T2UE: Generating Unlearnable Examples from Text Descriptions
Not on the map. Why?
Abstract (arXiv)
Large-scale pre-training frameworks like CLIP have revolutionized multimodal learning, but their reliance on web-scraped datasets, frequently containing private user data, raises serious concerns about misuse. Unlearnable Examples (UEs) have emerged as a promising countermeasure against unauthorized model training, employing carefully crafted unlearnable noise to disrupt the learning of meaningful representations from protected data. Current approaches typically generate UEs by jointly optimizing unlearnable noise for both images and their associated text descriptions (or labels). However, this optimization process is often computationally prohibitive for on-device execution, forcing reliance on external third-party services. This creates a fundamental privacy paradox: users must initially expose their data to these very services to achieve protection, thereby compromising privacy in the process. Such a contradiction has severely hindered the development of practical, scalable data protection solutions. To resolve this paradox, we introduce Text-to-Unlearnable Example (T2UE), a novel framework that enables users to generate UEs using only text descriptions. T2UE circumvents the need for original image data by employing a text-to-image (T2I) model to map text descriptions into the image (noise) space, combined with an error-minimization framework to produce effective unlearnable noise. Extensive experiments show that T2UE-protected data substantially degrades performance in downstream tasks (e.g., cross-modal retrieval) for state-of-the-art models. Notably, the protective effect generalizes across diverse architectures and even to supervised learning settings. Our work demonstrates the feasibility of "zero-contact data protection", where personal data can be safeguarded based solely on their textual descriptions, eliminating the need for direct data exposure.
Key facts. Cited by 3 papers in the map (data through 14 Oct 2026). Builds on 42 of its 54 references that are in the map. First posted on arXiv 5 Aug 2025.
Builds on
42 of 54 references.
References · 42
- 2015Deep Residual Learning for Image Recognitioncited by 52,096
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
- 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 30,186
- 2014Microsoft COCO: Common Objects in Contextcited by 17,608
- 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,364
- 2016Densely Connected Convolutional Networkscited by 6,720
- 2017mixup: Beyond Empirical Risk Minimizationcited by 5,183
- 2014Going Deeper with Convolutionscited by 4,241
- 2022LAION-5B: An open large-scale dataset for training next generation image-text modelscited by 4,152
- 2021Scaling Up Visual and Vision-Language Representation Learning With Noisy Text Supervisioncited by 3,864
- 2014Conditional Generative Adversarial Netscited by 2,162
- 2017Understanding Black-box Predictions via Influence Functionscited by 1,741
30 more
- 2017Improved Regularization of Convolutional Neural Networks with Cutoutcited by 1,628
- 2021LAION-400M: Open Dataset of CLIP-Filtered 400 Million Image-Text Pairscited by 1,555
- 2015Microsoft COCO Captions: Data Collection and Evaluation Servercited by 1,462
- 2023DataComp: In search of the next generation of multimodal datasetscited by 644
- 2016StackGAN: Text to Photo-realistic Image Synthesis with Stacked Generative Adversarial Networkscited by 577
- 2022GIT: A Generative Image-to-text Transformer for Vision and Languagecited by 537
- 2016Generating Videos with Scene Dynamicscited by 376
- 2023Demystifying CLIP Datacited by 270
- 2020Large image datasets: A pyrrhic win for computer vision?cited by 237
- 2021Unlearnable Examples: Making Personal Data Unexploitablecited by 193
- 2021Adversarial Examples Make Strong Poisonscited by 119
- 2023The Data Provenance Initiative: A Large Scale Audit of Dataset Licensing & Attribution in AIcited by 73
- 2021Availability Attacks Create Shortcutscited by 62
- 2021Text to Image Generation with Semantic-Spatial Aware GANcited by 53
- 2022Autoregressive Perturbations for Data Poisoningcited by 46
- 2022Transferable Unlearnable Examplescited by 43
- 2022Data Poisoning Attacks Against Multimodal Encoderscited by 41
- 2022Unlearnable Clusters: Towards Label-agnostic Unlearnable Examplescited by 36
- 2022Robust Unlearnable Examples: Protecting Data Against Adversarial Learningcited by 35
- 2022Indiscriminate Poisoning Attacks on Unsupervised Contrastive Learningcited by 34
- 2023Robust Contrastive Language-Image Pre-training against Data Poisoning and Backdoor Attackscited by 31
- 2023CUDA: Convolution-based Unlearnable Datasetscited by 26
- 2023Stable Unlearnable Example: Enhancing the Robustness of Unlearnable Examples via Stable Error-Minimizing Noisecited by 25
- 2023What Can We Learn from Unlearnable Datasets?cited by 21
- 2024Multimodal Unlearnable Examples: Protecting Data against Multimodal Contrastive Learningcited by 21
- 2024Provably Unlearnable Data Examplescited by 18
- 2024Unlearnable 3D Point Clouds: Class-wise Transformation Is All You Needcited by 16
- 2024UnSeg: One Universal Unlearnable Example Generator is Enough against All Image Segmentationcited by 14
- 2025ARMOR: Shielding Unlearnable Examples against Data Augmentationcited by 6
- 2024Unlearnable Examples For Time Seriescited by 5
Built on by
Citing papers per year: 2025: 1; 2026: 2.
3 papers.