mlsanityData to 14 Oct 2026

SITA: Structurally Imperceptible and Transferable Adversarial Attacks for Stylized Image Generation

arXiv 2503.19791 ↗First posted 25 Mar 2025cs.CVcited by 6

Not on the map. Why?

Abstract (arXiv)

Image generation technology has brought significant advancements across various fields but has also raised concerns about data misuse and potential rights infringements, particularly with respect to creating visual artworks. Current methods aimed at safeguarding artworks often employ adversarial attacks. However, these methods face challenges such as poor transferability, high computational costs, and the introduction of noticeable noise, which compromises the aesthetic quality of the original artwork. To address these limitations, we propose a Structurally Imperceptible and Transferable Adversarial (SITA) attacks. SITA leverages a CLIP-based destylization loss, which decouples and disrupts the robust style representation of the image. This disruption hinders style extraction during stylized image generation, thereby impairing the overall stylization process. Importantly, SITA eliminates the need for a surrogate diffusion model, leading to significantly reduced computational overhead. The method's robust style feature disruption ensures high transferability across diverse models. Moreover, SITA introduces perturbations by embedding noise within the imperceptible structural details of the image. This approach effectively protects against style extraction without compromising the visual quality of the artwork. Extensive experiments demonstrate that SITA offers superior protection for artworks against unauthorized use in stylized generation. It significantly outperforms existing methods in terms of transferability, computational efficiency, and noise imperceptibility. Code is available at https://github.com/A-raniy-day/SITA.

Key facts. Cited by 6 papers in the map (data through 14 Oct 2026). Builds on 50 of its 69 references that are in the map. First posted on arXiv 25 Mar 2025.

Builds on

50 of 69 references.

References · 50

  1. 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
  2. 2020Denoising Diffusion Probabilistic Modelscited by 21,076
  3. 2019PyTorch: An Imperative Style, High-Performance Deep Learning Librarycited by 20,305
  4. 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,863
  5. 2020Denoising Diffusion Implicit Modelscited by 9,781
  6. 2014Explaining and Harnessing Adversarial Examplescited by 7,364
  7. 2015Deep Unsupervised Learning using Nonequilibrium Thermodynamicscited by 7,058
  8. 2022Hierarchical Text-Conditional Image Generation with CLIP Latentscited by 6,585
  9. 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
  10. 2013Intriguing properties of neural networkscited by 5,155
  11. 2022DreamBooth: Fine Tuning Text-to-Image Diffusion Models for Subject-Driven Generationcited by 3,300
  12. 2016Towards Evaluating the Robustness of Neural Networkscited by 2,998
38 more
  1. 2016Perceptual Losses for Real-Time Style Transfer and Super-Resolutioncited by 2,694
  2. 2022An Image is Worth One Word: Personalizing Text-to-Image Generation using Textual Inversioncited by 2,245
  3. 2017Arbitrary Style Transfer in Real-time with Adaptive Instance Normalizationcited by 2,010
  4. 2023T2I-Adapter: Learning Adapters to Dig out More Controllable Ability for Text-to-Image Diffusion Modelscited by 1,351
  5. 2015DeepFool: a simple and accurate method to fool deep neural networkscited by 1,318
  6. 2022Multi-Concept Customization of Text-to-Image Diffusioncited by 1,106
  7. 2021StyleCLIP: Text-Driven Manipulation of StyleGAN Imagerycited by 991
  8. 2015The Limitations of Deep Learning in Adversarial Settingscited by 790
  9. 2016Universal adversarial perturbationscited by 784
  10. 2017Countering Adversarial Images using Input Transformationscited by 520
  11. 2015A Neural Algorithm of Artistic Stylecited by 483
  12. 2023Glaze: Protecting Artists from Style Mimicry by Text-to-Image Modelscited by 205
  13. 2021CLIPstyler: Image Style Transfer with a Single Text Conditioncited by 203
  14. 2016A study of the effect of JPG compression on adversarial imagescited by 197
  15. 2023Style Injection in Diffusion: A Training-free Approach for Adapting Large-scale Diffusion Models for Style Transfercited by 196
  16. 2021StyTr2: Image Style Transfer with Transformerscited by 187
  17. 2021CLIPDraw: Exploring Text-to-Drawing Synthesis through Language-Image Encoderscited by 187
  18. 2015Large-scale Classification of Fine-Art Paintings: Learning The Right Metric on The Right Featurecited by 182
  19. 2020Dataset Security for Machine Learning: Data Poisoning, Backdoor Attacks, and Defensescited by 180
  20. 2023Adversarial Example Does Good: Preventing Painting Imitation from Diffusion Models via Adversarial Examplescited by 167
  21. 2023StyleDiffusion: Controllable Disentangled Style Transfer via Diffusion Modelscited by 155
  22. 2022Frequency Domain Model Augmentation for Adversarial Attackcited by 130
  23. 2022Exact Feature Distribution Matching for Arbitrary Style Transfer and Domain Generalizationcited by 122
  24. 2023Anti-DreamBooth: Protecting users from personalized text-to-image synthesiscited by 120
  25. 2023Diffusion Models for Imperceptible and Transferable Adversarial Attackcited by 94
  26. 2022Domain Enhanced Arbitrary Image Style Transfer via Contrastive Learningcited by 93
  27. 2022Frequency-driven Imperceptible Adversarial Attack on Semantic Similaritycited by 77
  28. 2023Toward effective protection against diffusion based mimicry through score distillationcited by 65
  29. 2022The ArtBench Dataset: Benchmarking Generative Models with Artworkscited by 64
  30. 2021AdvDrop: Adversarial Attack to DNNs by Dropping Informationcited by 56
  31. 2023Wuerstchen: An Efficient Architecture for Large-Scale Text-to-Image Diffusion Modelscited by 51
  32. 2024RB-Modulation: Training-Free Personalization of Diffusion Models using Stochastic Optimal Controlcited by 48
  33. 2023MetaCloak: Preventing Unauthorized Subject-driven Text-to-image Diffusion-based Synthesis via Meta-learningcited by 44
  34. 2021Image-Based CLIP-Guided Essence Transfercited by 39
  35. 2023Downstream-agnostic Adversarial Examplescited by 32
  36. 2023Logit Margin Matters: Improving Transferable Targeted Adversarial Attack by Logit Calibrationcited by 18
  37. 2023StylerDALLE: Language-Guided Style Transfer Using a Vector-Quantized Tokenizer of a Large-Scale Generative Modelcited by 10
  38. 2024PID: Prompt-Independent Data Protection Against Latent Diffusion Modelscited by 6

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 5; 2026: 1.

6 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2024Imperceptible Protection against Style Imitation from Diffusion Models
  2. 2025StyleGuard: Preventing Text-to-Image-Model-based Style Mimicry Attacks by Style Perturbations
  3. 2026The Silent Brush: Evaluating Artistic Style Leakage in AI Art Generation
  4. 2024GLEAN: Generative Learning for Eliminating Adversarial Noise
  5. 2025StyleProtect: Safeguarding Artistic Identity in Fine-tuned Diffusion Models
  6. 2025Style Transfer: A Decade Survey
  7. 2024Towards Highly Realistic Artistic Style Transfer via Stable Diffusion with Step-aware and Layer-aware Prompt
  8. 2023Not Only Generative Art: Stable Diffusion for Content-Style Disentanglement in Art Analysis