Hidden copyright marks have been proposed as a solution for solving the illegal copying and proof of ownership problems in the context of multimedia objects. Many systems have been proposed, but it is still difficult to have even a rough idea of their performances and hence to compare them. So we first describe some general attacks on audio and image marking systems. Then we propose a benchmark to compare image making software on a fair basis. This benchmark is based on a set of attacks that any system ought to survive. Keywords-- Digital watermarking, benchmark, attacks. A number of broad claims have been made about the `robustness' of various digital watermarking or fingerprinting methods. Unfortunately the criteria and the sample pictures used to demonstrate it vary from one system to the other, and recent attacks [1], [2], [3], [4], [5] show that the robustness criteria used so far are often inadequate. JPEG compression, additive Gaussian noise, low pass filtering, rescaling, ...
Fabien A. P. Petitcolas, Ross J. Anderson