVMR_WV.py","file_url":"https://github.com/thinwayliu/Watermark-Vaccine/blob/HEAD/model/BVMR/BVMR_WV.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"a4bc5858aad3fa8a"}},{"code_sha256_prefix":"77cce78fe2c8027b","entry":"solve_mask","repo":"thinwayliu/Watermark-Vaccine","repo_kind":"official","path":"model/BVMR/BVMR_WV.py","file_url":"https://github.com/thinwayliu/Watermark-Vaccine/blob/HEAD/model/BVMR/BVMR_WV.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"77cce78fe2c8027b"}},{"code_sha256_prefix":"3164d2192c08b819","entry":"BVMR_WV","repo":"thinwayliu/Watermark-Vaccine","repo_kind":"official","path":"model/BVMR/BVMR_WV.py","file_url":"https://github.com/thinwayliu/Watermark-Vaccine/blob/HEAD/model/BVMR/BVMR_WV.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"3164d2192c08b819"}}]},"arxiv_metadata":null,"syntology_extracted_results":null}