AdvPaint: Protecting Images from Inpainting Manipulation via Adversarial Attention Disruption
This addresses the threat of malicious inpainting for image security, offering a novel defensive framework for a rarely addressed task, though it is incremental as it builds on adversarial protection methods for other diffusion tasks.
The paper tackles the problem of protecting images from unauthorized inpainting manipulation by diffusion models, proposing AdvPaint, which generates adversarial perturbations that disrupt attention mechanisms and achieves over a 100-point increase in FID and substantial decreases in precision compared to existing methods.
The outstanding capability of diffusion models in generating high-quality images poses significant threats when misused by adversaries. In particular, we assume malicious adversaries exploiting diffusion models for inpainting tasks, such as replacing a specific region with a celebrity. While existing methods for protecting images from manipulation in diffusion-based generative models have primarily focused on image-to-image and text-to-image tasks, the challenge of preventing unauthorized inpainting has been rarely addressed, often resulting in suboptimal protection performance. To mitigate inpainting abuses, we propose ADVPAINT, a novel defensive framework that generates adversarial perturbations that effectively disrupt the adversary's inpainting tasks. ADVPAINT targets the self- and cross-attention blocks in a target diffusion inpainting model to distract semantic understanding and prompt interactions during image generation. ADVPAINT also employs a two-stage perturbation strategy, dividing the perturbation region based on an enlarged bounding box around the object, enhancing robustness across diverse masks of varying shapes and sizes. Our experimental results demonstrate that ADVPAINT's perturbations are highly effective in disrupting the adversary's inpainting tasks, outperforming existing methods; ADVPAINT attains over a 100-point increase in FID and substantial decreases in precision.