mlsanityData to 14 Oct 2026

Fooling the Watchers: Breaking AIGC Detectors via Semantic Prompt Attacks

arXiv 2505.23192 ↗First posted 29 May 2025cs.CV cs.AI cs.CRcited by 0

Not on the map. Why?

Abstract (arXiv)

The rise of text-to-image (T2I) models has enabled the synthesis of photorealistic human portraits, raising serious concerns about identity misuse and the robustness of AIGC detectors. In this work, we propose an automated adversarial prompt generation framework that leverages a grammar tree structure and a variant of the Monte Carlo tree search algorithm to systematically explore the semantic prompt space. Our method generates diverse, controllable prompts that consistently evade both open-source and commercial AIGC detectors. Extensive experiments across multiple T2I models validate its effectiveness, and the approach ranked first in a real-world adversarial AIGC detection competition. Beyond attack scenarios, our method can also be used to construct high-quality adversarial datasets, providing valuable resources for training and evaluating more robust AIGC detection and defense systems.

Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 26 of its 42 references that are in the map. First posted on arXiv 29 May 2025.

Builds on

26 of 42 references.

References · 26

  1. 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,863
  2. 2022Hierarchical Text-Conditional Image Generation with CLIP Latentscited by 6,585
  3. 2018A Style-Based Generator Architecture for Generative Adversarial Networkscited by 6,013
  4. 2023Adding Conditional Control to Text-to-Image Diffusion Modelscited by 5,503
  5. 2024Qwen2-VL: Enhancing Vision-Language Model's Perception of the World at Any Resolutioncited by 4,234
  6. 2024Scaling Rectified Flow Transformers for High-Resolution Image Synthesiscited by 4,181
  7. 2021GLIDE: Towards Photorealistic Image Generation and Editing with Text-Guided Diffusion Modelscited by 3,614
  8. 2022DreamBooth: Fine Tuning Text-to-Image Diffusion Models for Subject-Driven Generationcited by 3,300
  9. 2019CNN-generated images are surprisingly easy to spot... for nowcited by 847
  10. 2019Square Attack: a query-efficient black-box adversarial attack via random searchcited by 685
  11. 2017AttnGAN: Fine-Grained Text to Image Generation with Attentional Generative Adversarial Networkscited by 664
  12. 2020Leveraging Frequency Analysis for Deep Fake Image Recognitioncited by 504
14 more
  1. 2023Scaling up GANs for Text-to-Image Synthesiscited by 492
  2. 2023DIRE for Diffusion-Generated Image Detectioncited by 390
  3. 2023GenImage: A Million-Scale Benchmark for Detecting AI-Generated Imagecited by 321
  4. 2020Watch your Up-Convolution: CNN Based Generative Deep Neural Networks are Failing to Reproduce Spectral Distributionscited by 280
  5. 2020Global Texture Enhancement for Fake Face Detection in the Wildcited by 220
  6. 2020Media Forensics and DeepFakes: an overviewcited by 209
  7. 2023PatchCraft: Exploring Texture Patch for Efficient AI-generated Image Detectioncited by 122
  8. 2023Evading Watermark based Detection of AI-Generated Contentcited by 78
  9. 2024FakeInversion: Learning to Detect Images from Unseen Text-to-Image Models by Inverting Stable Diffusioncited by 61
  10. 2024LaRE2: Latent Reconstruction Error Based Method for Diffusion-Generated Image Detectioncited by 47
  11. 2024WildFake: A Large-scale Challenging Dataset for AI-Generated Images Detectioncited by 31
  12. 2021AVA: Adversarial Vignetting Attack against Visual Recognitioncited by 29
  13. 2023AVA: Inconspicuous Attribute Variation-based Adversarial Attack bypassing DeepFake Detectioncited by 12
  14. 2024Take Fake as Real: Realistic-like Robust Black-box Adversarial Attack to Evade AIGC Detectioncited by 2

Built on by

Not cited yet.

Similar, not cited

Close in wording, no citation either way

  1. 2025Unified Prompt Attack Against Text-to-Image Generation Models
  2. 2025From Seed to Harvest: Augmenting Human Creativity with AI for Red-teaming Text-to-Image Models
  3. 2026Detecting Adversarial Images through Response Profiles of Vision-Language Models
  4. 2025AutoPrompt: Automated Red-Teaming of Text-to-Image Models via LLM-Driven Adversarial Prompts
  5. 2026Dynamic Defense Profiling Enables Cognitive Jailbreak of Text-to-Image Models
  6. 2025Metaphor-based Jailbreak Attacks on Text-to-Image Models
  7. 2026Low-Effort Jailbreak Attacks Against Text-to-Image Safety Filters
  8. 2026Reading Between the Pixels: An Inscriptive Jailbreak Attack on Text-to-Image Models