3 papers indexed here
We haven’t gathered this author’s papers yet. Follow them and we’ll fetch their work.
Not the right person? Other researchers publish under this name.
The exact best-case limit for any image-only verifier is given: the largest robust target-acceptance gap equals the minimum total-variation distance between the target distribution and the set of attacked source distributions.
Across generator swaps, including substitutions with similar model versions and model variants, FARE is effective at detecting swaps, consistently outperforming existing baselines at strict operating points, and remains effective under the exact-model and decision-only attacks evaluated in this work.
This work presents the first systematic robustness benchmark for local watermark robustness across 55 image transformations, and finds that signal distortions are often tolerated by the strongest methods, while geometric misalignment and generative local edits can completely impair payload recovery.
We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.
