This repository contains the code for the paper Invisible Image Watermarks Are Provably Removable Using Generative AI.
We propose a family of regeneration attacks to remove invisible image watermarks. The attack method effectively removes invisible watermarks.
Our attack first maps the watermarked image to its embedding, which is another representation of the image. Then the embedding is noised to destruct the watermark. After that, a regeneration algorithm reconstructs the image from the noisy embedding. As shown in the figure below:
First, install the dependencies:
pip install -r requirements.txtThen, run the following command to install modified diffusers
pip install -e .Then you can try the demo in demo.ipynb.
This demo attacks invisible-watermark which is used in stable diffusion.