An Audio Watermarking Algorithm Based on Adversarial Perturbation

被引:0
作者
Wu, Shiqiang [1 ,2 ]
Liu, Jie [3 ]
Huang, Ying [3 ]
Guan, Hu [2 ]
Zhang, Shuwu [3 ]
机构
[1] Univ Chinese Acad Sci, Sch Artificial Intelligence, Beijing 100049, Peoples R China
[2] Chinese Acad Sci, Inst Automat, Beijing 100190, Peoples R China
[3] Beijing Univ Posts & Telecommun, Sch Artificial Intelligence, Beijing 100876, Peoples R China
来源
APPLIED SCIENCES-BASEL | 2024年 / 14卷 / 16期
基金
国家重点研发计划;
关键词
audio watermarking; deep learning; adversarial example; ROBUST; SEQUENCES; ATTACKS;
D O I
10.3390/app14166897
中图分类号
O6 [化学];
学科分类号
0703 ;
摘要
Recently, deep learning has been gradually applied to digital watermarking, which avoids the trouble of hand-designing robust transforms in traditional algorithms. However, most of the existing deep watermarking algorithms use encoder-decoder architecture, which is redundant. This paper proposes a novel audio watermarking algorithm based on adversarial perturbation, AAW. It adds tiny, imperceptible perturbations to the host audio and extracts the watermark with a pre-trained decoder. Moreover, the AAW algorithm also uses an attack simulation layer and a whitening layer to improve performance. The AAW algorithm contains only a differentiable decoder, so it reduces the redundancy. The experimental results also demonstrate that the proposed algorithm is effective and performs better than existing audio watermarking algorithms.
引用
收藏
页数:21
相关论文
共 62 条
[1]   ReDMark: Framework for residual diffusion watermarking based on deep networks [J].
Ahmadi, Mahdi ;
Norouzi, Alireza ;
Karimi, Nader ;
Samavi, Shadrokh ;
Emami, Ali .
EXPERT SYSTEMS WITH APPLICATIONS, 2020, 146
[2]   An Overview of Digital Video Watermarking [J].
Asikuzzaman, Md. ;
Pickering, Mark R. .
IEEE TRANSACTIONS ON CIRCUITS AND SYSTEMS FOR VIDEO TECHNOLOGY, 2018, 28 (09) :2131-2153
[3]  
Ba J, 2014, ACS SYM SER
[4]   Neural Codes for Image Retrieval [J].
Babenko, Artem ;
Slesarev, Anton ;
Chigorin, Alexandr ;
Lempitsky, Victor .
COMPUTER VISION - ECCV 2014, PT I, 2014, 8689 :584-599
[5]   Robust audio watermarking in the time domain [J].
Bassia, P ;
Pitas, I ;
Nikolaidis, N .
IEEE TRANSACTIONS ON MULTIMEDIA, 2001, 3 (02) :232-241
[6]   Screen-shooting resistant image watermarking based on lightweight neural network in frequency domain [J].
Cao, Fang ;
Wang, Tianjun ;
Guo, Daidou ;
Li, Jian ;
Qin, Chuan .
JOURNAL OF VISUAL COMMUNICATION AND IMAGE REPRESENTATION, 2023, 94
[7]   Audio Adversarial Examples: Targeted Attacks on Speech-to-Text [J].
Carlini, Nicholas ;
Wagner, David .
2018 IEEE SYMPOSIUM ON SECURITY AND PRIVACY WORKSHOPS (SPW 2018), 2018, :1-7
[8]   Emerging Properties in Self-Supervised Vision Transformers [J].
Caron, Mathilde ;
Touvron, Hugo ;
Misra, Ishan ;
Jegou, Herve ;
Mairal, Julien ;
Bojanowski, Piotr ;
Joulin, Armand .
2021 IEEE/CVF INTERNATIONAL CONFERENCE ON COMPUTER VISION (ICCV 2021), 2021, :9630-9640
[9]   Quantization index modulation: A class of provably good methods for digital watermarking and information embedding [J].
Chen, B ;
Wornell, GW .
IEEE TRANSACTIONS ON INFORMATION THEORY, 2001, 47 (04) :1423-1443
[10]  
Chen T., 2020, INT C MACHINE LEARNI, P1597