T-MLA: A targeted multiscale log-exponential attack framework for neural image compression
Not on the map. Why?
Abstract (arXiv)
Neural image compression (NIC) has become the state-of-the-art for rate-distortion performance, yet its security vulnerabilities remain significantly less understood than those of classifiers. Existing adversarial attacks on NICs are often naive adaptations of pixel-space methods, overlooking the unique, structured nature of the compression pipeline. In this work, we propose a more advanced class of vulnerabilities by introducing T-MLA, the first targeted multiscale log-exponential attack framework. We introduce adversarial perturbations in the wavelet domain that concentrate on less perceptually salient coefficients, improving the stealth of the attack. Extensive evaluation across multiple state-of-the-art NIC architectures on standard image compression benchmarks reveals a large drop in reconstruction quality while the perturbations remain visually imperceptible. On standard NIC benchmarks, T-MLA achieves targeted degradation of reconstruction quality while improving perturbation imperceptibility (higher PSNR/VIF of the perturbed inputs) compared to PGD-style baselines at comparable attack success, as summarized in our main results. Our findings reveal a critical security flaw at the core of generative and content delivery pipelines.
Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Builds on 38 of its 61 references that are in the map. First posted on arXiv 2 Nov 2025.
Builds on
38 of 61 references.
References · 38
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2013Intriguing properties of neural networkscited by 5,114
- 2016Towards Evaluating the Robustness of Neural Networkscited by 2,976
- 2020Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attackscited by 1,442
- 2018Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examplescited by 1,259
- 2017BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chaincited by 1,052
- 2018Variational image compression with a scale hyperpriorcited by 910
- 2016End-to-end Optimized Image Compressioncited by 673
- 2020RobustBench: a standardized adversarial robustness benchmarkcited by 659
- 2018Joint Autoregressive and Hierarchical Priors for Learned Image Compressioncited by 642
- 2020Learned Image Compression with Discretized Gaussian Mixture Likelihoods and Attention Modulescited by 570
26 more
- 2020High-Fidelity Generative Image Compressioncited by 331
- 2023Learned Image Compression with Mixed Transformer-CNN Architecturescited by 205
- 2015Variable Rate Image Compression with Recurrent Neural Networkscited by 168
- 2019Understanding Adversarial Attacks on Deep Learning Based Medical Image Analysis Systemscited by 151
- 2017Real-Time Adaptive Image Compressioncited by 127
- 2018ComDefend: An Efficient Image Compression Model to Defend Adversarial Examplescited by 104
- 2021Invisible for both Camera and LiDAR: Security of Multi-Sensor Fusion based Perception in Autonomous Driving Under Physical-World Attackscited by 101
- 2022Frequency-driven Imperceptible Adversarial Attack on Semantic Similaritycited by 76
- 2021AdvDrop: Adversarial Attack to DNNs by Dropping Informationcited by 55
- 2023Backdoor Attacks Against Deep Image Compression via Adaptive Frequency Triggercited by 40
- 2021Towards Robust Neural Image Compression: Adversarial Attack and Model Finetuningcited by 24
- 2023WaveAttack: Asymmetric Frequency Obfuscation-based Backdoor Attacks Against Deep Neural Networkscited by 8
- 2024FACL-Attack: Frequency-Aware Contrastive Learning for Transferable Adversarial Attackscited by 8
- 2025DCT-Shield: A Robust Frequency Domain Defense against Malicious Image Editingcited by 7
- 2025SITA: Structurally Imperceptible and Transferable Adversarial Attacks for Stylized Image Generationcited by 6
- 2023Reconstruction Distortion of Learned Image Compression with Imperceptible Perturbationscited by 5
- 2024A Training-Free Defense Framework for Robust Learned Image Compressioncited by 5
- 2021Improving Visual Quality of Unrestricted Adversarial Examples with Wavelet-VAEcited by 3
- 2022MALICE: Manipulation Attacks on Learned Image ComprEssioncited by 3
- 2022Wavelet Regularization Benefits Adversarial Trainingcited by 3
- 2024Exploring adversarial robustness of JPEG AI: methodology, comparison and new methodscited by 3
- 2022Data-free Defense of Black Box Models Against Adversarial Attackscited by 2
- 2024Towards a Novel Perspective on Adversarial Examples Driven by Frequencycited by 2
- 2024On the Adversarial Robustness of Learning-based Image Compression Against Rate-Distortion Attackscited by 2
- 2025Defending Against Frequency-Based Attacks with Diffusion Modelscited by 1
- 2025NIC-RobustBench: A Comprehensive Open-Source Toolkit for Neural Image Compression and Robustness Analysiscited by 1
Built on by
Citing papers per year: 2026: 1.
1 paper.