{"id":"https://openalex.org/W4415539382","doi":"https://doi.org/10.1145/3746027.3755112","title":"Latent Diffusion Unlearning: Protecting Against Unauthorized Personalization Through Trajectory Shifted Perturbations","display_name":"Latent Diffusion Unlearning: Protecting Against Unauthorized Personalization Through Trajectory Shifted Perturbations","publication_year":2025,"publication_date":"2025-10-25","ids":{"openalex":"https://openalex.org/W4415539382","doi":"https://doi.org/10.1145/3746027.3755112"},"language":"en","primary_location":{"id":"doi:10.1145/3746027.3755112","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3746027.3755112","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 33rd ACM International Conference on Multimedia","raw_type":"proceedings-article"},"type":"preprint","indexed_in":["arxiv","crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2510.03089","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5087498355","display_name":"Naresh Kumar Devulapally","orcid":"https://orcid.org/0000-0003-3114-1044"},"institutions":[{"id":"https://openalex.org/I63190737","display_name":"University at Buffalo, State University of New York","ror":"https://ror.org/01y64my43","country_code":"US","type":"education","lineage":["https://openalex.org/I63190737"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Naresh Kumar Devulapally","raw_affiliation_strings":["University at Buffalo, The State University of New York, Buffalo, New York, USA"],"raw_orcid":"https://orcid.org/0000-0003-3114-1044","affiliations":[{"raw_affiliation_string":"University at Buffalo, The State University of New York, Buffalo, New York, USA","institution_ids":["https://openalex.org/I63190737"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Shruti Agarwal","orcid":"https://orcid.org/0000-0002-6640-5954"},"institutions":[{"id":"https://openalex.org/I1306409833","display_name":"Adobe Systems (United States)","ror":"https://ror.org/059tvcg64","country_code":"US","type":"company","lineage":["https://openalex.org/I1306409833"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Shruti Agarwal","raw_affiliation_strings":["Adobe Research, San Jose, California, USA"],"raw_orcid":"https://orcid.org/0000-0002-6640-5954","affiliations":[{"raw_affiliation_string":"Adobe Research, San Jose, California, USA","institution_ids":["https://openalex.org/I1306409833"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5035343276","display_name":"Tejas Gokhale","orcid":"https://orcid.org/0000-0002-5593-2804"},"institutions":[{"id":"https://openalex.org/I79272384","display_name":"University of Maryland, Baltimore County","ror":"https://ror.org/02qskvh78","country_code":"US","type":"education","lineage":["https://openalex.org/I79272384"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Tejas Gokhale","raw_affiliation_strings":["University of Maryland, Baltimore County, Baltimore, Maryland, USA"],"raw_orcid":"https://orcid.org/0000-0002-5593-2804","affiliations":[{"raw_affiliation_string":"University of Maryland, Baltimore County, Baltimore, Maryland, USA","institution_ids":["https://openalex.org/I79272384"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5081203502","display_name":"Vishnu Suresh Lokhande","orcid":"https://orcid.org/0000-0002-4354-0125"},"institutions":[{"id":"https://openalex.org/I63190737","display_name":"University at Buffalo, State University of New York","ror":"https://ror.org/01y64my43","country_code":"US","type":"education","lineage":["https://openalex.org/I63190737"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Vishnu Suresh Lokhande","raw_affiliation_strings":["University at Buffalo, The State University of New York, Buffalo, New York, USA"],"raw_orcid":"https://orcid.org/0000-0002-4354-0125","affiliations":[{"raw_affiliation_string":"University at Buffalo, The State University of New York, Buffalo, New York, USA","institution_ids":["https://openalex.org/I63190737"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.14501249,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"11376","last_page":"11384"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9958000183105469,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9958000183105469,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13702","display_name":"Machine Learning in Healthcare","score":0.9883999824523926,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10775","display_name":"Generative Adversarial Networks and Image Synthesis","score":0.9801999926567078,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.6726999878883362},{"id":"https://openalex.org/keywords/personalization","display_name":"Personalization","score":0.597599983215332},{"id":"https://openalex.org/keywords/fidelity","display_name":"Fidelity","score":0.5005999803543091},{"id":"https://openalex.org/keywords/high-fidelity","display_name":"High fidelity","score":0.424699991941452},{"id":"https://openalex.org/keywords/noise-reduction","display_name":"Noise reduction","score":0.36489999294281006},{"id":"https://openalex.org/keywords/bayesian-probability","display_name":"Bayesian probability","score":0.36329999566078186},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.3617999851703644},{"id":"https://openalex.org/keywords/space-partitioning","display_name":"Space partitioning","score":0.3393000066280365}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7253999710083008},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.6726999878883362},{"id":"https://openalex.org/C183003079","wikidata":"https://www.wikidata.org/wiki/Q1000371","display_name":"Personalization","level":2,"score":0.597599983215332},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5016000270843506},{"id":"https://openalex.org/C2776459999","wikidata":"https://www.wikidata.org/wiki/Q2119376","display_name":"Fidelity","level":2,"score":0.5005999803543091},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.49309998750686646},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4580000042915344},{"id":"https://openalex.org/C113364801","wikidata":"https://www.wikidata.org/wiki/Q26674","display_name":"High fidelity","level":2,"score":0.424699991941452},{"id":"https://openalex.org/C163294075","wikidata":"https://www.wikidata.org/wiki/Q581861","display_name":"Noise reduction","level":2,"score":0.36489999294281006},{"id":"https://openalex.org/C107673813","wikidata":"https://www.wikidata.org/wiki/Q812534","display_name":"Bayesian probability","level":2,"score":0.36329999566078186},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.3617999851703644},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.35589998960494995},{"id":"https://openalex.org/C13670688","wikidata":"https://www.wikidata.org/wiki/Q3500548","display_name":"Space partitioning","level":2,"score":0.3393000066280365},{"id":"https://openalex.org/C1893757","wikidata":"https://www.wikidata.org/wiki/Q3653001","display_name":"Inversion (geology)","level":3,"score":0.3384000062942505},{"id":"https://openalex.org/C152124472","wikidata":"https://www.wikidata.org/wiki/Q1204361","display_name":"Redundancy (engineering)","level":2,"score":0.3199999928474426},{"id":"https://openalex.org/C160920958","wikidata":"https://www.wikidata.org/wiki/Q7662746","display_name":"Synthetic data","level":2,"score":0.311599999666214},{"id":"https://openalex.org/C167966045","wikidata":"https://www.wikidata.org/wiki/Q5532625","display_name":"Generative model","level":3,"score":0.29260000586509705},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.28870001435279846},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.2671999931335449},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.26339998841285706},{"id":"https://openalex.org/C83665646","wikidata":"https://www.wikidata.org/wiki/Q42139305","display_name":"Feature vector","level":2,"score":0.26109999418258667},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.25529998540878296},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.25290000438690186}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3746027.3755112","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3746027.3755112","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 33rd ACM International Conference on Multimedia","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:2510.03089","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2510.03089","pdf_url":"https://arxiv.org/pdf/2510.03089","source":{"id":"https://openalex.org/S4393918464","display_name":"ArXiv.org","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2510.03089","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2510.03089","pdf_url":"https://arxiv.org/pdf/2510.03089","source":{"id":"https://openalex.org/S4393918464","display_name":"ArXiv.org","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":12,"referenced_works":["https://openalex.org/W1901129140","https://openalex.org/W1982471090","https://openalex.org/W2020273280","https://openalex.org/W2888457764","https://openalex.org/W2963839617","https://openalex.org/W3034552680","https://openalex.org/W3096831136","https://openalex.org/W4312933868","https://openalex.org/W4382462760","https://openalex.org/W4386072096","https://openalex.org/W4386076532","https://openalex.org/W4402727293"],"related_works":[],"abstract_inverted_index":{"Text-to-image":[0],"diffusion":[1,100,119],"models":[2],"have":[3,65],"demonstrated":[4],"remarkable":[5],"effectiveness":[6,23,217],"in":[7,71,77,193,218],"rapid":[8],"and":[9,37,45,81,107,142,163,204,206],"high-fidelity":[10],"personalization,":[11],"even":[12],"when":[13],"provided":[14],"with":[15,79],"only":[16],"a":[17,88,161],"few":[18],"user":[19],"images.":[20],"However,":[21],"the":[22,48,72,96,111,115,126,134,153],"of":[24,50,99,114,118,155],"personalization":[25,143],"techniques":[26,58],"has":[27,59],"lead":[28],"to":[29,133,140,178],"concerns":[30],"regarding":[31],"data":[32],"privacy,":[33],"intellectual":[34],"property":[35],"protection,":[36],"unauthorized":[38,43,167],"usage.":[39],"To":[40],"mitigate":[41],"such":[42],"usage":[44],"model":[46,168],"replication,":[47],"idea":[49],"generating":[51],"''unlearnable''":[52],"training":[53],"samples":[54],"utilizing":[55],"image":[56],"poisoning":[57],"emerged.":[60],"Existing":[61],"methods":[62],"for":[63],"this":[64,84],"limited":[66],"imperceptibility":[67,194],"as":[68],"they":[69],"operate":[70],"pixel":[73],"space":[74,98],"which":[75],"results":[76],"images":[78,128],"noise":[80],"artifacts.":[82],"In":[83],"work,":[85],"we":[86],"propose":[87],"novel":[89],"model-based":[90],"perturbation":[91],"strategy":[92],"that":[93,125,187],"operates":[94],"within":[95],"latent":[97],"models.":[101,120,147],"Our":[102],"method":[103,189],"alternates":[104],"between":[105],"denoising":[106,116],"inversion":[108,141,183],"while":[109,137],"modifying":[110],"starting":[112],"point":[113],"trajectory:":[117],"This":[121,148],"trajectory-shifted":[122],"sampling":[123],"ensures":[124],"perturbed":[127],"maintain":[129],"high":[130],"visual":[131],"fidelity":[132],"original":[135],"inputs":[136],"being":[138],"resistant":[139],"by":[144],"downstream":[145],"generative":[146],"approach":[149,173],"integrates":[150],"unlearnability":[151],"into":[152],"framework":[154],"Latent":[156],"Diffusion":[157],"Models":[158],"(LDMs),":[159],"enabling":[160],"practical":[162],"imperceptible":[164],"defense":[165],"against":[166,181],"adaptation.":[169],"We":[170],"validate":[171],"our":[172,188],"on":[174,198,209],"four":[175],"benchmark":[176],"datasets":[177],"demonstrate":[179,186],"robustness":[180,207],"state-of-the-art":[182],"attacks.":[184],"Results":[185],"achieves":[190],"significant":[191],"improvements":[192],"(~8%":[195],"-":[196],"10%":[197],"perceptual":[199],"metrics":[200],"including":[201],"PSNR,":[202],"SSIM,":[203],"FID)":[205],"(~10%":[208],"average":[210],"across":[211],"five":[212],"adversarial":[213],"settings),":[214],"highlighting":[215],"its":[216],"safeguarding":[219],"sensitive":[220],"data.":[221],"https://github.com/naresh-ub/unlearnable_samples.":[222]},"counts_by_year":[],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-25T00:00:00"}