{"id":"https://openalex.org/W7127049003","doi":"https://doi.org/10.32657/10356/205523","title":"Adversarial signals against discriminative and generative models for data protections","display_name":"Adversarial signals against discriminative and generative models for data protections","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W7127049003","doi":"https://doi.org/10.32657/10356/205523"},"language":"en","primary_location":{"id":"doi:10.32657/10356/205523","doi":"https://doi.org/10.32657/10356/205523","is_oa":false,"landing_page_url":"https://doi.org/10.32657/10356/205523","pdf_url":null,"source":{"id":"https://openalex.org/S4306402609","display_name":"DR-NTU (Nanyang Technological University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I172675005","host_organization_name":"Nanyang Technological University","host_organization_lineage":["https://openalex.org/I172675005"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Nanyang Technological University","raw_type":"dissertation"},"parent_works":[],"lineage":["https://openalex.org/W7127049003"],"child_works_count":0,"type":"dissertation","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://hdl.handle.net/10356/205523","any_repository_has_fulltext":true},"authorships":[{"author_position":"last","author":{"id":"https://openalex.org/A5113036565","display_name":"Mingzhi Lyu","orcid":"https://orcid.org/0009-0005-9359-5908","observed_orcids":["https://orcid.org/0009-0005-9359-5908"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Mingzhi Lyu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.0005000000237487257,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":9.999999747378752e-05,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-attacks","display_name":"adversarial attacks","score":0.7649999856948853},{"id":"https://openalex.org/keywords/data-poisoning-attacks","display_name":"data poisoning","score":0.843999981880188},{"id":"https://openalex.org/keywords/generative-models","display_name":"generative models","score":0.5920000076293945},{"id":"https://openalex.org/keywords/diffusion-models","display_name":"diffusion models","score":0.9419999718666077},{"id":"https://openalex.org/keywords/textual-inversion","display_name":"textual inversion","score":0.9610000252723694},{"id":"https://openalex.org/keywords/copyright-protection","display_name":"copyright protection","score":0.5320000052452087},{"id":"https://openalex.org/keywords/data-protection","display_name":"data protection","score":0.5540000200271606},{"id":"https://openalex.org/keywords/self-supervised-learning","display_name":"self-supervised learning","score":0.878000020980835},{"id":"https://openalex.org/keywords/diffusion-model-fine-tuning","display_name":"diffusion model fine-tuning","score":0.5889999866485596},{"id":"https://openalex.org/keywords/generative-adversarial-networks","display_name":"generative adversarial networks","score":0.5410000085830688},{"id":"https://openalex.org/keywords/image-editing","display_name":"image editing","score":0.32199999690055847}],"concepts":[{"id":"https://openalex.org/C97931131","wikidata":"https://www.wikidata.org/wiki/Q5282087","display_name":"Discriminative model","level":2,"score":0.8201000094413757},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6847000122070312},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.6503000259399414},{"id":"https://openalex.org/C39890363","wikidata":"https://www.wikidata.org/wiki/Q36108","display_name":"Generative grammar","level":2,"score":0.5753999948501587},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.525600016117096},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5217999815940857},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.48080000281333923},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.43639999628067017},{"id":"https://openalex.org/C2780310539","wikidata":"https://www.wikidata.org/wiki/Q12547192","display_name":"Imperfect","level":2,"score":0.3675000071525574},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.32100000977516174},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.3176000118255615},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.3070000112056732},{"id":"https://openalex.org/C2777655017","wikidata":"https://www.wikidata.org/wiki/Q1501161","display_name":"Toolbox","level":2,"score":0.30480000376701355},{"id":"https://openalex.org/C2988773926","wikidata":"https://www.wikidata.org/wiki/Q25104379","display_name":"Generative adversarial network","level":3,"score":0.30309998989105225},{"id":"https://openalex.org/C167966045","wikidata":"https://www.wikidata.org/wiki/Q5532625","display_name":"Generative model","level":3,"score":0.2946000099182129},{"id":"https://openalex.org/C138958017","wikidata":"https://www.wikidata.org/wiki/Q190087","display_name":"Data type","level":2,"score":0.26409998536109924},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.2603999972343445},{"id":"https://openalex.org/C69360830","wikidata":"https://www.wikidata.org/wiki/Q1172237","display_name":"Data Protection Act 1998","level":2,"score":0.26019999384880066},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.25850000977516174}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.32657/10356/205523","doi":"https://doi.org/10.32657/10356/205523","is_oa":false,"landing_page_url":"https://doi.org/10.32657/10356/205523","pdf_url":null,"source":{"id":"https://openalex.org/S4306402609","display_name":"DR-NTU (Nanyang Technological University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I172675005","host_organization_name":"Nanyang Technological University","host_organization_lineage":["https://openalex.org/I172675005"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Nanyang Technological University","raw_type":"dissertation"},{"id":"pmh:oai:dr.ntu.edu.sg:10356/205523","doi":null,"is_oa":true,"landing_page_url":"https://hdl.handle.net/10356/205523","pdf_url":null,"source":{"id":"https://openalex.org/S4306402609","display_name":"DR-NTU (Nanyang Technological University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I172675005","host_organization_name":"Nanyang Technological University","host_organization_lineage":["https://openalex.org/I172675005"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc","license_id":"https://openalex.org/licenses/cc-by-nc","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Thesis-Doctor of Philosophy"}],"best_oa_location":{"id":"pmh:oai:dr.ntu.edu.sg:10356/205523","doi":null,"is_oa":true,"landing_page_url":"https://hdl.handle.net/10356/205523","pdf_url":null,"source":{"id":"https://openalex.org/S4306402609","display_name":"DR-NTU (Nanyang Technological University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I172675005","host_organization_name":"Nanyang Technological University","host_organization_lineage":["https://openalex.org/I172675005"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc","license_id":"https://openalex.org/licenses/cc-by-nc","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Thesis-Doctor of Philosophy"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W4404971321","https://openalex.org/W4389988755","https://openalex.org/W7104658524","https://openalex.org/W7160403794","https://openalex.org/W7133277082","https://openalex.org/W7110694972","https://openalex.org/W3125787928","https://openalex.org/W4406232114","https://openalex.org/W4377086497","https://openalex.org/W4410393066"],"abstract_inverted_index":{"In":[0,93,223,547,600,727,756,863,912],"recent":[1],"years,":[2],"discriminative":[3,102,133,345,935],"and":[4,21,25,43,52,60,74,89,103,106,112,270,273,289,318,340,497,569,596,643,744,753,809,854,891,909,931,936,944,952,967,972],"generative":[5,104,361,382,525,734,937],"models":[6,105,366,526,568,698,723,735,767,791],"have":[7,66,139,586],"been":[8,67,140,248],"widely":[9,141,737],"adopted":[10,142],"across":[11,266,330,418,659,704,722,883,964],"a":[12,78,108,182,250,335,385,459,518,603,676,761,774,865],"broad":[13],"range":[14],"of":[15,86,110,125,158,204,221,240,294,302,387,400,566,580,626,664,671,702,712,730,817,847,873,904,919,958,974],"applications\u2014including":[16],"classification,":[17],"detection,":[18],"image":[19,171,199,881,910],"synthesis,":[20],"editing\u2014significantly":[22],"enhancing":[23],"productivity":[24],"creativity":[26],"in":[27,338,344,360,380,466,527,571,636,742,804,902],"various":[28,884],"domains.":[29],"However,":[30,161],"their":[31,575],"proliferation":[32],"also":[33,352,667,716],"introduces":[34,668],"critical":[35,378],"societal":[36],"challenges":[37],"such":[38,371,550,825],"as":[39,69,372,551,793,922],"copyright":[40],"infringement,":[41],"misinformation,":[42],"privacy":[44,752],"violations.":[45],"Protecting":[46],"visual":[47,119,354,545,552,581,841],"data":[48,120,135,146,153,241,355,927],"from":[49,166,443,531,928],"unauthorized":[50,148,358,929],"manipulation":[51,933],"model":[53,87],"training":[54,91,152,311,359,461,489,930],"has":[55,247,747],"thus":[56],"become":[57],"an":[58,650,850,855],"urgent":[59],"essential":[61],"task.":[62],"Although":[63],"adversarial":[64,310,492,540,557,657,672,713,832,920],"attacks":[65,76,137,541,901],"explored":[68],"protection":[70,356,960],"strategies,":[71,333],"achieving":[72],"transferable":[73,762],"generalizable":[75,949],"remains":[77],"major":[79],"open":[80],"challenge":[81],"due":[82,256],"to":[83,128,143,154,225,236,253,257,314,396,476,483,490,501,504,538,542,563,592,681,690,739,925],"the":[84,99,123,156,219,231,238,292,398,528,536,578,601,619,638,669,700,710,718,728,751,757,794,799,820,840,845,848,871,874,917,956,970],"diversity":[85],"architectures":[88],"task-specific":[90],"procedures.":[92],"response,":[94],"this":[95,288,350,914],"thesis":[96,351,915],"systematically":[97],"analyzes":[98],"mechanisms":[100,924],"underlying":[101],"proposes":[107],"series":[109,386],"attack":[111,194,558,621,763,771,795,821,875,906],"defense":[113,215,232],"strategies":[114,951],"aimed":[115],"at":[116,426,494],"either":[117],"protecting":[118],"or":[121,169],"exposing":[122],"vulnerabilities":[124,379],"existing":[126,162,295,328,381,900],"methods":[127,559,780],"inform":[129],"future":[130],"research.":[131],"For":[132],"models,":[134,349,362,786,888,894],"availability":[136],"(DAAs)":[138],"protect":[144],"copyrighted":[145],"against":[147,357,623,764],"training,":[149],"by":[150,934],"poisoning":[151,184,255,332,342,401,465,523],"degrade":[155],"performance":[157,195],"downstream":[159],"models.":[160,346,646,938],"DAAs":[163,383,421],"often":[164,278],"suffer":[165],"limited":[167],"robustness":[168,343,973],"poor":[170],"quality.":[172,449,911],"To":[173,286,707,837],"address":[174,287],"this,":[175],"we":[176,217,229,297,390,410,435,454,534,648,715,759],"introduce":[177,298,309,455],"Imperfect":[178],"Restoration":[179],"Poisoning":[180,304],"(IRP),":[181],"novel":[183,460,604],"technique":[185],"designed":[186,860],"for":[187,305,323,522,632,661,724,861,870],"supervised":[188,262],"learning":[189,322,416,503],"(SL),":[190],"which":[191,308,617,746],"achieves":[192],"strong":[193],"while":[196,843],"preserving":[197,844],"high":[198],"fidelity.":[200],"Through":[201],"extensive":[202],"comparisons":[203],"IRP":[205],"with":[206,210,261,364,420,613],"eight":[207],"baselines,":[208],"coupled":[209],"evaluations":[211],"alongside":[212],"five":[213],"representative":[214],"methods,":[216],"showcase":[218],"superiority":[220],"IRP.":[222],"addition":[224],"proposing":[226,947],"improved":[227],"DAAs,":[228,296,516],"investigate":[230],"side,":[233],"especially":[234],"how":[235],"mitigate":[237,254],"impact":[239],"poisoning.":[242],"While":[243],"Self-Supervised":[244],"Learning":[245],"(SSL)":[246],"considered":[249],"promising":[251],"paradigm":[252],"its":[258],"objective":[259],"mismatch":[260],"attacks,":[263,714],"our":[264,975],"experiments":[265,878,963],"multiple":[267,584],"poison":[268,316,424,479],"types":[269,565,625,663,816],"datasets":[271,966],"(CIFAR-10":[272],"ImageNet-100)":[274],"reveal":[275],"that":[276,412,437,463,510,588,654,687,781,826,896],"SSL":[277],"performs":[279],"poorly":[280],"when":[281],"trained":[282],"on":[283,312,402,451,524,694,773,783],"poisoned":[284,438],"data.":[285],"further":[290,708,838],"expose":[291],"limit":[293],"VESPR":[299,325],"(Vulnerability":[300],"Exploitation":[301],"Supervised":[303],"Robust":[306],"SSL),":[307],"SL":[313],"obfuscate":[315],"features":[317],"guide":[319],"robust":[320],"feature":[321],"SSL.":[324],"outperforms":[326],"six":[327],"defenses":[329],"seven":[331,695],"revealing":[334,517],"research":[336,520],"gap":[337,521],"understanding":[339],"improving":[341],"Beyond":[347],"classification":[348],"investigates":[353],"particularly":[363],"diffusion":[365],"(DMs)":[367],"fine-tuned":[368],"via":[369],"techniques":[370],"Textual":[373],"Inversion":[374],"(TI).":[375],"We":[376],"identify":[377],"through":[384],"analyses.":[388],"First,":[389],"propose":[391,760],"Semantic":[392],"Sensitivity":[393],"Maps":[394],"(SSM)":[395],"visualize":[397],"influence":[399],"token-level":[403],"text":[404],"embeddings":[405],"during":[406,486],"TI":[407],"training.":[408],"Second,":[409],"observe":[411],"DMs":[413],"exhibit":[414],"non-uniform":[415],"behavior":[417],"timesteps,":[419,496],"primarily":[422],"injecting":[423],"signals":[425,439,921],"early":[427],"(low-noise)":[428],"stages\u2014leaving":[429],"high-timestep":[430],"stages":[431],"insufficiently":[432],"defended.":[433],"Third,":[434],"show":[436,895],"shift":[440],"attention":[441],"away":[442],"semantically":[444],"relevant":[445],"regions,":[446],"impairing":[447],"embedding":[448,685],"Based":[450],"these":[452,814],"insights,":[453],"Safe-Zone":[456],"Training":[457],"(SZT),":[458],"strategy":[462],"mitigates":[464],"DMs.":[467],"SZT":[468,511],"comprises":[469],"3":[470],"key":[471,630],"components:":[472],"(1)":[473],"JPEG":[474],"compression":[475],"weaken":[477],"high-frequency":[478],"signals,":[480],"(2)":[481],"restriction":[482],"higher":[484],"timesteps":[485],"textual":[487],"inversion":[488],"avoid":[491],"signal":[493],"lower":[495],"(3)":[498],"loss":[499],"masking":[500],"constrain":[502],"target":[505,567,717],"regions.":[506],"Our":[507,939],"results":[508,693],"demonstrate":[509,699],"effectively":[512],"neutralizes":[513],"several":[514],"state-of-the-art":[515,885],"significant":[519],"future.":[529],"Apart":[530],"training-time":[532,945],"protection,":[533,946],"extend":[535],"study":[537],"inference-time":[539,943],"prevent":[543],"AI-driven":[544],"manipulations.":[546],"some":[548,555],"tasks,":[549],"watermarking":[553,582],"removal,":[554,583],"prior":[556,779],"are":[560,590,736,859],"typically":[561],"constrained":[562],"specific":[564,725],"operate":[570],"white-box":[572],"settings,":[573],"limiting":[574],"applicability.":[576],"Within":[577],"context":[579],"studies":[585],"revealed":[587],"watermarks":[589],"vulnerable":[591],"both":[593,624,905,942],"inpainting-based":[594,642],"removers":[595],"blind":[597,644],"watermark":[598,627,673,684,696],"removers.":[599,628,665],"thesis,":[602,758],"black-box":[605],"method":[606],"is":[607,618,823,868],"proposed,":[608],"named":[609,768],"Adversarial":[610],"Watermark":[611,678],"Defender":[612],"Attribution-Guided":[614],"Perturbation":[615],"(AWD-AGP),":[616],"first":[620],"defending":[622],"The":[629],"innovation":[631],"superior":[633],"transferability":[634,711],"lies":[635],"leveraging":[637],"mechanistic":[639],"differences":[640],"between":[641],"removal":[645,697],"Specifically,":[647],"design":[649],"attribution-guided":[651],"perturbation":[652],"mechanism":[653],"allocates":[655],"targeted":[656],"strength":[658],"regions":[660],"different":[662],"AWD-AGP":[666,703],"concept":[670],"positioning,":[674],"employing":[675],"dedicated":[677],"Positioning":[679],"Network":[680],"predict":[682],"optimal":[683],"locations":[686],"maximize":[688],"resistance":[689],"removal.":[691],"Experimental":[692],"effectiveness":[701,846,971],"diverse":[705,965],"scenarios.":[706],"enhance":[709,839],"core":[719],"bottleneck":[720],"shared":[721],"tasks.":[726],"case":[729],"face":[731,789,806],"swapping":[732],"(FS),":[733],"used":[738],"replace":[740],"faces":[741],"images":[743],"videos,":[745],"raised":[748],"concerns":[749],"about":[750],"identity":[754,800],"misuse.":[755],"subject-agnostic":[765,805,886],"FS":[766,785,887,893],"Additive":[769],"Identity":[770],"based":[772],"Relighting":[775],"function":[776],"(AIR).":[777],"Unlike":[778],"rely":[782],"surrogate":[784],"AIR":[787,797,897],"uses":[788],"recognition":[790],"directly":[792],"target.":[796],"misleads":[798],"extraction":[801],"modules\u2014key":[802],"bottlenecks":[803],"swapping\u2014via":[807],"relighting":[808],"additive":[810],"perturbations.":[811],"By":[812],"integrating":[813],"two":[815],"perturbations":[818],"simultaneously,":[819],"space":[822],"extended":[824],"stronger":[827],"but":[828],"more":[829],"visually":[830],"natural":[831],"examples":[833],"can":[834],"be":[835],"identified.":[836],"quality":[842],"attack,":[849],"adaptive":[851],"translation-invariant":[852],"operation":[853],"illumination":[856],"control":[857],"scheme":[858],"AIR.":[862],"addition,":[864],"mathematical":[866],"proof":[867],"given":[869],"extension":[872],"space.":[876],"Extensive":[877],"using":[879],"1000":[880],"pairs":[882],"including":[889],"GAN":[890],"diffusion-based":[892],"surpasses":[898],"all":[899],"terms":[903],"success":[907],"rate":[908],"summary,":[913],"explores":[916],"use":[918],"proactive":[923],"safeguard":[926],"malicious":[932],"contributions":[940],"span":[941],"practical,":[948],"protective":[950],"offering":[953],"insights":[954],"into":[955],"limitations":[957],"current":[959],"schemes.":[961],"Comprehensive":[962],"tasks":[968],"validate":[969],"proposed":[976],"methods.":[977]},"counts_by_year":[],"updated_date":"2026-11-09T13:22:03.289127","created_date":"2026-02-03T00:00:00"}