Mitigating Watermark Forgery in Generative Models via Randomized Key Selection
The research proposes a defense against forgery attacks by randomizing which watermark key is used for every query. The system verifies content by checking if exactly one key is detected, while two or more keys indicate forgery. This method provably resists attackers regardless of how many watermarked samples they collect.