arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2303.15433cs.CVcs.CRcs.LG
收藏

Anti-DreamBooth:保护用户免受个性化文本到图像合成的影响

Anti-DreamBooth: Protecting users from personalized text-to-image synthesis

VinAI Research(VinAI研究院);Vanderbilt University(范德堡大学)

Thanh Van Le, Hao Phung, Thuan Hoang Nguyen, Quan Dao, Ngoc Tran, Anh Tran

AI总结:

本文提出Anti-DreamBooth防御系统,通过在用户图像发布前添加噪声扰动,破坏恶意DreamBooth模型的生成质量,有效保护用户免受文本到图像合成技术的滥用。

摘要:

文本到图像扩散模型无疑是一场革命,任何人即使没有设计技能,也能通过简单的文本输入创建逼真的图像。借助像DreamBooth这样强大的个性化工具,只需从特定人物的几张参考图像中学习,就能生成该人物的图像。然而,一旦被滥用,这种强大且便捷的工具可能制造假新闻或针对任何受害者的令人不安的内容,造成严重的负面社会影响。本文探索了一种名为Anti-DreamBooth的防御系统,以抵御此类对DreamBooth的恶意使用。该系统旨在用户发布图像前,向每张图像添加微妙的噪声扰动,从而破坏在这些受扰图像上训练的任何DreamBooth模型的生成质量。我们研究了多种扰动优化算法,并在两个面部数据集上跨各种文本到图像模型版本进行了广泛评估。尽管DreamBooth和基于Diffusion的文本到图像模型表述复杂,我们的方法仍能有效保护用户免受这些模型的恶意使用。其有效性甚至在不利条件下依然成立,例如训练与测试之间的模型或提示词/术语不匹配。我们的代码将在https://github.com/VinAIResearch/Anti-DreamBooth.git上提供。

英文摘要:

Text-to-image diffusion models are nothing but a revolution, allowing anyone, even without design skills, to create realistic images from simple text inputs. With powerful personalization tools like DreamBooth, they can generate images of a specific person just by learning from his/her few reference images. However, when misused, such a powerful and convenient tool can produce fake news or disturbing content targeting any individual victim, posing a severe negative social impact. In this paper, we explore a defense system called Anti-DreamBooth against such malicious use of DreamBooth. The system aims to add subtle noise perturbation to each user's image before publishing in order to disrupt the generation quality of any DreamBooth model trained on these perturbed images. We investigate a wide range of algorithms for perturbation optimization and extensively evaluate them on two facial datasets over various text-to-image model versions. Despite the complicated formulation of DreamBooth and Diffusion-based text-to-image models, our methods effectively defend users from the malicious use of those models. Their effectiveness withstands even adverse conditions, such as model or prompt/term mismatching between training and testing. Our code will be available at https://github.com/VinAIResearch/Anti-DreamBooth.git.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑