{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,16]],"date-time":"2026-06-16T08:53:26Z","timestamp":1781600006089,"version":"3.54.5"},"publisher-location":"New York, NY, USA","reference-count":34,"publisher":"ACM","license":[{"start":{"date-parts":[[2026,6,16]],"date-time":"2026-06-16T00:00:00Z","timestamp":1781568000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2026,6,17]]},"DOI":"10.1145\/3785353.3815077","type":"proceedings-article","created":{"date-parts":[[2026,6,16]],"date-time":"2026-06-16T08:11:30Z","timestamp":1781597490000},"page":"183-188","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["The Forensic Cost of Watermark Removal"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0007-4642-6970","authenticated-orcid":false,"given":"Gautier","family":"Evennou","sequence":"first","affiliation":[{"name":"IMATAG, Rennes, France; IRISA, Rennes, France and INRIA, Rennes, France"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0232-1097","authenticated-orcid":false,"given":"Ewa","family":"Kijak","sequence":"additional","affiliation":[{"name":"IRISA,, Rennes, France; Univ. Rennes, Rennes, France and INRIA, Rennes, France"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2026,6,16]]},"reference":[{"key":"e_1_3_3_1_2_2","series-title":"(ICML\u201924)","volume-title":"Proceedings of the 41st International Conference on Machine Learning","author":"An Bang","year":"2024","unstructured":"Bang An, Mucong Ding, Tahseen Rabbani, Aakriti Agrawal, Yuancheng Xu, Chenghao Deng, Sicheng Zhu, Abdirisak Mohamed, Yuxin Wen, Tom Goldstein, and Furong Huang. 2024. WAVES: benchmarking the robustness of image watermarks. In Proceedings of the 41st International Conference on Machine Learning(ICML\u201924)."},{"key":"e_1_3_3_1_3_2","volume-title":"IEEE International Conference on Computer Vision (ICCV)","author":"Bui Tu","year":"2025","unstructured":"Tu Bui, Shruti Agarwal, and John Collomosse. 2025. TrustMark: Robust Watermarking and Watermark Removal for Arbitrary Resolution Images. In IEEE International Conference on Computer Vision (ICCV)."},{"key":"e_1_3_3_1_4_2","doi-asserted-by":"crossref","first-page":"3","DOI":"10.1145\/3128572.3140444","volume-title":"Proceedings of the 10th ACM Workshop on Artificial Intelligence and Security","author":"Carlini Nicholas","year":"2017","unstructured":"Nicholas Carlini and David Wagner. 2017. Adversarial Examples Are Not Easily Detected: Bypassing Ten Detection Methods. In Proceedings of the 10th ACM Workshop on Artificial Intelligence and Security. 3\u201314."},{"key":"e_1_3_3_1_5_2","unstructured":"Wes Castro and Zeki Yalniz. 2025. Video Invisible Watermarking at Scale. Engineering at Meta. https:\/\/engineering.fb.com\/2025\/11\/04\/video-engineering\/video-invisible-watermarking-at-scale\/ Accessed: 2026-02-20."},{"key":"e_1_3_3_1_6_2","volume-title":"IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)","author":"Corvi Riccardo","year":"2023","unstructured":"Riccardo Corvi, Davide Cozzolino, Giada Zingarini, Giovanni Poggi, Koki Nagano, and Luisa Verdoliva. 2023. On The Detection of Synthetic Images Generated by Diffusion Models. In IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)."},{"key":"e_1_3_3_1_7_2","doi-asserted-by":"publisher","DOI":"10.1016\/B978-012372585-1.50005-X"},{"key":"e_1_3_3_1_8_2","doi-asserted-by":"crossref","first-page":"248","DOI":"10.1109\/CVPR.2009.5206848","volume-title":"2009 IEEE conference on computer vision and pattern recognition","author":"Deng Jia","year":"2009","unstructured":"Jia Deng, Wei Dong, Richard Socher, Li-Jia Li, Kai Li, and Li Fei-Fei. 2009. Imagenet: A large-scale hierarchical image database. In 2009 IEEE conference on computer vision and pattern recognition. IEEE, 248\u2013255."},{"key":"e_1_3_3_1_9_2","unstructured":"European Parliament and Council of the European Union. 2024. Regulation (EU) 2024\/1689 of the European Parliament and of the Council of 13 June 2024 laying down harmonised rules on artificial intelligence (Artificial Intelligence Act). https:\/\/eur-lex.europa.eu\/eli\/reg\/2024\/1689\/oj"},{"key":"e_1_3_3_1_10_2","unstructured":"Gautier Evennou Vivien Chappelier and Ewa Kijak. 2025. Fast Secure and High-Capacity Image Watermarking with Autoencoded Text Vectors. arxiv:https:\/\/arXiv.org\/abs\/2510.00799\u00a0[cs.CR] https:\/\/arxiv.org\/abs\/2510.00799"},{"key":"e_1_3_3_1_11_2","volume-title":"Proceedings of the IEEE International Workshop on Information Forensics and Security (WIFS)","author":"Evennou Gautier","year":"2024","unstructured":"Gautier Evennou, Vivien Chappelier, Ewa Kijak, and Teddy Furon. 2024. SWIFT: Semantic Watermarking for Image Forgery Thwarting. In Proceedings of the IEEE International Workshop on Information Forensics and Security (WIFS)."},{"key":"e_1_3_3_1_12_2","volume-title":"IEEE\/CVF International Conference on Computer Vision, ICCV 2023, Paris, France, October 1-6, 2023","author":"Fernandez Pierre","year":"2023","unstructured":"Pierre Fernandez, Guillaume Couairon, Herv\u00e9 J\u00e9gou, Matthijs Douze, and Teddy Furon. 2023. The Stable Signature: Rooting Watermarks in Latent Diffusion Models. In IEEE\/CVF International Conference on Computer Vision, ICCV 2023, Paris, France, October 1-6, 2023. IEEE. 10.1109\/ICCV51070.2023.02053"},{"key":"e_1_3_3_1_13_2","unstructured":"Pierre Fernandez Hady Elsahar I.\u00a0Zeki Yalniz and Alexandre Mourachko. 2024. Video Seal: Open and Efficient Video Watermarking. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2412.09492 (2024)."},{"key":"e_1_3_3_1_14_2","doi-asserted-by":"crossref","unstructured":"Teddy Furon and Patrick Bas. [n. d.]. Broken Arrows. EURASIP Journal on Information Security 2008 ([n. d.]) ID 597040.","DOI":"10.1155\/2008\/597040"},{"key":"e_1_3_3_1_15_2","volume-title":"Advances in Neural Information Processing Systems 30: Annual Conference on Neural Information Processing Systems 2017, December 4-9, 2017, Long Beach, CA, USA","author":"Heusel Martin","year":"2017","unstructured":"Martin Heusel, Hubert Ramsauer, Thomas Unterthiner, Bernhard Nessler, and Sepp Hochreiter. 2017. GANs Trained by a Two Time-Scale Update Rule Converge to a Local Nash Equilibrium. In Advances in Neural Information Processing Systems 30: Annual Conference on Neural Information Processing Systems 2017, December 4-9, 2017, Long Beach, CA, USA."},{"key":"e_1_3_3_1_16_2","doi-asserted-by":"publisher","unstructured":"Zhaoyang Jia Han Fang and Weiming Zhang. 2021. MBRS: Enhancing Robustness of DNN-based Watermarking by Mini-Batch of Real and Simulated JPEG Compression. 41\u201349. 10.1145\/3474085.3475324","DOI":"10.1145\/3474085.3475324"},{"key":"e_1_3_3_1_17_2","unstructured":"Black\u00a0Forest Labs. 2024. FLUX. https:\/\/github.com\/black-forest-labs\/flux."},{"key":"e_1_3_3_1_18_2","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"crossref","first-page":"740","DOI":"10.1007\/978-3-319-10602-1_48","volume-title":"Computer Vision - ECCV 2014 - 13th European Conference, Zurich, Switzerland, September 6-12, 2014, Proceedings, Part V","volume":"8693","author":"Lin Tsung-Yi","year":"2014","unstructured":"Tsung-Yi Lin, Michael Maire, Serge\u00a0J. Belongie, James Hays, Pietro Perona, Deva Ramanan, Piotr Doll\u00e1r, and C.\u00a0Lawrence Zitnick. 2014. Microsoft COCO: Common Objects in Context. In Computer Vision - ECCV 2014 - 13th European Conference, Zurich, Switzerland, September 6-12, 2014, Proceedings, Part V(Lecture Notes in Computer Science, Vol.\u00a08693), David\u00a0J. Fleet, Tom\u00e1s Pajdla, Bernt Schiele, and Tinne Tuytelaars (Eds.). Springer, 740\u2013755. 10.1007\/978-3-319-10602-1_48"},{"key":"e_1_3_3_1_19_2","unstructured":"Yepeng Liu Yiren Song Hai Ci Yu Zhang Haofan Wang Mike\u00a0Zheng Shou and Yuheng Bu. 2024. Image watermarks are removable using controllable regeneration from clean noise. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2410.05470 (2024)."},{"key":"e_1_3_3_1_20_2","volume-title":"The Thirteenth International Conference on Learning Representations, ICLR 2025, Singapore, April 24-28, 2025","author":"Lu Shilin","year":"2025","unstructured":"Shilin Lu, Zihan Zhou, Jiayou Lu, Yuanzhi Zhu, and Adams\u00a0Wai-Kin Kong. 2025. Robust Watermarking Using Generative Priors Against Image Editing: From Benchmarking to Advances. In The Thirteenth International Conference on Learning Representations, ICLR 2025, Singapore, April 24-28, 2025. OpenReview.net. https:\/\/openreview.net\/forum?id=16O8GCm8Wn"},{"key":"e_1_3_3_1_21_2","first-page":"1532","volume-title":"Proceedings of the 30th ACM International Conference on Multimedia","author":"Ma Rui","year":"2022","unstructured":"Rui Ma, Mengxi Guo, Yi Hou, Fan Yang, Yuan Li, Huizhu Jia, and Xiaodong Xie. 2022. Towards Blind Watermarking: Combining Invertible and Non-invertible Mechanisms. In Proceedings of the 30th ACM International Conference on Multimedia. 1532\u20131542."},{"key":"e_1_3_3_1_22_2","first-page":"10430","volume-title":"IEEE Conference on Computer Vision and Pattern Recognition, CVPR 2021, virtual, June 19-25, 2021","author":"Maho Thibault","year":"2021","unstructured":"Thibault Maho, Teddy Furon, and Erwan\u00a0Le Merrer. 2021. SurFree: A Fast Surrogate-Free Black-Box Attack. In IEEE Conference on Computer Vision and Pattern Recognition, CVPR 2021, virtual, June 19-25, 2021. Computer Vision Foundation \/ IEEE, 10430\u201310439. 10.1109\/CVPR46437.2021.01029"},{"key":"e_1_3_3_1_23_2","doi-asserted-by":"publisher","unstructured":"Federico Nesti Alessandro Biondi and Giorgio Buttazzo. 2023. Detecting Adversarial Examples by Input Transformations Defense Perturbations and Voting. IEEE Transactions on Neural Networks and Learning Systems (2023). 10.1109\/TNNLS.2021.3105238","DOI":"10.1109\/TNNLS.2021.3105238"},{"key":"e_1_3_3_1_24_2","volume-title":"International Conference on Machine Learning (ICML)","author":"Nie Weili","year":"2022","unstructured":"Weili Nie, Brandon Guo, Yujia Huang, Chaowei Xiao, Arash Vahdat, and Anima Anandkumar. 2022. Diffusion Models for Adversarial Purification. In International Conference on Machine Learning (ICML)."},{"key":"e_1_3_3_1_25_2","unstructured":"Aleksandar Petrov Pierre Fernandez Tom\u00e1\u0161 Sou\u010dek and Hady Elsahar. 2025. We Can Hide More Bits: The Unused Watermarking Capacity in Theory and in Practice. arxiv:https:\/\/arXiv.org\/abs\/2510.12812\u00a0[cs.CR] https:\/\/arxiv.org\/abs\/2510.12812"},{"key":"e_1_3_3_1_26_2","volume-title":"2024 IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR)","author":"Ricker Jonas","year":"2024","unstructured":"Jonas Ricker, Denis Lukovnikov, and Asja Fischer. 2024. AEROBLADE: Training-Free Detection of Latent Diffusion Images Using Autoencoder Reconstruction Error. In 2024 IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR). IEEE Computer Society, Los Alamitos, CA, USA. 10.1109\/CVPR52733.2024.00872"},{"key":"e_1_3_3_1_27_2","volume-title":"Advances in Neural Information Processing Systems","author":"Sou\u010dek Tom\u00e1\u0161","year":"2025","unstructured":"Tom\u00e1\u0161 Sou\u010dek, Sylvestre-Alvise Rebuffi, Pierre Fernandez, Nikola Jovanovi\u0107, Hady Elsahar, Valeriu Lacatusu, Tuan Tran, and Alexandre Mourachko. 2025. Transferable Black-Box One-Shot Forging of Watermarks via Image Preference Models. In Advances in Neural Information Processing Systems."},{"key":"e_1_3_3_1_28_2","doi-asserted-by":"crossref","first-page":"22388","DOI":"10.1109\/ICCV51070.2023.02051","volume-title":"2023 IEEE\/CVF International Conference on Computer Vision (ICCV)","author":"Wang Zhendong","year":"2023","unstructured":"Zhendong Wang, Jianmin Bao, Wengang Zhou, Weilun Wang, Hezhen Hu, Hong Chen, and Houqiang Li. 2023. DIRE for Diffusion-Generated Image Detection. In 2023 IEEE\/CVF International Conference on Computer Vision (ICCV). 22388\u201322398. 10.1109\/ICCV51070.2023.02051"},{"key":"e_1_3_3_1_29_2","first-page":"58047","volume-title":"Advances in Neural Information Processing Systems","volume":"36","author":"Wen Yuxin","year":"2023","unstructured":"Yuxin Wen, John Kirchenbauer, Jonas Geiping, and Tom Goldstein. 2023. Tree-Rings Watermarks: Invisible Fingerprints for Diffusion Images. In Advances in Neural Information Processing Systems , A.\u00a0Oh, T.\u00a0Naumann, A.\u00a0Globerson, K.\u00a0Saenko, M.\u00a0Hardt, and S.\u00a0Levine (Eds.), Vol.\u00a036. Curran Associates, Inc., 58047\u201358063. https:\/\/proceedings.neurips.cc\/paper_files\/paper\/2023\/file\/b54d1757c190ba20dbc4f9e4a2f54149-Paper-Conference.pdf"},{"key":"e_1_3_3_1_30_2","first-page":"16133","volume-title":"IEEE\/CVF Conference on Computer Vision and Pattern Recognition, CVPR 2023, Vancouver, BC, Canada, June 17-24, 2023","author":"Woo Sanghyun","year":"2023","unstructured":"Sanghyun Woo, Shoubhik Debnath, Ronghang Hu, Xinlei Chen, Zhuang Liu, In\u00a0So Kweon, and Saining Xie. 2023. ConvNeXt V2: Co-designing and Scaling ConvNets with Masked Autoencoders. In IEEE\/CVF Conference on Computer Vision and Pattern Recognition, CVPR 2023, Vancouver, BC, Canada, June 17-24, 2023. IEEE, 16133\u201316142. 10.1109\/CVPR52729.2023.01548"},{"key":"e_1_3_3_1_31_2","volume-title":"The Thirteenth International Conference on Learning Representations, ICLR 2025, Singapore, April 24-28, 2025","author":"Xie Enze","year":"2025","unstructured":"Enze Xie, Junsong Chen, Junyu Chen, Han Cai, Haotian Tang, Yujun Lin, Zhekai Zhang, Muyang Li, Ligeng Zhu, Yao Lu, and Song Han. 2025. SANA: Efficient High-Resolution Text-to-Image Synthesis with Linear Diffusion Transformers. In The Thirteenth International Conference on Learning Representations, ICLR 2025, Singapore, April 24-28, 2025."},{"key":"e_1_3_3_1_32_2","volume-title":"25th Annual Network and Distributed System Security Symposium, NDSS 2018, San Diego, California, USA, February 18-21, 2018","author":"Xu Weilin","year":"2018","unstructured":"Weilin Xu, David Evans, and Yanjun Qi. 2018. Feature Squeezing: Detecting Adversarial Examples in Deep Neural Networks. In 25th Annual Network and Distributed System Security Symposium, NDSS 2018, San Diego, California, USA, February 18-21, 2018."},{"key":"e_1_3_3_1_33_2","volume-title":"Forty-first International Conference on Machine Learning","author":"Zhang Hanlin","year":"2024","unstructured":"Hanlin Zhang, Benjamin\u00a0L. Edelman, Danilo Francati, Daniele Venturi, Giuseppe Ateniese, and Boaz Barak. 2024. Watermarks in the Sand: Impossibility of Strong Watermarking for Generative Models. In Forty-first International Conference on Machine Learning."},{"key":"e_1_3_3_1_34_2","volume-title":"2018 IEEE Conference on Computer Vision and Pattern Recognition, CVPR 2018, Salt Lake City, UT, USA, June 18-22, 2018","author":"Zhang Richard","unstructured":"Richard Zhang, Phillip Isola, Alexei\u00a0A. Efros, Eli Shechtman, and Oliver Wang. [n. d.]. The Unreasonable Effectiveness of Deep Features as a Perceptual Metric. In 2018 IEEE Conference on Computer Vision and Pattern Recognition, CVPR 2018, Salt Lake City, UT, USA, June 18-22, 2018."},{"key":"e_1_3_3_1_35_2","first-page":"682","volume-title":"Computer Vision \u2013 ECCV 2018: 15th European Conference, Munich, Germany, September 8-14, 2018, Proceedings, Part XV","author":"Zhu Jiren","year":"2018","unstructured":"Jiren Zhu, Russell Kaplan, Justin Johnson, and Li Fei-Fei. 2018. HiDDeN: Hiding Data With Deep Networks. In Computer Vision \u2013 ECCV 2018: 15th European Conference, Munich, Germany, September 8-14, 2018, Proceedings, Part XV (Munich, Germany). Springer-Verlag, Berlin, Heidelberg, 682\u2013697. 10.1007\/978-3-030-01267-0_40"}],"event":{"name":"IH&MMSec '26: ACM Workshop on Information Hiding and Multimedia Security","location":"Firenze Italy","acronym":"IH&MMSec '26","sponsor":["SIGMM ACM Special Interest Group on Multimedia"]},"container-title":["Proceedings of the 2026 ACM Workshop on Information Hiding and Multimedia Security"],"original-title":[],"deposited":{"date-parts":[[2026,6,16]],"date-time":"2026-06-16T08:11:45Z","timestamp":1781597505000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3785353.3815077"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,6,16]]},"references-count":34,"alternative-id":["10.1145\/3785353.3815077","10.1145\/3785353"],"URL":"https:\/\/doi.org\/10.1145\/3785353.3815077","relation":{},"subject":[],"published":{"date-parts":[[2026,6,16]]},"assertion":[{"value":"2026-06-16","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}