SPDMark：面向鲁棒视频水印的选择性参数位移
SPDMark: Selective Parameter Displacement for Robust Video Watermarking
将水印嵌入视频扩散模型的生成过程，通过LoRA实现参数位移，并利用密钥派生帧级消息与二分图匹配恢复帧序，为生成视频的溯源与防篡改提供可复用方案。
原文依据 Watermarks are embedded into the generated videos by modifying a subset of parameters in the generative model.
摘要译文
由模型翻译 · 术语统一 · 请对照原文核对关键结论高质量视频生成模型的出现，加剧了对鲁棒水印方案的需求，以便可靠地检测和追踪生成视频的来源。现有的基于事后和生成中方法的视频水印方法，无法同时实现不可感知性、鲁棒性和计算效率。本文提出了一种新的生成中视频水印框架，称为SPDMark（发音为“SpeedMark”），基于视频扩散模型的选择性参数位移。通过修改生成模型中的一部分参数，将水印嵌入到生成的视频中。为了使问题易于处理，位移被建模为逐层基偏移的加性组合，其中最终组合由水印密钥索引。为了参数效率，本文特别利用低秩适应（LoRA）来实现基偏移。在训练阶段，基偏移和水印提取器通过最小化消息恢复、感知相似性和时序一致性损失的组合来联合学习。为了检测和定位水印视频中的时序修改，我们使用密码哈希函数从给定的基础水印密钥派生帧特定的水印消息。在水印提取过程中，应用最大二分图匹配来恢复正确的帧顺序，即使是从时序篡改的视频中。在文本到视频和图像到视频生成模型上的评估表明，SPDMark能够生成不可感知的水印，并能以高准确率恢复，同时确立了其对各种常见视频修改的鲁棒性。
英文原文摘要 1774 字符
The advent of high-quality video generation models has amplified the need for robust watermarking schemes that can be used to reliably detect and track the provenance of generated videos. Existing video watermarking methods based on both post-hoc and in-generation approaches fail to simultaneously achieve imperceptibility, robustness, and computational efficiency. This work introduces a novel framework for in-generation video watermarking called \texttt SPDMark (pronounced `SpeedMark') based on selective parameter displacement of a video diffusion model. Watermarks are embedded into the generated videos by modifying a subset of parameters in the generative model. To make the problem tractable, the displacement is modeled as an additive composition of layer-wise basis shifts, where the final composition is indexed by the watermarking key. For parameter efficiency, this work specifically leverages low-rank adaptation (LoRA) to implement the basis shifts. During the training phase, the basis shifts and the watermark extractor are jointly learned by minimizing a combination of message recovery, perceptual similarity, and temporal consistency losses. To detect and localize temporal modifications in the watermarked videos, we use a cryptographic hashing function to derive frame-specific watermark messages from the given base watermarking key. During watermark extraction, maximum bipartite matching is applied to recover the correct frame order, even from temporally tampered videos. Evaluations on both text-to-video and image-to-video generation models demonstrate the ability of \texttt SPDMark to generate imperceptible watermarks that can be recovered with high accuracy and also establish its robustness against a variety of common video modifications.