{"id":"https://openalex.org/W7148935275","doi":"https://doi.org/10.48550/arxiv.2604.01635","title":"Diffusion-Guided Adversarial Perturbation Injection for Generalizable Defense Against Facial Manipulations","display_name":"Diffusion-Guided Adversarial Perturbation Injection for Generalizable Defense Against Facial Manipulations","publication_year":2026,"publication_date":"2026-04-02","ids":{"openalex":"https://openalex.org/W7148935275","doi":"https://doi.org/10.48550/arxiv.2604.01635"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2604.01635","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.01635","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2604.01635","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5132878763","display_name":"Yue Li","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Yue","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5132891050","display_name":"Linying Xue","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xue, Linying","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5132894790","display_name":"Kaiqing Lin","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Lin, Kaiqing","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085069651","display_name":"Hanyu Quan","orcid":"https://orcid.org/0000-0003-0479-5384"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Quan, Hanyu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5132859790","display_name":"Dongdong Lin","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Lin, Dongdong","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5132888765","display_name":"Hui Tian","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Tian, Hui","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5132909218","display_name":"Hongxia Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Hongxia","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5132888860","display_name":"Bin Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Bin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10775","display_name":"Generative Adversarial Networks and Image Synthesis","score":0.6327999830245972,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10775","display_name":"Generative Adversarial Networks and Image Synthesis","score":0.6327999830245972,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.25540000200271606,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11105","display_name":"Advanced Image Processing Techniques","score":0.022199999541044235,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.9104999899864197},{"id":"https://openalex.org/keywords/controllability","display_name":"Controllability","score":0.6723999977111816},{"id":"https://openalex.org/keywords/perturbation","display_name":"Perturbation (astronomy)","score":0.4754999876022339},{"id":"https://openalex.org/keywords/perception","display_name":"Perception","score":0.37599998712539673},{"id":"https://openalex.org/keywords/decoupling","display_name":"Decoupling (probability)","score":0.3490999937057495},{"id":"https://openalex.org/keywords/identity","display_name":"Identity (music)","score":0.3138999938964844}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.9104999899864197},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6868000030517578},{"id":"https://openalex.org/C48209547","wikidata":"https://www.wikidata.org/wiki/Q1331104","display_name":"Controllability","level":2,"score":0.6723999977111816},{"id":"https://openalex.org/C177918212","wikidata":"https://www.wikidata.org/wiki/Q803623","display_name":"Perturbation (astronomy)","level":2,"score":0.4754999876022339},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.46380001306533813},{"id":"https://openalex.org/C26760741","wikidata":"https://www.wikidata.org/wiki/Q160402","display_name":"Perception","level":2,"score":0.37599998712539673},{"id":"https://openalex.org/C205606062","wikidata":"https://www.wikidata.org/wiki/Q5249645","display_name":"Decoupling (probability)","level":2,"score":0.3490999937057495},{"id":"https://openalex.org/C2778355321","wikidata":"https://www.wikidata.org/wiki/Q17079427","display_name":"Identity (music)","level":2,"score":0.3138999938964844},{"id":"https://openalex.org/C47446073","wikidata":"https://www.wikidata.org/wiki/Q5165890","display_name":"Control theory (sociology)","level":3,"score":0.30970001220703125},{"id":"https://openalex.org/C12713177","wikidata":"https://www.wikidata.org/wiki/Q1900281","display_name":"Perspective (graphical)","level":2,"score":0.298799991607666},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.27480000257492065},{"id":"https://openalex.org/C188198153","wikidata":"https://www.wikidata.org/wiki/Q1613840","display_name":"Limiting","level":2,"score":0.2720000147819519},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.25290000438690186}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2604.01635","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.01635","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2604.01635","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.01635","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.777267336845398}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Recent":[0],"advances":[1],"in":[2,49,75,89,218],"GAN":[3,191],"and":[4,12,24,57,155,192],"diffusion":[5],"models":[6],"have":[7],"significantly":[8],"improved":[9],"the":[10,85,91,103,112,139,143,149,170],"realism":[11],"controllability":[13],"of":[14,107,130,167],"facial":[15,93],"deepfake":[16,194],"manipulation,":[17],"raising":[18],"serious":[19],"concerns":[20],"regarding":[21],"privacy,":[22],"security,":[23],"identity":[25],"misuse.":[26],"Proactive":[27],"defenses":[28],"attempt":[29],"to":[30,52,121,158,172,179],"counter":[31],"this":[32,80,127],"threat":[33],"by":[34],"injecting":[35],"adversarial":[36,136],"perturbations":[37,116,137,157],"into":[38,138],"images":[39,94],"before":[40],"manipulation":[41,215],"takes":[42],"place.":[43],"However,":[44],"existing":[45,108],"approaches":[46,109],"remain":[47],"limited":[48,104],"effectiveness":[50,203],"due":[51,120],"suboptimal":[53],"perturbation":[54,150],"injection":[55],"strategies":[56],"are":[58,95,117],"typically":[59],"designed":[60],"under":[61],"white-box":[62,177,210],"assumptions,":[63],"targeting":[64],"only":[65],"simple":[66],"GAN-based":[67],"attribute":[68],"editing.":[69],"These":[70],"constraints":[71,154],"hinder":[72],"their":[73],"applicability":[74],"practical":[76],"real-world":[77],"scenarios.":[78],"In":[79,209],"paper,":[81],"we":[82],"propose":[83],"AEGIS,":[84],"first":[86],"diffusion-guided":[87],"paradigm":[88],"which":[90],"AdvErsarial":[92],"Generated":[96],"for":[97],"Identity":[98],"Shielding.":[99],"We":[100],"observe":[101],"that":[102,197],"defense":[105,171,202],"capability":[106],"stems":[110],"from":[111,152,175],"peak-clipping":[113],"constraint,":[114],"where":[115,161],"forcibly":[118],"truncated":[119],"a":[122,185],"fixed":[123],"$L_\\infty$-bounded.":[124],"To":[125],"overcome":[126],"limitation,":[128],"instead":[129],"directly":[131],"modifying":[132],"pixels,":[133],"AEGIS":[134,168,198],"injects":[135],"latent":[140],"space":[141],"along":[142],"DDIM":[144],"denoising":[145],"trajectory,":[146],"thereby":[147],"decoupling":[148],"magnitude":[151],"pixel-level":[153],"allowing":[156],"adaptively":[159],"amplify":[160],"most":[162],"effective.":[163],"The":[164],"extensible":[165],"design":[166],"allows":[169],"be":[173],"expanded":[174],"purely":[176],"use":[178],"also":[180],"support":[181],"black-box":[182,219],"scenarios":[183],"through":[184],"gradient-estimation":[186],"strategy.":[187],"Extensive":[188],"experiments":[189],"across":[190],"diffusion-based":[193],"generators":[195],"show":[196],"consistently":[199],"delivers":[200],"strong":[201,223],"while":[204],"maintaining":[205],"high":[206],"perceptual":[207],"quality.":[208],"settings,":[211,220],"it":[212,221],"achieves":[213],"robust":[214],"disruption,":[216],"whereas":[217],"demonstrates":[222],"cross-model":[224],"transferability.":[225]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-04-04T00:00:00"}