Skip to content

X-SG2S: Safe and Generalizable Gaussian Splatting with X-dimensional Watermarks

Feb 2025 · arXiv.org · Vol abs/2502.10475 · 1 citation · ⚡ 1 influential · 53 references
Computer Science

TL;DR

X-SG$^2$S is the first framework to unify 1D-to-3D watermarking and enable simultaneous multi-modal watermark embedding in 3DGS, achieving this with minimal rendering interference and zero modifications to parameters or pipelines.

Abstract

3D Gaussian Splatting (3DGS) has been widely used in 3D reconstruction and 3D generation. However, the rapid adoption of 3D Gaussian Splatting raises growing concerns about information leakage and unauthorized use, urging the exploration of effective watermarking techniques. However, existing methods are limited by low capacity, fragility under geometric perturbations, and the infeasible requirement for costly fine-tuning or pipeline modifications, motivating the need for a generalizable, feed-forward framework capable of robust multi-modal embedding with minimal intrusion. In this paper, we propose a new framework X-SG$^2$S which can simultaneously inject 1D to 3D watermarks for copyright protection, while keeping the high fidelity of original 3DGS scenes. Specifically, we first split the watermarks into message patches. A self-adaptive gate is developed to select the injection positions of the watermark messages. Then, we use an XD (multi-dimensional) injection head to inject multi-modal messages into sorted 3DGS points. To restore watermarking messages, a learnable gate is developed to recognize the watermarked locations, from which our XD-extraction heads are used to restore hidden messages. X-SG$^2$S is the first framework to unify 1D-to-3D watermarking and enable simultaneous multi-modal watermark embedding in 3DGS, achieving this with minimal rendering interference and zero modifications to parameters or pipelines. Extensive experiments demonstrate that X-SG$^2$S effectively preserves consistency between the watermark and the original 3DGS, exhibits robustness against model degradation, and maintains accurate judgment capabilities.

View source

Similar papers

Preprint Aug 2026

NGS-Marker: Robust Native Watermarking for 3D Gaussian Splatting

With the rapid development and adoption of 3D Gaussian Splatting (3DGS), the need for effective copyright protection has become increasingly critical. Existing watermarking techniques for 3DGS mainly focus on protecting rendered images via pre-trained decoders, leaving the underlying 3D Gaussian primitives vulnerable t...

Hao Qin, Yukai Sun, Lu-Yuan Chen et al. · 0 citations
Conference Open access Sep 2026

Guard4D: Robust Watermarking for 4D Gaussian Splatting via Decoupled Decoding

4D Gaussian Splatting (4DGS) enables high-quality, real-time rendering of dynamic scenes and is becoming a popular format for sharing 4D assets. This trend calls for robust copyright watermarking that can be verified from rendered videos without access to the original scene or model parameters. However, watermarking 4D...

Ying-Ying Shi, Zhong-Long Zhou, Bin Zhou · 0 citations
Conference Aug 2026

Robust 3D Gaussian splatting watermarking via hybrid optimization

3D Gaussian Splatting (3DGS) has demonstrated substantial commercial potential due to its excellent real-time rendering, thus increasing the demand for digital watermarking for copyright protection. However, the rendering of 3DGS critically depends on millions of Gaussian points within the model. These points are vulne...

Jinlong Yang, Jian Xiong, Chao Zhang et al. · 0 citations
Book Open access Aug 2026

GaussTrap: Stealthy Backdoor Attacks on 3D Gaussian Splatting for Targeted Scene Misperception

3D Gaussian Splatting (3DGS) has recently emerged as a powerful paradigm for real-time scene representation and novel view synthesis, gaining traction in safety-critical applications such as autonomous driving and AR/VR systems. However, the security vulnerabilities of 3DGS remain largely unexplored. In this paper, we...

Jia-Xin Hong, Si-Xu Chen, Shuo-Yang Sun et al. · 1 citation
Preprint Open access Aug 2026

KISS-GS: 3D Gaussian Splatting Compression Kept Simple

Scene reconstruction with 3D Gaussian Splatting (3DGS) has become common, however deployment remains painful as the uncompressed file sizes can be massive. Current 3DGS compression systems combine multiple strategies for file size reduction, which can obscure where gains come from and limit component reuse across train...

W. Morgenstern, Friedrich Elias Branschke, F. Fleischmann et al. · 0 citations
Preprint Sep 2026

Persistent Watermarking of Text-to-Image Models

Text-to-image (T2I) generation is gaining increasing popularity with the general public, motivating the development of reliable mechanisms for copyrighting such models given their expensive training costs. An adversary may obtain and reuse a pretrained T2I model without authorization, and then serve a modified version...

Di-Xi Yao, Kai-Wen Chen, Tahseen Rabbani et al. · 0 citations

Related blog posts

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.