Robust 3D Watermarking for NeRF-Induced Modality Shifts
This study systematically addresses the issues of copyright infringement that have emerged with the introduction of neural radiance fields (NeRFs) by defining scenarios and applying and analyzing existing protective technologies tailored to each case. To formalize these threats, we introduce a threat model consisting of security requirements against modality shifts and an attacker model that classifies misuse based on the modalities held by the creator and attacker. This results in nine representative infringement cases that guide our experimental design. Our novel end-to-end watermarking approach is robust against modality changes caused by neural rendering. Independent decoders that vary according to the domain are proposed to extract messages from watermarked data effectively. In addition, a generalized neural rendering (GNR) module is utilized to optimize the various 3D models. These elements are integrated in an end-to-end manner, enhancing the interaction between different modalities and improving the overall performance. This study systematically examines the effectiveness of both the existing and proposed methods through experiments across different distribution modalities.
Authors
- Jong‐Uk Hou (ORCID: https://orcid.org/0000-0002-7101-0244)
- Bo Seok Shim (ORCID: https://orcid.org/0000-0002-8092-585X)
- Seung-Lee Lee (ORCID: https://orcid.org/0009-0007-1512-4988)
- Minsoo Kang (ORCID: https://orcid.org/0000-0002-9459-1598)
Institutions
- Hallym University (KR)
Publication Details
- Journal
- ACM Transactions on Multimedia Computing Communications and Applications
- Published
- 2025-11-04
- DOI
- https://doi.org/10.1145/3774650
- Primary Topic
- Adversarial Robustness in Machine Learning
- Type
- article
- Field-Weighted Citation Impact
- 0.00