IPV-Bench: Benchmarking Image Protection Methods under Diverse Image-to-Video Generation Scenarios
Not on the map. Why?
Abstract (arXiv)
Image-to-video (I2V) generation models can be misused to animate a single image into a convincing fake video, motivating perturbation-based image protection methods that aim to disrupt such generation. Yet these methods remain difficult to compare: they are reported under inconsistent metrics and generation settings, are often validated only on the single generator they were optimized against, and are evaluated on narrow, single-domain image sets that do not reflect real misuse. To address these challenges, we introduce IPV-Bench (Image Protection against Video generation), the first systematic benchmark for image protection in I2V generation scenarios. IPV-Bench couples a unified protocol that jointly scores protection effectiveness, visual fidelity, and robustness to preprocessing attacks together with IPV-500, a prompt-paired dataset spanning five misuse-relevant domains. Based on this benchmark, we evaluate five representative protection methods across four I2V models covering distinct architectures and both open-source and commercial systems. Extensive experiments show a consistently sobering picture: image protection and video disruption trade off against each other, most methods fail to disrupt generation beyond noise, protection rarely transfers across generators, and the few effective cases are broken by simple preprocessing. We further find that image content governs the perceptual cost of protection but not its benefit: no image domain offers an easier target. Overall, IPV-Bench provides a rigorous, reproducible, and extensible foundation for developing protection methods that work in practice.
Key facts. Cited by 2 papers in the map (data through 7 Oct 2026). Builds on 24 of its 39 references that are in the map. First posted on arXiv 27 Mar 2026.
Builds on
24 of 39 references.
References · 24
- 2015U-Net: Convolutional Networks for Biomedical Image Segmentationcited by 19,604
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
- 2018The Unreasonable Effectiveness of Deep Features as a Perceptual Metriccited by 11,029
- 2018A Style-Based Generator Architecture for Generative Adversarial Networkscited by 5,986
- 2022Scalable Diffusion Models with Transformerscited by 5,931
- 2023Stable Video Diffusion: Scaling Latent Video Diffusion Models to Large Datasetscited by 2,526
- 2023VBench: Comprehensive Benchmark Suite for Video Generative Modelscited by 1,755
- 2024HunyuanVideo: A Systematic Framework For Large Video Generative Modelscited by 1,597
- 2018Towards Accurate Generative Models of Video: A New Metric & Challengescited by 1,204
- 2019StarGAN v2: Diverse Image Synthesis for Multiple Domainscited by 1,095
- 2020RobustBench: a standardized adversarial robustness benchmarkcited by 659
- 2017MoCoGAN: Decomposing Motion and Content for Video Generationcited by 523
12 more
- 2022Diffusion Models for Adversarial Purificationcited by 469
- 2024Lumiere: A Space-Time Diffusion Model for Video Generationcited by 450
- 2023EvalCrafter: Benchmarking and Evaluating Large Video Generation Modelscited by 332
- 2023Glaze: Protecting Artists from Style Mimicry by Text-to-Image Modelscited by 200
- 2023Raising the Cost of Malicious AI-Powered Image Editingcited by 160
- 2023Holistic Evaluation of Text-To-Image Modelscited by 160
- 2023Anti-DreamBooth: Protecting users from personalized text-to-image synthesiscited by 114
- 2023Mist: Towards Improved Adversarial Examples for Diffusion Modelscited by 91
- 2024WAVES: Benchmarking the Robustness of Image Watermarkscited by 89
- 2021Aligning Latent and Image Spaces to Connect the Unconnectablecited by 70
- 2023EditShield: Protecting Unauthorized Image Editing by Instruction-guided Diffusion Modelscited by 27
- 2025Evaluating Adversarial Protections for Diffusion Personalization: A Comprehensive Studycited by 3
Built on by
Citing papers per year: 2026: 2.
2 papers.