mlsanityData to 14 Oct 2026

TarPro: Targeted Protection against Malicious Image Editing

arXiv 2503.13994 ↗First posted 18 Mar 2025cs.CR cs.CVcited by 7

Not on the map. Why?

Abstract (arXiv)

The rapid advancement of image editing techniques has raised concerns about their misuse for generating Not-Safe-for-Work (NSFW) content. This necessitates a targeted protection mechanism that blocks malicious edits while preserving normal editability. However, existing protection methods fail to achieve this balance, as they indiscriminately disrupt all edits while still allowing some harmful content to be generated. To address this, we propose TarPro, a targeted protection framework that prevents malicious edits while maintaining benign modifications. TarPro achieves this through a semantic-aware constraint that only disrupts malicious content and a lightweight perturbation generator that produces a more stable, imperceptible, and robust perturbation for image protection. Extensive experiments demonstrate that TarPro surpasses existing methods, achieving a high protection efficacy while ensuring minimal impact on normal edits. Our results highlight TarPro as a practical solution for secure and controlled image editing.

Key facts. Cited by 7 papers in the map (data through 14 Oct 2026). Builds on 51 of its 55 references that are in the map. First posted on arXiv 18 Mar 2025.

Builds on

51 of 55 references.

References · 51

  1. 2020Denoising Diffusion Probabilistic Modelscited by 21,076
  2. 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,863
  3. 2014Explaining and Harnessing Adversarial Examplescited by 7,364
  4. 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
  5. 2023Adding Conditional Control to Text-to-Image Diffusion Modelscited by 5,503
  6. 2015Rethinking the Inception Architecture for Computer Visioncited by 5,475
  7. 2023SDXL: Improving Latent Diffusion Models for High-Resolution Image Synthesiscited by 4,356
  8. 2021Improved Denoising Diffusion Probabilistic Modelscited by 3,761
  9. 2021GLIDE: Towards Photorealistic Image Generation and Editing with Text-Guided Diffusion Modelscited by 3,614
  10. 2016Towards Evaluating the Robustness of Neural Networkscited by 2,998
  11. 2022InstructPix2Pix: Learning to Follow Image Editing Instructionscited by 2,611
  12. 2022Prompt-to-Prompt Image Editing with Cross Attention Controlcited by 2,431
38 more
  1. 2016Adversarial examples in the physical worldcited by 1,769
  2. 2016Practical Black-Box Attacks against Machine Learningcited by 903
  3. 2015The Limitations of Deep Learning in Adversarial Settingscited by 790
  4. 2017ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Modelscited by 666
  5. 2023MagicBrush: A Manually Annotated Dataset for Instruction-Guided Image Editingcited by 624
  6. 2017One pixel attack for fooling deep neural networkscited by 582
  7. 2023Erasing Concepts from Diffusion Modelscited by 539
  8. 2016Delving into Transferable Adversarial Examples and Black-box Attackscited by 536
  9. 2022Safe Latent Diffusion: Mitigating Inappropriate Degeneration in Diffusion Modelscited by 513
  10. 2018Black-box Adversarial Attacks with Limited Queries and Informationcited by 501
  11. 2022Paint by Example: Exemplar-based Image Editing with Diffusion Modelscited by 489
  12. 2023Unified Concept Editing in Diffusion Modelscited by 388
  13. 2023Ablating Concepts in Text-to-Image Diffusion Modelscited by 317
  14. 2023MMA-Diffusion: MultiModal Attack on Diffusion Modelscited by 194
  15. 2024HQ-Edit: A High-Quality Dataset for Instruction-based Image Editingcited by 193
  16. 2024Defensive Unlearning with Adversarial Training for Robust Concept Erasure in Diffusion Modelscited by 168
  17. 2020Skip Connections Matter: On the Transferability of Adversarial Examples Generated with ResNetscited by 167
  18. 2023Adversarial Example Does Good: Preventing Painting Imitation from Diffusion Models via Adversarial Examplescited by 167
  19. 2023Raising the Cost of Malicious AI-Powered Image Editingcited by 163
  20. 2017EAD: Elastic-Net Attacks to Deep Neural Networks via Adversarial Examplescited by 155
  21. 2023Editing Implicit Assumptions in Text-to-Image Diffusion Modelscited by 130
  22. 2023Receler: Reliable Concept Erasing of Text-to-Image Diffusion Models via Lightweight Eraserscited by 120
  23. 2018SparseFool: a few pixels make a big differencecited by 94
  24. 2023Mist: Towards Improved Adversarial Examples for Diffusion Modelscited by 94
  25. 2024Latent Guard: a Safety Framework for Text-to-image Generationcited by 71
  26. 2023Self-Discovering Interpretable Diffusion Latent Directions for Responsible Text-to-Image Generationcited by 69
  27. 2024Unlearning Concepts in Diffusion Model via Concept Domain Correction and Concept Preserving Gradientcited by 69
  28. 2023Toward effective protection against diffusion based mimicry through score distillationcited by 65
  29. 2024GuardT2I: Defending Text-to-Image Models from Adversarial Promptscited by 62
  30. 2024R.A.C.E.: Robust Adversarial Concept Erasure for Secure Text-to-Image Diffusion Modelcited by 58
  31. 2024ConceptPrune: Concept Editing in Diffusion Models via Skilled Neuron Pruningcited by 55
  32. 2018Understanding and Enhancing the Transferability of Adversarial Examplescited by 41
  33. 2023Towards Safe Self-Distillation of Internet-Scale Text-to-Image Diffusion Modelscited by 41
  34. 2023ReFACT: Updating Text-to-Image Models by Editing the Text Encodercited by 32
  35. 2024Universal Prompt Optimizer for Safe Text-to-Image Generationcited by 28
  36. 2023Degeneration-Tuning: Using Scrambled Grid shield Unwanted Concepts from Stable Diffusioncited by 27
  37. 2023EditShield: Protecting Unauthorized Image Editing by Instruction-guided Diffusion Modelscited by 27
  38. 2024IDProtector: An Adversarial Noise Encoder to Protect Against ID-Preserving Image Generationcited by 22

50 most cited of 51 All 51 (JSON)

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 2; 2026: 5.

7 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2026Protective Perturbations Must Survive the Resize: Scale-Robust Image Immunization against Malicious Editing
  2. 2024Chain-of-Jailbreak Attack for Image Generation Models via Editing Step by Step
  3. 2025Is Perturbation-Based Image Protection Disruptive to Image Editing?
  4. 2024Edit Away and My Face Will not Stay: Personal Biometric Defense against Malicious Generative Editing
  5. 2026When the Prompt Becomes Visual: Vision-Centric Jailbreak Attacks for Large Image Editing Models
  6. 2026RedEdit: Agentic Red-Teaming of Image Safety Classifiers via MCTS-Guided Photo-Editing
  7. 2025VideoGuard: Protecting Video Content from Unauthorized Editing
  8. 2026When Recovery Matters: The Blind Spot of Surrogate Privacy in MLLM Editing