Picking watermarks from noise (PWFN): an improved robust watermarking model against intensive distortions
Sijing Xie, Chengxin Zhao, Nan Sun, Wei Li, Hefei Ling
TL;DR
The paper addresses the limited robustness of deep-learning watermarking under strong distortions by introducing PWFN, which places a denoise module between the noiser and decoder and employs an SE-based encoder to enhance watermark–image coupling. The approach transforms robust watermark extraction into a denoising recovery problem and optimizes a joint loss over encoder, denoiser, decoder, and discriminator, enabling end-to-end training. Key contributions include the denoise module for restoring degraded signals and the SE-encoder for improved coupling, with ablation showing their effectiveness; results demonstrate competitive performance and superiority at higher noise intensities, along with cross-dataset generalization. This framework offers practical enhancements for robust watermarking in realistic distortion scenarios and can be extended to existing watermarking networks to improve robustness and visual quality.
Abstract
Digital watermarking is the process of embedding secret information by altering images in an undetectable way to the human eye. To increase the robustness of the model, many deep learning-based watermarking methods use the encoder-noise-decoder architecture by adding different noises to the noise layer. The decoder then extracts the watermarked information from the distorted image. However, this method can only resist weak noise attacks. To improve the robustness of the decoder against stronger noise, this paper proposes to introduce a denoise module between the noise layer and the decoder. The module aims to reduce noise and recover some of the information lost caused by distortion. Additionally, the paper introduces the SE module to fuse the watermarking information pixel-wise and channel dimensions-wise, improving the encoder's efficiency. Experimental results show that our proposed method is comparable to existing models and outperforms state-of-the-art under different noise intensities. In addition, ablation experiments show the superiority of our proposed module.
