Watermark Robustness against Imprint Removal Attack on SD generated images 2.1
1Detection Rate (50 steps)TR+P
Evaluation results
| Method | Links | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|
| TR+PAttacker Scheduler=DPM (SD 2.1)2026.05 | 1 | 1 | 1 | — | — | — | 0.9998 | 1 | 1 | |
| GS+PAttacker Scheduler=DPM (SD 2.1)2026.05 | 1 | 1 | 1 | 0.9979 | 0.999 | 0.999 | 1 | 1 | 1 | |
| T2SMark+PAttacker Scheduler=DPM (SD 2.1)2026.05 | 1 | 1 | 1 | 0.9998 | 1 | 1 | 1 | 1 | 1 | |
| PRC+PAttacker Scheduler=DPM (SD 2.1)2026.05 | 0.97 | 1 | 0.99 | 0.8748 | 1 | 0.9753 | — | — | — | |
| T2SMarkAttacker Scheduler=DPM (SD 2.1)2026.05 | 0.49 | 0.95 | 1 | 0.5111 | 0.4945 | 0.4975 | 0.8481 | 0.9993 | 1 | |
| TRAttacker Scheduler=DPM (SD 2.1)2026.05 | 0.25 | 0.13 | 0.1 | — | — | — | 0.4033 | 0.1877 | 0.1384 | |
| GSAttacker Scheduler=DPM (SD 2.1)2026.05 | 0 | 0 | 0 | 0.2586 | 0.0326 | 0.0062 | 0.0734 | 0 | 0 | |
| PRCAttacker Scheduler=DPM (SD 2.1)2026.05 | 0 | 0 | 0 | 0.4976 | 0.4994 | 0.4999 | — | — | — |