Beauty and the Beast: Imperceptible Perturbations Against Diffusion-Based Face Swapping via Directional Attribute Editing
Not on the map. Why?
Abstract (arXiv)
Diffusion-based face swapping achieves state-of-the-art performance, yet it also exacerbates the potential harm of malicious face swapping to violate portraiture right or undermine personal reputation. This has spurred the development of proactive defense methods. However, existing approaches face a core trade-off: large perturbations distort facial structures, while small ones weaken protection effectiveness. To address these issues, we propose FaceDefense, an enhanced proactive defense framework against diffusion-based face swapping. Our method introduces a new diffusion loss to strengthen the defensive efficacy of adversarial examples, and employs a directional facial attribute editing to restore perturbation-induced distortions, thereby enhancing visual imperceptibility. A two-phase alternating optimization strategy is designed to generate final perturbed face images. Extensive experiments show that FaceDefense significantly outperforms existing methods in both imperceptibility and defense effectiveness, achieving a superior trade-off.
Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Builds on 40 of its 61 references that are in the map. First posted on arXiv 30 Jan 2026.
Builds on
40 of 61 references.
References · 40
- 2017Attention Is All You Needcited by 59,932
- 2020Denoising Diffusion Probabilistic Modelscited by 20,851
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
- 2018The Unreasonable Effectiveness of Deep Features as a Perceptual Metriccited by 11,029
- 2020Denoising Diffusion Implicit Modelscited by 9,655
- 2020Score-Based Generative Modeling through Stochastic Differential Equationscited by 8,964
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2018A Style-Based Generator Architecture for Generative Adversarial Networkscited by 5,986
- 2022Generative Adversarial Networkscited by 5,603
- 2019Analyzing and Improving the Image Quality of StyleGANcited by 3,580
- 2017Progressive Growing of GANs for Improved Quality, Stability, and Variationcited by 2,967
28 more
- 2016Adversarial examples in the physical worldcited by 1,762
- 2018VoxCeleb2: Deep Speaker Recognitioncited by 862
- 2021Designing an Encoder for StyleGAN Image Manipulationcited by 542
- 2019Face X-ray for More General Face Forgery Detectioncited by 469
- 2021SimSwap: An Efficient Framework For High Fidelity Face Swappingcited by 243
- 2019FaceShifter: Towards High Fidelity And Occlusion Aware Face Swappingcited by 221
- 2021High-Fidelity GAN Inversion for Image Attribute Editingcited by 197
- 2023UCF: Uncovering Common Features for Generalizable Deepfake Detectioncited by 177
- 2023Adversarial Example Does Good: Preventing Painting Imitation from Diffusion Models via Adversarial Examplescited by 163
- 2023Raising the Cost of Malicious AI-Powered Image Editingcited by 160
- 2017Fader Networks: Manipulating Images by Sliding Attributescited by 118
- 2021HifiFace: 3D Shape and Semantic Prior Guided High Fidelity Face Swappingcited by 92
- 2023Mist: Towards Improved Adversarial Examples for Diffusion Modelscited by 91
- 2024LAA-Net: Localized Artifact Attention Network for Quality-Agnostic and Generalizable Deepfake Detectioncited by 88
- 2022DiffFace: Diffusion-based Face Swapping with Facial Guidancecited by 77
- 2024Face Adapter for Pre-Trained Diffusion Models with Fine-Grained ID and Attribute Controlcited by 66
- 2020Disrupting Deepfakes: Adversarial Attacks Against Conditional Image Translation Networks and Facial Manipulation Systemscited by 65
- 2023Toward effective protection against diffusion based mimicry through score distillationcited by 64
- 2021Image-to-image Translation via Hierarchical Style Disentanglementcited by 63
- 2021CMUA-Watermark: A Cross-Model Universal Adversarial Watermark for Combating Deepfakescited by 54
- 2022Anti-Forgery: Towards a Stealthy and Robust DeepFake Disruption Attack via Adversarial Perceptual-aware Perturbationscited by 39
- 2024Realistic and Efficient Face Swapping: A Unified Approach with Diffusion Modelscited by 35
- 2021TAFIM: Targeted Adversarial Attacks against Facial Image Manipulationscited by 25
- 2022Restricted Black-box Adversarial Attack Against DeepFake Face Swappingcited by 25
- 2021High Resolution Face Editing with Masked GAN Latent Code Optimizationcited by 21
- 2023Face Transformer: Towards High Fidelity and Accurate Face Swappingcited by 11
- 2023E4S: Fine-grained Face Swapping via Editing With Regional GAN Inversioncited by 8
- 2025My Face Is Mine, Not Yours: Facial Protection Against Diffusion Model Face Swappingcited by 4
Built on by
Citing papers per year: 2026: 1.
1 paper.