Search papers, labs, and topics across Lattice.
This paper introduces MusicMark, a novel generative watermarking framework specifically designed for music generation, addressing the limitations of existing post-hoc watermarking methods that are vulnerable to transformations. By embedding watermark messages directly into the semantic latent space during the music generation process, MusicMark ensures robustness against attacks, particularly neural codec re-synthesis, while maintaining high audio fidelity. Experimental results show that MusicMark significantly outperforms traditional watermarking techniques in terms of resilience to diverse attacks and preserves the quality of the generated music.
MusicMark embeds watermarks directly into music during generation, making it robust against attacks that typically undermine traditional methods.
AI music generation has rapidly advanced alongside commercial platforms, raising the need for reliable watermarking for provenance and attribution. However, existing audio watermarking research has largely focused on speech, and applying speech-oriented methods to music is challenging due to music's complex structure and rich acoustic texture. Most existing methods are post-hoc, adding imperceptible perturbations after generation rather than embedding watermarks as part of the content. This makes them fragile under transformations and especially vulnerable to neural codec re-synthesis, which can discard imperceptible residual signals. Moreover, since generation and watermarking are decoupled, the watermarking step can be bypassed or omitted, weakening provenance guarantees. To address these issues, we propose MusicMark, which, to the best of our knowledge, is the first generative watermarking framework for music. Specifically, MusicMark embeds watermark messages into the semantic latent space during generation, incorporating the watermark as part of the musical content and ensuring robustness against diverse attacks, particularly neural codec re-synthesis. To this end, we introduce a watermark adapter into a diffusion-based generation model to embed watermark messages across denoising steps. The adapter and detector are trained with a joint objective that preserves fidelity by constraining watermarked latents close to their unwatermarked reference latents, while improving robustness through attack augmentations. Experiments demonstrate that MusicMark substantially outperforms post-hoc baselines across diverse attacks including neural codec re-synthesis, while maintaining comparable generation quality. We further introduce a cover-song attack, converting the singing voice while preserving musical content, and show that MusicMark remains more robust than post-hoc methods.
