mlsanityData to 7 Oct 2026

Beauty and the Beast: Imperceptible Perturbations Against Diffusion-Based Face Swapping via Directional Attribute Editing

arXiv 2601.22744 ↗First posted 30 Jan 2026cs.CV cs.CR cs.LGcited by 1

Not on the map. Why?

Abstract (arXiv)

Diffusion-based face swapping achieves state-of-the-art performance, yet it also exacerbates the potential harm of malicious face swapping to violate portraiture right or undermine personal reputation. This has spurred the development of proactive defense methods. However, existing approaches face a core trade-off: large perturbations distort facial structures, while small ones weaken protection effectiveness. To address these issues, we propose FaceDefense, an enhanced proactive defense framework against diffusion-based face swapping. Our method introduces a new diffusion loss to strengthen the defensive efficacy of adversarial examples, and employs a directional facial attribute editing to restore perturbation-induced distortions, thereby enhancing visual imperceptibility. A two-phase alternating optimization strategy is designed to generate final perturbed face images. Extensive experiments show that FaceDefense significantly outperforms existing methods in both imperceptibility and defense effectiveness, achieving a superior trade-off.

Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Builds on 40 of its 61 references that are in the map. First posted on arXiv 30 Jan 2026.

Builds on

40 of 61 references.

References · 40

  1. 2017Attention Is All You Needcited by 59,932
  2. 2020Denoising Diffusion Probabilistic Modelscited by 20,851
  3. 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
  4. 2018The Unreasonable Effectiveness of Deep Features as a Perceptual Metriccited by 11,029
  5. 2020Denoising Diffusion Implicit Modelscited by 9,655
  6. 2020Score-Based Generative Modeling through Stochastic Differential Equationscited by 8,964
  7. 2014Explaining and Harnessing Adversarial Examplescited by 7,287
  8. 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
  9. 2018A Style-Based Generator Architecture for Generative Adversarial Networkscited by 5,986
  10. 2022Generative Adversarial Networkscited by 5,603
  11. 2019Analyzing and Improving the Image Quality of StyleGANcited by 3,580
  12. 2017Progressive Growing of GANs for Improved Quality, Stability, and Variationcited by 2,967
28 more
  1. 2016Adversarial examples in the physical worldcited by 1,762
  2. 2018VoxCeleb2: Deep Speaker Recognitioncited by 862
  3. 2021Designing an Encoder for StyleGAN Image Manipulationcited by 542
  4. 2019Face X-ray for More General Face Forgery Detectioncited by 469
  5. 2021SimSwap: An Efficient Framework For High Fidelity Face Swappingcited by 243
  6. 2019FaceShifter: Towards High Fidelity And Occlusion Aware Face Swappingcited by 221
  7. 2021High-Fidelity GAN Inversion for Image Attribute Editingcited by 197
  8. 2023UCF: Uncovering Common Features for Generalizable Deepfake Detectioncited by 177
  9. 2023Adversarial Example Does Good: Preventing Painting Imitation from Diffusion Models via Adversarial Examplescited by 163
  10. 2023Raising the Cost of Malicious AI-Powered Image Editingcited by 160
  11. 2017Fader Networks: Manipulating Images by Sliding Attributescited by 118
  12. 2021HifiFace: 3D Shape and Semantic Prior Guided High Fidelity Face Swappingcited by 92
  13. 2023Mist: Towards Improved Adversarial Examples for Diffusion Modelscited by 91
  14. 2024LAA-Net: Localized Artifact Attention Network for Quality-Agnostic and Generalizable Deepfake Detectioncited by 88
  15. 2022DiffFace: Diffusion-based Face Swapping with Facial Guidancecited by 77
  16. 2024Face Adapter for Pre-Trained Diffusion Models with Fine-Grained ID and Attribute Controlcited by 66
  17. 2020Disrupting Deepfakes: Adversarial Attacks Against Conditional Image Translation Networks and Facial Manipulation Systemscited by 65
  18. 2023Toward effective protection against diffusion based mimicry through score distillationcited by 64
  19. 2021Image-to-image Translation via Hierarchical Style Disentanglementcited by 63
  20. 2021CMUA-Watermark: A Cross-Model Universal Adversarial Watermark for Combating Deepfakescited by 54
  21. 2022Anti-Forgery: Towards a Stealthy and Robust DeepFake Disruption Attack via Adversarial Perceptual-aware Perturbationscited by 39
  22. 2024Realistic and Efficient Face Swapping: A Unified Approach with Diffusion Modelscited by 35
  23. 2021TAFIM: Targeted Adversarial Attacks against Facial Image Manipulationscited by 25
  24. 2022Restricted Black-box Adversarial Attack Against DeepFake Face Swappingcited by 25
  25. 2021High Resolution Face Editing with Masked GAN Latent Code Optimizationcited by 21
  26. 2023Face Transformer: Towards High Fidelity and Accurate Face Swappingcited by 11
  27. 2023E4S: Fine-grained Face Swapping via Editing With Regional GAN Inversioncited by 8
  28. 2025My Face Is Mine, Not Yours: Facial Protection Against Diffusion Model Face Swappingcited by 4

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2026: 1.

1 paper.