{"id":"https://openalex.org/W7168244256","doi":"https://doi.org/10.48550/arxiv.2607.11472","title":"LLM-Guided Program Evolution for Targeted Black-Box Attacks on Perceptual Hash Algorithms","display_name":"LLM-Guided Program Evolution for Targeted Black-Box Attacks on Perceptual Hash Algorithms","publication_year":2026,"publication_date":"2026-07-13","ids":{"openalex":"https://openalex.org/W7168244256","doi":"https://doi.org/10.48550/arxiv.2607.11472"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2607.11472","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2607.11472","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2607.11472","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5140712419","display_name":"A. Krylov","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Krylov, A.","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5140586567","display_name":"D. Rakhov","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Rakhov, D.","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5140595061","display_name":"V. Veselova","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Veselova, V.","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5140637501","display_name":"D. Bolokhov","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Bolokhov, D.","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5140724071","display_name":"Oleg Y. Rogov","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Rogov, Oleg Y.","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.5051000118255615,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.5051000118255615,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.2094999998807907,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10775","display_name":"Generative Adversarial Networks and Image Synthesis","score":0.10679999738931656,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/hash-function","display_name":"Hash function","score":0.8434000015258789},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.5148000121116638},{"id":"https://openalex.org/keywords/hash-tree","display_name":"Hash tree","score":0.4544000029563904},{"id":"https://openalex.org/keywords/cryptographic-hash-function","display_name":"Cryptographic hash function","score":0.3873000144958496},{"id":"https://openalex.org/keywords/hamming-distance","display_name":"Hamming distance","score":0.3723999857902527},{"id":"https://openalex.org/keywords/distortion","display_name":"Distortion (music)","score":0.3711000084877014},{"id":"https://openalex.org/keywords/upper-and-lower-bounds","display_name":"Upper and lower bounds","score":0.3668999969959259},{"id":"https://openalex.org/keywords/rolling-hash","display_name":"Rolling hash","score":0.3571999967098236}],"concepts":[{"id":"https://openalex.org/C99138194","wikidata":"https://www.wikidata.org/wiki/Q183427","display_name":"Hash function","level":2,"score":0.8434000015258789},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7002000212669373},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.5148000121116638},{"id":"https://openalex.org/C27353603","wikidata":"https://www.wikidata.org/wiki/Q16948622","display_name":"Hash tree","level":4,"score":0.4544000029563904},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.45329999923706055},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.3968999981880188},{"id":"https://openalex.org/C7608002","wikidata":"https://www.wikidata.org/wiki/Q477202","display_name":"Cryptographic hash function","level":3,"score":0.3873000144958496},{"id":"https://openalex.org/C193319292","wikidata":"https://www.wikidata.org/wiki/Q272172","display_name":"Hamming distance","level":2,"score":0.3723999857902527},{"id":"https://openalex.org/C126780896","wikidata":"https://www.wikidata.org/wiki/Q899871","display_name":"Distortion (music)","level":4,"score":0.3711000084877014},{"id":"https://openalex.org/C77553402","wikidata":"https://www.wikidata.org/wiki/Q13222579","display_name":"Upper and lower bounds","level":2,"score":0.3668999969959259},{"id":"https://openalex.org/C108546238","wikidata":"https://www.wikidata.org/wiki/Q4228982","display_name":"Rolling hash","level":5,"score":0.3571999967098236},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3517000079154968},{"id":"https://openalex.org/C149629883","wikidata":"https://www.wikidata.org/wiki/Q660926","display_name":"Fraction (chemistry)","level":2,"score":0.3433000147342682},{"id":"https://openalex.org/C26760741","wikidata":"https://www.wikidata.org/wiki/Q160402","display_name":"Perception","level":2,"score":0.33629998564720154},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.3346000015735626},{"id":"https://openalex.org/C122907437","wikidata":"https://www.wikidata.org/wiki/Q5318999","display_name":"Dynamic perfect hashing","level":5,"score":0.326200008392334},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.31929999589920044},{"id":"https://openalex.org/C67388219","wikidata":"https://www.wikidata.org/wiki/Q207440","display_name":"Hash table","level":3,"score":0.3009999990463257},{"id":"https://openalex.org/C133667856","wikidata":"https://www.wikidata.org/wiki/Q5439682","display_name":"Feature hashing","level":5,"score":0.29760000109672546},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.29649999737739563},{"id":"https://openalex.org/C138111711","wikidata":"https://www.wikidata.org/wiki/Q478351","display_name":"Double hashing","level":4,"score":0.28839999437332153},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.27140000462532043},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.26269999146461487}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2607.11472","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2607.11472","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2607.11472","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2607.11472","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"score":0.5399885177612305,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Perceptual":[0],"hash":[1,47,73,88,133,198],"algorithms":[2],"(PHAs)":[3],"are":[4],"widely":[5,207],"deployed":[6,102,208],"to":[7,70,86,95,131,145,159],"detect":[8],"image":[9,111],"forgery":[10],"under":[11],"benign":[12],"transformations,":[13],"yet":[14],"their":[15],"robustness":[16],"against":[17],"adversarially":[18],"chosen":[19],"perturbations":[20],"remains":[21],"poorly":[22],"understood":[23],"and":[24,39,90,174,190,211],"rarely":[25],"comes":[26],"with":[27,140],"provable":[28],"guarantees.":[29],"We":[30,49],"propose":[31],"a":[32,54],"novel":[33],"evolutionary":[34,116],"framework":[35,182],"based":[36],"on":[37,45,100],"GigaEvo":[38],"OpenEvolve":[40],"for":[41,60,166,169,172,176],"targeted":[42],"second-image":[43],"attacks":[44],"perceptual":[46,218],"algorithms.":[48],"assess":[50],"attack":[51,156],"performance":[52],"using":[53,127],"composite":[55,155],"score":[56,157],"that":[57,114],"jointly":[58],"accounts":[59],"the":[61,71,81,87,91,96,132,146,153,160,193,213],"fraction":[62],"of":[63,83,187,197,215],"adversarial":[64,138],"images":[65,139],"whose":[66],"normalized":[67],"Hamming":[68],"distance":[69],"target":[72],"falls":[74],"below":[75],"threshold":[76],"p":[77],"(Attack":[78],"Success":[79],"Rate),":[80],"number":[82],"queries":[84,130],"issued":[85],"function,":[89,134],"L2":[92,142],"distortion":[93,143],"relative":[94,144,158],"original":[97],"image.":[98],"Experiments":[99],"four":[101],"PHAs":[103],"(pHash,":[104],"PDQ,":[105,170],"PhotoDNA,":[106],"NeuralHash)":[107],"across":[108],"30":[109],"ImageNet":[110],"pairs":[112],"demonstrate":[113],"our":[115,181],"approach":[117],"achieves":[118],"comparable":[119],"or":[120],"better":[121],"ASR":[122],"than":[123],"existing":[124],"black-box":[125],"baselines":[126],"substantially":[128],"fewer":[129],"while":[135],"simultaneously":[136],"producing":[137],"lower":[141],"originals.":[147],"The":[148],"best":[149,161],"evolved":[150],"programs":[151],"reduce":[152],"pre-defined":[154],"optimized":[162],"seed":[163],"by":[164],"41.2%":[165],"NeuralHash,":[167],"38.3%":[168],"34.0%":[171],"pHash,":[173],"8.1%":[175],"PhotoDNA.":[177],"Unlike":[178],"gradient-based":[179],"methods,":[180],"requires":[183],"no":[184],"internal":[185],"knowledge":[186],"PHA":[188],"architectures":[189],"naturally":[191],"handles":[192],"non-differentiable,":[194],"discretized":[195],"nature":[196],"outputs.":[199],"These":[200],"results":[201],"reveal":[202],"previously":[203],"unreported":[204],"vulnerabilities":[205],"in":[206],"content-moderation":[209],"pipelines":[210],"motivate":[212],"development":[214],"provably":[216],"robust":[217],"hashing":[219],"1schemes.":[220]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-07-15T00:00:00"}