{"total":94,"rows":[{"id":"2302.04222","title":"Glaze: Protecting Artists from Style Mimicry by Text-to-Image Models","created":"2023-02-08","cited_by_count":205,"area":"diffusion"},{"id":"2303.15433","title":"Anti-DreamBooth: Protecting users from personalized text-to-image synthesis","created":"2023-03-27","cited_by_count":120,"area":"diffusion"},{"id":"2106.10807","title":"Adversarial Examples Make Strong Poisons","created":"2021-06-21","cited_by_count":119,"area":null},{"id":"2203.03121","title":"Protecting Facial Privacy: Generating Adversarial Identity Masks via Style-robust Makeup Transfer","created":"2022-03-07","cited_by_count":78,"area":null},{"id":"2310.13828","title":"Nightshade: Prompt-Specific Poisoning Attacks on Text-to-Image Generative Models","created":"2023-10-20","cited_by_count":75,"area":"safety"},{"id":"2111.00898","title":"Availability Attacks Create Shortcuts","created":"2021-11-01","cited_by_count":62,"area":null},{"id":"2102.04716","title":"Better Safe Than Sorry: Preventing Delusive Adversaries with Adversarial Training","created":"2021-02-09","cited_by_count":59,"area":null},{"id":"2106.14851","title":"Data Poisoning Won't Save You From Facial Recognition","created":"2021-06-28","cited_by_count":45,"area":"safety"},{"id":"2306.10008","title":"CLIP2Protect: Protecting Facial Privacy using Text-Guided Makeup via Adversarial Latent Search","created":"2023-06-16","cited_by_count":43,"area":null},{"id":"2301.13838","title":"Image Shortcut Squeezing: Countering Perturbative Availability Poisons with Compression","created":"2023-01-31","cited_by_count":39,"area":null},{"id":"2301.01217","title":"Unlearnable Clusters: Towards Label-agnostic Unlearnable Examples","created":"2022-12-31","cited_by_count":36,"area":null},{"id":"2103.02683","title":"Preventing Unauthorized Use of Proprietary Data: Poisoning for Secure Dataset Release","created":"2021-02-16","cited_by_count":35,"area":null},{"id":"2305.13625","title":"DiffProtect: Generate Adversarial Examples with Diffusion Models for Facial Privacy Protection","created":"2023-05-23","cited_by_count":35,"area":"diffusion"},{"id":"2310.19248","title":"IMPRESS: Evaluating the Resilience of Imperceptible Perturbations Against Unauthorized Data Usage in Diffusion-Based Generative AI","created":"2023-10-30","cited_by_count":35,"area":"diffusion"},{"id":"2202.11202","title":"Indiscriminate Poisoning Attacks on Unsupervised Contrastive Learning","created":"2022-02-22","cited_by_count":34,"area":"safety"},{"id":"2405.09882","title":"DiffAM: Diffusion-based Adversarial Makeup Transfer for Facial Privacy Protection","created":"2024-05-16","cited_by_count":32,"area":"diffusion"},{"id":"2302.04262","title":"Algorithmic Collective Action in Machine Learning","created":"2023-02-08","cited_by_count":31,"area":null},{"id":"2210.09943","title":"Rethinking Bias Mitigation: Fairer Architectures Make for Fairer Face Recognition","created":"2022-10-18","cited_by_count":26,"area":null},{"id":"2306.07754","title":"Generative Watermarking Against Unauthorized Subject-Driven Image Synthesis","created":"2023-06-13","cited_by_count":23,"area":"safety"},{"id":"2205.11981","title":"OPOM: Customized Invisible Cloak towards Face Privacy Protection","created":"2022-05-24","cited_by_count":22,"area":null},{"id":"2102.06764","title":"Technical Challenges for Training Fair Neural Networks","created":"2021-02-12","cited_by_count":20,"area":null},{"id":"2305.12863","title":"Towards Benchmarking and Assessing Visual Naturalness of Physical World Adversarial Attacks","created":"2023-05-22","cited_by_count":18,"area":null},{"id":"2112.04558","title":"SoK: Anti-Facial Recognition Technology","created":"2021-12-08","cited_by_count":16,"area":null},{"id":"2305.14188","title":"The Best Defense is a Good Offense: Adversarial Augmentation against Adversarial Attacks","created":"2023-05-23","cited_by_count":15,"area":null},{"id":"2410.22705","title":"Geometry Cloak: Preventing TGS-based 3D Reconstruction from Copyrighted Images","created":"2024-10-30","cited_by_count":15,"area":null},{"id":"2408.10571","title":"Prompt-Agnostic Adversarial Perturbation for Customized Diffusion Models","created":"2024-08-20","cited_by_count":14,"area":"diffusion"},{"id":"2312.08898","title":"Detection and Defense of Unlearnable Examples","created":"2023-12-14","cited_by_count":13,"area":null},{"id":"2103.00847","title":"Am I a Real or Fake Celebrity? Measuring Commercial Face Recognition Web APIs under Deepfake Impersonation Attack","created":"2021-03-01","cited_by_count":12,"area":null},{"id":"2108.12508","title":"Robustness Disparities in Commercial Face Detection","created":"2021-08-27","cited_by_count":11,"area":null},{"id":"2404.17120","title":"Talking Nonsense: Probing Large Language Models' Understanding of Adversarial Gibberish Inputs","created":"2024-04-26","cited_by_count":11,"area":null},{"id":"2407.13975","title":"Personalized Privacy Protection Mask Against Unauthorized Facial Recognition","created":"2024-07-19","cited_by_count":11,"area":null},{"id":"2409.14424","title":"Dormant: Defending against Pose-driven Human Image Animation","created":"2024-09-22","cited_by_count":11,"area":null},{"id":"2108.02707","title":"Fairness Properties of Face Recognition and Obfuscation Systems","created":"2021-08-05","cited_by_count":9,"area":null},{"id":"2305.03980","title":"Towards Prompt-robust Face Privacy Protection via Adversarial Decoupling Augmentation Framework","created":"2023-05-06","cited_by_count":9,"area":"diffusion"},{"id":"2302.03657","title":"Toward Face Biometric De-identification using Adversarial Examples","created":"2023-02-07","cited_by_count":8,"area":null},{"id":"2401.08903","title":"Rethinking Impersonation and Dodging Attacks on Face Recognition Systems","created":"2024-01-17","cited_by_count":8,"area":null},{"id":"2408.12387","title":"Makeup-Guided Facial Privacy Protection via Untrained Neural Network Priors","created":"2024-08-20","cited_by_count":8,"area":null},{"id":"2104.08690","title":"Rethinking Image-Scaling Attacks: The Interplay Between Vulnerabilities in Machine Learning Systems","created":"2021-04-18","cited_by_count":7,"area":null},{"id":"2301.07315","title":"Face Recognition in the age of CLIP & Billion image datasets","created":"2023-01-18","cited_by_count":7,"area":null},{"id":"2306.15268","title":"Can Pretrained Language Models Derive Correct Semantics from Corrupt Subwords under Noise?","created":"2023-06-27","cited_by_count":6,"area":null},{"id":"2308.05983","title":"Face Encryption via Frequency-Restricted Identity-Agnostic Attacks","created":"2023-08-11","cited_by_count":6,"area":null},{"id":"2310.03614","title":"Adversarial Machine Learning for Social Good: Reframing the Adversary as an Ally","created":"2023-10-05","cited_by_count":6,"area":null},{"id":"2310.16061","title":"Segue: Side-information Guided Generative Unlearnable Examples for Facial Privacy Protection in Real World","created":"2023-10-24","cited_by_count":6,"area":null},{"id":"2211.15937","title":"Robustness Disparities in Face Detection","created":"2022-11-29","cited_by_count":5,"area":null},{"id":"2306.14640","title":"3D-Aware Adversarial Makeup Generation for Facial Privacy Protection","created":"2023-06-26","cited_by_count":5,"area":null},{"id":"2309.01582","title":"Improving Visual Quality and Transferability of Adversarial Attacks on Face Recognition Simultaneously with Adversarial Restoration","created":"2023-09-04","cited_by_count":5,"area":null},{"id":"2309.03198","title":"My Art My Choice: Adversarial Protection Against Unruly AI","created":"2023-09-06","cited_by_count":5,"area":"diffusion"},{"id":"2312.14407","title":"AdvCloak: Customized Adversarial Cloak for Privacy Protection","created":"2023-12-22","cited_by_count":5,"area":null},{"id":"2511.00143","title":"BlurGuard: A Simple Approach for Robustifying Image Protection Against AI-Powered Editing","created":"2025-10-31","cited_by_count":5,"area":null},{"id":"2110.06802","title":"Identification of Attack-Specific Signatures in Adversarial Examples","created":"2021-10-13","cited_by_count":4,"area":null},{"id":"2112.05634","title":"Preemptive Image Robustification for Protecting Users against Man-in-the-Middle Adversarial Attacks","created":"2021-12-10","cited_by_count":4,"area":null},{"id":"2206.09410","title":"Low-Mid Adversarial Perturbation against Unauthorized Face Recognition System","created":"2022-06-19","cited_by_count":4,"area":null},{"id":"2405.16940","title":"Adversarial Attacks on Both Face Recognition and Face Anti-spoofing Models","created":"2024-05-27","cited_by_count":4,"area":null},{"id":"2411.15555","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","created":"2024-11-23","cited_by_count":4,"area":null},{"id":"2201.10047","title":"Are Commercial Face Detection Models as Biased as Academic Models?","created":"2022-01-25","cited_by_count":3,"area":null},{"id":"2208.10688","title":"Hierarchical Perceptual Noise Injection for Social Media Fingerprint Privacy Protection","created":"2022-08-23","cited_by_count":3,"area":null},{"id":"2305.13548","title":"Attribute-Guided Encryption with Facial Texture Masking","created":"2023-05-22","cited_by_count":3,"area":null},{"id":"2401.00055","title":"Online Algorithmic Recourse by Collective Action","created":"2023-12-29","cited_by_count":3,"area":null},{"id":"2206.04783","title":"ReFace: Real-time Adversarial Attacks on Face Recognition Systems","created":"2022-06-09","cited_by_count":2,"area":null},{"id":"2212.02611","title":"StyleGAN as a Utility-Preserving Face De-identification Method","created":"2022-12-05","cited_by_count":2,"area":null},{"id":"2401.00151","title":"CamPro: Camera-based Anti-Facial Recognition","created":"2023-12-30","cited_by_count":2,"area":null},{"id":"2401.07205","title":"Crafter: Facial Feature Crafting against Inversion-based Identity Theft on Deep Models","created":"2024-01-14","cited_by_count":2,"area":null},{"id":"2406.03684","title":"Principles of Designing Robust Remote Face Anti-Spoofing Systems","created":"2024-06-06","cited_by_count":2,"area":null},{"id":"2409.16491","title":"Proactive Schemes: A Survey of Adversarial Attacks for Social Good","created":"2024-09-24","cited_by_count":2,"area":null},{"id":"2501.06533","title":"DivTrackee versus DynTracker: Promoting Diversity in Anti-Facial Recognition against Dynamic FR Strategy","created":"2025-01-11","cited_by_count":2,"area":null},{"id":"2502.00451","title":"Towards Privacy-aware Mental Health AI Models: Advances, Challenges, and Opportunities","created":"2025-02-01","cited_by_count":2,"area":null},{"id":"2603.13028","title":"Purify Once, Edit Freely: Breaking Image Protections under Model Mismatch","created":"2026-03-13","cited_by_count":2,"area":"diffusion"},{"id":"2608.04314","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","created":"2026-08-05","cited_by_count":2,"area":null},{"id":"2111.04439","title":"Addressing Privacy Threats from Machine Learning","created":"2021-10-25","cited_by_count":1,"area":null},{"id":"2211.09717","title":"UPTON: Preventing Authorship Leakage from Public Text Release via Data Poisoning","created":"2022-11-17","cited_by_count":1,"area":"safety"},{"id":"2401.01575","title":"Enhancing Generalization of Invisible Facial Privacy Cloak via Gradient Accumulation","created":"2024-01-03","cited_by_count":1,"area":null},{"id":"2509.17457","title":"Explainable AI for Analyzing Person-Specific Patterns in Facial Recognition Tasks","created":"2025-09-22","cited_by_count":1,"area":null},{"id":"2604.00903","title":"IDDM: Identity-Decoupled Personalized Diffusion Models with a Tunable Privacy-Utility Trade-off","created":"2026-04-01","cited_by_count":1,"area":"diffusion"},{"id":"2604.09024","title":"Leave My Images Alone: Preventing Multi-Modal Large Language Models from Analyzing Images via Visual Prompt Injection","created":"2026-04-10","cited_by_count":1,"area":"mllm"},{"id":"2606.11615","title":"Adv-TGD: Adversarial Text-Guided Diffusion for Face Recognition Impersonation Attacks","created":"2026-06-10","cited_by_count":1,"area":"diffusion"},{"id":"2307.00456","title":"Make Text Unlearnable: Exploiting Effective Patterns to Protect Personal Data","created":"2023-07-02","cited_by_count":0,"area":null},{"id":"2310.12590","title":"PrivacyGAN: robust generative image privacy","created":"2023-10-19","cited_by_count":0,"area":null},{"id":"2310.15590","title":"Facial Data Minimization: Shallow Model as Your Privacy Filter","created":"2023-10-24","cited_by_count":0,"area":null},{"id":"2311.17332","title":"NeRFTAP: Enhancing Transferability of Adversarial Patches on Face Recognition using Neural Radiance Fields","created":"2023-11-29","cited_by_count":0,"area":null},{"id":"2312.11309","title":"The Ultimate Combo: Boosting Adversarial Example Transferability by Composing Data Augmentations","created":"2023-12-18","cited_by_count":0,"area":null},{"id":"2406.02253","title":"PuFace: Defending against Facial Cloaking Attacks for Facial Recognition Models","created":"2024-06-04","cited_by_count":0,"area":null},{"id":"2503.08731","title":"FairDeFace: Evaluating the Fairness and Adversarial Robustness of Face Obfuscation Methods","created":"2025-03-11","cited_by_count":0,"area":null},{"id":"2503.10549","title":"Controllable Adversarial Makeup for Privacy via Text-Guided Diffusion","created":"2025-03-13","cited_by_count":0,"area":"diffusion"},{"id":"2510.17169","title":"Investigating Adversarial Robustness against Preprocessing used in Blackbox Face Recognition","created":"2025-10-20","cited_by_count":0,"area":null},{"id":"2511.17747","title":"AEGIS: Preserving privacy of 3D Facial Avatars with Adversarial Perturbations","created":"2025-11-21","cited_by_count":0,"area":null},{"id":"2603.04537","title":"How Professional Visual Artists are Negotiating Generative AI in the Workplace","created":"2026-03-04","cited_by_count":0,"area":null},{"id":"2603.21867","title":"Adversarial Camouflage","created":"2026-03-23","cited_by_count":0,"area":null},{"id":"2605.01217","title":"Asymmetric Invertible Threat: Learning Reversible Privacy Defense for Face Recognition","created":"2026-05-02","cited_by_count":0,"area":null},{"id":"2605.12937","title":"AuraMask: An Extensible Pipeline for Developing Aesthetic Anti-Facial Recognition Image Filters","created":"2026-05-13","cited_by_count":0,"area":null},{"id":"2605.19032","title":"Personalized Face Privacy Protection From a Single Image","created":"2026-05-18","cited_by_count":0,"area":null},{"id":"2606.21146","title":"ChronoLock: Protecting Videos from Unauthorized Text-to-Video Personalization","created":"2026-06-19","cited_by_count":0,"area":"diffusion"},{"id":"2607.05996","title":"Unlearnable Faces: Privacy Protection Surviving Extraction Pipeline","created":"2026-07-07","cited_by_count":0,"area":null},{"id":"2607.27764","title":"Private Face Recognition Training Dataset Publication via Identity-Decoupled and Geometry-Preserving Face Distillation","created":"2026-07-30","cited_by_count":0,"area":null},{"id":"2610.17323","title":"SSM-Attack: Learning Where to Perturb for Black-Box Face Privacy","created":"2026-10-12","cited_by_count":0,"area":null}],"next_cursor":null}