@article { VG:VPI2001,
    author = { Sviatoslav Voloshynovskiy and Shelby Pereira and Victor Iquise and Thierry Pun },
    title = { Attack modelling: Towards a second generation benchmark },
    journal = { Signal Processing },
    year = { 2001 },
    volume = { 81 },
    pages = { 1177-1214 },
    vgclass = { refpap },
    vgproject = { watermarking },
    number = { 6 },
    month = { June },
    note = { Special Issue: Information Theoretic Issues in Digital Watermarking, 2001. V. Cappellini, M. Barni, F. Bartolini, Eds. },
    abstract = { Digital image watermarking techniques for copyright protection have become increasingly robust. The best algorithms perform well against the now standard benchmark tests included in the Stirmark package. However the stirmark tests are limited since in general they do not properly model the watermarking process and consequently are limited in their potential to removing the best watermarks. Here we propose a stochastic formulation of watermarking attacks using an estimationbased concept. The proposed attacks consist of two main stages: a) watermark or cover data estimation; b) modification of stego data aiming at disrupting the watermark detection and of resolving copyrights, taking into account the statistics of the embedded watermark and exploits features of human visual system. In the second part of the paper we propose a "second generation benchmark". We follow the model of the Stirmark benchmark and propose the 6 following categories of tests: denoising attacks and wavelet compression, watermark copy attack, synchronization removal, denoising/compression with following perceptual remodulation, denoising and random bending. Our results indicate that even though some algorithms perform well against the Stirmark benchmark, almost all algorithms perform poorly against our benchmark. This indicates that much work remains to be done before claims about "robust" watermarks can be made. We also propose a new method of evaluating image quality based on the Watson metric which overcomes the limitations of the PSNR. }
}

@inproceedings { VG:HV2001,
    author = { Alexander Herrigel and Sviatoslav Voloshynovskiy },
    title = { Counterfeit Attacks against a new Currency Protection Scheme },
    booktitle = { Int. Conf. on Communications and Multimedia Security CMS2001 },
    year = { 2001 },
    vgclass = { refpap },
    vgproject = { watermarking },
    editor = { },
    address = { Darmstadt, Germany },
    month = { May 21-22 }
}

@misc { VG:DVPMP2001,
    vgclass = { otherjournals },
    vgproject = { watermarking },
    author = { Fr{\'e}d{\'e}ric Deguillaume and Sviatoslav Voloshynovskiy and Shelby Pereira and Maribel Madue{\~n}o and Thierry Pun },
    title = { Filigranage D'images Digitales },
    howpublished = { Bull. ASE/SEV },
    month = { April },
    year = { 2001 },
    pages = { 19-27 },
    volume = { 9 }
}

@inproceedings { VG:PVM2001a,
    author = { Shelby Pereira and Sviatoslav Voloshynovskiy and Maribel Madue{\~n}o and St{\'e}phane Marchand-Maillet and Thierry Pun },
    title = { Second generation benchmarking and application oriented evaluation },
    booktitle = { Information Hiding Workshop },
    year = { 2001 },
    vgclass = { refpap },
    vgproject = { watermarking },
    address = { Pittsburgh, PA, USA },
    month = { apr }
}

@inproceedings { VG:VHP2001,
    author = { Sviatoslav Voloshynovskiy and Alexander Herrigel and Thierry Pun },
    title = { Blur/deblur attack against document protection systems based on digital watermarking },
    booktitle = { Information Hiding Workshop },
    year = { 2001 },
    vgclass = { refpap },
    vgproject = { watermarking },
    address = { Pittsburgh, PA, USA },
    month = { apr },
    abstract = { A growing concern emerges regarding the possibility of coun- terfeiting currencies using digital imaging technologies. In order to help developing resistance against this new type of fraud, this paper presents possible attacking scenarios against supposedly sophisticated document protection systems based on digital watermarking. These new attacks, which would allow even an average counterfeiter to reproduce banknotes or passports created using systems with built-in watermark detector. }
}

@inproceedings { VG:VDP2001,
    author = { Sviatoslav Voloshynovskiy and Fr{\'e}d{\'e}ric Deguillaume and Shelby Pereira and Thierry Pun },
    title = { Optimal adaptive diversity watermarking with channel state estimation },
    booktitle = { SPIE Photonics West, Electronic Imaging 2001, Security and Watermarking of Multimedia Contents III },
    year = { 2001 },
    vgclass = { refpap },
    vgproject = { watermarking },
    number = { paper 4314-74 },
    address = { San Jose, CA, USA },
    month = { January 21-26 },
    note = { . W. Wong, E. J. Delp, Eds. }
}

@inproceedings { VG:HVR2001,
    author = { Alexander Herrigel and Sviatoslav Voloshynovskiy and Yuriy Rytsar },
    title = { The Watermark Template Attack },
    booktitle = { SPIE Photonics West, Electronic Imaging 2001, Security and Watermarking of Multimedia Contents III },
    year = { 2001 },
    vgclass = { refpap },
    vgproject = { watermarking },
    editor = { W. Wong and E. J. Delp },
    number = { paper 4314-46 },
    address = { San Jose, CA, USA },
    month = { jan }
}

@article { VG:PVP2001,
    author = { Shelby Pereira and Sviatoslav Voloshynovskiy and Thierry Pun },
    title = { Optimal transform domain watermark embedding via linear programming },
    journal = { Signal Processing, Special Issue: Information Theoretic Issues in Digital Watermarking },
    year = { 2001 },
    vgclass = { refpap },
    vgproject = { watermarking },
    note = { (to appear) },
    abstract = { Invisible Digital watermarks have been proposed as a method for discouraging illicit copying and distribution of copyright material. In recent years it has been recognized that embedding information in a transform domain leads to mo re robust watermarks. A major difficulty inwatermarking in a transform domain lies in the fact that constraints on the allowable distortion at any pixel may be speci ed in the spatial domain. The central contribution of the paper is the proposal of an approach which takes into account spatial domain constraints in an optimal fashion. The main idea is to structure the watermark embedding as a linear programming problem in which we wish to maximize the strength of the watermark subject to a set of lin- ear constraints on the pixel distortions as determined by a masking function. We consider the special cases of embedding in the DCT domain and wavelet domain using the Haar wavelet and Daubechies 4-tap lter in conjunction with a masking function based on a non-stationary Gaussian model, but the algorithm is applicable to any combination of transform and masking functions. Our results indicate that the proposed approach performs well against lossy compression such as JPEG and other types of ltering which do not change the geometry of the image. }
}

@article { VG:SVP2001,
    author = { A. Synyavskyy and Sviatoslav Voloshynovskiy and I. Prudyus },
    title = { Wavelet-Based {MAP} Image Denoising Using Provably Better Class of Stochastic I.I.D. Image Models },
    journal = { Facta Universitatis (Nis) },
    year = { 2001 },
    volume = { 14 },
    vgclass = { refpap },
    vgproject = { watermarking }
}

@article { VG:PVSHL2001,
    author = { I. Prudyus and Sviatoslav Voloshynovskiy and A. Synyavskyy and T. Holotyak and L. Lazko },
    title = { Generalized radar/radiometry imaging problems },
    journal = { Journal of Telecommunications and Information Technology },
    year = { 2001 },
    volume = { 4 },
    pages = { 15-20 },
    vgclass = { refpap },
    vgproject = { watermarking }
}

@inproceedings { VG:VoP2001,
    author = { Sviatoslav Voloshynovskiy and Thierry Pun },
    title = { Stochastic Digital Image Watermarking },
    booktitle = { {IEEE/ISSPA} {ISSPA} 2001, 6th Int. Symposium on Signal Processing and its Applications },
    year = { 2001 },
    vgclass = { fullconf },
    vgproject = { watermarking },
    address = { Kuala-Lumpur, Malaysia },
    note = { Thierry Pun, invited plenary lecture }
}

@article { VG:VPP2001,
    author = { Sviatoslav Voloshynovskiy and Shelby Pereira and Thierry Pun and J. Eggers and J. Su },
    title = { Attacks on Digital Watermarks: Classification, Estimation-based Attacks and Benchmarks },
    journal = { IEEE Communications Magazine (Special Issue on Digital watermarking for copyright protection: a communications perspective) },
    year = { 2001 },
    volume = { 39 },
    pages = { 118-127 },
    vgclass = { refpap },
    vgproject = { watermarking },
    number = { 8 },
    note = { M. Barni, F. Bartolini, I.J. Cox, J. Hernandez, F. P\'erez-Gonz\'alez, Guest Eds. Invited paper. },
    abstract = { Watermarking is a potential method for protection of ownership rights on digital audio, image and video data. Benchmarks are used to evaluate the performance of different watermarking algorithms. For image watermarking, the Stirmark package is the most popular benchmark, and the best current algorithms perform well against it. However, results obtained by the Stirmark benchmark have to be handled carefully since Stirmark does not properly model the watermarking process and consequently is limited in its potential for impairing sophisticated image watermarking schemes. In this context, the goal of this article is threefold. First, we give an overview of the current attacking methods. Second, we describe attacks exploiting knowledge about the statistics of the original data and the embedded watermark. We propose a stochastic formulation of estimation-based attacks. Such attacks consist of two main stages: a) watermark estimation; b) exploitation of the estimated watermark to trick watermark detection or create ownership ambiguity. The full strength of estimation-based attacks can be achieved by introducing additional noise, where the attacker tries to combine the estimated watermark and the additive noise to impair watermark communication as much as possible while fulfilling a quality constraint on the attacked data. With a sophisticated quality constraint it is also possible to exploit human perception, e.g., the human auditory system in case of audio watermarks and the human visual system (HVS) in case of image and video watermarks. Third, we discuss the current status of image watermarking benchmarks. We briefly present Fabien Petitcolas' Stirmark benchmarking tool [1]. Next, we consider the benchmark proposed by the University of Geneva Vision Group that contains more deliberate attacks. Finally, we summerize the current work of the European Certimark project, whose goal is to accelerate efforts from a number of research groups and companies in order to produce an improved ensemble of benchmarking tools. }
}

@misc { VG:VDP2001b,
    vgclass = { patent },
    vgproject = { watermarking },
    author = { Sviatoslav Voloshynovskiy and Fr{\'e}d{\'e}ric Deguillaume and Thierry Pun },
    title = { Method for Digital Watermarking Robust Against Local and Global Geometrical Distortions and Projective Transforms },
    howpublished = { U.S. Patent Application },
    year = { 2001 }
}

@inproceedings { VG:VDP2001a,
    author = { Svyatoslav Voloshynovskiy and Fr{\'e}d{\'e}ric Deguillaume and Thierry Pun },
    title = { Multibit Digital Watermarking Robust Against Local Nonlinear Geometrical Distortions },
    booktitle = { {IEEE} International Conference on Image Processing, {ICIP2001} },
    year = { 2001 },
    vgclass = { refpap },
    vgproject = { watermarking },
    pages = { 999--1002 },
    address = { Thessaloniki, Greece },
    abstract = { This paper presents an efficient method for the estimation and recovering from nonlinear or local geometrical distortions, such as the random bending attack and restricted projective transforms. The distortions are modeled as a set of local affine transforms, the watermark being repeatedly allocated into small blocks in order to ensure its locality. The estimation of the affine transform parameters is formulated as a robust penalized Maximum Likelihood (ML) problem, which is suitable for the local level as well as for global distortions. Results with the Stirmark benchmark confirm the high robustness of the proposed method and show its state-of-the-art performance. }
}