Delving into the Temporal Challenges of Unified Video Protection Against Image-to-Video and Fine-Tuning-based Customization
Not on the map. Why?
Abstract (arXiv)
Recent diffusion-based video generation models have enabled high-quality personalized video customization through both tuning-based pipelines, which fine-tune a video diffusion model, and reference-based pipelines such as image-to-video generation. However, these capabilities raise serious concerns about personal privacy, identity ownership and intellectual property protection. Existing anti-customization works focus on protecting images, while protection for videos against both reference- and tuning-based customization remains largely underexplored. Protecting videos in this setting raises three challenges: (i) Image-level perturbations, optimized frame by frame, cannot survive temporal compression by 3D video VAE. (ii) A video-level perturbation optimized on a single video is vulnerable to temporal editing and fails to protect unseen videos. (iii) Temporally inconsistent perturbations are not robust to temporal attacks. To address these challenges, we propose Temporally Consistent Universal Adversarial Perturbations (TC-UAP), the first protection method against both reference- and tuning-based video customization. TC-UAP optimizes an identity-level multi-frame UAP over sliding windows from multiple videos, accounting for local temporal dependencies induced by temporal compression in video VAE and enabling a single perturbation to protect unseen videos of varying lengths. Moreover, we introduce intrinsic temporal modeling and an extrinsic surrogate temporal-attack loss, which make the perturbation temporally consistent and robust to unseen temporal attacks. Empirically, quantitative and qualitative results show that TC-UAP achieves the strongest identity protection compared with existing methods under both reference- and tuning-based video customization, and remains robust under multiple unseen temporal attacks.
Key facts. Cited by 5 papers in the map (data through 14 Oct 2026). Builds on 63 of its 75 references that are in the map. First posted on arXiv 14 Jul 2026.
Builds on
63 of 75 references.
References · 63
- 2020Denoising Diffusion Probabilistic Modelscited by 21,076
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,863
- 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,380
- 2018The Unreasonable Effectiveness of Deep Features as a Perceptual Metriccited by 11,177
- 2020Denoising Diffusion Implicit Modelscited by 9,781
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
- 2022DreamBooth: Fine Tuning Text-to-Image Diffusion Models for Subject-Driven Generationcited by 3,300
- 2025Wan: Open and Advanced Large-Scale Video Generative Modelscited by 2,708
- 2022InstructPix2Pix: Learning to Follow Image Editing Instructionscited by 2,611
- 2023Stable Video Diffusion: Scaling Latent Video Diffusion Models to Large Datasetscited by 2,581
- 2024CogVideoX: Text-to-Video Diffusion Models with An Expert Transformercited by 2,261
- 2024HunyuanVideo: A Systematic Framework For Large Video Generative Modelscited by 1,660
38 more
- 2016Universal adversarial perturbationscited by 784
- 2024LTX-Video: Realtime Video Latent Diffusioncited by 581
- 2020CurricularFace: Adaptive Curriculum Learning Loss for Deep Face Recognitioncited by 321
- 2022CelebV-HQ: A Large-Scale Video Facial Attributes Datasetcited by 250
- 2026LTX-2: Efficient Joint Audio-Visual Foundation Modelcited by 236
- 2023Glaze: Protecting Artists from Style Mimicry by Text-to-Image Modelscited by 205
- 2023Adversarial Example Does Good: Preventing Painting Imitation from Diffusion Models via Adversarial Examplescited by 167
- 2023Raising the Cost of Malicious AI-Powered Image Editingcited by 163
- 2025Open-Sora 2.0: Training a Commercial-Level Video Generation Model in 200kcited by 163
- 2026Seedance 2.0: Advancing Video Generation for World Complexitycited by 160
- 2024Identity-Preserving Text-to-Video Generation by Frequency Decompositioncited by 158
- 2024ID-Animator: Zero-Shot Identity-Preserving Human Video Generationcited by 124
- 2023Anti-DreamBooth: Protecting users from personalized text-to-image synthesiscited by 120
- 2023Mist: Towards Improved Adversarial Examples for Diffusion Modelscited by 94
- 2024T2VSafetyBench: Evaluating the Safety of Text-to-Video Generative Modelscited by 66
- 2021Countering Malicious DeepFakes: Survey, Battleground, and Horizoncited by 56
- 2021Non-Transferable Learning: A New Approach for Model Ownership Verification and Applicability Authorizationcited by 52
- 2023MetaCloak: Preventing Unauthorized Subject-driven Text-to-image Diffusion-based Synthesis via Meta-learningcited by 44
- 2023Unlearnable Examples for Diffusion Models: Protect Data from Unauthorized Exploitationcited by 37
- 2023SimAC: A Simple Anti-Customization Method for Protecting Face Privacy against Text-to-Image Synthesis of Diffusion Modelscited by 36
- 2024IDProtector: An Adversarial Noise Encoder to Protect Against ID-Preserving Image Generationcited by 22
- 2024LaVin-DiT: Large Vision Diffusion Transformercited by 21
- 2025Dynamic Concepts Personalization from Single Videoscited by 20
- 2026DreamID-Omni: Unified Framework for Controllable Human-Centric Audio-Video Generationcited by 20
- 2025Rethinking Data Protection in the (Generative) Artificial Intelligence Eracited by 18
- 2025TalkVid: A Large-Scale Diversified Dataset for Audio-Driven Talking Head Synthesiscited by 18
- 2025ACE: Anti-Editing Concept Erasure in Text-to-Image Modelscited by 17
- 2025Beyond Optimal Transport: Model-Aligned Coupling for Flow Matchingcited by 15
- 2025FORCE: Transferable Visual Jailbreaking Attacks via Feature Over-Reliance CorrEctioncited by 11
- 2026When Safety Collides: Resolving Multi-Category Harmful Conflicts in Text-to-Image Diffusion via Adaptive Safety Guidancecited by 11
- 2025Taming Camera-Controlled Video Generation with Verifiable Geometry Rewardcited by 10
- 2025AdLift: Lifting Adversarial Perturbations to Safeguard 3D Gaussian Splatting Assets Against Instruction-Driven Editingcited by 10
- 2024PRIME: Protect Your Videos From Malicious Editingcited by 9
- 2025Temporal Unlearnable Examples: Preventing Personal Video Data from Unauthorized Exploitation by Object Trackingcited by 9
- 2025Token Buncher: Shielding LLMs from Harmful Reinforcement Learning Fine-Tuningcited by 8
- 2025Vid-Freeze: Protecting Images from Malicious Image-to-Video Generation via Temporal Freezingcited by 8
- 2025Toward Robust Non-Transferable Learning: A Survey and Benchmarkcited by 7
- 2025DCT-Shield: A Robust Frequency Domain Defense against Malicious Image Editingcited by 7
50 most cited of 63 All 63 (JSON)
Built on by
Citing papers per year: 2026: 5.
5 papers.
- 2026When Agents Learn to Be You: Benchmarking Privacy Leakage, Impersonation Risk, and Defenses in Persona Skillscited by 3
- 2026Scalable Minimal-Change Learning for Controllable Image Editingcited by 0
- 2026SquidAgent: Parallelize Wisely, Coordinate Efficientlycited by 0
- 2026LETHE: Defending against Unauthorized Image-to-Video Generation via Value Diversity Collapsecited by 0
- 2026KVeil: First-Place Solution to ECCV 2026 LifeGenIP Challenge on Unlearnable Videoscited by 0
- 2026KVeil: First-Place Solution to ECCV 2026 LifeGenIP Challenge on Unlearnable Videos9 Oct 2026
- 2026LETHE: Defending against Unauthorized Image-to-Video Generation via Value Diversity Collapse9 Oct 2026
- 2026SquidAgent: Parallelize Wisely, Coordinate Efficiently6 Oct 2026
- 2026Scalable Minimal-Change Learning for Controllable Image Editing5 Oct 2026
- 2026When Agents Learn to Be You: Benchmarking Privacy Leakage, Impersonation Risk, and Defenses in Persona Skills4 Aug 2026
Similar, not cited
Close in wording, no citation either way
- 2024UVCG: Leveraging Temporal Consistency for Universal Video Protection
- 2026ChronoLock: Protecting Videos from Unauthorized Text-to-Video Personalization
- 2026Bypassing Copyright Protection in Diffusion-based Customization via Two-Stage Latent Feature Optimization
- 2025MagicID: Hybrid Preference Optimization for ID-Consistent and Dynamic-Preserved Video Customization
- 2025Towards Robust Defense against Customization via Protective Perturbation Resistant to Diffusion-based Purification
- 2025CustomVideoX: 3D Reference Attention Driven Dynamic Adaptation for Zero-Shot Customized Video Diffusion Transformers
- 2025Evaluating Adversarial Protections for Diffusion Personalization: A Comprehensive Study
- 2023Targeted Attack Improves Protection against Unauthorized Diffusion Customization