mlsanityData to 7 Oct 2026

Visual-Friendly Concept Protection via Selective Adversarial Perturbations

arXiv 2408.08518 ↗First posted 16 Aug 2024cs.CVcited by 6

On the map: Diffusion models → Robustness, privacy and adversarial aspects

Abstract (arXiv)

Personalized concept generation by tuning diffusion models with a few images raises potential legal and ethical concerns regarding privacy and intellectual property rights. Researchers attempt to prevent malicious personalization using adversarial perturbations. However, previous efforts have mainly focused on the effectiveness of protection while neglecting the visibility of perturbations. They utilize global adversarial perturbations, which introduce noticeable alterations to original images and significantly degrade visual quality. In this work, we propose the Visual-Friendly Concept Protection (VCPro) framework, which prioritizes the protection of key concepts chosen by the image owner through adversarial perturbations with lower perceptibility. To ensure these perturbations are as inconspicuous as possible, we introduce a relaxed optimization objective to identify the least perceptible yet effective adversarial perturbations, solved using the Lagrangian multiplier method. Qualitative and quantitative experiments validate that VCPro achieves a better trade-off between the visibility of perturbations and protection effectiveness, effectively prioritizing the protection of target concepts in images with less perceptible perturbations.

Key facts. Cited by 6 papers in the map (data through 7 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. First posted on arXiv 16 Aug 2024.

Builds on

0 of 0 references.

No references here yet.

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2025: 5; 2026: 1.

6 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2025Evaluating Adversarial Protections for Diffusion Personalization: A Comprehensive Study
  2. 2025Perturb a Model, Not an Image: Towards Robust Privacy Protection via Anti-Personalized Diffusion Models
  3. 2023Can Protective Perturbation Safeguard Personal Data from Being Exploited by Stable Diffusion?
  4. 2024Privacy Protection in Personalized Diffusion Models via Targeted Cross-Attention Adversarial Attack
  5. 2025PersGuard: Preventing Malicious Personalization in Text-to-Image Diffusion Models via Model Backdoors
  6. 2024Nearly Zero-Cost Protection Against Mimicry by Personalized Diffusion Models
  7. 2024Protective Perturbations against Unauthorized Data Usage in Diffusion-based Image Generation
  8. 2024Prompt-Agnostic Adversarial Perturbation for Customized Diffusion Models