English
Related papers

Related papers: Adversarial Perturbations Cannot Reliably Protect …

200 papers

Previous work has suggested that preprocessing images through lossy compression can defend against adversarial perturbations, but comprehensive attack evaluations have been lacking. In this paper, we construct strong white-box and adaptive…

Computer Vision and Pattern Recognition · Computer Science 2025-11-04 Samuel Räber , Till Aczel , Andreas Plesner , Roger Wattenhofer

Deep learning models are vulnerable to adversarial examples and make incomprehensible mistakes, which puts a threat on their real-world deployment. Combined with the idea of adversarial training, preprocessing-based defenses are popular and…

Computer Vision and Pattern Recognition · Computer Science 2021-10-18 Tao Bai , Jun Zhao , Lanqing Guo , Bihan Wen

Image generation technology has brought significant advancements across various fields but has also raised concerns about data misuse and potential rights infringements, particularly with respect to creating visual artworks. Current methods…

Computer Vision and Pattern Recognition · Computer Science 2025-03-26 Jingdan Kang , Haoxin Yang , Yan Cai , Huaidong Zhang , Xuemiao Xu , Yong Du , Shengfeng He

Invisible watermarks safeguard images' copyrights by embedding hidden messages only detectable by owners. They also prevent people from misusing images, especially those generated by AI models. We propose a family of regeneration attacks to…

Cryptography and Security · Computer Science 2024-11-01 Xuandong Zhao , Kexun Zhang , Zihao Su , Saastha Vasan , Ilya Grishchenko , Christopher Kruegel , Giovanni Vigna , Yu-Xiang Wang , Lei Li

Recent advances in text-to-image models have increased the exposure of powerful image editing techniques as a tool, raising concerns about their potential for malicious use. An emerging line of research to address such threats focuses on…

Computer Vision and Pattern Recognition · Computer Science 2025-11-04 Jinsu Kim , Yunhun Nam , Minseon Kim , Sangpil Kim , Jongheon Jeong

Convolutional neural networks have been used to achieve a string of successes during recent years, but their lack of interpretability remains a serious issue. Adversarial examples are designed to deliberately fool neural networks into…

Machine Learning · Computer Science 2020-04-28 Jan Philip Göpfert , André Artelt , Heiko Wersing , Barbara Hammer

Generating adversarial examples is an intriguing problem and an important way of understanding the working mechanism of deep neural networks. Most existing approaches generated perturbations in the image space, i.e., each pixel can be…

Computer Vision and Pattern Recognition · Computer Science 2019-04-09 Xiaohui Zeng , Chenxi Liu , Yu-Siang Wang , Weichao Qiu , Lingxi Xie , Yu-Wing Tai , Chi Keung Tang , Alan L. Yuille

Generative AI tools are used to create art-like outputs and sometimes aid in the creative process. These tools have potential benefits for artists, but they also have the potential to harm the art workforce and infringe upon artistic and…

Computers and Society · Computer Science 2024-10-02 Juniper Lovato , Julia Zimmerman , Isabelle Smith , Peter Dodds , Jennifer Karson

Recent advancements in diffusion models have made generative image editing more accessible, enabling creative edits but raising ethical concerns, particularly regarding malicious edits to human portraits that threaten privacy and identity…

Computer Vision and Pattern Recognition · Computer Science 2025-03-18 Hanhui Wang , Yihua Zhang , Ruizheng Bai , Yue Zhao , Sijia Liu , Zhengzhong Tu

Recent text-to-image diffusion models such as MidJourney and Stable Diffusion threaten to displace many in the professional artist community. In particular, models can learn to mimic the artistic style of specific artists after…

Cryptography and Security · Computer Science 2025-04-08 Shawn Shan , Jenna Cryan , Emily Wenger , Haitao Zheng , Rana Hanocka , Ben Y. Zhao

Deep Neural Networks have been widely used in many fields. However, studies have shown that DNNs are easily attacked by adversarial examples, which have tiny perturbations and greatly mislead the correct judgment of DNNs. Furthermore, even…

Computer Vision and Pattern Recognition · Computer Science 2024-12-10 Shaowei Zhu , Wanli Lyu , Bin Li , Zhaoxia Yin , Bin Luo

In the age of powerful diffusion models such as DALL-E and Stable Diffusion, many in the digital art community have suffered style mimicry attacks due to fine-tuning these models on their works. The ability to mimic an artist's style via…

Cryptography and Security · Computer Science 2024-09-18 Justin Lyu Kim , Kyoungwan Woo

The remarkable image generation capabilities of state-of-the-art diffusion models, such as Stable Diffusion, can also be misused to spread misinformation and plagiarize copyrighted materials. To mitigate the potential risks associated with…

Computer Vision and Pattern Recognition · Computer Science 2025-06-12 Qiuyu Tang , Bonor Ayambem , Mooi Choo Chuah , Aparna Bharati

The rapid advancement of Generative Artificial Intelligence has fueled deepfake proliferation-synthetic media encompassing fully generated content and subtly edited authentic material-posing challenges to digital security, misinformation…

Cryptography and Security · Computer Science 2025-07-30 Naseem Khan , Tuan Nguyen , Amine Bermak , Issa Khalil

Deepfake represents a category of face-swapping attacks that leverage machine learning models such as autoencoders or generative adversarial networks. Although the concept of the face-swapping is not new, its recent technical advances make…

Computer Vision and Pattern Recognition · Computer Science 2020-06-16 Chaofei Yang , Lei Ding , Yiran Chen , Hai Li

The literature on adversarial attacks in computer vision typically focuses on pixel-level perturbations. These tend to be very difficult to interpret. Recent work that manipulates the latent representations of image generators to create…

Machine Learning · Computer Science 2023-09-12 Stephen Casper , Max Nadeau , Dylan Hadfield-Menell , Gabriel Kreiman

AI systems can take harmful actions and are highly vulnerable to adversarial attacks. We present an approach, inspired by recent advances in representation engineering, that interrupts the models as they respond with harmful outputs with…

Recently, text-to-image diffusion models have been widely used for style mimicry and personalized customization through methods such as DreamBooth and Textual Inversion. This has raised concerns about intellectual property protection and…

Computer Vision and Pattern Recognition · Computer Science 2025-10-31 Yanjie Li , Wenxuan Zhang , Xinqi Lyu , Yihao Liu , Bin Xiao

Over the past decade, side-channels have proven to be significant and practical threats to modern computing systems. Recent attacks have all exploited the underlying shared hardware. While practical, mounting such a complicated attack is…

Cryptography and Security · Computer Science 2020-04-24 Mehmet Sinan Inci , Thomas Eisenbarth , Berk Sunar

The rapid advancement of diffusion models and personalization techniques has made it possible to recreate individual portraits from just a few publicly available images. While such capabilities empower various creative applications, they…

Computer Vision and Pattern Recognition · Computer Science 2026-05-29 Guanyu Wang , Kailong Wang , Yihao Huang , Mingyi Zhou , Geguang Pu , Li Li