mlsanityData to 7 Oct 2026

Nearly Zero-Cost Protection Against Mimicry by Personalized Diffusion Models

arXiv 2412.11423 ↗First posted 16 Dec 2024cs.CVcited by 6

On the map: Diffusion models → Robustness, privacy and adversarial aspects

Abstract (arXiv)

Recent advancements in diffusion models revolutionize image generation but pose risks of misuse, such as replicating artworks or generating deepfakes. Existing image protection methods, though effective, struggle to balance protection efficacy, invisibility, and latency, thus limiting practical use. We introduce perturbation pre-training to reduce latency and propose a mixture-of-perturbations approach that dynamically adapts to input images to minimize performance degradation. Our novel training strategy computes protection loss across multiple VAE feature spaces, while adaptive targeted protection at inference enhances robustness and invisibility. Experiments show comparable protection performance with improved invisibility and drastically reduced inference time. The code and demo are available at https://webtoon.github.io/impasto

Key facts. Cited by 6 papers in the map (data through 7 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 48 of its 60 references that are in the map. First posted on arXiv 16 Dec 2024.

Builds on

48 of 60 references.

Closest ancestors · 9

Same direction, newest first

  1. 2024Prompt-Agnostic Adversarial Perturbation for Customized Diffusion Models20 Aug
  2. 2024Perturbing Attention Gives You More Bang for the Buck: Subtle Imaging Perturbations That Efficiently Fool Customized Diffusion Models23 Apr
  3. 2024Imperceptible Protection against Style Imitation from Diffusion Models28 Mar
  4. 2023MetaCloak: Preventing Unauthorized Subject-driven Text-to-image Diffusion-based Synthesis via Meta-learning22 Nov
  5. 2023Toward effective protection against diffusion based mimicry through score distillation2 Oct
  6. 2023Unlearnable Examples for Diffusion Models: Protect Data from Unauthorized Exploitation2 Jun
  7. 2023Mist: Towards Improved Adversarial Examples for Diffusion Models22 May
  8. 2023Raising the Cost of Malicious AI-Powered Image Editing13 Feb
  9. 2023Adversarial Example Does Good: Preventing Painting Imitation from Diffusion Models via Adversarial Examples9 Feb

Other references · 39

  1. 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
  2. 2020Denoising Diffusion Probabilistic Modelscited by 20,851
  3. 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
  4. 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,084
  5. 2018The Unreasonable Effectiveness of Deep Features as a Perceptual Metriccited by 11,029
  6. 2020Score-Based Generative Modeling through Stochastic Differential Equationscited by 8,964
  7. 2014Explaining and Harnessing Adversarial Examplescited by 7,287
  8. 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
  9. 2018A Style-Based Generator Architecture for Generative Adversarial Networkscited by 5,986
  10. 2023Adding Conditional Control to Text-to-Image Diffusion Modelscited by 5,466
  11. 2023SDXL: Improving Latent Diffusion Models for High-Resolution Image Synthesiscited by 4,290
  12. 2022DreamBooth: Fine Tuning Text-to-Image Diffusion Models for Subject-Driven Generationcited by 3,286
27 more
  1. 2022An Image is Worth One Word: Personalizing Text-to-Image Generation using Textual Inversioncited by 2,231
  2. 2021SDEdit: Guided Image Synthesis and Editing with Stochastic Differential Equationscited by 1,903
  3. 2023T2I-Adapter: Learning Adapters to Dig out More Controllable Ability for Text-to-Image Diffusion Modelscited by 1,339
  4. 2022Multi-Concept Customization of Text-to-Image Diffusioncited by 1,099
  5. 2017VGGFace2: A dataset for recognising faces across pose and agecited by 911
  6. 2020Image Quality Assessment: Unifying Structure and Texture Similaritycited by 792
  7. 2016Universal adversarial perturbationscited by 774
  8. 2023Q-Align: Teaching LMMs for Visual Scoring via Discrete Text-Defined Levelscited by 489
  9. 2023Composer: Creative and Controllable Image Synthesis with Composable Conditionscited by 303
  10. 2023TOPIQ: A Top-down Approach from Semantics to Distortions for Image Quality Assessmentcited by 220
  11. 2023Glaze: Protecting Artists from Style Mimicry by Text-to-Image Modelscited by 200
  12. 2023StyleDrop: Text-to-Image Generation in Any Stylecited by 197
  13. 2015Large-scale Classification of Fine-Art Paintings: Learning The Right Metric on The Right Featurecited by 181
  14. 2020Perceptual Adversarial Robustness: Defense Against Unseen Threat Modelscited by 137
  15. 2018SparseFool: a few pixels make a big differencecited by 94
  16. 2019ColorFool: Semantic Adversarial Colorizationcited by 89
  17. 2018Generalizable Data-free Objective for Crafting Universal Adversarial Perturbationscited by 88
  18. 2018Low Frequency Adversarial Perturbationcited by 80
  19. 2022Frequency-driven Imperceptible Adversarial Attack on Semantic Similaritycited by 76
  20. 2019Towards Large yet Imperceptible Adversarial Image Perturbations with Perceptual Color Distancecited by 72
  21. 2022Attentions Help CNNs See Better: Attention-based Hybrid Image Quality Assessment Networkcited by 57
  22. 2017NAG: Network for Adversary Generationcited by 51
  23. 2018Towards Imperceptible and Robust Adversarial Example Attacks against Neural Networkscited by 38
  24. 2018Ask, Acquire, and Attack: Data-free UAP Generation using Class Impressionscited by 31
  25. 2020Universal Adversarial Perturbations: A Surveycited by 28
  26. 2021Demiguise Attack: Crafting Invisible Semantic Adversarial Perturbations with Perceptual Similaritycited by 18
  27. 2022Saliency Attack: Towards Imperceptible Black-box Adversarial Attackcited by 12

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2025: 2; 2026: 4.

6 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2025Evaluating Adversarial Protections for Diffusion Personalization: A Comprehensive Study
  2. 2026VOID: Defeating Unauthorized Mimicry in Latent Diffusion Models
  3. 2025Interpreting Structured Perturbations in Image Protection Methods for Diffusion Models
  4. 2023Can Protective Perturbation Safeguard Personal Data from Being Exploited by Stable Diffusion?
  5. 2025Perturb a Model, Not an Image: Towards Robust Privacy Protection via Anti-Personalized Diffusion Models
  6. 2024Dual-Model Defense: Safeguarding Diffusion Models from Membership Inference Attacks through Disjoint Data Splitting
  7. 2025Latent Diffusion Unlearning: Protecting Against Unauthorized Personalization Through Trajectory Shifted Perturbations
  8. 2025CAT: Contrastive Adversarial Training for Evaluating the Robustness of Protective Perturbations in Latent Diffusion Models