Single-view 3D reconstruction methods like Triplane Gaussian Splatting (TGS) have enabled high-quality 3D model generation from just a single image input within seconds. However, this capability raises concerns about potential misuse, where malicious users could exploit TGS to create unauthorized 3D models from copyrighted images. To prevent such infringement, we propose a novel image protection approach that embeds invisible geometry perturbations, termed "geometry cloaks", into images before supplying them to TGS. These carefully crafted perturbations encode a customized message that is revealed when TGS attempts 3D reconstructions of the cloaked image. Unlike conventional adversarial attacks that simply degrade output quality, our method forces TGS to fail the 3D reconstruction in a specific way - by generating an identifiable customized pattern that acts as a watermark. This watermark allows copyright holders to assert ownership over any attempted 3D reconstructions made from their protected images. Extensive experiments have verified the effectiveness of our geometry cloak.
单视角三维重建方法(如Triplane Gaussian Splatting,TGS)已使得从单张图像输入中在数秒内生成高质量的三维模型成为可能。然而,这一能力也引发了潜在的滥用问题,恶意用户可能利用TGS从受版权保护的图像中创建未经授权的三维模型。为防止此类侵权行为,我们提出了一种创新的图像保护方法,将不可见的几何扰动(称为“几何伪装”)嵌入图像中,在将其输入到TGS之前进行处理。这些精心设计的扰动编码了一条定制信息,当TGS尝试对伪装后的图像进行三维重建时,这条信息便会显现。与传统的对抗性攻击仅简单地降低输出质量不同,我们的方法使TGS在特定的方式下无法完成三维重建——生成一个可识别的定制图案,充当水印。该水印使版权持有人能够对使用其受保护图像进行的任何三维重建主张所有权。大量实验验证了我们几何伪装的有效性。