NGS-Marker: Robust Native Watermarking for 3D Gaussian Splatting

Abstract

With the rapid development and adoption of 3D Gaussian Splatting (3DGS), the need for effective copyright protection has become increasingly critical. Existing watermarking techniques for 3DGS mainly focus on protecting rendered images via pre-trained decoders, leaving the underlying 3D Gaussian primitives vulnerable to misuse. In particular, they are ineffective against **Partial Infringement**, where an adversary extracts and reuses only a subset of Gaussians. In this paper, we propose **NGS-Marker**, a novel native watermarking framework for 3DGS. It integrates a jointly trained watermark injector and message decoder, and employs a gradient-based progressive injection strategy to ensure full-scene coverage. This enables robust ownership decoding from any local region. We further extend NGS-Marker with hybrid protection (combining native and indirect watermarks) and support for multimodal watermarking. Extensive experiments demonstrate that NGS-Marker effectively defends against partial infringement while offering practical flexibility for real-world deployment.

Cite

Text

Qin et al. "NGS-Marker: Robust Native Watermarking for 3D Gaussian Splatting." International Conference on Learning Representations, 2026.

Markdown

[Qin et al. "NGS-Marker: Robust Native Watermarking for 3D Gaussian Splatting." International Conference on Learning Representations, 2026.](https://mlanthology.org/iclr/2026/qin2026iclr-ngsmarker/)

BibTeX

@inproceedings{qin2026iclr-ngsmarker,
  title     = {{NGS-Marker: Robust Native Watermarking for 3D Gaussian Splatting}},
  author    = {Qin, Hao and Sun, Yukai and Chen, Luyuan and Lu, Mengxu and Zhang, Feng and Kong, Ming and Du, Zhenhong and Zhu, Qiang},
  booktitle = {International Conference on Learning Representations},
  year      = {2026},
  url       = {https://mlanthology.org/iclr/2026/qin2026iclr-ngsmarker/}
}