arXiv:2509.13711cs.CV2025-09被引 2

通过优化特定注意力层,防止微调后的扩散模型盗用艺术家风格。

StyleProtect: Safeguarding Artistic Identity in Fine-tuned Diffusion Models

  • 仅更新敏感的交叉注意力层,实现轻量级风格防护。
  • 在30位艺术家作品和Anita动画数据集上验证有效,保护效果显著。
  • 适合关注艺术版权保护的创作者与模型开发者使用。

生成模型(尤其是基于扩散的方法)的快速发展,意外为滥用提供了可能:恶意使用者可低成本复制艺术家的创作手法、个人风格与多年心血。为此,亟需防范风格模仿的技术。尽管通用扩散模型即可模仿风格,但微调后模型能更精准地内化并复现风格。我们发现某些交叉注意力层对艺术风格特别敏感,其激活强度与外部模型提取特征相关。基于此,提出轻量高效的保护策略StyleProtect,仅更新部分交叉注意力层即可有效防御微调扩散模型的风格盗用。实验使用基于WikiArt的30位知名艺术家代表性作品及Anita卡通动画数据集,结果表明该方法在保护艺术与动漫风格方面表现优异,同时保持较低可见性影响。

原文摘要 · Abstract (English)

The rapid advancement of generative models, particularly diffusion-based approaches, has inadvertently facilitated their potential for misuse. Such models enable malicious exploiters to replicate artistic styles that capture an artist's creative labor, personal vision, and years of dedication in an inexpensive manner. This has led to a rise in the need and exploration of methods for protecting artworks against style mimicry. Although generic diffusion models can easily mimic an artistic style, finetuning amplifies this capability, enabling the model to internalize and reproduce the style with higher fidelity and control. We hypothesize that certain cross-attention layers exhibit heightened sensitivity to artistic styles. Sensitivity is measured through activation strengths of attention layers in response to style and content representations, and assessing their correlations with features extracted from external models. Based on our findings, we introduce an efficient and lightweight protection strategy, StyleProtect, that achieves effective style defense against fine-tuned diffusion models by updating only selected cross-attention layers. Our experiments utilize a carefully curated artwork dataset based on WikiArt, comprising representative works from 30 artists known for their distinctive and influential styles and cartoon animations from the Anita dataset. The proposed method demonstrates promising performance in safeguarding unique styles of artworks and anime from malicious diffusion customization, while maintaining competitive imperceptibility.

风格保护扩散模型艺术版权微调防御

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。