arXiv:2512.00075cs.CVeess.IV2025-12被引 1

为防止未经授权的图像生成,提出可验证的统一防护框架。

Adapter Shield: A Unified Framework with Built-in Authentication for Preventing Unauthorized Zero-Shot Image-to-Image Generation

  • 通过加密嵌入实现输入图像的可逆保护机制
  • 对抗性扰动使未授权生成输出严重失真
  • 支持合法用户安全访问,适合版权保护场景

随着扩散模型的发展,零样本图像到图像生成技术已能仅用一张肖像或艺术作品,无需修改模型权重即可高保真复现人物身份或艺术风格。此类技术虽拓展了创作边界,但也带来盗用肖像、模仿风格等知识产权风险。本文提出 Adapter Shield,首个集成认证的通用防御框架,旨在保护个人图像免受滥用。研究发现,现有零样本方法依赖图像编码器提取嵌入,并通过交叉注意力层输入扩散模型的UNet。受此启发,构建了一种基于密钥的可逆加密系统,将原始嵌入映射为特定加密表示。授权用户可通过解密模块与正确密钥恢复真实嵌入,正常完成生成任务;而保护模式下,设计多目标对抗扰动,主动将原始嵌入偏移至指定加密模式,使未经授权者生成结果严重失真或加密。大量实验表明,该方法在阻断未经授权的零样本生成方面优于现有最先进防御方案,同时支持灵活安全的访问控制。

原文摘要 · Abstract (English)

With the rapid progress in diffusion models, image synthesis has advanced to the stage of zero-shot image-to-image generation, where high-fidelity replication of facial identities or artistic styles can be achieved using just one portrait or artwork, without modifying any model weights. Although these techniques significantly enhance creative possibilities, they also pose substantial risks related to intellectual property violations, including unauthorized identity cloning and stylistic imitation. To counter such threats, this work presents Adapter Shield, the first universal and authentication-integrated solution aimed at defending personal images from misuse in zero-shot generation scenarios. We first investigate how current zero-shot methods employ image encoders to extract embeddings from input images, which are subsequently fed into the UNet of diffusion models through cross-attention layers. Inspired by this mechanism, we construct a reversible encryption system that maps original embeddings into distinct encrypted representations according to different secret keys. The authorized users can restore the authentic embeddings via a decryption module and the correct key, enabling normal usage for authorized generation tasks. For protection purposes, we design a multi-target adversarial perturbation method that actively shifts the original embeddings toward designated encrypted patterns. Consequently, protected images are embedded with a defensive layer that ensures unauthorized users can only produce distorted or encrypted outputs. Extensive evaluations demonstrate that our method surpasses existing state-of-the-art defenses in blocking unauthorized zero-shot image synthesis, while supporting flexible and secure access control for verified users.

图像生成版权保护扩散模型安全防御

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。