Visually Legible but Adversarial: Watermark-Constrained Attacks on End-to-End VLMs for Document Understanding

Qingzhe Han, Fan Dang, Shengqi Chen +4

Visible watermarks convey document ownership, confidentiality, and status, but can also carry adversarial signals. We introduce Auto-Regional Adversarial Watermarking (AR-AWM), a m…