mlsanityData to 7 Oct 2026

T-MLA: A targeted multiscale log-exponential attack framework for neural image compression

arXiv 2511.01079 ↗First posted 2 Nov 2025cs.CV cs.NA math.NAcited by 1

Not on the map. Why?

Abstract (arXiv)

Neural image compression (NIC) has become the state-of-the-art for rate-distortion performance, yet its security vulnerabilities remain significantly less understood than those of classifiers. Existing adversarial attacks on NICs are often naive adaptations of pixel-space methods, overlooking the unique, structured nature of the compression pipeline. In this work, we propose a more advanced class of vulnerabilities by introducing T-MLA, the first targeted multiscale log-exponential attack framework. We introduce adversarial perturbations in the wavelet domain that concentrate on less perceptually salient coefficients, improving the stealth of the attack. Extensive evaluation across multiple state-of-the-art NIC architectures on standard image compression benchmarks reveals a large drop in reconstruction quality while the perturbations remain visually imperceptible. On standard NIC benchmarks, T-MLA achieves targeted degradation of reconstruction quality while improving perturbation imperceptibility (higher PSNR/VIF of the perturbed inputs) compared to PGD-style baselines at comparable attack success, as summarized in our main results. Our findings reveal a critical security flaw at the core of generative and content delivery pipelines.

Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Builds on 38 of its 61 references that are in the map. First posted on arXiv 2 Nov 2025.

Builds on

38 of 61 references.

References · 38

  1. 2014Explaining and Harnessing Adversarial Examplescited by 7,287
  2. 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
  3. 2013Intriguing properties of neural networkscited by 5,114
  4. 2016Towards Evaluating the Robustness of Neural Networkscited by 2,976
  5. 2020Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attackscited by 1,442
  6. 2018Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examplescited by 1,259
  7. 2017BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chaincited by 1,052
  8. 2018Variational image compression with a scale hyperpriorcited by 910
  9. 2016End-to-end Optimized Image Compressioncited by 673
  10. 2020RobustBench: a standardized adversarial robustness benchmarkcited by 659
  11. 2018Joint Autoregressive and Hierarchical Priors for Learned Image Compressioncited by 642
  12. 2020Learned Image Compression with Discretized Gaussian Mixture Likelihoods and Attention Modulescited by 570
26 more
  1. 2020High-Fidelity Generative Image Compressioncited by 331
  2. 2023Learned Image Compression with Mixed Transformer-CNN Architecturescited by 205
  3. 2015Variable Rate Image Compression with Recurrent Neural Networkscited by 168
  4. 2019Understanding Adversarial Attacks on Deep Learning Based Medical Image Analysis Systemscited by 151
  5. 2017Real-Time Adaptive Image Compressioncited by 127
  6. 2018ComDefend: An Efficient Image Compression Model to Defend Adversarial Examplescited by 104
  7. 2021Invisible for both Camera and LiDAR: Security of Multi-Sensor Fusion based Perception in Autonomous Driving Under Physical-World Attackscited by 101
  8. 2022Frequency-driven Imperceptible Adversarial Attack on Semantic Similaritycited by 76
  9. 2021AdvDrop: Adversarial Attack to DNNs by Dropping Informationcited by 55
  10. 2023Backdoor Attacks Against Deep Image Compression via Adaptive Frequency Triggercited by 40
  11. 2021Towards Robust Neural Image Compression: Adversarial Attack and Model Finetuningcited by 24
  12. 2023WaveAttack: Asymmetric Frequency Obfuscation-based Backdoor Attacks Against Deep Neural Networkscited by 8
  13. 2024FACL-Attack: Frequency-Aware Contrastive Learning for Transferable Adversarial Attackscited by 8
  14. 2025DCT-Shield: A Robust Frequency Domain Defense against Malicious Image Editingcited by 7
  15. 2025SITA: Structurally Imperceptible and Transferable Adversarial Attacks for Stylized Image Generationcited by 6
  16. 2023Reconstruction Distortion of Learned Image Compression with Imperceptible Perturbationscited by 5
  17. 2024A Training-Free Defense Framework for Robust Learned Image Compressioncited by 5
  18. 2021Improving Visual Quality of Unrestricted Adversarial Examples with Wavelet-VAEcited by 3
  19. 2022MALICE: Manipulation Attacks on Learned Image ComprEssioncited by 3
  20. 2022Wavelet Regularization Benefits Adversarial Trainingcited by 3
  21. 2024Exploring adversarial robustness of JPEG AI: methodology, comparison and new methodscited by 3
  22. 2022Data-free Defense of Black Box Models Against Adversarial Attackscited by 2
  23. 2024Towards a Novel Perspective on Adversarial Examples Driven by Frequencycited by 2
  24. 2024On the Adversarial Robustness of Learning-based Image Compression Against Rate-Distortion Attackscited by 2
  25. 2025Defending Against Frequency-Based Attacks with Diffusion Modelscited by 1
  26. 2025NIC-RobustBench: A Comprehensive Open-Source Toolkit for Neural Image Compression and Robustness Analysiscited by 1

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2026: 1.

1 paper.