這個世界正不斷地變得越來越數位化。許多人努力地將舊資料轉換成數位的形態，而新的資料幾乎不是由數位化的方式傳遞，就是本來就是數位的形態。數位化的最大好處之一就是資料傳輸及資料複製異常地方便。我們可以輕易地備份和散布我們的資料，而在資料複製的過程中，資料的品質不會有任何的降低。然而，在這美好情況的背後，未經授權的複製和更改資料內容是一個嚴重而極待解決的問題。如果沒有一個良好的版權保護機制，數位資料的版權擁有者很難放心地將他的作品公開地散佈。於是，有人提出數位浮水印技術，企圖解決這個問題。浮水印這個想法是將一個旁人無法察覺的簽名或密碼（這個簽名即稱為浮水印）加入到原始的資料中，在不影響原始資料品質的情況下，隱藏這樣一個簽名在裡面。之後，如果有必要的話，我們可以取出這個浮水印，來證明這個作品的版權是屬於誰。本論文的第一章是一個簡單的介紹，之後的第二章會詳細的討論數位浮水印技術的許多一般性考量。
在第三章，我們會提出一個採用某JND模型的浮水印方法。根據該JND模型，我們可以算出一張影像中每個像素的JND值。於是我們便將浮水印加在JND值最大的那些像素中，而加入的灰階值大小則跟該像素的JND值成正比。在本章最後，我們會將我們的方法應用到彩色影像上。
討論過影像之後，在第四章我們會把我們的方法延伸到視訊的浮水印上。我們將會提出一個以視景分析為基礎的方法。我們對不同的視景採取不同的浮水印作法。我們將會呈現一些與視訊有關的實驗結果。
在第三章與第四章中，我們所呈現的實驗，都是根據一些一般性的攻擊。在第五章中，我們會報告我們對於最近提出的許多特殊的攻擊法的調查。這些攻擊法都是專門設計來破壞或干擾浮水印系統的。很顯然，只要有人提出新的浮水印方法，就會有人提出新的攻擊方法。當然，對許多的攻擊法，也都有人提出反制的方法。
最後，第六章是我們的結論。相信在這個數位的時代，數位浮水印將會繼續是一個有趣的研究領域。

Chapter 1 Introduction1
Chapter 2 Fundamentals of Digital Watermarking5
2.1 Backgrounds5
2.2 Terminology and Notations8
2.3 The Classification of Watermarking Systems9
2.4 The Multiple Ownership Problem10
2.4.1 Problem Description11
2.4.2 The Solution13
2.5 Performance Evaluation of Watermarking Systems15
2.5.1 Invisibility and Robustness15
2.5.2 Reliability19
2.5.3 Conclusion22
2.6 Summary23
Chapter 3 Watermarking Scheme Based on JND Model25
3.1 Human Visual System and the JND Profile Model25
3.2 Watermarking Method27
3.2.1 Watermark Structure27
3.2.2 Watermark Insertion28
3.2.3 Watermark Detection29
3.2.4 Similarity Measure and Threshold31
3.3 Visual Results34
3.4 Robustness Results I: Signal Processing35
3.4.1 Lossy Compression35
3.4.2 Low-Pass Filtering39
3.4.3 Noise Addition43
3.4.4 Multiple Watermark Insertion45
3.4.5 Printing and Rescanning46
3.4.6 Conclusion48
3.5 Robustness Results II: Geometrical Distortion48
3.5.1 Affine Transformations49
3.5.2 Resizing51
3.5.3 Cropping54
3.5.4 Conclusion56
3.6 Extension to Color Images57
3.7 Conclusion59
Chapter 4 Video Watermarking Scheme Based on Scene Analysis 61
4.1 Introduction61
4.2 Watermark Insertion63
4.2.1 Case 165
4.2.2 Case 266
4.3 Watermark Detection71
4.3.1 Case 171
4.3.2 Case 272
4.4 Experimental Results73
4.4.1 Frame Averaging74
4.4.2 Statistical Averaging78
4.4.3 MPEG Encoding79
4.5 Conclusion and Future Work79
Chapter 5 A Survey on Attacks83
5.1 Introduction83
5.2 The Classification of Attacks84
5.3 Detection-Disabling Attacks86
5.3.1 Line Removal and Duplication86
5.3.2 StirMark87
5.3.3 Counterattacks89
5.4 Removal Attacks90
5.4.1 Laplacian Removal Attack90
5.4.2 Non-Linear Filtering94
5.4.3 Conclusion95
5.5 Oracle Attacks96
5.6 Collusion Attacks97
5.7 Other Attacks98
5.7.1 Attack Based on the Presence of a Watermark Inserter 98
5.7.2 Mosaic Attack99
5.8 Conclusion100
Chapter 6 Conclusion101
References103

[1] Project Gutenberg. <http://www.promo.net/pg/>
[2] J. Meng and S.-F. Chang, “Embedding visible video watermarks in the compressed domain,” in ICIP ‘98.
<http://clip.informatik.uni-leipzig.de/~toelke/Watermark.html>
[3] M. Kutter, F. Jordan, and F. Bossen, “Digital signature of color images using amplitude modulation,” in Proc. SPIE-EI97, 1997, pp. 518-526.
<http://ltswww.epfl.ch/~kutter/publications/amt.html>
[4] W. Bender, D. Gruhl, N. Morimoto, and A. Lu, “Techniques for data hiding.” IBM Systems Journal, vol. 35, no. 3?, 1996, pp. 313-336.
<http://www.almaden.ibm.com/journal/sj/mit/sectiona/bender.html>
[5] I. J. Cox, J. Kilian, T. Leighton, and T. Shamoon, “Secure spread spectrum watermarking for multimedia,” IEEE Trans. Image Processing, vol. 6, no.12, pp. 1673-1687, Dec. 1997.
[6] Tae-Yun Chung, Min-Suk Hong, Young-Name Oh, Dong-Ho Shin, and Sang-Hui Park, “Digital watermarking for copyright protection of MPEG2 compressed video,” IEEE Transactions on Consumer Electronics, vol. 44, no. 3, pp. 895-901, Aug. 1998.
[7] M. D. Swanson, M. Kobayashi, and A. H. Tewfik, “Multimedia data-embedding and watermarking technologies,” Proceedings of the IEEE, vol. 86, no. 6, pp. 1064-1087, June 1998.
[8] C. H. Chou and Y. C. Li, “A perceptually tuned subband image coder based on the measure of just-noticeable-distortion profile,” IEEE Transactions on Circuits and Systems for Video Technology, vol. 5 no. 6, pp. 467-476, Dec. 1995
[9] R. J. Anderson, F. A. P. Petitcolas, “On the limits of steganography,” IEEE Journal on Selected Areas in Communications, Special Issue on Copyright & Privacy Protection, vol. 16 no. 4, pp. 474-481, May 1998.
<http://www.cl.cam.ac.uk/~fapp2/papers/jsac98-limsteg/JSAC98-LimSteg.html>
[10] B Pfitzmann, “Information hiding terminology,” in Information Hiding, Springer Lecture Notes in Computer Science v 1174 (1996) pp. 347-350
<http://www.semper.org/sirene/lit/sirene.lit.html>
[11] M. D. Swanson, B. Zhu, A. H. Tewfik, “Data hiding for video-in-video,” in ICIP ’97.
[12] B. Zhu, M. D. Swanson, and A. H. Tewfik, “Image coding by folding,” in ICIP ’97.
[13] I. J. Cox and J. P. M. G. Linnartz, “Some general methods for tampering with watermarks,” IEEE Journal on Selected Areas in Communications, vol. 16, no. 4, pp. 587-593, May 1998
[14] M. Kutter and F. A. P. Petitcolas, “A fair benchmark for image watermarking systems,” Electronic Imaging ’99. Security and Watermarking of Multimedia Contents, vol. 3657, San Jose, CA, USA, 25-27 January 1999.
<http://www.cl.cam.ac.uk/~fapp2/papers/ei99-benchmark/>
[15] F. Hartung and B. Girod, “Fast public-key watermarking of compressed video,” in ICIP ’97.
<http://www-nt.e-technik.uni-erlangen.de/~hartung/publications.html>
[16] I. J. Cox and M. L. Miller, “A review of watermarking and the importance of perceptual modeling,” Proc. SPIE Conf. on Human Vision and Electronic Imaging II, vol 3016, 92-99, February 1987
<http://www.neci.nj.nec.com/homepages/ingemar/ingemar.html>
[17] S. Craver, N. Memon, B. L. Yeo, and M. M. Yeung, “Resolving rightful ownerships with invisible watermarking techniques: limitations, attacks, and implications,” IEEE Journal on Selected Areas in Communications, vol. 16, no. 4, pp. 573-586, May 1998
[18] L. Qiao and K. Nahrstedt, “Watermarking schemes and protocols for protecting rightful ownership and customer’s rights,” Journal of visual communication and image representation, vol. 9, no. 3 Sep. 1998, pp. 194-210. <http://cairo.cs.uiuc.edu/papers.html>
[19] M. D. Swanson, B. Zhu, and A. H. Tewfik, “Multiresolution scene-based video watermarking using perceptual models,” IEEE Journal on Selected Areas in Communications, vol. 16, no. 4, pp. 540-550, May 1998
[20] R. Rivest, “The MD5 message digest algorithm,” Internet Rep., RFC 1321, Apr. 1992
[21] National Institute of Standards and Technology, “Secure Hash Standard,” NIST FIPS Pub 180-1, Apr. 1995
[22] I. Pitas, “A method for signature casting on digital images,” in Proc. Int. Conf. on Image Processing 1996 (ICIP ’96), vol. 3, pp.215-218
[23] Christian J. van den Branden Lambrecht and Joyce E. Farrell, “Perceptual quality metric for digitally coded color images,” in Proceeding of EUSIPCO, pp. 1175-1178, Trieste, Italy, Sep. 1996
<http://ltswww.epfl.ch/publications/p96.html>
[24] S. Winkler, “A perceptual distortion metric for digital color images,” in Proceedings of the 5th International Conference on Image Processing, Chicago, Illinois, vol. 3, pp. 399-403, October 4-7, 1998.
<http://ltswww.epfl.ch/~winkler/publications.html>
[25] W. K. Pratt, Digital Image Processing, 2nd edition, John Wiley & Sons, 1991
[26] H. Gleitman, Psychology, Chinese translation, Yuan-Liou, 1995
[27] USC-SIPI Image Database
<http://sipi.usc.edu/services/database/Database.html>
[28] Digital watermarking evaluation & benchmarking: Photo database, Copyright 1998-1999 by Fabien A. P. Petitcolas, Computer Laboratory, University of Cambridge
<http://www.cl.cam.ac.uk/~fapp2/watermarking/benchmark/image_database.html>
[29] Digital watermarking: Evaluation and benchmark, Copyright 1998-1999 by Fabien A. P. Petitcolas, Computer Laboratory, University of Cambridge
<http://www.cl.cam.ac.uk/~fapp2/watermarking/benchmark/>
[30] D. V. Lindley, Introduction to Probability and Statistics, Part I: Probability, pp. 82-85, Cambridge University Press, 1965.
[31] B. Girod, “The information theoretical significance of spatial and temporal masking in video signals,” Proc. SPIE Human Vision, Visual Processing, and Digital Display, vol. 1077, 1989, pp. 178-187
[32] R. L. Pickholtz, D. L. Schilling, and L. B. Milstein, “Theory of spread-spectrum communications─A tutorial,” IEEE Trans. Commun., vol. COM-30, no. 5 May 1982, pp. 855-884
[33] F. Hartung and B. Girod, “Digital watermarking of raw and compressed video,” Proceedings SPIE Digital Compression Technologies and Systems for Video Communication, Oct. 1996, pp. 205-213
<http://www-nt.e-technik.uni-erlangen.de/~hartung/publications.html>
[34] B. Y. Yeo and B. Liu, “Rapid scene analysis on compressed video,” IEEE Transactions on Circuits and Systems for Video Technology, vol. 5, no.6, Dec. 1995, pp. 533-544
[35] R. B. Wolfgang and E. J. Delp, “A watermarking technique for digital imagery: further studies,” IEEE International Conference on Imaging, Systems, and Technology, Las Vegas, NV, USA, June 30--July 3, 1997, pp 279─287 <http://dynamo.ecn.purdue.edu/~ace/delp-pub.html>
[36] Bruce Schneier, Applied Cryptography, 2nd Edition, Wiley & Sons, 1996
[37] J. J. K. O. Ruanaidh and Thierry Pun, “Rotation, scale and translation invariant digital image watermarking,” Signal Processing, vol. 66, issue 3, May 1998, pp. 303-317
<http://www.elsevier.nl/cgi-bin/cas/tree/store/sigpro/cas_free/browse/
browse.cgi?year=1998&volume=66&issue=3>
[38] N. Nikolaidis and I. Pitas, “Robust image watermarking in the spatial domain,” Signal Processing, vol. 66, issue 3, May 1998, pp. 385-403
<http://www.elsevier.nl/cgi-bin/cas/tree/store/sigpro/cas_free/browse/
browse.cgi?year=1998&volume=66&issue=3>
[39] C. H. Chou and C. W. Chen, “A perceptually optimized 3-D subband codec for video communication over wireless channels,” IEEE Transactions on Circuits and Systems for Video Technology, vol. 6, no. 2, pp. 143-156, Apr. 1996
[40] I. J. Cox and J. P. M. G. Linnartz, “Public watermarks and resistance to tampering,” in ICIP ’97
<http://www.neci.nj.nec.com/homepages/ingemar/>
[41] J. -P. M. G. Linnartz and M. van Dijk, “Analysis of the sensitivity attack against electronic watermarks in images,” Second International Workshop on Information Hiding, 14-17 April, 1998, Portland, Oregon, USA <http://diva.eecs.berkeley.edu/~linnartz/water.html>
[42] J. Lach, W. H. M. —Smith, and M. Potkonjak, “Fingerprinting digital circuits on programmable hardware,” Second International Workshop on Information Hiding, 14-17 April, 1998, Portland, Oregon, USA
<http://www.sanders.com/csrc/pubs.htm>
[43] J. Brassil, S. Low, N. Maxemchuk, and L. O’Gorman, “Electronic marking and identification techniques to discourage document copying,” IEEE Infocom 94, pp 1278 — 1287
[44] R. Ohbuchi, H. Masuda, and M. Aono, “Watermarking three-dimensional polygonal models through geometric and topological modifications,” IEEE Journal on Selected Areas in Communications, vol. 16, no. 4, pp. 551-560, May 1998
[45] J. K. Su, F. Hartung, and B. Girod, “A channel model for a watermark attack,” Proceedings of SPIE, vol. 3657, Security and Watermarking of Multimedia Contents, San Jose, CA, January 1999
<http://www-nt.e-technik.uni-erlangen.de/~hartung/publications.html>
[46] F. Hartung, J. K. Su, and B. Girod, “Spread spectrum watermarking: malicious attacks and counterattacks”, Proceedings of SPIE, vol. 3657, Security and Watermarking of Multimedia Contents, San Jose, CA, January 1999
<http://www-nt.e-technik.uni-erlangen.de/~hartung/publications.html>
[47] F. A. P. Petitcolas, R. J. Anderson, and M. G. Kuhn, “Attacks on copyright marking systems,” Second Workshop on Information Hiding, Portland, Oregon, USA, April 14-17, 1998
<http://www.cl.cam.ac.uk/~fapp2/papers/ih98-attacks/>
[48] D. J. Fleet and D. J. Heeger, “Embedding invisible information in color images,” in ICIP ’97
< http://www-ima.enst.fr/~maitre/ext/ICIP97.html>
[49] J. L. Barron, D. J. Fleet, and S. S. Beauchemin, “Performance of optical flow techniques,” International Journal of Computer Vision, vol. 12, 1994, pp. 43-77
[50] R. Barnett and D. Pearson, “Attack operators for digitally watermarked images,” IEE Proceedings on Vision, Image and Signal Processing, vol. 145, no. 4, Aug. 1998, pp. 271-279
[51] R. Barnett and D. Pearson, “Frequency mode LR attack operator for digitally watermarked images,” Electronics Letters, vol. 34, no. 19, Sep. 1998, pp. 1837-1839
[52] G. C. Langelaar, R. L. Langendijk, and J. Biemond, “Removing spatial spread spectrum watermarks by non-linear filtering,” Ninth European Signal Processing Conference (EUSIPCO ‘98), 8-11 September 1998, Island of Rhodes, Greece <http://www-ict.its.tudelft.nl/~gerhard/>
[53] M. Maes, “Twin peaks: the histogram attack to fixed depth image watermarks,” Second International Workshop on Information Hiding, 14-17 April, Portland, Oregon, USA
<http://www.intec.rug.ac.be/Research/Groups/hfhsdesign/viva/publications.htm>
[54] T. Kalker, J. P. Linnartz, and M. van Dijk, “Watermark estimation through detector analysis,” in ICIP ’98
<http://clip.informatik.uni-leipzig.de/~toelke/Watermark.html>
[55] B. K. P. Horn and B. G. Schunck, “Determining optical flow,” Artificial Intelligence, 17(1-3), pp. 85-203, 1981
[56] D. Boneh and J. Shaw, “Collusion-secure fingerprinting for digital data,” Proceedings of CRYPTO ’95, pp. 452-465
<http://ncstrl.cs.princeton.edu/Dienst/UI/2.0/Describe/ncstrl.princeton%2fTR-468-94>
[57] J. —P. Linnartz, T. Kalker, and G. Depovere, “Modeling the false alarm and missed detection rate for electronic watermarks,” Second International Workshop on Information Hiding, 14-17 April, Portland, Oregon, USA <http://diva.EECS.Berkeley.EDU:80/~linnartz/water.html>
[58] S. D. Servetto, C. I. Podilchuk, and K. Ramchandran, “Capacity issues in digital watermarking,” in ICIP ‘98
<http://www.ifp.uiuc.edu/~servetto/publications/>