Verify Claimed Text-to-Image Models via Boundary-Aware Prompt Optimization
Not on the map. Why?
Abstract (arXiv)
As Text-to-Image (T2I) generation becomes widespread, third-party platforms increasingly integrate multiple model APIs for convenient image creation. However, false claims of using official models can mislead users and harm model owners' reputations, making model verification essential to confirm whether an API's underlying model matches its claim. Existing methods address this by using verification prompts generated by official model owners, but the generation relies on multiple reference models for optimization, leading to high computational cost and sensitivity to model selection. To address this problem, we propose a reference-free T2I model verification method called Boundary-aware Prompt Optimization (BPO). It directly explores the intrinsic characteristics of the target model. The key insight is that although different T2I models produce similar outputs for normal prompts, their semantic boundaries in the embedding space (transition zones between two concepts such as "corgi" and "bagel") are distinct. Prompts near these boundaries generate unstable outputs (e.g., sometimes a corgi and sometimes a bagel) on the target model but remain stable on other models. By identifying such boundary-adjacent prompts, BPO captures model-specific behaviors that serve as reliable verification cues for distinguishing T2I models. Experiments on five T2I models and four baselines demonstrate that BPO achieves superior verification accuracy.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Builds on 24 of its 31 references that are in the map. First posted on arXiv 27 Mar 2026.
Builds on
24 of 31 references.
References · 24
- 2020Denoising Diffusion Probabilistic Modelscited by 20,851
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
- 2022Photorealistic Text-to-Image Diffusion Models with Deep Language Understandingcited by 6,322
- 2022Classifier-Free Diffusion Guidancecited by 5,717
- 2021Zero-Shot Text-to-Image Generationcited by 4,276
- 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 2,914
- 2015Unsupervised Representation Learning with Deep Convolutional Generative Adversarial Networkscited by 2,048
- 2021Cascaded Diffusion Models for High Fidelity Image Generationcited by 1,155
- 2018A Survey Of Methods For Explaining Black Box Modelscited by 970
- 2021Membership Inference Attacks From First Principlescited by 839
- 2016Generative Adversarial Text to Image Synthesiscited by 735
- 2023Text-to-image Diffusion Models in Generative AI: A Surveycited by 264
12 more
- 2024Interpreting CLIP with Sparse Linear Concept Embeddings (SpLiCE)cited by 116
- 2024LLMmap: Fingerprinting For Large Language Modelscited by 56
- 2022Efficient Diffusion Models for Vision: A Surveycited by 50
- 2023RenAIssance: A Survey into AI Text-to-Image Generation in the Era of Large Modelcited by 47
- 2024Spherical Linear Interpolation and Text-Anchoring for Zero-shot Composed Image Retrievalcited by 44
- 2025Copyright Protection for Large Language Models: A Survey of Methods, Challenges, and Trendscited by 19
- 2024Text-to-Image Synthesis: A Decade Surveycited by 9
- 2025MARBLE: Material Recomposition and Blending in CLIP-Spacecited by 9
- 2024One Prompt to Verify Your Models: Black-Box Text-to-Image Models Verification via Non-Transferable Adversarial Attackscited by 4
- 2025Reusing Computation in Text-to-Image Diffusion for Efficient Generation of Image Setscited by 4
- 2020Generating Adversarial Examples with Controllable Non-transferabilitycited by 3
- 2024The 20 questions game to distinguish large language modelscited by 2
Built on by
Not cited yet.