一种抗屏摄攻击的DCT域深度水印方法  

Screen-shooting Resilient DCT Domain Watermarking Method Based on Deep Learning

作　　者：黄昌喜 赵成鑫 姜骁腾 凌贺飞[1] 刘辉[1] HUANG Changxi;ZHAO Chengxin;JIANG Xiaoteng;LING Hefei;LIU Hui(School of Computer Science and Technology,Huazhong University of Science and Technology,Wuhan 430074,China)

机构地区：[1]华中科技大学计算机科学与技术学院,武汉430074

出　　处：《计算机科学》2024年第2期343-351,共9页Computer Science

基　　金：国家自然科学基金(61972169);国家重点研发计划(2019QY(Y)0202,2022YFB2601802);湖北省重点研发计划(2022BAA046,2022BAA042);武汉基础研究知识创新项目(2020010601012182);中国博士后科学基金(2022M711251)。

摘　　要：数字水印技术在多媒体保护方面发挥着巨大的作用,实际应用需求的变更推动了数字水印技术的发展。目前,基于深度学习的水印技术在鲁棒性上有了较大的提升,但水印的嵌入基本在空域进行,载体图像的失真仍然比较明显。此外,现有方法在面对摄屏攻击时效果不佳。为解决上述问题,提出了一种抗屏摄攻击的DCT域深度水印方法。该模型由DCT层、编码器、解码器和屏摄模拟层组成。DCT层将图像的Y分量转换为DCT域,然后编码器通过端到端训练修改DCT系数,将秘密消息嵌入到图像中。这种频域嵌入方法使得水印信息能够分布到图像的整个空间,从而减少了失真效应。此外,还提出了一个噪声层,用于模拟屏摄过程中特殊的摩尔纹和反光效果。训练过程分为两个阶段:在第一阶段,编码器和解码器进行端到端的训练;而在第二阶段,屏摄模拟层和传统的失真攻击被用来增强水印图像,然后使用失真水印图像来进一步优化解码器。大量的实验结果表明,该模型具有较高的透明度和鲁棒性,并且在屏摄鲁棒性方面优于其他方法。Digital watermarking technology plays an important role in multimedia protection,and the various demands for practical applications promotes the development of digital watermarking technology.Recently,the robustness of the deep learning-based watermarking model has been greatly improved,but the embedding process is mostly carried out in the spatial domain,and this causes obvious distortions to original images.In addition,existing methods do not work well under the screen-shooting attack.To solve the above problems,this paper proposes a deep learning-based DCT domain watermarking method which is robust to the screen-shooting attack.This model consists of a DCT layer,an encoder,a decoder,and a screen shoot simulation layer.The DCT layer converts the Y component of images into the DCT domain,then the encoder embeds secret messages into the image by mo-difying the DCT coefficients through end-to-end training.This embedding method in the frequency domain makes the watermark information to be distributed to the whole space of images so that the distortion effect is reduced.Furthermore,we propose a noise layer to simulate moiréand light reflection effects,which are common distortions in the screen-shooting attack.The training process is splitted into two stages.In the first stage,the encoder and decoder are trained end-to-end.While in the second stage,the screen-shooting simulation layer and traditional distortion attacks are used to augment the watermarked image,then we use the distorted watermarked image to furtheroptimize the decoder.Extensive experimental results show that the proposed model has high transparency and robustness,and is superior to other methods in screen robustness.

关 键 词：数字水印 深度学习 DCT变换 不可感知性 屏摄鲁棒性 

分 类 号：TP391[自动化与计算机技术—计算机应用技术]