中文
相关论文

相关论文: Invisible Backdoor Triggers in Image Editing Model…

200 篇论文

Pervasive backdoors are triggered by dynamic and pervasive input perturbations. They can be intentionally injected by attackers or naturally exist in normally trained models. They have a different nature from the traditional static and…

密码学与安全 · 计算机科学 2022-06-22 Guanhong Tao , Yingqi Liu , Siyuan Cheng , Shengwei An , Zhuo Zhang , Qiuling Xu , Guangyu Shen , Xiangyu Zhang

In recent years, person Re-identification (ReID) has rapidly progressed with wide real-world applications, but also poses significant risks of adversarial attacks. In this paper, we focus on the backdoor attack on deep ReID models. Existing…

计算机视觉与模式识别 · 计算机科学 2023-05-11 Wenli Sun , Xinyang Jiang , Shuguang Dou , Dongsheng Li , Duoqian Miao , Cheng Deng , Cairong Zhao

Deep neural networks (DNNs) and generative AI (GenAI) are increasingly vulnerable to backdoor attacks, where adversaries embed triggers into inputs to cause models to misclassify or misinterpret target labels. Beyond traditional…

计算机视觉与模式识别 · 计算机科学 2025-08-05 Kyle Stein , Andrew A. Mahyari , Guillermo Francia , Eman El-Sheikh

Diffusion models (DMs) are regarded as one of the most advanced generative models today, yet recent studies suggest that they are vulnerable to backdoor attacks, which establish hidden associations between particular input patterns and…

密码学与安全 · 计算机科学 2024-08-23 Jiang Hao , Xiao Jin , Hu Xiaoguang , Chen Tianyou , Zhao Jiajia

Diffusion models have rapidly become a vital part of deep generative architectures, given today's increasing demands. Obtaining large, high-performance diffusion models demands significant resources, highlighting their importance as…

密码学与安全 · 计算机科学 2023-11-30 Sen Peng , Yufei Chen , Cong Wang , Xiaohua Jia

Text-to-image diffusion models (T2I DMs) have achieved remarkable success in generating high-quality and diverse images from text prompts, yet recent studies have revealed their vulnerability to backdoor attacks. Existing attack methods…

密码学与安全 · 计算机科学 2025-08-05 Haoran Dai , Jiawen Wang , Ruo Yang , Manali Sharma , Zhonghao Liao , Yuan Hong , Binghui Wang

The rapid progress of graph generation has raised new security concerns, particularly regarding backdoor vulnerabilities. Though prior work has explored backdoor attacks against diffusion models for image or unconditional graph generation,…

机器学习 · 计算机科学 2026-04-24 Liang Ye , Shengqin Chen , Jiazhu Dai

This paper investigates a fundamental yet underexplored question: can watermarked images remain editable without compromising watermark integrity? We propose SafeMark, a framework for watermark-preserving text-guided image manipulation that…

计算机视觉与模式识别 · 计算机科学 2026-05-20 Xiaodong Wu , Qi Li , Xiangman Li , Zelin Zhang , Lingshuang Liu , Jianbing Ni

The rise in popularity of text-to-image generative artificial intelligence (AI) has attracted widespread public interest. We demonstrate that this technology can be attacked to generate content that subtly manipulates its users. We propose…

计算机视觉与模式识别 · 计算机科学 2023-09-06 Jordan Vice , Naveed Akhtar , Richard Hartley , Ajmal Mian

Watermarking is an essential technique for embedding an identifier (i.e., watermark message) within digital images to assert ownership and monitor unauthorized alterations. In face recognition systems, watermarking plays a pivotal role in…

计算机视觉与模式识别 · 计算机科学 2024-09-25 Yuguang Yao , Anil Jain , Sijia Liu

Deep Neural Networks have recently gained lots of success after enabling several breakthroughs in notoriously challenging problems. Training these networks is computationally expensive and requires vast amounts of training data. Selling…

机器学习 · 计算机科学 2018-06-12 Yossi Adi , Carsten Baum , Moustapha Cisse , Benny Pinkas , Joseph Keshet

Self-supervised learning (SSL) models are vulnerable to backdoor attacks. Existing backdoor attacks that are effective in SSL often involve noticeable triggers, like colored patches or visible noise, which are vulnerable to human…

计算机视觉与模式识别 · 计算机科学 2025-04-04 Hanrong Zhang , Zhenting Wang , Boheng Li , Fulin Lin , Tingxu Han , Mingyu Jin , Chenlu Zhan , Mengnan Du , Hongwei Wang , Shiqing Ma

Deep neural networks are vulnerable to malicious fine-tuning attacks such as data poisoning and backdoor attacks. Therefore, in recent research, it is proposed how to detect malicious fine-tuning of neural network models. However, it…

计算机视觉与模式识别 · 计算机科学 2024-12-10 Zhaoxia Yin , Heng Yin , Xinpeng Zhang

Diffusion Models (DMs) are state-of-the-art generative models that learn a reversible corruption process from iterative noise addition and denoising. They are the backbone of many generative AI applications, such as text-to-image…

密码学与安全 · 计算机科学 2024-01-01 Sheng-Yen Chou , Pin-Yu Chen , Tsung-Yi Ho

Backdoor attacks represent a subtle yet effective class of cyberattacks targeting AI models, primarily due to their stealthy nature. The model behaves normally on clean data but exhibits malicious behavior only when the attacker embeds a…

机器学习 · 计算机科学 2025-09-29 Sujeevan Aseervatham , Achraf Kerzazi , Younès Bennani

In recent trends, one can observe Large Language Models (LLMs) are exposed to backdoor attacks where vicious triggers added during training or model editing to elicit harmful outputs on specific input patterns while maintaining clean…

密码学与安全 · 计算机科学 2026-05-14 Jagadeesh Rachapudi , Ritali Vatsi , Pranav Singh , Praful Hambarde , Amit Shukla

As the quality of image generators continues to improve, deepfakes become a topic of considerable societal debate. Image watermarking allows responsible model owners to detect and label their AI-generated content, which can mitigate the…

计算机视觉与模式识别 · 计算机科学 2025-04-29 Kasra Arabi , Benjamin Feuer , R. Teal Witter , Chinmay Hegde , Niv Cohen

Recently, diffusion models (DMs) have become the state-of-the-art method for image synthesis. Editing models based on DMs, known for their high fidelity and precision, have inadvertently introduced new challenges related to image copyright…

密码学与安全 · 计算机科学 2023-12-11 Mingtian Tan , Tianhao Wang , Somesh Jha

Machine learning is vulnerable to adversarial manipulation. Previous literature has demonstrated that at the training stage attackers can manipulate data and data sampling procedures to control model behaviour. A common attack goal is to…

机器学习 · 计算机科学 2022-06-17 Mikel Bober-Irizar , Ilia Shumailov , Yiren Zhao , Robert Mullins , Nicolas Papernot

Deep Neural Networks (DNNs) have gained considerable traction in recent years due to the unparalleled results they gathered. However, the cost behind training such sophisticated models is resource intensive, resulting in many to consider…

机器学习 · 计算机科学 2025-05-12 Anh Tu Ngo , Chuan Song Heng , Nandish Chattopadhyay , Anupam Chattopadhyay