{"id":"https://openalex.org/W7162123383","doi":"https://doi.org/10.48550/arxiv.2605.22060","title":"Safeguarding Text-to-Image Generative Models Against Unauthorized Knowledge Distillation","display_name":"Safeguarding Text-to-Image Generative Models Against Unauthorized Knowledge Distillation","publication_year":2026,"publication_date":"2026-05-21","ids":{"openalex":"https://openalex.org/W7162123383","doi":"https://doi.org/10.48550/arxiv.2605.22060"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.22060","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.22060","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.22060","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5102569147","display_name":"Yilan Gao","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Gao, Yilan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5111347273","display_name":"Sida Huang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Huang, Sida","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136787122","display_name":"Hongyuan Zhang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Hongyuan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5136786324","display_name":"Xuelong Li","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Xuelong","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9176999926567078,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9176999926567078,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10775","display_name":"Generative Adversarial Networks and Image Synthesis","score":0.020500000566244125,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.008200000040233135,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/fidelity","display_name":"Fidelity","score":0.5131999850273132},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.484499990940094},{"id":"https://openalex.org/keywords/high-fidelity","display_name":"High fidelity","score":0.46959999203681946},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.4244000017642975},{"id":"https://openalex.org/keywords/distillation","display_name":"Distillation","score":0.3785000145435333},{"id":"https://openalex.org/keywords/generative-grammar","display_name":"Generative grammar","score":0.3573000133037567},{"id":"https://openalex.org/keywords/generative-model","display_name":"Generative model","score":0.33899998664855957},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.32429999113082886},{"id":"https://openalex.org/keywords/scale","display_name":"Scale (ratio)","score":0.3158999979496002}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7117999792098999},{"id":"https://openalex.org/C2776459999","wikidata":"https://www.wikidata.org/wiki/Q2119376","display_name":"Fidelity","level":2,"score":0.5131999850273132},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.484499990940094},{"id":"https://openalex.org/C113364801","wikidata":"https://www.wikidata.org/wiki/Q26674","display_name":"High fidelity","level":2,"score":0.46959999203681946},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.4244000017642975},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.40230000019073486},{"id":"https://openalex.org/C204030448","wikidata":"https://www.wikidata.org/wiki/Q101017","display_name":"Distillation","level":2,"score":0.3785000145435333},{"id":"https://openalex.org/C39890363","wikidata":"https://www.wikidata.org/wiki/Q36108","display_name":"Generative grammar","level":2,"score":0.3573000133037567},{"id":"https://openalex.org/C167966045","wikidata":"https://www.wikidata.org/wiki/Q5532625","display_name":"Generative model","level":3,"score":0.33899998664855957},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.33070001006126404},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.32429999113082886},{"id":"https://openalex.org/C2778755073","wikidata":"https://www.wikidata.org/wiki/Q10858537","display_name":"Scale (ratio)","level":2,"score":0.3158999979496002},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3100999891757965},{"id":"https://openalex.org/C43091099","wikidata":"https://www.wikidata.org/wiki/Q1067788","display_name":"Through-the-lens metering","level":3,"score":0.302700012922287},{"id":"https://openalex.org/C26760741","wikidata":"https://www.wikidata.org/wiki/Q160402","display_name":"Perception","level":2,"score":0.29829999804496765},{"id":"https://openalex.org/C160920958","wikidata":"https://www.wikidata.org/wiki/Q7662746","display_name":"Synthetic data","level":2,"score":0.2919999957084656},{"id":"https://openalex.org/C2780992000","wikidata":"https://www.wikidata.org/wiki/Q17016113","display_name":"Generator (circuit theory)","level":3,"score":0.2906999886035919},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.28610000014305115},{"id":"https://openalex.org/C154690210","wikidata":"https://www.wikidata.org/wiki/Q1668499","display_name":"Rewriting","level":2,"score":0.27869999408721924},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.27549999952316284},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.27480000257492065},{"id":"https://openalex.org/C2780224610","wikidata":"https://www.wikidata.org/wiki/Q1530061","display_name":"Credibility","level":2,"score":0.27459999918937683},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.27390000224113464},{"id":"https://openalex.org/C183003079","wikidata":"https://www.wikidata.org/wiki/Q1000371","display_name":"Personalization","level":2,"score":0.26429998874664307},{"id":"https://openalex.org/C2776743756","wikidata":"https://www.wikidata.org/wiki/Q5097921","display_name":"Safeguarding","level":2,"score":0.2637999951839447},{"id":"https://openalex.org/C47487241","wikidata":"https://www.wikidata.org/wiki/Q5227230","display_name":"Data access","level":2,"score":0.2621000111103058},{"id":"https://openalex.org/C155386361","wikidata":"https://www.wikidata.org/wiki/Q1649571","display_name":"Process control","level":3,"score":0.25850000977516174},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.2524999976158142},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.25049999356269836}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.22060","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.22060","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.22060","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.22060","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Closed-weight":[0],"generative":[1],"services":[2],"are":[3],"increasingly":[4],"deployed":[5],"through":[6],"query-based":[7],"APIs,":[8],"where":[9],"users":[10],"can":[11,30],"obtain":[12],"generated":[13],"outputs":[14],"while":[15,134],"model":[16,26],"parameters":[17],"remain":[18],"inaccessible.":[19],"However,":[20],"such":[21],"deployment":[22],"does":[23],"not":[24],"prevent":[25],"stealing:":[27],"an":[28],"attacker":[29],"repeatedly":[31],"query":[32],"the":[33,67,79,136],"service,":[34],"collect":[35],"large":[36],"volumes":[37],"of":[38,82,138],"released":[39,83,108],"synthetic":[40,109],"images,":[41,84],"and":[42,60,91,167],"use":[43],"them":[44],"as":[45,141],"training":[46,142],"data":[47,143],"for":[48,131,144],"a":[49,74,101,112,118,159],"private":[50],"substitute":[51],"model.":[52],"This":[53],"query-output-driven":[54],"process":[55],"enables":[56],"unauthorized":[57,145],"knowledge":[58],"distillation":[59,153],"capability":[61],"replication":[62],"without":[63],"direct":[64],"access":[65],"to":[66,94,122],"original":[68],"weights.":[69],"To":[70],"mitigate":[71],"this":[72],"threat,":[73],"practical":[75],"defense":[76],"should":[77],"preserve":[78],"visual":[80],"fidelity":[81],"provide":[85],"explicit":[86,164],"control":[87,166],"over":[88],"perturbation":[89,114,120],"magnitude,":[90],"scale":[92],"efficiently":[93],"large-volume":[95],"output":[96],"release.":[97],"We":[98],"present":[99],"WaveGuard,":[100],"single-pass,":[102],"generator-based":[103],"protection":[104,171],"framework":[105],"that":[106,127,156],"safeguards":[107],"images":[110,140],"under":[111,150],"user-specified":[113],"budget.":[115],"WaveGuard":[116,157],"employs":[117],"frequency-aware":[119],"generator":[121],"inject":[123],"structured,":[124],"imperceptible":[125],"perturbations":[126],"maintain":[128],"perceptual":[129],"utility":[130],"benign":[132],"viewers":[133],"reducing":[135],"usefulness":[137],"protected":[139],"student":[146],"models.":[147],"Extensive":[148],"experiments":[149],"WikiArt-related":[151],"synthetic-output":[152],"settings":[154],"show":[155],"achieves":[158],"favorable":[160],"efficacy--fidelity--efficiency":[161],"trade-off,":[162],"with":[163],"imperceptibility":[165],"substantial":[168],"gains":[169],"in":[170],"efficiency.":[172]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-05-23T00:00:00"}