{"id":"W4411337494","doi":"10.1109/sp61157.2025.00005","title":"UnMarker: A Universal Attack on Defensive Image Watermarking","year":2025,"lang":"en","type":"article","venue":"","topic":"Advanced Steganography and Watermarking Techniques","field":"Computer Science","cited_by":9,"is_retracted":false,"has_abstract":true,"ca_institutions":"University of Waterloo","funders":"","keywords":"Digital watermarking; Computer science; Image (mathematics); Computer security; Computer vision; Artificial intelligence","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0001415804,0.0001642801,0.0001466788,0.0003057607,0.0001853142,0.000131792,0.0007796069,0.00006421685,0.00000917349],"category_scores_gemma":[0.00001602106,0.0001353804,0.0001056608,0.0005189383,0.00007131914,0.0004891487,0.0003507342,0.0001590411,0.00002301691],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.00004743355,"about_ca_system_score_gemma":0.00003094701,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.000009417727,"about_ca_topic_score_gemma":0.000002890509,"domain_scores_codex":[0.9989342,0.00006721866,0.0001573545,0.0003988249,0.0001400371,0.0003023416],"domain_scores_gemma":[0.9991273,0.0001090483,0.0000432951,0.0005885173,0.00008354611,0.0000483519],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"theoretical_or_conceptual","study_design_gemma":"not_applicable","study_design_scores_codex":[0.0001190877,0.0001494958,0.002024628,0.00005605766,0.0001119993,0.0002649539,0.0006475304,0.00006779599,0.006063457,0.8598279,0.03992195,0.09074511],"study_design_scores_gemma":[0.002253166,0.0005508982,0.007818049,0.0007694678,0.00004837332,0.0000473689,0.0002371871,0.03481818,0.3682031,0.1870685,0.3964244,0.001761364],"study_design_candidate":"theoretical_or_conceptual","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.007788312,0.00001944635,0.8221169,0.001287766,0.000264164,0.0001545422,0.000001151141,0.0009052458,0.1674625],"genre_scores_gemma":[0.8251574,0.00003290052,0.1697507,0.002300904,0.0000215503,0.00001144941,0.000002614817,0.000008529117,0.002713923],"genre_candidate":"methods","genre_consensus":null,"teacher_disagreement_score":0.8173691,"threshold_uncertainty_score":0.5520651,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.01470697924575288,"score_gpt":0.2749178899341233,"score_spread":0.2602109106883704,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}