{"id":"https://openalex.org/W7202298030","doi":"https://doi.org/10.48550/arxiv.2608.10870","title":"NullEdit: Stealthy Image Protection via VLM Condition Redirection","display_name":"NullEdit: Stealthy Image Protection via VLM Condition Redirection","publication_year":2026,"publication_date":"2026-08-11","ids":{"openalex":"https://openalex.org/W7202298030","doi":"https://doi.org/10.48550/arxiv.2608.10870"},"language":"en","primary_location":{"id":"pmh:oai:arXiv.org:2608.10870","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2608.10870","pdf_url":"https://arxiv.org/pdf/2608.10870","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"volume":null,"type":"preprint","is_traditional":true,"indexed_in":["arxiv","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2608.10870","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5055500263","display_name":"Weiyao Huang","orcid":"https://orcid.org/0009-0004-9213-2744","observed_orcids":["https://orcid.org/0009-0004-9213-2744"]},"institutions":[{"id":"https://openalex.org/I157773358","display_name":"Sun Yat-sen University","ror":"https://ror.org/0064kty71","country_code":"CN","type":"education","lineage":["https://openalex.org/I157773358"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Huang, Weiyao","raw_affiliation_strings":["School of Computer Science and Engineering , Sun Yat-sen University , Guangzhou , China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering , Sun Yat-sen University , Guangzhou , China","institution_ids":["https://openalex.org/I157773358"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5125740700","display_name":"Liqin Wang","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I157773358","display_name":"Sun Yat-sen University","ror":"https://ror.org/0064kty71","country_code":"CN","type":"education","lineage":["https://openalex.org/I157773358"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wang, Liqin","raw_affiliation_strings":["School of Computer Science and Engineering , Sun Yat-sen University , Guangzhou , China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering , Sun Yat-sen University , Guangzhou , China","institution_ids":["https://openalex.org/I157773358"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5071191307","display_name":"Ziqi Sheng","orcid":"https://orcid.org/0009-0005-5106-9563","observed_orcids":["https://orcid.org/0009-0005-5106-9563"]},"institutions":[{"id":"https://openalex.org/I157773358","display_name":"Sun Yat-sen University","ror":"https://ror.org/0064kty71","country_code":"CN","type":"education","lineage":["https://openalex.org/I157773358"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Sheng, Ziqi","raw_affiliation_strings":["School of Computer Science and Engineering , Sun Yat-sen University , Guangzhou , China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering , Sun Yat-sen University , Guangzhou , China","institution_ids":["https://openalex.org/I157773358"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5147036031","display_name":"Wei Lu","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I157773358","display_name":"Sun Yat-sen University","ror":"https://ror.org/0064kty71","country_code":"CN","type":"education","lineage":["https://openalex.org/I157773358"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lu, Wei","raw_affiliation_strings":["School of Computer Science and Engineering , Sun Yat-sen University , Guangzhou , China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering , Sun Yat-sen University , Guangzhou , China","institution_ids":["https://openalex.org/I157773358"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I157773358"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.698199987411499,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.698199987411499,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.2184000015258789,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10775","display_name":"Generative Adversarial Networks and Image Synthesis","score":0.060600001364946365,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/vision-language-models","display_name":"vision-language models","score":0.8519999980926514},{"id":"https://openalex.org/keywords/diffusion-transformer","display_name":"diffusion transformer","score":0.7329999804496765},{"id":"https://openalex.org/keywords/image-editing","display_name":"image editing","score":0.3319999873638153},{"id":"https://openalex.org/keywords/identity-preservation","display_name":"identity preservation","score":0.375}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.760699987411499},{"id":"https://openalex.org/C2778355321","wikidata":"https://www.wikidata.org/wiki/Q17079427","display_name":"Identity (music)","level":2,"score":0.5602999925613403},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.5537999868392944},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5347999930381775},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.508400022983551},{"id":"https://openalex.org/C2776359362","wikidata":"https://www.wikidata.org/wiki/Q2145286","display_name":"Representation (politics)","level":3,"score":0.4657000005245209},{"id":"https://openalex.org/C66322947","wikidata":"https://www.wikidata.org/wiki/Q11658","display_name":"Transformer","level":3,"score":0.4269999861717224},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.4106000065803528},{"id":"https://openalex.org/C2987933465","wikidata":"https://www.wikidata.org/wiki/Q141130","display_name":"Image manipulation","level":3,"score":0.40209999680519104},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3828999996185303},{"id":"https://openalex.org/C2776674983","wikidata":"https://www.wikidata.org/wiki/Q545981","display_name":"Image editing","level":3,"score":0.34119999408721924},{"id":"https://openalex.org/C9417928","wikidata":"https://www.wikidata.org/wiki/Q1070689","display_name":"Image processing","level":3,"score":0.3188000023365021},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.31459999084472656},{"id":"https://openalex.org/C2776608160","wikidata":"https://www.wikidata.org/wiki/Q4785462","display_name":"Natural (archaeology)","level":2,"score":0.2994999885559082},{"id":"https://openalex.org/C12725497","wikidata":"https://www.wikidata.org/wiki/Q810247","display_name":"Baseline (sea)","level":2,"score":0.27709999680519104},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.2759999930858612}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:arXiv.org:2608.10870","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2608.10870","pdf_url":"https://arxiv.org/pdf/2608.10870","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2608.10870","doi":"https://doi.org/10.48550/arxiv.2608.10870","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2608.10870","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2608.10870","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2608.10870","pdf_url":"https://arxiv.org/pdf/2608.10870","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7202298030.pdf","grobid_xml":"https://content.openalex.org/works/W7202298030.grobid-xml"},"referenced_works_count":9,"referenced_works":["https://openalex.org/W4224035735","https://openalex.org/W4383472654","https://openalex.org/W4385848774","https://openalex.org/W4403347193","https://openalex.org/W4407569734","https://openalex.org/W4414682104","https://openalex.org/W4414929961","https://openalex.org/W4417530939","https://openalex.org/W6966874861"],"related_works":["https://openalex.org/W7172028342","https://openalex.org/W7220653921","https://openalex.org/W4404545521","https://openalex.org/W4417530939","https://openalex.org/W7212990399","https://openalex.org/W7214021323","https://openalex.org/W7136750216","https://openalex.org/W4402727884","https://openalex.org/W7211909107","https://openalex.org/W4417468032"],"abstract_inverted_index":{"Modern":[0],"image":[1,16,113],"editors":[2],"combine":[3],"vision-language":[4],"models":[5],"(VLMs)":[6],"with":[7,50],"diffusion":[8],"transformer":[9],"backbones":[10],"to":[11,18,48,58,138,161],"modify":[12],"a":[13,67],"single":[14],"reference":[15,53,112],"according":[17],"instructions":[19,97],"without":[20,85],"fine-tuning.":[21],"This":[22],"capability":[23],"also":[24],"enables":[25],"unauthorized":[26],"manipulation":[27],"of":[28],"publicly":[29],"released":[30],"images.":[31],"Existing":[32],"inference-time":[33],"defenses":[34],"either":[35],"invalidate":[36],"edits":[37],"through":[38],"conspicuous":[39,86],"corruption,":[40],"thereby":[41,56],"exposing":[42],"the":[43,60,74,79,105,111,119,152,162],"protection,":[44],"or":[45,52,88],"allow":[46],"them":[47],"proceed":[49],"identity":[51,89,168],"content":[54],"drift,":[55],"failing":[57],"prevent":[59],"editing":[61],"behavior":[62],"itself.":[63],"We":[64,100],"instead":[65],"target":[66],"stealthy":[68],"and":[69,83,91,114,125,144,148,169],"harmless":[70],"no-op":[71],"in":[72],"which":[73,103],"requested":[75,94],"edit":[76],"is":[77],"suppressed,":[78],"output":[80],"remains":[81],"natural":[82],"source-preserving":[84],"artifacts":[87],"replacement,":[90],"harmful":[92],"semantics":[93],"by":[95,156],"malicious":[96],"are":[98],"absent.":[99],"propose":[101],"NullEdit,":[102],"targets":[104],"VLM":[106],"representation":[107],"jointly":[108],"formed":[109],"from":[110],"instruction":[115],"before":[116],"it":[117],"conditions":[118],"downstream":[120],"DiT":[121],"backbone.":[122],"Using":[123],"normal-edit":[124],"no-edit":[126],"anchors,":[127],"NullEdit":[128,150],"redirects":[129],"this":[130],"representation,":[131],"while":[132,165],"cross-prompt":[133],"gradient":[134],"averaging":[135],"transfers":[136],"protection":[137],"held":[139],"out":[140],"instructions.":[141],"Across":[142],"Step1X-Edit":[143],"Qwen-Image-Edit":[145],"on":[146,158],"CelebA-HQ":[147],"VGGFace2,":[149],"reduces":[151],"EditReward":[153],"IF":[154],"score":[155],"0.813":[157],"average":[159],"relative":[160],"SOTA":[163],"baseline":[164],"preserving":[166],"subject":[167],"source":[170],"content.":[171]},"counts_by_year":[],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2026-08-13T00:00:00"}