Computer science professor Florian Kerschbaum on proposed AI watermarking

Monday, July 24, 2023
Florian Kerschbaum

The recent announcement by a group of major tech companies about watermarking AI-generated content might have been greeted with a sigh of relief by many, but cybersecurity researchers are already suggesting this new approach has several flaws.

Amazon, Anthropic, Google, Inflection, Meta, Microsoft and OpenAI held a conversation with the White House to discuss how they can help to address the risks posed by the artificial intelligence they develop. They promised to invest in cybersecurity and watermarking of AI-generated content.

“The companies pitched a technology called watermarking, which embeds a secret message into the code of the content,” says Dr. Florian Kerschbaum, a professor of computer science and a member of the Cybersecurity and Privacy Institute at the University of Waterloo. “The idea is that the message cannot be removed unless the content is removed.”

Read more in the Waterloo News story.