{"id":"https://openalex.org/W4416430865","doi":"https://doi.org/10.1109/tdsc.2025.3621435","title":"FOOLSDEDIT: Deceptively Steering Your Edits Towards Targeted Attribute-Aware Distribution","display_name":"FOOLSDEDIT: Deceptively Steering Your Edits Towards Targeted Attribute-Aware Distribution","publication_year":2025,"publication_date":"2025-11-20","ids":{"openalex":"https://openalex.org/W4416430865","doi":"https://doi.org/10.1109/tdsc.2025.3621435"},"language":null,"primary_location":{"id":"doi:10.1109/tdsc.2025.3621435","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2025.3621435","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Qi Zhou","orcid":"https://orcid.org/0009-0006-2834-2821"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qi Zhou","raw_affiliation_strings":["College of Control Science and Engineering, Zhejiang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0009-0006-2834-2821","affiliations":[{"raw_affiliation_string":"College of Control Science and Engineering, Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Dongxia Wang","orcid":"https://orcid.org/0000-0001-9812-3911"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Dongxia Wang","raw_affiliation_strings":["College of Control Science and Engineering, Zhejiang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0000-0001-9812-3911","affiliations":[{"raw_affiliation_string":"College of Control Science and Engineering, Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101674538","display_name":"Tianlin Li","orcid":"https://orcid.org/0000-0002-2207-1622"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Tianlin Li","raw_affiliation_strings":["College of Computing and Data Science, Nanyang Technological University, Singapore"],"raw_orcid":"https://orcid.org/0000-0002-2207-1622","affiliations":[{"raw_affiliation_string":"College of Computing and Data Science, Nanyang Technological University, Singapore","institution_ids":["https://openalex.org/I172675005"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101135017","display_name":"Zhi-Hong Xu","orcid":"https://orcid.org/0009-0003-5657-6658"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhihong Xu","raw_affiliation_strings":["College of Control Science and Engineering, Zhejiang University, Hangzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Control Science and Engineering, Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Yang Liu","orcid":"https://orcid.org/0000-0001-7300-9215"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Yang Liu","raw_affiliation_strings":["College of Computing and Data Science, Nanyang Technological University, Singapore"],"raw_orcid":"https://orcid.org/0000-0001-7300-9215","affiliations":[{"raw_affiliation_string":"College of Computing and Data Science, Nanyang Technological University, Singapore","institution_ids":["https://openalex.org/I172675005"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5105297718","display_name":"Kui Ren","orcid":"https://orcid.org/0000-0002-1969-2591"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Kui Ren","raw_affiliation_strings":["State Key Laboratory of Blockchain and Data Security, Zhejiang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-1969-2591","affiliations":[{"raw_affiliation_string":"State Key Laboratory of Blockchain and Data Security, Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5062687402","display_name":"Wenhai Wang","orcid":"https://orcid.org/0000-0003-3707-6546"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wenhai Wang","raw_affiliation_strings":["College of Control Science and Engineering, Zhejiang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0000-0003-3707-6546","affiliations":[{"raw_affiliation_string":"College of Control Science and Engineering, Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"last","author":{"id":null,"display_name":"Qing Guo","orcid":"https://orcid.org/0000-0003-0974-9299"},"institutions":[{"id":"https://openalex.org/I205237279","display_name":"Nankai University","ror":"https://ror.org/01y1kjr75","country_code":"CN","type":"education","lineage":["https://openalex.org/I205237279"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qing Guo","raw_affiliation_strings":["VCIP, College of Computer Science, Nankai University, Tianjin, China"],"raw_orcid":"https://orcid.org/0000-0003-0974-9299","affiliations":[{"raw_affiliation_string":"VCIP, College of Computer Science, Nankai University, Tianjin, China","institution_ids":["https://openalex.org/I205237279"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":8,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.17010198,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"23","issue":"2","first_page":"3303","last_page":"3315"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.4625000059604645,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.4625000059604645,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10775","display_name":"Generative Adversarial Networks and Image Synthesis","score":0.3747999966144562,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10883","display_name":"Ethics and Social Impacts of AI","score":0.013399999588727951,"subfield":{"id":"https://openalex.org/subfields/3311","display_name":"Safety Research"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/focus","display_name":"Focus (optics)","score":0.7037000060081482},{"id":"https://openalex.org/keywords/noise","display_name":"Noise (video)","score":0.6312000155448914},{"id":"https://openalex.org/keywords/motion-blur","display_name":"Motion blur","score":0.5364999771118164},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.5297999978065491},{"id":"https://openalex.org/keywords/motion","display_name":"Motion (physics)","score":0.5175999999046326},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.4618000090122223},{"id":"https://openalex.org/keywords/generative-model","display_name":"Generative model","score":0.4474000036716461},{"id":"https://openalex.org/keywords/image-editing","display_name":"Image editing","score":0.424699991941452},{"id":"https://openalex.org/keywords/generative-adversarial-network","display_name":"Generative adversarial network","score":0.39340001344680786}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8382999897003174},{"id":"https://openalex.org/C192209626","wikidata":"https://www.wikidata.org/wiki/Q190909","display_name":"Focus (optics)","level":2,"score":0.7037000060081482},{"id":"https://openalex.org/C99498987","wikidata":"https://www.wikidata.org/wiki/Q2210247","display_name":"Noise (video)","level":3,"score":0.6312000155448914},{"id":"https://openalex.org/C2777708103","wikidata":"https://www.wikidata.org/wiki/Q852589","display_name":"Motion blur","level":3,"score":0.5364999771118164},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.5297999978065491},{"id":"https://openalex.org/C104114177","wikidata":"https://www.wikidata.org/wiki/Q79782","display_name":"Motion (physics)","level":2,"score":0.5175999999046326},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4805999994277954},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.4618000090122223},{"id":"https://openalex.org/C167966045","wikidata":"https://www.wikidata.org/wiki/Q5532625","display_name":"Generative model","level":3,"score":0.4474000036716461},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.43650001287460327},{"id":"https://openalex.org/C2776674983","wikidata":"https://www.wikidata.org/wiki/Q545981","display_name":"Image editing","level":3,"score":0.424699991941452},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.40779998898506165},{"id":"https://openalex.org/C2988773926","wikidata":"https://www.wikidata.org/wiki/Q25104379","display_name":"Generative adversarial network","level":3,"score":0.39340001344680786},{"id":"https://openalex.org/C12713177","wikidata":"https://www.wikidata.org/wiki/Q1900281","display_name":"Perspective (graphical)","level":2,"score":0.3912000060081482},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.38040000200271606},{"id":"https://openalex.org/C160920958","wikidata":"https://www.wikidata.org/wiki/Q7662746","display_name":"Synthetic data","level":2,"score":0.37549999356269836},{"id":"https://openalex.org/C39890363","wikidata":"https://www.wikidata.org/wiki/Q36108","display_name":"Generative grammar","level":2,"score":0.34450000524520874},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.3441999852657318},{"id":"https://openalex.org/C110121322","wikidata":"https://www.wikidata.org/wiki/Q865811","display_name":"Distribution (mathematics)","level":2,"score":0.33230000734329224},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.32339999079704285},{"id":"https://openalex.org/C120936955","wikidata":"https://www.wikidata.org/wiki/Q2155640","display_name":"Empirical research","level":2,"score":0.31150001287460327},{"id":"https://openalex.org/C75684735","wikidata":"https://www.wikidata.org/wiki/Q858810","display_name":"Big data","level":2,"score":0.29170000553131104},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.28999999165534973},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.2888999879360199},{"id":"https://openalex.org/C162307627","wikidata":"https://www.wikidata.org/wiki/Q204833","display_name":"Enhanced Data Rates for GSM Evolution","level":2,"score":0.27140000462532043},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.2621000111103058},{"id":"https://openalex.org/C184297639","wikidata":"https://www.wikidata.org/wiki/Q177765","display_name":"Biometrics","level":2,"score":0.259799987077713},{"id":"https://openalex.org/C526921623","wikidata":"https://www.wikidata.org/wiki/Q190117","display_name":"Automotive industry","level":2,"score":0.258899986743927}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2025.3621435","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2025.3621435","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G3372935298","display_name":null,"funder_award_id":"ICT2024C01","funder_id":"https://openalex.org/F4320326952","funder_display_name":"State Key Laboratory of Industrial Control Technology"},{"id":"https://openalex.org/G8498704055","display_name":null,"funder_award_id":"2025ZFJH02","funder_id":"https://openalex.org/F4320335787","funder_display_name":"Fundamental Research Funds for the Central Universities"}],"funders":[{"id":"https://openalex.org/F4320320671","display_name":"National Research Foundation","ror":"https://ror.org/05s0g1g46"},{"id":"https://openalex.org/F4320326952","display_name":"State Key Laboratory of Industrial Control Technology","ror":null},{"id":"https://openalex.org/F4320335787","display_name":"Fundamental Research Funds for the Central Universities","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":30,"referenced_works":["https://openalex.org/W2102166818","https://openalex.org/W2194775991","https://openalex.org/W2605124728","https://openalex.org/W3034521057","https://openalex.org/W3035447285","https://openalex.org/W3094821564","https://openalex.org/W3120485916","https://openalex.org/W3164563754","https://openalex.org/W3191805365","https://openalex.org/W3192400886","https://openalex.org/W3216352822","https://openalex.org/W4220699706","https://openalex.org/W4312529288","https://openalex.org/W4312740349","https://openalex.org/W4312933868","https://openalex.org/W4379959055","https://openalex.org/W4385570739","https://openalex.org/W4386057725","https://openalex.org/W4386066723","https://openalex.org/W4386071537","https://openalex.org/W4386072096","https://openalex.org/W4386076215","https://openalex.org/W4390872723","https://openalex.org/W4390873054","https://openalex.org/W4393078930","https://openalex.org/W4401043876","https://openalex.org/W4401224724","https://openalex.org/W4402716462","https://openalex.org/W7133192728","https://openalex.org/W7133198434"],"related_works":[],"abstract_inverted_index":{"Guided":[0],"image":[1,29,265],"synthesis":[2],"methods,":[3],"like":[4,116],"SDEdit":[5,101,220,249],"based":[6],"on":[7,28,205,252,275],"the":[8,36,90,120,123,151,156,232,253,270],"diffusion":[9,37],"model,":[10],"excel":[11],"at":[12],"creating":[13],"realistic":[14],"images":[15,55],"from":[16,81,196],"user":[17,58,66],"inputs":[18],"such":[19,140],"as":[20,141],"stroke":[21,69],"paintings.":[22],"However,":[23],"existing":[24],"efforts":[25],"mainly":[26],"focus":[27],"quality,":[30],"often":[31],"overlooking":[32],"a":[33,40,48,65,68,108,183],"key":[34],"point:":[35],"model":[38,192,276],"represents":[39],"data":[41,104,255],"distribution,":[42],"not":[43],"individual":[44],"images.":[45,153],"This":[46],"introduces":[47],"low":[49],"but":[50],"critical":[51,261],"chance":[52],"of":[53,122,150,248],"generating":[54],"that":[56,129,215,238],"contradict":[57],"intentions,":[59],"raising":[60],"ethical":[61],"concerns.":[62],"For":[63],"example,":[64],"inputting":[67],"painting":[70],"with":[71,75,107],"female":[72],"characteristics":[73],"might,":[74],"some":[76],"probability,":[77],"get":[78],"male":[79],"faces":[80],"SDEdit.":[82,170],"To":[83],"expose":[84],"this":[85],"potential":[86],"vulnerability,":[87],"we":[88,158],"propose":[89],"Targeted":[91],"Attribute":[92],"Generative":[93],"Attack":[94],"(TAGA),":[95],"whose":[96],"objective":[97],"is":[98,189],"to":[99,102,134,165,173,179,191,221],"force":[100],"generate":[103,222],"distributions":[105],"aligned":[106],"specified":[109],"attribute":[110,115,121],"(<italic":[111],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[112,163,217,240],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">i.e.,</i>":[113],"targeted":[114,223],"male),":[117],"without":[118],"changing":[119],"input":[124],"image.":[125],"Empirical":[126],"studies":[127],"reveal":[128],"traditional":[130],"adversarial":[131],"noise":[132],"struggles":[133],"achieve":[135,166],"TAGA,":[136],"while":[137],"natural":[138],"perturbations":[139],"exposure":[142,198],"and":[143,199,210,268,278],"motion":[144,200],"blur":[145,201],"can":[146],"easily":[147],"influence":[148],"attributes":[149,213],"generated":[152,254],"Inspired":[154],"by":[155],"observation,":[157],"design":[159],"attack":[160,186],"method":[161],"<sc":[162,216,239],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">FOOLSDEDIT</small>":[164,218,241],"effective":[167,229],"TAGA":[168,230],"against":[169],"It":[171],"aims":[172],"search":[174],"for":[175,272],"an":[176],"optimized":[177],"strategy":[178],"execute":[180],"attacks":[181],"within":[182],"weighted":[184],"graph-based":[185],"architecture,":[187],"which":[188,250],"formulated":[190],"diverse":[193],"strategies":[194],"derived":[195],"both":[197],"perturbations.":[202],"Comprehensive":[203],"experiments":[204],"two":[206],"commonly":[207],"used":[208],"datasets":[209],"three":[211],"social":[212],"present":[214],"forces":[219],"attribute-aware":[224],"distributions,":[225],"achieving":[226],"significantly":[227],"more":[228],"than":[231],"baselines.":[233],"We":[234],"also":[235],"validated":[236],"empirically":[237],"could":[242],"induce":[243],"bias":[244,279],"in":[245,263],"downstream":[246],"tasks":[247],"rely":[251],"under":[256],"attack.":[257],"Our":[258],"work":[259],"reveals":[260],"vulnerabilities":[262],"diffusion-based":[264],"generation":[266],"models":[267],"paves":[269],"way":[271],"future":[273],"research":[274],"auditing":[277],"mitigation.":[280]},"counts_by_year":[],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-11-20T00:00:00"}