mlsanityData to 14 Oct 2026

LETHE: Defending against Unauthorized Image-to-Video Generation via Value Diversity Collapse

arXiv 2610.13333 ↗First posted 9 Oct 2026cs.CV cs.CRcited by 0

On the map: Diffusion models → Robustness, privacy and adversarial aspects

Abstract (arXiv)

Image-to-video (I2V) diffusion models can animate a single reference image into high-quality, subject-consistent videos, posing threats of misuse as anyone can turn personal photos into fabricated videos without consent. A promising solution is to proactively add an adversarial perturbation to the image before release, such that videos generated from it would be unfaithful or visually corrupted. However, due to an insufficient understanding of what governs how subsequent frames read the reference image in modern I2V models, existing protections struggle to offer strong protection under common perturbation budgets. In this paper, we approach the problem by exploring this underlying reading mechanism. Through a convex geometric analysis, we theoretically identify the spread of the reference value vectors as a key factor governing this reading process, and empirically find that even a mild contraction of this spread can severely degrade the generated video, making it an efficient lever for protection. Guided by this insight, we propose LETHE, a novel protection method that directly disrupts this reading process. LETHE pairs two complementary objectives, where a value collapse objective drives the reference value vectors toward uniformity, while an attention attraction objective draws subsequent frames toward these collapsed tokens to amplify corruption. We further construct two human-centric I2V protection benchmarks and conduct extensive experiments with multiple modern I2V models, which demonstrate the state-of-the-art protection performance and versatility of LETHE.

Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 34 of its 40 references that are in the map. First posted on arXiv 9 Oct 2026.

Builds on

34 of 40 references.

Closest ancestors · 10

Same direction, newest first

  1. 2026Anti-I2V: Safeguarding your photos from malicious image-to-video generation25 Mar
  2. 2025Adapter Shield: A Unified Framework with Built-in Authentication for Preventing Unauthorized Zero-Shot Image-to-Image Generation25 Nov
  3. 2025StyleGuard: Preventing Text-to-Image-Model-based Style Mimicry Attacks by Style Perturbations24 May
  4. 2023Can Protective Perturbation Safeguard Personal Data from Being Exploited by Stable Diffusion?30 Nov
  5. 2023IMPRESS: Evaluating the Resilience of Imperceptible Perturbations Against Unauthorized Data Usage in Diffusion-Based Generative AI30 Oct
  6. 2023Toward effective protection against diffusion based mimicry through score distillation2 Oct
  7. 2023Anti-DreamBooth: Protecting users from personalized text-to-image synthesis27 Mar
  8. 2023Raising the Cost of Malicious AI-Powered Image Editing13 Feb
  9. 2023Adversarial Example Does Good: Preventing Painting Imitation from Diffusion Models via Adversarial Examples9 Feb
  10. 2022Diffusion Models for Adversarial Purification16 May

Other references · 24

  1. 2013Intriguing properties of neural networkscited by 5,155
  2. 2015FaceNet: A Unified Embedding for Face Recognition and Clusteringcited by 2,849
  3. 2025Qwen3-VL Technical Reportcited by 2,793
  4. 2025Wan: Open and Advanced Large-Scale Video Generative Modelscited by 2,708
  5. 2023Stable Video Diffusion: Scaling Latent Video Diffusion Models to Large Datasetscited by 2,581
  6. 2024CogVideoX: Text-to-Video Diffusion Models with An Expert Transformercited by 2,261
  7. 2023VBench: Comprehensive Benchmark Suite for Video Generative Modelscited by 1,822
  8. 2024LTX-Video: Realtime Video Latent Diffusioncited by 581
  9. 2023Q-Align: Teaching LMMs for Visual Scoring via Discrete Text-Defined Levelscited by 503
  10. 2019A Short Note on the Kinetics-700 Human Action Datasetcited by 310
  11. 2025Rolling Forcing: Autoregressive Long Video Diffusion in Real Timecited by 234
  12. 2023Dense Text-to-Image Generation with Attention Modulationcited by 163
12 more
  1. 2023CelebV-Text: A Large-Scale Facial Text-Video Datasetcited by 104
  2. 2025Deep Forcing: Training-Free Long Video Generation with Deep Sink and Participative Compressioncited by 85
  3. 2019Image Super-Resolution as a Defense Against Adversarial Attackscited by 65
  4. 2025AccVideo: Accelerating Video Diffusion Model with Synthetic Datasetcited by 15
  5. 2024Dormant: Defending against Pose-driven Human Image Animationcited by 11
  6. 2026Efficient Video Diffusion Models: Advancements and Challengescited by 7
  7. 2025Video Deepfake Abuse: How Company Choices Predictably Shape Misuse Patternscited by 5
  8. 2026Delving into the Temporal Challenges of Unified Video Protection Against Image-to-Video and Fine-Tuning-based Customizationcited by 5
  9. 2026Immune2V: Image Immunization Against Dual-Stream Image-to-Video Generationcited by 4
  10. 2026Image-to-Video Diffusion: From Foundations to Open Frontierscited by 3
  11. 2026Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecyclecited by 2
  12. 2026Anti-Prompt: Image Protection against Text-Guided Image-to-Video Generationcited by 1

Built on by

Not cited yet.

Similar, not cited

Close in wording, no citation either way

  1. 2025VideoGuard: Protecting Video Content from Unauthorized Editing
  2. 2026RAPID: A Real-Time Defense Against Unauthorized Model Distillation for Text-to-Image Services
  3. 2026I2VShield: An Efficient Proactive Defense Framework against DiT-based Image-to-Video Models
  4. 2025VideoEraser: Concept Erasure in Text-to-Video Diffusion Models
  5. 2026VPA-Guard: Defending and Benchmarking Image-to-Video Generation Against Visual Prompt Attacks
  6. 2024Protective Perturbations against Unauthorized Data Usage in Diffusion-based Image Generation
  7. 2024Exploiting Watermark-Based Defense Mechanisms in Text-to-Image Diffusion Models for Unauthorized Data Usage
  8. 2024DiffusionGuard: A Robust Defense Against Malicious Diffusion-based Image Editing