The requirement to embed watermarks in synthetic data transforms the immensely hard task of deepfake detection into a simple extraction of a watermark. In fact, the unauthorized use of synthetic samples is difficult when watermarks are embedded in all AI-generated data. The goal of our study is to generate realistic fingerprints that include transparent watermarks by combining the traditional watermarking with Generative Adversarial Networks (GAN). We embed a watermark into all training images, train GAN models, and study under which training hyperparameters the watermark is transferred from training to generated samples. Watermarks are embedded by a hybrid algorithm based on discrete cosine transformation, discrete wavelet transformation, and singular value decomposition. The pix2pix network is utilized to reconstruct realistic fingerprints from minutiae. The feasibility of the watermark transfer is demonstrated by assessing the imperceptibility of watermarks and their robustness to the GAN training as well as by assessing the realism of generated fingerprints and proving their identities.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Transferring Watermarks from Training to AI-Generated Fingerprint Images

  • Andrey Makrushin,
  • Venkata Srinath Mannam,
  • Jana Dittmann

摘要

The requirement to embed watermarks in synthetic data transforms the immensely hard task of deepfake detection into a simple extraction of a watermark. In fact, the unauthorized use of synthetic samples is difficult when watermarks are embedded in all AI-generated data. The goal of our study is to generate realistic fingerprints that include transparent watermarks by combining the traditional watermarking with Generative Adversarial Networks (GAN). We embed a watermark into all training images, train GAN models, and study under which training hyperparameters the watermark is transferred from training to generated samples. Watermarks are embedded by a hybrid algorithm based on discrete cosine transformation, discrete wavelet transformation, and singular value decomposition. The pix2pix network is utilized to reconstruct realistic fingerprints from minutiae. The feasibility of the watermark transfer is demonstrated by assessing the imperceptibility of watermarks and their robustness to the GAN training as well as by assessing the realism of generated fingerprints and proving their identities.