mlsanityData to 14 Oct 2026

Not Just Text: Uncovering Vision Modality Typographic Threats in Image Generation Models

arXiv 2412.05538 ↗First posted 7 Dec 2024cs.CV cs.PFcited by 7

Not on the map. Why?

Abstract (arXiv)

Current image generation models can effortlessly produce high-quality, highly realistic images, but this also increases the risk of misuse. In various Text-to-Image or Image-to-Image tasks, attackers can generate a series of images containing inappropriate content by simply editing the language modality input. To mitigate this security concern, numerous guarding or defensive strategies have been proposed, with a particular emphasis on safeguarding language modality. However, in practical applications, threats in the vision modality, particularly in tasks involving the editing of real-world images, present heightened security risks as they can easily infringe upon the rights of the image owner. Therefore, this paper employs a method named typographic attack to reveal that various image generation models are also susceptible to threats within the vision modality. Furthermore, we also evaluate the defense performance of various existing methods when facing threats in the vision modality and uncover their ineffectiveness. Finally, we propose the Vision Modal Threats in Image Generation Models (VMT-IGMs) dataset, which would serve as a baseline for evaluating the vision modality vulnerability of various image generation models.

Key facts. Cited by 7 papers in the map (data through 14 Oct 2026). Builds on 50 of its 63 references that are in the map. First posted on arXiv 7 Dec 2024.

Builds on

50 of 63 references.

References · 50

  1. 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
  2. 2020Denoising Diffusion Probabilistic Modelscited by 21,076
  3. 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,863
  4. 2023GPT-4 Technical Reportcited by 18,396
  5. 2023LLaMA: Open and Efficient Foundation Language Modelscited by 14,132
  6. 2023Visual Instruction Tuningcited by 7,869
  7. 2015Deep Unsupervised Learning using Nonequilibrium Thermodynamicscited by 7,058
  8. 2022Hierarchical Text-Conditional Image Generation with CLIP Latentscited by 6,585
  9. 2023BLIP-2: Bootstrapping Language-Image Pre-training with Frozen Image Encoders and Large Language Modelscited by 6,137
  10. 2022Generative Adversarial Networkscited by 5,627
  11. 2023Improved Baselines with Visual Instruction Tuningcited by 4,418
  12. 2023SDXL: Improving Latent Diffusion Models for High-Resolution Image Synthesiscited by 4,356
38 more
  1. 2024Scaling Rectified Flow Transformers for High-Resolution Image Synthesiscited by 4,181
  2. 2017Progressive Growing of GANs for Improved Quality, Stability, and Variationcited by 2,988
  3. 2023InstructBLIP: Towards General-purpose Vision-Language Models with Instruction Tuningcited by 2,876
  4. 2023MiniGPT-4: Enhancing Vision-Language Understanding with Advanced Large Language Modelscited by 2,711
  5. 2022InstructPix2Pix: Learning to Follow Image Editing Instructionscited by 2,611
  6. 2023IP-Adapter: Text Compatible Image Prompt Adapter for Text-to-Image Diffusion Modelscited by 1,464
  7. 2019Generating Diverse High-Fidelity Images with VQ-VAE-2cited by 1,387
  8. 2023Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversationscited by 1,207
  9. 2023Generative Multimodal Models are In-Context Learnerscited by 446
  10. 2022A Holistic Approach to Undesired Content Detection in the Real Worldcited by 356
  11. 2022Inversion-Based Style Transfer with Diffusion Modelscited by 291
  12. 2022Red-Teaming the Stable Diffusion Safety Filtercited by 264
  13. 2023Style Injection in Diffusion: A Training-free Approach for Adapting Large-scale Diffusion Models for Style Transfercited by 196
  14. 2023SneakyPrompt: Jailbreaking Text-to-image Generative Modelscited by 189
  15. 2024Defensive Unlearning with Adversarial Training for Robust Concept Erasure in Diffusion Modelscited by 168
  16. 2023Adversarial Example Does Good: Preventing Painting Imitation from Diffusion Models via Adversarial Examplescited by 167
  17. 2023Raising the Cost of Malicious AI-Powered Image Editingcited by 163
  18. 2023Shifting Attention to Relevance: Towards the Predictive Uncertainty Quantification of Free-Form Large Language Modelscited by 150
  19. 2023TrojDiff: Trojan Attacks on Diffusion Models with Diverse Targetscited by 88
  20. 2024Controllable Generation with Text-to-Image Diffusion Models: A Surveycited by 83
  21. 2024Jailbreaking Prompt Attack: A Controllable Adversarial Attack against Diffusion Modelscited by 72
  22. 2024Latent Guard: a Safety Framework for Text-to-image Generationcited by 71
  23. 2023Self-Discovering Interpretable Diffusion Latent Directions for Responsible Text-to-Image Generationcited by 69
  24. 2023VillanDiffusion: A Unified Backdoor Attack Framework for Diffusion Modelscited by 68
  25. 2023Contrastive Denoising Score for Text-guided Latent Diffusion Image Editingcited by 49
  26. 2023White-box Membership Inference Attacks against Diffusion Modelscited by 42
  27. 2022AT-DDPM: Restoring Faces degraded by Atmospheric Turbulence using Denoising Diffusion Probabilistic Modelscited by 34
  28. 2018Information Constraints on Auto-Encoding Variational Bayescited by 33
  29. 2023All but One: Surgical Concept Erasing with Model Preservation in Text-to-Image Diffusion Modelscited by 33
  30. 2023Elijah: Eliminating Backdoors Injected in Diffusion Models via Distribution Shiftcited by 31
  31. 2023Defense-Prefix for Preventing Typographic Attacks on CLIPcited by 24
  32. 2020Defending against Backdoor Attack on Deep Neural Networkscited by 22
  33. 2023GCD-DDPM: A Generative Change Detection Model Based on Difference-Feature Guided DDPMcited by 21
  34. 2024Which Model Generated This Image? A Model-Agnostic Approach for Origin Attributioncited by 16
  35. 2023SPD-DDPM: Denoising Diffusion Probabilistic Models in the Symmetric Positive Definite Spacecited by 14
  36. 2024Multimodal Pragmatic Jailbreak on Text-to-image Modelscited by 13
  37. 2024Dreamguider: Improved Training free Diffusion-based Conditional Generationcited by 4
  38. 2023RBFormer: Improve Adversarial Robustness of Transformer by Robust Biascited by 3

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 3; 2026: 4.

7 papers.