WatermarkAttacker

Welcome to contribute to this project!

This repository contains the code for the paper Invisible Image Watermarks Are Provably Removable Using Generative AI.

We propose a family of regeneration attacks to remove invisible image watermarks. The attack method effectively removes invisible watermarks.

Our attack first maps the watermarked image to its embedding, which is another representation of the image. Then the embedding is noised to destruct the watermark. After that, a regeneration algorithm reconstructs the image from the noisy embedding. As shown in the figure below:

Example

First, install the dependencies:

pip install -r requirements.txt

Then, run the following command to install modified diffusers

pip install -e .

Then you can try the demo in demo.ipynb.

This demo attacks invisible-watermark which is used in stable diffusion.