Nearly Zero-Cost Protection Against Mimicry by Personalized Diffusion Models
On the map: Diffusion models → Robustness, privacy and adversarial aspects
Abstract (arXiv)
Recent advancements in diffusion models revolutionize image generation but pose risks of misuse, such as replicating artworks or generating deepfakes. Existing image protection methods, though effective, struggle to balance protection efficacy, invisibility, and latency, thus limiting practical use. We introduce perturbation pre-training to reduce latency and propose a mixture-of-perturbations approach that dynamically adapts to input images to minimize performance degradation. Our novel training strategy computes protection loss across multiple VAE feature spaces, while adaptive targeted protection at inference enhances robustness and invisibility. Experiments show comparable protection performance with improved invisibility and drastically reduced inference time. The code and demo are available at https://webtoon.github.io/impasto
Key facts. Cited by 6 papers in the map (data through 7 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 48 of its 60 references that are in the map. First posted on arXiv 16 Dec 2024.
Builds on
48 of 60 references.
Closest ancestors · 9
Same direction, newest first
- 2024Prompt-Agnostic Adversarial Perturbation for Customized Diffusion Models20 Aug
- 2024Perturbing Attention Gives You More Bang for the Buck: Subtle Imaging Perturbations That Efficiently Fool Customized Diffusion Models23 Apr
- 2024Imperceptible Protection against Style Imitation from Diffusion Models28 Mar
- 2023MetaCloak: Preventing Unauthorized Subject-driven Text-to-image Diffusion-based Synthesis via Meta-learning22 Nov
- 2023Toward effective protection against diffusion based mimicry through score distillation2 Oct
- 2023Unlearnable Examples for Diffusion Models: Protect Data from Unauthorized Exploitation2 Jun
- 2023Mist: Towards Improved Adversarial Examples for Diffusion Models22 May
- 2023Raising the Cost of Malicious AI-Powered Image Editing13 Feb
- 2023Adversarial Example Does Good: Preventing Painting Imitation from Diffusion Models via Adversarial Examples9 Feb
Other references · 39
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
- 2020Denoising Diffusion Probabilistic Modelscited by 20,851
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
- 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,084
- 2018The Unreasonable Effectiveness of Deep Features as a Perceptual Metriccited by 11,029
- 2020Score-Based Generative Modeling through Stochastic Differential Equationscited by 8,964
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2018A Style-Based Generator Architecture for Generative Adversarial Networkscited by 5,986
- 2023Adding Conditional Control to Text-to-Image Diffusion Modelscited by 5,466
- 2023SDXL: Improving Latent Diffusion Models for High-Resolution Image Synthesiscited by 4,290
- 2022DreamBooth: Fine Tuning Text-to-Image Diffusion Models for Subject-Driven Generationcited by 3,286
27 more
- 2022An Image is Worth One Word: Personalizing Text-to-Image Generation using Textual Inversioncited by 2,231
- 2021SDEdit: Guided Image Synthesis and Editing with Stochastic Differential Equationscited by 1,903
- 2023T2I-Adapter: Learning Adapters to Dig out More Controllable Ability for Text-to-Image Diffusion Modelscited by 1,339
- 2022Multi-Concept Customization of Text-to-Image Diffusioncited by 1,099
- 2017VGGFace2: A dataset for recognising faces across pose and agecited by 911
- 2020Image Quality Assessment: Unifying Structure and Texture Similaritycited by 792
- 2016Universal adversarial perturbationscited by 774
- 2023Q-Align: Teaching LMMs for Visual Scoring via Discrete Text-Defined Levelscited by 489
- 2023Composer: Creative and Controllable Image Synthesis with Composable Conditionscited by 303
- 2023TOPIQ: A Top-down Approach from Semantics to Distortions for Image Quality Assessmentcited by 220
- 2023Glaze: Protecting Artists from Style Mimicry by Text-to-Image Modelscited by 200
- 2023StyleDrop: Text-to-Image Generation in Any Stylecited by 197
- 2015Large-scale Classification of Fine-Art Paintings: Learning The Right Metric on The Right Featurecited by 181
- 2020Perceptual Adversarial Robustness: Defense Against Unseen Threat Modelscited by 137
- 2018SparseFool: a few pixels make a big differencecited by 94
- 2019ColorFool: Semantic Adversarial Colorizationcited by 89
- 2018Generalizable Data-free Objective for Crafting Universal Adversarial Perturbationscited by 88
- 2018Low Frequency Adversarial Perturbationcited by 80
- 2022Frequency-driven Imperceptible Adversarial Attack on Semantic Similaritycited by 76
- 2019Towards Large yet Imperceptible Adversarial Image Perturbations with Perceptual Color Distancecited by 72
- 2022Attentions Help CNNs See Better: Attention-based Hybrid Image Quality Assessment Networkcited by 57
- 2017NAG: Network for Adversary Generationcited by 51
- 2018Towards Imperceptible and Robust Adversarial Example Attacks against Neural Networkscited by 38
- 2018Ask, Acquire, and Attack: Data-free UAP Generation using Class Impressionscited by 31
- 2020Universal Adversarial Perturbations: A Surveycited by 28
- 2021Demiguise Attack: Crafting Invisible Semantic Adversarial Perturbations with Perceptual Similaritycited by 18
- 2022Saliency Attack: Towards Imperceptible Black-box Adversarial Attackcited by 12
Built on by
Citing papers per year: 2025: 2; 2026: 4.
6 papers.
- 2026Universal Image Immunization against Diffusion-based Image Editing via Semantic Injectioncited by 7
- 2025BlurGuard: A Simple Approach for Robustifying Image Protection Against AI-Powered Editingcited by 5
- 2025Towards Robust Defense against Customization via Protective Perturbation Resistant to Diffusion-based Purificationcited by 3
- 2026DICE: Disentangling Artist Style from Content via Contrastive Subspace Decomposition in Diffusion Modelscited by 0
- 2026Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecyclecited by 0
- 2026A Survey on Adversarial Attacks and Defenses for Diffusion Models Across Multiple Modalitiescited by 0
- 2026A Survey on Adversarial Attacks and Defenses for Diffusion Models Across Multiple Modalities28 Aug 2026
- 2026Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle5 Aug 2026
- 2026Universal Image Immunization against Diffusion-based Image Editing via Semantic Injection16 Feb 2026
- 2026DICE: Disentangling Artist Style from Content via Contrastive Subspace Decomposition in Diffusion Models8 Feb 2026
- 2025BlurGuard: A Simple Approach for Robustifying Image Protection Against AI-Powered Editing31 Oct 2025
- 2025Towards Robust Defense against Customization via Protective Perturbation Resistant to Diffusion-based Purification17 Sep 2025
Similar, not cited
Close in wording, no citation either way
- 2025Evaluating Adversarial Protections for Diffusion Personalization: A Comprehensive Study
- 2026VOID: Defeating Unauthorized Mimicry in Latent Diffusion Models
- 2025Interpreting Structured Perturbations in Image Protection Methods for Diffusion Models
- 2023Can Protective Perturbation Safeguard Personal Data from Being Exploited by Stable Diffusion?
- 2025Perturb a Model, Not an Image: Towards Robust Privacy Protection via Anti-Personalized Diffusion Models
- 2024Dual-Model Defense: Safeguarding Diffusion Models from Membership Inference Attacks through Disjoint Data Splitting
- 2025Latent Diffusion Unlearning: Protecting Against Unauthorized Personalization Through Trajectory Shifted Perturbations
- 2025CAT: Contrastive Adversarial Training for Evaluating the Robustness of Protective Perturbations in Latent Diffusion Models