Jin S Seo, Jaap Haitsma, Ton Kalker, and Chang D Yoo. A robust image fingerprinting system using the Radon transform. Signal Processing: Image Communication, 19(4):325-339, April 2004. ISSN 0923-5965. doi: 10.1016/j(image.2003.12.001. URL https://www.sciencedirect.com/science/article/pii/S0923596503001541.
V. Solachidis and L. Pitas. Circularly symmetric watermark embedding in 2-D DFT domain. IEEE Transactions on Image Processing, 10(11):1741-1753, November 2001. ISSN 1941-0042. doi: 10.1109/83.967401.
Yang Song and Stefano Ermon. Generative Modeling by Estimating Gradients of the Data Distribution. arXiv:1907.05600 [cs, stat], October 2019. URL http://arxiv.org/abs/1907.05600.
Yang Song and Stefano Ermon. Improved Techniques for Training Score-Based Generative Models. arXiv:2006.09011 [cs, stat], June 2020. URL http://arxiv.org/abs/2006.09011.
Yusuke Uchida, Yuki Nagai, Shigeyuki Sakazawa, and Shin'ichi Satoh. Embedding Watermarks into Deep Neural Networks. In Proceedings of the 2017 ACM on International Conference on Multimedia Retrieval, pages 269-277, Bucharest Romania, June 2017. ACM. ISBN 978-1-4503-4701-3. doi: 10.1145/3078971.3078974. URL https://dl.acm.org/doi/10.1145/3078971.3078974.
Bram Wallace, Akash Gokul, and Nikhil Naik. EDICT: Exact Diffusion Inversion via Coupled Transformations. arxiv:2211.12446[cs], December 2022. doi: 10.48550/arXiv.2211.12446. URL http://arxiv.org/abs/2211.12446.
Wenbo Wan, Jun Wang, Yunming Zhang, Jing Li, Hui Yu, and Jande Sun. A comprehensive survey on robust image watermarking. Neurocomputing, 488:226-247, June 2022. ISSN 0925-2312. doi: 10. 1016/j.neucom.2022.02.083. URL https://www.sciencedirect.com/science/article/ pii/S0925231222002533.
Ning Yu, Vladislav Skripniuk, Sahar Abdelnabi, and Mario Fritz. Artificial Fingerprinting for Generative Models: Rooting Deepfake Attribution in Training Data. arxiv:2007.08457[cs], March 2022. doi: 10.48550/arXiv.2007.08457. URL http://arxiv.org/abs/2007.08457.
Jialong Zhang, Zhongshu Gu, Jiyong Jang, Hui Wu, Marc Stoecklin, Heqing Huang, and Ian Molloy. Protecting intellectual property of deep neural networks with watermarking. In ACM Symposium on Information, Computer and Communications Security. Association for Computing Machinery, Inc., May 2018. ISBN 978-1-4503-5576-6. doi: 10.1145/3196494.3196550. URL https://research.ibm.com/publications/protecting-intellectual-property-of-deep-neural-networks-with-watermarking.
Jiaxin Zhang, Kamalika Das, and Sricharan Kumar. On the Robustness of Diffusion Inversion in Image Manipulation. In ICLR 2023 Workshop on Trustworthy and Reliable Large-Scale Machine Learning Models, April 2023. URL https://openreview.net/forum?id=fr8kurMWJIP.
Kevin Alex Zhang, Lei Xu, Alfredo Cuesta-Infante, and Kalyan Veeramachaneni. Robust Invisible Video Watermarking with Attention. arxiv:1909.01285[cs], September 2019. doi: 10.48550/arXiv.1909.01285. URL http://arxiv.org/abs/1909.01285.
Yunqing Zhao, Tianyu Pang, Chao Du, Xiao Yang, Ngai-Man Cheung, and Min Lin. A Recipe for Watermarking Diffusion Models. arxiv:2303.10137[cs], March 2023. doi: 10.48550/arXiv.2303.10137. URL http://arxiv.org/abs/2303.10137.
Jiren Zhu, Russell Kaplan, Justin Johnson, and Li Fei-Fei. HiDDeN: Hiding Data with Deep Networks. In Proceedings of the European Conference on Computer Vision (ECCV), pages 657-672, 2018. URL https://openaccess.thecvf.com/content_ECCV_2018/html/Jiren_Zhu_HiDDeN_Hiding_Data_ECCV_2018_paper.html.