{"id":"https://openalex.org/W7154498207","doi":"https://doi.org/10.48550/arxiv.2604.12781","title":"Fragile Reconstruction: Adversarial Vulnerability of Reconstruction-Based Detectors for Diffusion-Generated Images","display_name":"Fragile Reconstruction: Adversarial Vulnerability of Reconstruction-Based Detectors for Diffusion-Generated Images","publication_year":2026,"publication_date":"2026-04-14","ids":{"openalex":"https://openalex.org/W7154498207","doi":"https://doi.org/10.48550/arxiv.2604.12781"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2604.12781","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.12781","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2604.12781","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5043340228","display_name":"Haoyang Jiang","orcid":"https://orcid.org/0009-0006-5779-8238"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jiang, Haoyang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5087695030","display_name":"Mingyang Yi","orcid":"https://orcid.org/0009-0009-0638-2306"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yi, Mingyang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5133691659","display_name":"Shaolei Zhang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Shaolei","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5133723422","display_name":"Junxian Cai","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Cai, Junxian","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5133722984","display_name":"Qingbin Liu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liu, Qingbin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5078602251","display_name":"X. Chelsea Chen","orcid":"https://orcid.org/0000-0003-1188-7658"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chen, Xi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5100739546","display_name":"Ju Fan","orcid":"https://orcid.org/0000-0003-4729-9903"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Fan, Ju","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9652000069618225,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9652000069618225,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10775","display_name":"Generative Adversarial Networks and Image Synthesis","score":0.009399999864399433,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.007600000128149986,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.9559000134468079},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.70169997215271},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.6123999953269958},{"id":"https://openalex.org/keywords/detector","display_name":"Detector","score":0.5918999910354614},{"id":"https://openalex.org/keywords/construct","display_name":"Construct (python library)","score":0.5145000219345093},{"id":"https://openalex.org/keywords/vulnerability-assessment","display_name":"Vulnerability assessment","score":0.3174000084400177}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.9559000134468079},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.70169997215271},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.680899977684021},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.6123999953269958},{"id":"https://openalex.org/C94915269","wikidata":"https://www.wikidata.org/wiki/Q1834857","display_name":"Detector","level":2,"score":0.5918999910354614},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5443000197410583},{"id":"https://openalex.org/C2780801425","wikidata":"https://www.wikidata.org/wiki/Q5164392","display_name":"Construct (python library)","level":2,"score":0.5145000219345093},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4966000020503998},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3179999887943268},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.3174000084400177},{"id":"https://openalex.org/C39890363","wikidata":"https://www.wikidata.org/wiki/Q36108","display_name":"Generative grammar","level":2,"score":0.3091000020503998},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.2842000126838684},{"id":"https://openalex.org/C2778403875","wikidata":"https://www.wikidata.org/wiki/Q20312394","display_name":"Adversarial machine learning","level":3,"score":0.2741999924182892},{"id":"https://openalex.org/C2988773926","wikidata":"https://www.wikidata.org/wiki/Q25104379","display_name":"Generative adversarial network","level":3,"score":0.26019999384880066},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.258899986743927}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2604.12781","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.12781","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2604.12781","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.12781","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Recently,":[0],"detecting":[1],"AI-generated":[2],"images":[3],"produced":[4],"by":[5,48,169],"diffusion-based":[6],"models":[7],"has":[8],"attracted":[9],"increasing":[10],"attention":[11],"due":[12],"to":[13,17,43,53,62,121,158,186],"their":[14],"potential":[15],"threat":[16],"safety.":[18],"Among":[19],"existing":[20,188],"approaches,":[21],"reconstruction-based":[22,180],"methods":[23,38,147],"have":[24],"emerged":[25],"as":[26,167],"a":[27,71,134],"prominent":[28],"paradigm":[29],"for":[30],"this":[31,67],"task.":[32],"However,":[33],"we":[34,69,89,105,138],"find":[35,106,143],"that":[36,46,107,124,144],"such":[37],"exhibit":[39],"severe":[40],"security":[41,177],"vulnerabilities":[42],"adversarial":[44,51,76,91,125,149],"perturbations;":[45],"is,":[47],"adding":[49],"imperceptible":[50],"perturbations":[52],"input":[54],"images,":[55],"the":[56,75,98,159,170,184],"detection":[57,189],"accuracy":[58],"of":[59,74,78,100,164,179],"classifiers":[60],"collapses":[61],"near":[63],"zero.":[64],"To":[65],"verify":[66],"threat,":[68],"present":[70],"systematic":[72],"evaluation":[73],"robustness":[77],"three":[79],"representative":[80],"detectors":[81,128,181],"across":[82],"four":[83],"diverse":[84],"generative":[85],"backbone":[86],"models.":[87],"First,":[88],"construct":[90],"attacks":[92,109,113,126,150],"in":[93,133],"white-box":[94],"scenarios,":[95],"which":[96],"degrade":[97],"performance":[99],"all":[101],"well-trained":[102],"detectors.":[103,171],"Moreover,":[104],"these":[108,156],"demonstrate":[110],"transferability;":[111],"specifically,":[112],"crafted":[114],"against":[115,148],"one":[116],"detector":[117],"can":[118,129],"be":[119,131],"transferred":[120],"others,":[122],"indicating":[123],"on":[127],"also":[130],"constructed":[132],"black-box":[135],"setting.":[136],"Finally,":[137],"assess":[139],"common":[140],"countermeasures":[141],"and":[142,182],"standard":[145],"defense":[146],"provide":[151],"limited":[152],"mitigation.":[153],"We":[154],"attribute":[155],"failures":[157],"low":[160],"signal-to-noise":[161],"ratio":[162],"(SNR)":[163],"attacked":[165],"samples":[166],"perceived":[168],"Overall,":[172],"our":[173],"results":[174],"reveal":[175],"fundamental":[176],"limitations":[178],"highlight":[183],"need":[185],"rethink":[187],"strategies.":[190]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-04-16T00:00:00"}