mlsanityData to 14 Oct 2026

T2UE: Generating Unlearnable Examples from Text Descriptions

arXiv 2508.03091 ↗First posted 5 Aug 2025cs.AI cs.CR cs.CVcited by 3

Not on the map. Why?

Abstract (arXiv)

Large-scale pre-training frameworks like CLIP have revolutionized multimodal learning, but their reliance on web-scraped datasets, frequently containing private user data, raises serious concerns about misuse. Unlearnable Examples (UEs) have emerged as a promising countermeasure against unauthorized model training, employing carefully crafted unlearnable noise to disrupt the learning of meaningful representations from protected data. Current approaches typically generate UEs by jointly optimizing unlearnable noise for both images and their associated text descriptions (or labels). However, this optimization process is often computationally prohibitive for on-device execution, forcing reliance on external third-party services. This creates a fundamental privacy paradox: users must initially expose their data to these very services to achieve protection, thereby compromising privacy in the process. Such a contradiction has severely hindered the development of practical, scalable data protection solutions. To resolve this paradox, we introduce Text-to-Unlearnable Example (T2UE), a novel framework that enables users to generate UEs using only text descriptions. T2UE circumvents the need for original image data by employing a text-to-image (T2I) model to map text descriptions into the image (noise) space, combined with an error-minimization framework to produce effective unlearnable noise. Extensive experiments show that T2UE-protected data substantially degrades performance in downstream tasks (e.g., cross-modal retrieval) for state-of-the-art models. Notably, the protective effect generalizes across diverse architectures and even to supervised learning settings. Our work demonstrates the feasibility of "zero-contact data protection", where personal data can be safeguarded based solely on their textual descriptions, eliminating the need for direct data exposure.

Key facts. Cited by 3 papers in the map (data through 14 Oct 2026). Builds on 42 of its 54 references that are in the map. First posted on arXiv 5 Aug 2025.

Builds on

42 of 54 references.

References · 42

  1. 2015Deep Residual Learning for Image Recognitioncited by 52,096
  2. 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
  3. 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 30,186
  4. 2014Microsoft COCO: Common Objects in Contextcited by 17,608
  5. 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,364
  6. 2016Densely Connected Convolutional Networkscited by 6,720
  7. 2017mixup: Beyond Empirical Risk Minimizationcited by 5,183
  8. 2014Going Deeper with Convolutionscited by 4,241
  9. 2022LAION-5B: An open large-scale dataset for training next generation image-text modelscited by 4,152
  10. 2021Scaling Up Visual and Vision-Language Representation Learning With Noisy Text Supervisioncited by 3,864
  11. 2014Conditional Generative Adversarial Netscited by 2,162
  12. 2017Understanding Black-box Predictions via Influence Functionscited by 1,741
30 more
  1. 2017Improved Regularization of Convolutional Neural Networks with Cutoutcited by 1,628
  2. 2021LAION-400M: Open Dataset of CLIP-Filtered 400 Million Image-Text Pairscited by 1,555
  3. 2015Microsoft COCO Captions: Data Collection and Evaluation Servercited by 1,462
  4. 2023DataComp: In search of the next generation of multimodal datasetscited by 644
  5. 2016StackGAN: Text to Photo-realistic Image Synthesis with Stacked Generative Adversarial Networkscited by 577
  6. 2022GIT: A Generative Image-to-text Transformer for Vision and Languagecited by 537
  7. 2016Generating Videos with Scene Dynamicscited by 376
  8. 2023Demystifying CLIP Datacited by 270
  9. 2020Large image datasets: A pyrrhic win for computer vision?cited by 237
  10. 2021Unlearnable Examples: Making Personal Data Unexploitablecited by 193
  11. 2021Adversarial Examples Make Strong Poisonscited by 119
  12. 2023The Data Provenance Initiative: A Large Scale Audit of Dataset Licensing & Attribution in AIcited by 73
  13. 2021Availability Attacks Create Shortcutscited by 62
  14. 2021Text to Image Generation with Semantic-Spatial Aware GANcited by 53
  15. 2022Autoregressive Perturbations for Data Poisoningcited by 46
  16. 2022Transferable Unlearnable Examplescited by 43
  17. 2022Data Poisoning Attacks Against Multimodal Encoderscited by 41
  18. 2022Unlearnable Clusters: Towards Label-agnostic Unlearnable Examplescited by 36
  19. 2022Robust Unlearnable Examples: Protecting Data Against Adversarial Learningcited by 35
  20. 2022Indiscriminate Poisoning Attacks on Unsupervised Contrastive Learningcited by 34
  21. 2023Robust Contrastive Language-Image Pre-training against Data Poisoning and Backdoor Attackscited by 31
  22. 2023CUDA: Convolution-based Unlearnable Datasetscited by 26
  23. 2023Stable Unlearnable Example: Enhancing the Robustness of Unlearnable Examples via Stable Error-Minimizing Noisecited by 25
  24. 2023What Can We Learn from Unlearnable Datasets?cited by 21
  25. 2024Multimodal Unlearnable Examples: Protecting Data against Multimodal Contrastive Learningcited by 21
  26. 2024Provably Unlearnable Data Examplescited by 18
  27. 2024Unlearnable 3D Point Clouds: Class-wise Transformation Is All You Needcited by 16
  28. 2024UnSeg: One Universal Unlearnable Example Generator is Enough against All Image Segmentationcited by 14
  29. 2025ARMOR: Shielding Unlearnable Examples against Data Augmentationcited by 6
  30. 2024Unlearnable Examples For Time Seriescited by 5

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 1; 2026: 2.

3 papers.