Stable Signature is Unstable: Removing Image Watermark from Diffusion Models

arXiv:2405.07145v1 Announce Type: new
Abstract: Watermark has been widely deployed by industry to detect AI-generated images. A recent watermarking framework called \emph{Stable Signature} (proposed by Meta) roots watermark into the parameters of a diffusion model's decoder such that its generated images are inherently watermarked. Stable Signature makes it possible to watermark images generated by \emph{open-source} diffusion models and was claimed to be robust against removal attacks. In this work, we propose a new attack to remove the watermark from a …

arxiv called cs.cr cs.cv decoder detect diffusion models framework generated image images industry meta signature watermarking