{"id":"https://openalex.org/W7223874009","doi":"https://doi.org/10.48550/arxiv.2610.35566","title":"Copying As Defense: Protecting Images from Editing By Eliciting Model Copying","display_name":"Copying As Defense: Protecting Images from Editing By Eliciting Model Copying","publication_year":2026,"publication_date":"2026-10-26","ids":{"openalex":"https://openalex.org/W7223874009","doi":"https://doi.org/10.48550/arxiv.2610.35566"},"language":"en","primary_location":{"id":"pmh:oai:arXiv.org:2610.35566","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2610.35566","pdf_url":"https://arxiv.org/pdf/2610.35566","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"volume":null,"type":"preprint","indexed_in":["arxiv","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2610.35566","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5035721377","display_name":"Salma Abdel Magid","orcid":"https://orcid.org/0000-0001-5791-8128","observed_orcids":["https://orcid.org/0000-0001-5791-8128"]},"institutions":[{"id":"https://openalex.org/I20089843","display_name":"Princeton University","ror":"https://ror.org/00hx57361","country_code":"US","type":"education","lineage":["https://openalex.org/I20089843"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Magid, Salma Abdel","raw_affiliation_strings":["Princeton University ,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Princeton University ,","institution_ids":["https://openalex.org/I20089843"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5067167236","display_name":"Sanghyuk Chun","orcid":"https://orcid.org/0000-0002-4533-2610","observed_orcids":["https://orcid.org/0000-0002-4533-2610"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chun, Sanghyuk","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5054164497","display_name":"Eric Slyman","orcid":"https://orcid.org/0000-0002-2481-7942","observed_orcids":["https://orcid.org/0000-0002-2481-7942"]},"institutions":[{"id":"https://openalex.org/I1306409833","display_name":"Adobe Systems (United States)","ror":"https://ror.org/059tvcg64","country_code":"US","type":"company","lineage":["https://openalex.org/I1306409833"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Slyman, Eric","raw_affiliation_strings":["Adobe Research"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Adobe Research","institution_ids":["https://openalex.org/I1306409833"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5047193437","display_name":"Kushal Kafle","orcid":"https://orcid.org/0000-0002-0847-7861","observed_orcids":["https://orcid.org/0000-0002-0847-7861"]},"institutions":[{"id":"https://openalex.org/I1306409833","display_name":"Adobe Systems (United States)","ror":"https://ror.org/059tvcg64","country_code":"US","type":"company","lineage":["https://openalex.org/I1306409833"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Kafle, Kushal","raw_affiliation_strings":["Adobe Research"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Adobe Research","institution_ids":["https://openalex.org/I1306409833"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5022811687","display_name":"Olga Russakovsky","orcid":"https://orcid.org/0000-0001-5272-3241","observed_orcids":["https://orcid.org/0000-0001-5272-3241"]},"institutions":[{"id":"https://openalex.org/I20089843","display_name":"Princeton University","ror":"https://ror.org/00hx57361","country_code":"US","type":"education","lineage":["https://openalex.org/I20089843"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Russakovsky, Olga","raw_affiliation_strings":["Princeton University ,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Princeton University ,","institution_ids":["https://openalex.org/I20089843"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.5464000105857849,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.5464000105857849,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.33500000834465027,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10775","display_name":"Generative Adversarial Networks and Image Synthesis","score":0.08749999850988388,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/diffusion-transformer","display_name":"diffusion transformer","score":0.7200000286102295},{"id":"https://openalex.org/keywords/attention-manipulation","display_name":"attention manipulation","score":0.48100000619888306},{"id":"https://openalex.org/keywords/image-editing","display_name":"image editing","score":0.4050000011920929}],"concepts":[{"id":"https://openalex.org/C2779151265","wikidata":"https://www.wikidata.org/wiki/Q1156791","display_name":"Copying","level":2,"score":0.7631000280380249},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7157999873161316},{"id":"https://openalex.org/C66322947","wikidata":"https://www.wikidata.org/wiki/Q11658","display_name":"Transformer","level":3,"score":0.5271000266075134},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.45969998836517334},{"id":"https://openalex.org/C165021410","wikidata":"https://www.wikidata.org/wiki/Q55564","display_name":"Lossy compression","level":2,"score":0.4207000136375427},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.4187999963760376},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.3970000147819519},{"id":"https://openalex.org/C160633673","wikidata":"https://www.wikidata.org/wiki/Q355198","display_name":"Pixel","level":2,"score":0.3781999945640564},{"id":"https://openalex.org/C135598885","wikidata":"https://www.wikidata.org/wiki/Q1366302","display_name":"Row","level":2,"score":0.36809998750686646},{"id":"https://openalex.org/C2776674983","wikidata":"https://www.wikidata.org/wiki/Q545981","display_name":"Image editing","level":3,"score":0.3546000123023987},{"id":"https://openalex.org/C65377053","wikidata":"https://www.wikidata.org/wiki/Q1572121","display_name":"Image file formats","level":3,"score":0.3127000033855438},{"id":"https://openalex.org/C9417928","wikidata":"https://www.wikidata.org/wiki/Q1070689","display_name":"Image processing","level":3,"score":0.29159998893737793},{"id":"https://openalex.org/C2776654903","wikidata":"https://www.wikidata.org/wiki/Q2601463","display_name":"SAFER","level":2,"score":0.28459998965263367},{"id":"https://openalex.org/C121684516","wikidata":"https://www.wikidata.org/wiki/Q7600677","display_name":"Computer graphics (images)","level":1,"score":0.2768000066280365},{"id":"https://openalex.org/C43711488","wikidata":"https://www.wikidata.org/wiki/Q7534783","display_name":"Skew","level":2,"score":0.27399998903274536},{"id":"https://openalex.org/C113954288","wikidata":"https://www.wikidata.org/wiki/Q186885","display_name":"Timestamp","level":2,"score":0.2671000063419342},{"id":"https://openalex.org/C12725497","wikidata":"https://www.wikidata.org/wiki/Q810247","display_name":"Baseline (sea)","level":2,"score":0.26109999418258667}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:arXiv.org:2610.35566","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2610.35566","pdf_url":"https://arxiv.org/pdf/2610.35566","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2610.35566","doi":"https://doi.org/10.48550/arxiv.2610.35566","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2610.35566","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2610.35566","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2610.35566","pdf_url":"https://arxiv.org/pdf/2610.35566","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7223874009.pdf","grobid_xml":"https://content.openalex.org/works/W7223874009.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W4417530939","https://openalex.org/W7172028342","https://openalex.org/W4417468005","https://openalex.org/W7202298030","https://openalex.org/W7133535935","https://openalex.org/W7136750216","https://openalex.org/W4403347193","https://openalex.org/W4416112271","https://openalex.org/W4402727884","https://openalex.org/W4415092886"],"abstract_inverted_index":{"Image":[0],"editors":[1,51,215],"built":[2],"on":[3,127,163,225],"diffusion":[4],"transformers":[5],"(DiTs),":[6],"such":[7,34],"as":[8,152],"Flux":[9],"Kontext,":[10],"make":[11,52],"it":[12,113],"possible":[13],"to":[14,32,57,68,107,114,139,147,192,201,228,240],"turn":[15],"a":[16,20,83,133,153,230,236],"single":[17],"photograph":[18],"into":[19],"convincing":[21],"manipulated":[22],"image,":[23],"including":[24],"harmful":[25],"and":[26,76,195,216,234],"non-consensual":[27],"edits.":[28],"Proactive":[29],"defenses":[30,47],"aim":[31],"prevent":[33],"manipulations":[35],"by":[36,235],"adding":[37],"an":[38,42],"imperceptible":[39],"perturbation":[40],"before":[41],"image":[43,87,130],"is":[44,99,137,247],"shared.":[45],"Existing":[46],"for":[48],"DiT-based":[49],"in-context":[50],"the":[53,58,65,70,74,91,96,105,109,128,141,145,159,189,193,199,208,242],"output":[54],"attend":[55],"less":[56],"protected":[59],"reference":[60,129,186],"image.":[61],"But":[62],"this":[63,164],"leaves":[64],"model":[66,106,146],"free":[67],"follow":[69],"edit":[71,221],"instruction":[72],"using":[73],"text":[75,194],"its":[77,149],"own":[78],"generated":[79,196],"tokens,":[80],"often":[81,151],"producing":[82],"new,":[84],"weakly":[85],"grounded":[86],"rather":[88,156],"than":[89,157,255],"preventing":[90],"edit.":[92],"We":[93],"find":[94],"that":[95,123],"opposite":[97],"strategy":[98],"more":[100],"effective:":[101],"instead":[102],"of":[103],"leading":[104],"ignore":[108],"reference,":[110],"we":[111,121,166],"encourage":[112],"copy":[115],"it.":[116],"Through":[117],"controlled":[118],"attention":[119,126,174,181,187,190],"interventions,":[120],"show":[122],"concentrating":[124],"target-token":[125],"in":[131,176],"only":[132],"few":[134],"early":[135,177,202],"blocks":[136,203],"sufficient":[138],"collapse":[140],"editing":[142],"behavior,":[143],"causing":[144],"reproduce":[148],"input,":[150],"lossy":[154],"copy,":[155],"execute":[158],"requested":[160],"transformation.":[161],"Based":[162],"insight,":[165],"introduce":[167],"Copying-as-Defense":[168],"(CaD),":[169],"which":[170],"maximizes":[171],"per-token":[172],"target-to-reference":[173],"mass":[175],"transformer":[178],"blocks.":[179],"Since":[180],"rows":[182],"are":[183],"normalized,":[184],"increasing":[185],"suppresses":[188],"allocated":[191],"canvas.":[197],"Restricting":[198],"objective":[200],"also":[204,248],"lets":[205],"us":[206],"truncate":[207],"backpropagation":[209],"path,":[210],"keeping":[211],"optimization":[212,253],"cheap.":[213],"Across":[214],"benchmarks,":[217],"CaD":[218,246],"reduces":[219],"average":[220],"success":[222],"from":[223],"81.4%":[224],"unprotected":[226],"images":[227],"24.0%,":[229],"70.6%":[231],"relative":[232,239],"reduction,":[233],"further":[237],"44.3%":[238],"DeContext,":[241],"strongest":[243],"baseline":[244],"(43.0%).":[245],"roughly":[249],"1.8-2.0x":[250],"faster":[251],"per":[252],"step":[254],"comparable":[256],"methods.":[257]},"counts_by_year":[],"updated_date":"2026-10-30T12:39:25.321706","created_date":"2026-10-28T00:00:00"}