{"about":{"site":"https://codewithpapers.app","non_affiliation":"Code with Papers and Syntology are not affiliated with, endorsed by, or sponsored by Papers with Code, Meta, or the pwc-archive mirror.","licence":"CC BY-SA 4.0","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","attribution":"https://codewithpapers.app/attribution","modified":"archive material modified by Syntology; see the attribution page"},"url":"/paper/arxiv-2508-06325","title":"Anti-Tamper Protection for Unauthorized Individual Image Generation","arxiv_id":"2508.06325","date":"2025-08-05","proceeding":"ICCV","authors":["Zelin Li","Ruohan Zong","Yifan Liu","Ruichen Yao","Yaokun Liu","Yang Zhang","Dong Wang"],"abstract":"With the advancement of personalized image generation technologies, concerns about forgery attacks that infringe on portrait rights and privacy are growing. To address these concerns, protection perturbation algorithms have been developed to disrupt forgery generation. However, the protection algorithms would become ineffective when forgery attackers apply purification techniques to bypass the protection. To address this issue, we present a novel approach, Anti-Tamper Perturbation (ATP). ATP introduces a tamper-proof mechanism within the perturbation. It consists of protection and authorization perturbations, where the protection perturbation defends against forgery attacks, while the authorization perturbation detects purification-based tampering. Both protection and authorization perturbations are applied in the frequency domain under the guidance of a mask, ensuring that the protection perturbation does not disrupt the authorization perturbation. This design also enables the authorization perturbation to be distributed across all image pixels, preserving its sensitivity to purification-based tampering. ATP demonstrates its effectiveness in defending forgery attacks across various attack settings through extensive experiments, providing a robust solution for protecting individuals' portrait rights and privacy. Our code is available at: https://github.com/Seeyn/Anti-Tamper-Perturbation .","url_abs":"https://arxiv.org/abs/2508.06325","url_pdf":"https://arxiv.org/pdf/2508.06325","source":{"archive":null,"snapshot":"2025-07-28","note":"not in the Papers with Code archive (frozen at the snapshot)","row_kind":"graph","title_abstract_authors_date":"arXiv metadata, CC0 1.0 (https://info.arxiv.org/help/license)"},"code_links":[],"tasks":[],"methods":[],"datasets_introduced":[],"methods_introduced":[],"results":[],"syntology":{"syntology_url":null,"atlas_url":"https://app.syntology.ai/?focus=2508.06325","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2508.06325"}},"developers":"https://syntology.ai/developers","read_at":"2026-09-24T18:15:14+00:00","read_at_is":"when the build read Syntology's graph, not when any sample ran","claim":"Per-sample execution status on synthesized fixtures; not a correctness claim about the paper. Samples come from repositories linked to the paper, official or community; repo_kind says which.","repos":[{"mentioned_in_github":null,"is_official":null,"provenance":"deterministic:regex_extraction","mentioned_in_paper":null,"url":"https://github.com/Seeyn/Anti-Tamper-Perturbation","reach":{"status":"ok"}}],"summary":{"ran_draft_wrong":1,"unverified":8},"by_repo_kind":{"found_in_text":{"samples":9,"ran":1,"repositories":1}},"repo_kind_vocabulary":{"official":"The archive marks this repository official for the paper","named_in_paper":"The archive records that the paper mentions this repository; it is not marked official","listed":"In the archive's code links for this paper, not marked official and not recorded as mentioned in the paper","found_in_text":"Syntology found this repository in the paper's own text; whether it is the authors' implementation is not asserted","community":"Not in the archive's code links for this paper; a community repository Syntology harvested"},"n_pointer_only_for_licence":9,"samples":[{"code_sha256_prefix":"2cfdf5516f63cbbf","entry":"sorted_nicely","repo":"Seeyn/Anti-Tamper-Perturbation","repo_kind":"found_in_text","path":"authorization/infer.py","file_url":"https://github.com/Seeyn/Anti-Tamper-Perturbation/blob/HEAD/authorization/infer.py","link_basis":"plan_row","language":"python","status":"ran_draft_wrong","verification_level":2,"contract_check":"OUTPUT_MISDECLARED","metamorphic_tier":"deterministic","behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"2cfdf5516f63cbbf"}},{"code_sha256_prefix":"194ee18f6d119b6d","entry":"block_merging","repo":"Seeyn/Anti-Tamper-Perturbation","repo_kind":"found_in_text","path":"authorization/networks/DCTlayer.py","file_url":"https://github.com/Seeyn/Anti-Tamper-Perturbation/blob/HEAD/authorization/networks/DCTlayer.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"194ee18f6d119b6d"}},{"code_sha256_prefix":"ccd4c832ce63180a","entry":"dct_img","repo":"Seeyn/Anti-Tamper-Perturbation","repo_kind":"found_in_text","path":"authorization/networks/DCTlayer.py","file_url":"https://github.com/Seeyn/Anti-Tamper-Perturbation/blob/HEAD/authorization/networks/DCTlayer.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"ccd4c832ce63180a"}},{"code_sha256_prefix":"381eb180273cee72","entry":"idct_img","repo":"Seeyn/Anti-Tamper-Perturbation","repo_kind":"found_in_text","path":"authorization/networks/DCTlayer.py","file_url":"https://github.com/Seeyn/Anti-Tamper-Perturbation/blob/HEAD/authorization/networks/DCTlayer.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"381eb180273cee72"}},{"code_sha256_prefix":"34b9d40b15d38d2b","entry":"last_checkpoint_from_folder","repo":"Seeyn/Anti-Tamper-Perturbation","repo_kind":"found_in_text","path":"authorization/infer.py","file_url":"https://github.com/Seeyn/Anti-Tamper-Perturbation/blob/HEAD/authorization/infer.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"34b9d40b15d38d2b"}},{"code_sha256_prefix":"d91b8395cf1d1721","entry":"load_config","repo":"Seeyn/Anti-Tamper-Perturbation","repo_kind":"found_in_text","path":"perturb.py","file_url":"https://github.com/Seeyn/Anti-Tamper-Perturbation/blob/HEAD/perturb.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"d91b8395cf1d1721"}},{"code_sha256_prefix":"794d4f7fc184e7e5","entry":"mesh_grid","repo":"Seeyn/Anti-Tamper-Perturbation","repo_kind":"found_in_text","path":"authorization/degradations.py","file_url":"https://github.com/Seeyn/Anti-Tamper-Perturbation/blob/HEAD/authorization/degradations.py","link_basis":"harvester_set","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"794d4f7fc184e7e5"}},{"code_sha256_prefix":"321b9c73d589eb9e","entry":"pdf2","repo":"Seeyn/Anti-Tamper-Perturbation","repo_kind":"found_in_text","path":"authorization/degradations.py","file_url":"https://github.com/Seeyn/Anti-Tamper-Perturbation/blob/HEAD/authorization/degradations.py","link_basis":"harvester_set","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"321b9c73d589eb9e"}},{"code_sha256_prefix":"e3444ff2b9d24600","entry":"sigma_matrix2","repo":"Seeyn/Anti-Tamper-Perturbation","repo_kind":"found_in_text","path":"authorization/degradations.py","file_url":"https://github.com/Seeyn/Anti-Tamper-Perturbation/blob/HEAD/authorization/degradations.py","link_basis":"harvester_set","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"e3444ff2b9d24600"}}]},"arxiv_metadata":{"licence":"arXiv metadata, CC0 1.0 (https://info.arxiv.org/help/license)","fields":["title","abstract","authors","date"],"primary_category":"cs.CR","source":"arxiv_api"},"syntology_extracted_results":null}