cs.AIMar 24, 2026

SAiW: Source-Attributable Invisible Watermarking for Proactive Deepfake Defense

Authors: Bibek Das, Chandranath Adak, Soumi Chattopadhyay, Zahid Akhtar, Soumya Dutta

Organizations: Dept. of CSE, Indian Institute of Technology Patna, India – 801106. · Dept. of CSE, Indian Institute of Technology Indore, India – 453552. · State University of New York Polytechnic Institute, NY, USA – 13502. · Dept. of CSE, Indian Institute of Technology Kanpur, India – 208016.

Abstract

Deepfakes generated by modern generative models pose a serious threat to information integrity, digital identity, and public trust. Existing detection methods are largely reactive, attempting to identify manipulations after they occur and often failing to generalize across evolving generation techniques. This motivates the need for proactive mechanisms that secure media authenticity at the time of creation. In this work, we introduce SAiW, a Source-Attributed Invisible watermarking Framework for proactive deepfake defense and media provenance verification. Unlike conventional watermarking methods that treat watermark payloads as generic signals, SAiW formulates watermark embedding as a source-conditioned representation learning problem, where watermark identity encodes the originating source and modulates the embedding process to produce discriminative and traceable signatures. The framework integrates feature-wise linear modulation to inject source identity into the embedding network, enabling scalable multi-source watermark generation. A perceptual guidance module derived from human visual system priors ensures that watermark perturbations remain visually imperceptible while maintaining robustness. In addition, a dual-purpose forensic decoder simultaneously reconstructs the embedded watermark and performs source attribution, providing both automated verification and interpretable forensic evidence. Extensive experiments across multiple deepfake datasets demonstrate that SAiW achieves high perceptual quality while maintaining strong robustness against compression, filtering, noise, geometric transformations, and adversarial perturbations. By binding digital media to its origin through invisible yet verifiable markers, SAiW enables reliable authentication and source attribution, providing a scalable foundation for proactive deepfake defense and trustworthy media provenance.

Figures & tables

Explore similar work

CardsList
  1. All in One: Unifying Deepfake Detection, Tampering Localization, and Source Tracing with a Robust Landmark-Identity Watermark

    Feb 26, 2026Junjiang Wu, Liejun Wang, Zhiqing GuoDigital Image ForensicsDigital Forensics

  2. High-Fidelity Face Content Recovery via Tamper-Resilient Versatile Watermarking

    Mar 25, 2026Peipeng Yu, Jinfeng Xie, Chengfu Ou +5Robust WatermarkingImage Forgery Localization

  3. DYMAPIA: A Multi-Domain Framework for Detecting AI-based Video Manipulation

    Apr 27, 2026Md Shohel Rana, Andrew H. SungDigital Image ForensicsDeepfake Detection