{"id":"https://openalex.org/W4416034005","doi":"https://doi.org/10.18653/v1/2025.findings-emnlp.1200","title":"Misalignment Attack on Text-to-Image Models via Text Embedding Optimization and Inversion","display_name":"Misalignment Attack on Text-to-Image Models via Text Embedding Optimization and Inversion","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W4416034005","doi":"https://doi.org/10.18653/v1/2025.findings-emnlp.1200"},"language":null,"primary_location":{"id":"doi:10.18653/v1/2025.findings-emnlp.1200","is_oa":true,"landing_page_url":"https://doi.org/10.18653/v1/2025.findings-emnlp.1200","pdf_url":"https://aclanthology.org/2025.findings-emnlp.1200.pdf","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Findings of the Association for Computational Linguistics: EMNLP 2025","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://aclanthology.org/2025.findings-emnlp.1200.pdf","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5003875114","display_name":"Ziyong Du","orcid":"https://orcid.org/0009-0004-4304-0974"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhijie Du","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5078220957","display_name":"Daizong Liu","orcid":"https://orcid.org/0000-0001-8179-4508"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Daizong Liu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":null,"display_name":"Pan Zhou","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Pan Zhou","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"22015","last_page":"22032"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.8234999775886536,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.8234999775886536,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10775","display_name":"Generative Adversarial Networks and Image Synthesis","score":0.03840000182390213,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12262","display_name":"Hate Speech and Cyberbullying Detection","score":0.025200000032782555,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/inversion","display_name":"Inversion (geology)","score":0.5674999952316284},{"id":"https://openalex.org/keywords/embedding","display_name":"Embedding","score":0.45399999618530273},{"id":"https://openalex.org/keywords/minification","display_name":"Minification","score":0.29179999232292175},{"id":"https://openalex.org/keywords/computation","display_name":"Computation","score":0.2734000086784363},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.2732999920845032}],"concepts":[{"id":"https://openalex.org/C1893757","wikidata":"https://www.wikidata.org/wiki/Q3653001","display_name":"Inversion (geology)","level":3,"score":0.5674999952316284},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5148000121116638},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.5123000144958496},{"id":"https://openalex.org/C41608201","wikidata":"https://www.wikidata.org/wiki/Q980509","display_name":"Embedding","level":2,"score":0.45399999618530273},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.30809998512268066},{"id":"https://openalex.org/C147764199","wikidata":"https://www.wikidata.org/wiki/Q6865248","display_name":"Minification","level":2,"score":0.29179999232292175},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.28540000319480896},{"id":"https://openalex.org/C45374587","wikidata":"https://www.wikidata.org/wiki/Q12525525","display_name":"Computation","level":2,"score":0.2734000086784363},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.2732999920845032},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.2700999975204468},{"id":"https://openalex.org/C137836250","wikidata":"https://www.wikidata.org/wiki/Q984063","display_name":"Optimization problem","level":2,"score":0.26840001344680786},{"id":"https://openalex.org/C135252773","wikidata":"https://www.wikidata.org/wiki/Q1567213","display_name":"Inverse problem","level":2,"score":0.2678999900817871},{"id":"https://openalex.org/C99498987","wikidata":"https://www.wikidata.org/wiki/Q2210247","display_name":"Noise (video)","level":3,"score":0.257999986410141}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.18653/v1/2025.findings-emnlp.1200","is_oa":true,"landing_page_url":"https://doi.org/10.18653/v1/2025.findings-emnlp.1200","pdf_url":"https://aclanthology.org/2025.findings-emnlp.1200.pdf","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Findings of the Association for Computational Linguistics: EMNLP 2025","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.18653/v1/2025.findings-emnlp.1200","is_oa":true,"landing_page_url":"https://doi.org/10.18653/v1/2025.findings-emnlp.1200","pdf_url":"https://aclanthology.org/2025.findings-emnlp.1200.pdf","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Findings of the Association for Computational Linguistics: EMNLP 2025","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G664739573","display_name":null,"funder_award_id":"62476107","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4416034005.pdf","grobid_xml":"https://content.openalex.org/works/W4416034005.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Text":[0],"embedding":[1],"serves":[2],"not":[3],"only":[4],"as":[5,23],"a":[6,16,138],"core":[7],"component":[8],"of":[9,64,80,99,114],"modern":[10],"NLP":[11],"models":[12,116,135],"but":[13],"also":[14,40],"plays":[15],"pivotal":[17],"role":[18],"in":[19,45,132],"multimodal":[20,108,115],"systems":[21],"such":[22],"text-to-image":[24,147],"(T2I)":[25],"models,":[26,47],"significantly":[27],"facilitating":[28],"user-friendly":[29],"image":[30],"generation":[31,148],"through":[32],"natural":[33],"language":[34],"instructions.However,":[35],"while":[36],"offering":[37],"convenience,":[38],"it":[39],"introduces":[41],"additional":[42],"risks.Misalignment":[43],"issues":[44],"T2I":[46,134],"whether":[48],"caused":[49],"by":[50],"unintentional":[51],"user":[52],"inputs":[53],"or":[54],"targeted":[55],"attacks,":[56,110],"can":[57],"negatively":[58],"impact":[59],"the":[60,75,86,112,124],"reliability":[61],"and":[62,77,91,107,136,145],"ethics":[63],"these":[65],"models.In":[66],"this":[67],"paper,":[68],"we":[69],"introduce":[70],"TEOI,":[71],"which":[72],"fully":[73],"considers":[74],"continuity":[76],"distribution":[78],"characteristics":[79],"text":[81,120,130],"embeddings.The":[82],"framework":[83,103],"directly":[84],"optimizes":[85],"embeddings":[87],"using":[88],"gradient-based":[89],"methods":[90],"then":[92],"inverts":[93],"them":[94],"to":[95],"obtain":[96],"misaligned":[97],"prompts":[98],"discrete":[100],"tokens.The":[101],"TEOI":[102],"supports":[104],"both":[105],"text-modal":[106],"misalignment":[109],"revealing":[111],"vulnerabilities":[113],"that":[117],"rely":[118],"on":[119],"embeddings.Our":[121],"work":[122],"highlights":[123],"potential":[125],"risks":[126],"associated":[127],"with":[128],"embedding-based":[129],"representations":[131],"prevailing":[133],"provides":[137],"foundation":[139],"for":[140],"further":[141],"research":[142],"into":[143],"robust":[144],"secure":[146],"systems.":[149]},"counts_by_year":[],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-11-08T00:00:00"}