对于抗敏感性攻击水印的强化攻击  

Enhanced sensitivity attack on watermarking scheme with anti-attack capability

作　　者：张新鹏[1] 王朔中[1] 周振宇[1] 

机构地区：[1]上海大学通信与信息工程学院,上海200072

出　　处：《东南大学学报（自然科学版）》2007年第A01期53-57,共5页Journal of Southeast University：Natural Science Edition

基　　金：国家自然科学基金资助项目(60502039);上海市青年科技启明星计划资助项目(06QA14022)

摘　　要：指出一种可抵抗敏感性攻击的水印方案仍然存在安全漏洞.攻击者对2个不同的临界信号分别实施敏感性攻击得到2个估计信号,然后将这2个信号做和或做差,便可得到有效的攻击信号.在含水印的媒体内容中迭加此攻击信号,便可去除合法水印.即使进一步改进水印方案、增加模板数量来增强水印安全性,攻击者依然可以通过多次尝试获得有效的攻击信号,进而删除水印.实验结果表明这种增强的敏感性攻击方法可以在保持高视觉质量的条件下去除水印.It is pointed out that a loophole still exists in a watermarking scheme capable of resisting sensitivity attack. After performing the sensitivity attacks on two different constructed signals close to the decision boundary and gaining two estimated signals, the attacker may add/subtract an estimated signal into/ from another one to obtain an effective attack signal. By adding the attack signal into a legal watermarked content with a suitable strength, the embedded watermark can be removed. Even if numerous templates are introduced to improve the security of watermarking system, careful attempts for constructing two similar signals close to the decision boundary can still achieve an effective attack signal that can destroy the embedded watermark. Experimental results show that the embedded watermarks can be deleted when keeping a high perceptual quality of digital image.

关 键 词：数字水印 敏感性攻击 水印检测器 

分 类 号：TP391[自动化与计算机技术—计算机应用技术]