arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2603.26154cs.CV
收藏

IP-Bench:图像到视频生成场景中的图像保护方法基准

IPV-Bench: Benchmarking Image Protection Methods under Diverse Image-to-Video Generation Scenarios

The Hong Kong University of Science and Technology (Guangzhou)(香港科技大学(广州));Wuhan University(武汉大学)

Xiaofeng Li, Leyi Sheng, Yifan Zhao, Zhen Sun, Zongmin Zhang, Jiaheng Wei, Xinlei He

AI总结:

针对图像到视频生成场景中图像保护方法缺乏统一评估框架的问题,IP-Bench提出首个系统性基准,评估6种保护方法和5种先进模型的鲁棒性及跨模型转移能力。

摘要:

随着图像到视频(I2V)生成模型的快速发展,其在创建恶意内容中的潜在滥用已成为重大关注点。例如,一张图像可以被利用生成虚假视频,用于吸引注意力并获取利益。这种现象称为I2V生成滥用。现有的图像保护方法缺乏统一的基准,导致评估框架不完整。此外,这些方法在I2V生成场景中未被系统评估,并且未针对预处理攻击进行评估,这使得在现实部署场景中评估其有效性变得更加复杂。为了解决这一挑战,我们提出了IP-Bench(图像保护基准),这是首个系统性的基准,用于评估I2V生成场景中的保护方法。该基准评估了6种代表性的保护方法和5种最先进的I2V模型。此外,我们的工作在实际场景中系统地评估了保护方法的鲁棒性,并使用两种鲁棒性攻击策略进行分析,并分析了它们的跨模型和跨模态转移能力。总体而言,IP-Bench建立了用于I2V生成场景中图像保护方法的系统性、可重复和可扩展的评估框架。

英文摘要:

Image-to-video (I2V) generation models can be misused to animate a single image into a convincing fake video, motivating perturbation-based image protection methods that aim to disrupt such generation. Yet these methods remain difficult to compare: they are reported under inconsistent metrics and generation settings, are often validated only on the single generator they were optimized against, and are evaluated on narrow, single-domain image sets that do not reflect real misuse. To address these challenges, we introduce IPV-Bench (Image Protection against Video generation), the first systematic benchmark for image protection in I2V generation scenarios. IPV-Bench couples a unified protocol that jointly scores protection effectiveness, visual fidelity, and robustness to preprocessing attacks together with IPV-500, a prompt-paired dataset spanning five misuse-relevant domains. Based on this benchmark, we evaluate five representative protection methods across four I2V models covering distinct architectures and both open-source and commercial systems. Extensive experiments show a consistently sobering picture: image protection and video disruption trade off against each other, most methods fail to disrupt generation beyond noise, protection rarely transfers across generators, and the few effective cases are broken by simple preprocessing. We further find that image content governs the perceptual cost of protection but not its benefit: no image domain offers an easier target. Overall, IPV-Bench provides a rigorous, reproducible, and extensible foundation for developing protection methods that work in practice.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑