Blur-plus-deblur and generator fine-tuning can push watermark bit accuracy toward chance, but only when the attacker can train a surrogate decoder that matches the target's architecture.
In: 2020 ieee symposium on security and privacy (sp)
1 Pith paper cite this work. Polarity classification is still indexing.
1
Pith paper citing it
fields
cs.CR 1years
2025 1verdicts
REJECT 1representative citing papers
citing papers explorer
-
When There Is No Decoder: Removing Watermarks from Stable Diffusion Models in a No-box Setting
Blur-plus-deblur and generator fine-tuning can push watermark bit accuracy toward chance, but only when the attacker can train a surrogate decoder that matches the target's architecture.