mlsanityData to 14 Oct 2026

Universal Perturbation-based Secret Key-Controlled Data Hiding

arXiv 2311.01696 ↗First posted 3 Nov 2023cs.CR cs.CVcited by 0

Not on the map. Why?

Abstract (arXiv)

Deep neural networks (DNNs) are demonstrated to be vulnerable to universal perturbation, a single quasi-perceptible perturbation that can deceive the DNN on most images. However, the previous works are focused on using universal perturbation to perform adversarial attacks, while the potential usability of universal perturbation as data carriers in data hiding is less explored, especially for the key-controlled data hiding method. In this paper, we propose a novel universal perturbation-based secret key-controlled data-hiding method, realizing data hiding with a single universal perturbation and data decoding with the secret key-controlled decoder. Specifically, we optimize a single universal perturbation, which serves as a data carrier that can hide multiple secret images and be added to most cover images. Then, we devise a secret key-controlled decoder to extract different secret images from the single container image constructed by the universal perturbation by using different secret keys. Moreover, a suppress loss function is proposed to prevent the secret image from leakage. Furthermore, we adopt a robust module to boost the decoder's capability against corruption. Finally, A co-joint optimization strategy is proposed to find the optimal universal perturbation and decoder. Extensive experiments are conducted on different datasets to demonstrate the effectiveness of the proposed method. Additionally, the physical test performed on platforms (e.g., WeChat and Twitter) verifies the usability of the proposed method in practice.

Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 24 of its 40 references that are in the map. First posted on arXiv 3 Nov 2023.

Builds on

24 of 40 references.

References · 24

  1. 2015Deep Residual Learning for Image Recognitioncited by 52,096
  2. 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 30,186
  3. 2018The Unreasonable Effectiveness of Deep Features as a Perceptual Metriccited by 11,177
  4. 2015Faster R-CNN: Towards Real-Time Object Detection with Region Proposal Networkscited by 9,639
  5. 2014Explaining and Harnessing Adversarial Examplescited by 7,364
  6. 2017Mask R-CNNcited by 7,277
  7. 2014Fully Convolutional Networks for Semantic Segmentationcited by 4,859
  8. 2015You Only Look Once: Unified, Real-Time Object Detectioncited by 4,852
  9. 2016Universal adversarial perturbationscited by 784
  10. 2020Fast is better than free: Revisiting adversarial trainingcited by 727
  11. 2019Adversarial Training for Free!cited by 643
  12. 2018HiDDeN: Hiding Data With Deep Networkscited by 397
12 more
  1. 2019StegaStamp: Invisible Hyperlinks in Physical Photographscited by 265
  2. 2021MBRS : Enhancing Robustness of DNN-based Watermarking by Mini-Batch of Real and Simulated JPEG Compressioncited by 110
  3. 2018Generalizable Data-free Objective for Crafting Universal Adversarial Perturbationscited by 88
  4. 2021FCA: Learning a 3D Full-coverage Vehicle Camouflage for Multi-view Physical Adversarial Attackcited by 74
  5. 2019SteganoGAN: High Capacity Image Steganography with GANscited by 72
  6. 2017Fast Feature Fool: A data independent approach to universal adversarial perturbationscited by 66
  7. 2020Understanding Adversarial Examples from the Mutual Influence of Images and Perturbationscited by 59
  8. 2020Unadversarial Examples: Designing Objects for Robust Visioncited by 45
  9. 2018Ask, Acquire, and Attack: Data-free UAP Generation using Class Impressionscited by 31
  10. 2023RFLA: A Stealthy Reflected Light Adversarial Attack in the Physical Worldcited by 23
  11. 2022Defensive Patches for Robust Recognition in the Physical Worldcited by 20
  12. 2022Generative Steganography Networkcited by 15

Built on by

Not cited yet.