Optimal Watermark Generation under Type I and Type II Errors

Read full text
Authors: Hengzhi He, Shirong Xu, Alexander Nemecek, Jun Li, Erman Ayday, Guang Cheng
Cited by: 0

Abstract

Abstract Watermarking has recently emerged as a crucial tool for protecting the intellectual property of generative models and for distinguishing AI-generated content from human-generated data. Despite its practical success, most existing watermarking schemes are empirically driven and lack a theoretical understanding of the fundamental trade-off between detection power and generation fidelity. To address this gap, we formulate watermarking as a statistical hypothesis testing problem between a null distribution and its watermarked counterpart. Under explicit constraints on false-positive and false-negative rates, we derive a tight lower bound on the achievable fidelity loss, measured by a general f-divergence, and characterize the optimal watermarked distribution that attains this bound. We further develop a corresponding sampling rule that provides an optimal mechanism for inserting watermarks with minimal fidelity distortion. Our result establishes a simple yet broadly applicable principle linking hypothesis testing, information divergence, and watermark generation.

Fields of Study & Subjects

Adversarial Robustness in Machine Learning Advanced Steganography and Watermarking Techniques Advanced Malware Detection Techniques

Publication details

Journal / source
Biometrika
Publication date
7 August 2026
Language
EN