Meta-FC: Meta-Learning with Feature Consistency for Robust and Generalizable Watermarking
Yuheng Li, Weitong Chen, Chengcheng Zhu, Jiale Zhang, Chunpeng Ge, Di Wu, Guodong Long
Abstract
Deep learning-based watermarking has made remarkable progress in recent years. To achieve robustness against various distortions, current methods commonly adopt a training strategy where a single random distortion (SRD) is chosen as the noise layer in each training batch. However, the SRD strategy treats distortions independently within each batch, neglecting the inherent relationships among different types of distortions and causing optimization conflicts across batches. As a result, the robustness and generalizability of the watermarking model are limited. To address this issue, we propose a novel training strategy that enhances robustness and generalization via meta-learning with feature consistency (Meta-FC). Specifically, we randomly sample multiple distortions from the noise pool to construct a meta-training task, while holding out one distortion as a simulated ``unknown''distortion for the meta-testing phase. Through meta-learning, the model is encouraged to identify and utilize neurons that exhibit stable activations across different types of distortions, mitigating the optimization conflicts caused by the random sampling of diverse distortions in each batch. To further promote the transformation of stable activations into distortion-invariant representations, we introduce a feature consistency loss that constrains the decoded features of the same image subjected to different distortions to remain consistent. Extensive experiments demonstrate that, compared to the SRD training strategy, Meta-FC improves the robustness and generalization of various watermarking models by an average of 1.59%, 4.71%, and 2.38% under high-intensity, combined, and unknown distortions.
Ask about this paper
Your agent reads all of it.
Lune indexed this paper to the last equation, along with the top-tier papers that cite it. Ask a question and the answer quotes them.
Your agent calls
Luneget_paper_fulltext
Free to start. No credit card required.
Terminal
Install the CLIlune papers fulltext b5039569-7753-4f8b-b3d2-da629d762769Builds on17
- MBRS: Enhancing Robustness of DNN-based Watermarking by Mini-Batch of Real and Simulated JPEG CompressionZhaoyang Jia, Han Fang, Weiming ZhangACM MM 2021 · 251 citations
- PIMoG: An Effective Screen-shooting Noise-Layer Simulation for Deep-Learning-Based Watermarking NetworkHan Fang, Zhaoyang Jia, Zehua Ma, Ee-Chien Chang et al.ACM MM 2022 · 127 citations
- Towards Blind Watermarking: Combining Invertible and Non-invertible MechanismsRui Ma, Mengxi Guo, Yi Hou, Fan Yang et al.ACM MM 2022 · 100 citations
- Meta Gradient Adversarial AttackZheng Yuan, Jie Zhang, Yunpei Jia, Chuanqi Tan et al.ICCV 2021 · 95 citations
- SepMark: Deep Separable Watermarking for Unified Source Tracing and Deepfake DetectionXiaoshuai Wu, Xin Liao, Bo OuACM MM 2023 · 74 citations
Related papers
- Distortion Agnostic Deep WatermarkingXiyang Luo, Ruohan Zhan, Huiwen Chang, Feng Yang et al.CVPR 2020
- Learning Distortion Invariant Representation for Image Restoration from a Causality PerspectiveXin Li, Bingchen Li, Xin Jin, Cuiling Lan et al.CVPR 2023
- THE SELF-RE-WATERMARKING TRAP: FROM EXPLOIT TO RESILIENCEVithurabiman Senthuran, Yong Xiang, Iynkaran Natgunanathan, Uthayasanker ThayasivamICLR 2026
- Flow-Based Robust Watermarking with Invertible Noise Layer for Black-Box DistortionsHan Fang, Yupeng Qiu, Kejiang Chen, Jiyi Zhang et al.AAAI 2023 · 73 citations
- WRAP: Watermarking Approach Robust Against Film-coating upon Printed PhotographsGaozhi Liu, Yichao Si, Zhenxing Qian, Xinpeng Zhang et al.ACM MM 2023 · 20 citations
