Demo Data from VLDB 2026 / reviewers in the wild / expert
Valeriu Lacatusu
dblp:417/7363
· DBLP profile ↗
1ranked-venue papers
0as first author
1since 2021 · last 2025
—ORCID · none
Domains — the database's venue-derived domains; a paper can count in several
Artificial intelligence and machine learning · 1 · 1 since 2021
Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.
| Network and information security
1 paper |
Digital forensics and information hiding · 100% |
Topics — the 4 heaviest of 4, each with the papers that count most for it
| Topic | Weight | Papers | Last | Evidence papers |
|---|---|---|---|---|
Digital forensics and information hiding › watermarking › watermarking security › watermark attack
watermark forgery |
0.9 | 1 | 2025 | Transferable Black-Box One-Shot Forging of Watermarks via Image Preference Models · NeurIPS 2025 |
Digital forensics and information hiding
watermarking |
0.9 | 1 | 2025 | Transferable Black-Box One-Shot Forging of Watermarks via Image Preference Models · NeurIPS 2025 |
Digital forensics and information hiding › watermarking › watermarking security › watermark attack
watermark removal |
0.9 | 1 | 2025 | Transferable Black-Box One-Shot Forging of Watermarks via Image Preference Models · NeurIPS 2025 |
Digital forensics and information hiding › watermarking
generative model watermarking |
0.3 | 1 | 2025 | Transferable Black-Box One-Shot Forging of Watermarks via Image Preference Models · NeurIPS 2025 |
Methods — techniques the papers use, named apart from their topics
ranking loss · 0.9preference model · 0.9backpropagation-based image optimization · 0.9
| Year | Publication | Venue | Position |
|---|---|---|---|
| 2025 | Transferable Black-Box One-Shot Forging of Watermarks via Image Preference ModelsabstractRecent years have seen a surge in interest in digital content watermarking techniques, driven by the proliferation of generative models and increased legal pressure. With an ever-growing percentage of AI-generated content available online, watermarking plays an increasingly important role in ensuring content authenticity and attribution at scale. There have been many works assessing the robustness of watermarking to removal attacks, yet, watermark forging, the scenario when a watermark is stolen from genuine content and applied to malicious content, remains underexplored. In this work, we investigate watermark forging in the context of widely used post-hoc image watermarking. Our contributions are as follows. First, we introduce a preference model to assess whether an image is watermarked. The model is trained using a ranking loss on purely procedurally generated images without any need for real watermarks. Second, we demonstrate the model's capability to remove and forge watermarks by optimizing the input image through backpropagation. This technique requires only a single watermarked image and works without knowledge of the watermarking model, making our attack much simpler and more practical than attacks introduced in related work. Third, we evaluate our proposed method on a variety of post-hoc image watermarking models, demonstrating that our approach can effectively forge watermarks, questioning the security of current watermarking approaches. Our code and further resources are publicly available. Tomás Soucek, Sylvestre-Alvise Rebuffi, Pierre Fernandez, Nikola Jovanovic 0001, Hady ElSahar, Valeriu Lacatusu, Alexandre Mourachko |
NeurIPS | 6 |