The content discusses the development of a watermarking technique called Gaussian Shading for diffusion models, which aims to address the challenges of copyright protection and inappropriate content generation associated with the practical implementation of diffusion models.
The key highlights are:
Existing watermarking methods for diffusion models often compromise model performance or require additional training, which is undesirable for operators and users.
Gaussian Shading is a novel watermarking technique that is both performance-lossless and training-free, serving the dual purpose of copyright protection and tracing of offending content.
The watermark embedding process in Gaussian Shading involves three main elements: watermark diffusion, randomization, and distribution-preserving sampling. This ensures that the distribution of watermarked latent representations is indistinguishable from non-watermarked ones, achieving performance-lossless.
The watermark can be extracted through DDIM inversion and inverse sampling, exhibiting resilience to various noise attacks and erasure attempts.
Extensive experiments on multiple versions of Stable Diffusion demonstrate that Gaussian Shading not only achieves performance-lossless but also outperforms existing methods in terms of robustness.
The authors provide a theoretical proof to show that Gaussian Shading is performance-lossless under chosen watermark tests.
Sang ngôn ngữ khác
từ nội dung nguồn
arxiv.org
Thông tin chi tiết chính được chắt lọc từ
by Zijin Yang,K... lúc arxiv.org 04-09-2024
https://arxiv.org/pdf/2404.04956.pdfYêu cầu sâu hơn