Preprint
Aug 2026
Robust Watermarks Meet Backdoored Models: Evading Diffusion Semantic Watermarks via Stealthy Backdoor
GhostVAE is proposed to plant a stealthy backdoor into the encoder of Variational Autoencoder (VAE), enabling reliable evasion of watermark detection and fundamentally undermines the trustworthiness of semantic watermarking systems.
Jinyuan Liu, Tianshuo Cong, Pei Li et al.
· 0 citations