Visual-Friendly Concept Protection via Selective Adversarial Perturbations
On the map: Diffusion models → Robustness, privacy and adversarial aspects
Abstract (arXiv)
Personalized concept generation by tuning diffusion models with a few images raises potential legal and ethical concerns regarding privacy and intellectual property rights. Researchers attempt to prevent malicious personalization using adversarial perturbations. However, previous efforts have mainly focused on the effectiveness of protection while neglecting the visibility of perturbations. They utilize global adversarial perturbations, which introduce noticeable alterations to original images and significantly degrade visual quality. In this work, we propose the Visual-Friendly Concept Protection (VCPro) framework, which prioritizes the protection of key concepts chosen by the image owner through adversarial perturbations with lower perceptibility. To ensure these perturbations are as inconspicuous as possible, we introduce a relaxed optimization objective to identify the least perceptible yet effective adversarial perturbations, solved using the Lagrangian multiplier method. Qualitative and quantitative experiments validate that VCPro achieves a better trade-off between the visibility of perturbations and protection effectiveness, effectively prioritizing the protection of target concepts in images with less perceptible perturbations.
Key facts. Cited by 6 papers in the map (data through 7 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. First posted on arXiv 16 Aug 2024.
Builds on
0 of 0 references.
No references here yet.
Built on by
Citing papers per year: 2025: 5; 2026: 1.
6 papers.
- 2025BlurGuard: A Simple Approach for Robustifying Image Protection Against AI-Powered Editingcited by 5
- 2025Beyond Vulnerabilities: A Survey of Adversarial Attacks as Both Threats and Defenses in Computer Vision Systemscited by 4
- 2025StyleProtect: Safeguarding Artistic Identity in Fine-tuned Diffusion Modelscited by 4
- 2025Anti-Inpainting: A Proactive Defense Approach against Malicious Diffusion-based Inpainters under Unknown Conditionscited by 3
- 2025Latent Diffusion Unlearning: Protecting Against Unauthorized Personalization Through Trajectory Shifted Perturbationscited by 1
- 2026A Survey on Adversarial Attacks and Defenses for Diffusion Models Across Multiple Modalitiescited by 0
- 2026A Survey on Adversarial Attacks and Defenses for Diffusion Models Across Multiple Modalities28 Aug 2026
- 2025BlurGuard: A Simple Approach for Robustifying Image Protection Against AI-Powered Editing31 Oct 2025
- 2025Latent Diffusion Unlearning: Protecting Against Unauthorized Personalization Through Trajectory Shifted Perturbations3 Oct 2025
- 2025StyleProtect: Safeguarding Artistic Identity in Fine-tuned Diffusion Models17 Sep 2025
- 2025Beyond Vulnerabilities: A Survey of Adversarial Attacks as Both Threats and Defenses in Computer Vision Systems3 Aug 2025
- 2025Anti-Inpainting: A Proactive Defense Approach against Malicious Diffusion-based Inpainters under Unknown Conditions19 May 2025
Similar, not cited
Close in wording, no citation either way
- 2025Evaluating Adversarial Protections for Diffusion Personalization: A Comprehensive Study
- 2025Perturb a Model, Not an Image: Towards Robust Privacy Protection via Anti-Personalized Diffusion Models
- 2023Can Protective Perturbation Safeguard Personal Data from Being Exploited by Stable Diffusion?
- 2024Privacy Protection in Personalized Diffusion Models via Targeted Cross-Attention Adversarial Attack
- 2025PersGuard: Preventing Malicious Personalization in Text-to-Image Diffusion Models via Model Backdoors
- 2024Nearly Zero-Cost Protection Against Mimicry by Personalized Diffusion Models
- 2024Protective Perturbations against Unauthorized Data Usage in Diffusion-based Image Generation
- 2024Prompt-Agnostic Adversarial Perturbation for Customized Diffusion Models