{"about":{"site":"https://codewithpapers.app","non_affiliation":"Code with Papers and Syntology are not affiliated with, endorsed by, or sponsored by Papers with Code, Meta, or the pwc-archive mirror.","licence":"CC BY-SA 4.0","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","attribution":"https://codewithpapers.app/attribution","modified":"archive material modified by Syntology; see the attribution page"},"url":"/paper/arxiv-2510-12119","title":"ImageSentinel: Protecting Visual Datasets from Unauthorized Retrieval-Augmented Image Generation","arxiv_id":"2510.12119","date":"2025-10-14","proceeding":"NeurIPS","authors":["Ziyuan Luo","Yangyi Zhao","Ka Chun Cheung","Simon See","Renjie Wan"],"abstract":"The widespread adoption of Retrieval-Augmented Image Generation (RAIG) has raised significant concerns about the unauthorized use of private image datasets. While these systems have shown remarkable capabilities in enhancing generation quality through reference images, protecting visual datasets from unauthorized use in such systems remains a challenging problem. Traditional digital watermarking approaches face limitations in RAIG systems, as the complex feature extraction and recombination processes fail to preserve watermark signals during generation. To address these challenges, we propose ImageSentinel, a novel framework for protecting visual datasets in RAIG. Our framework synthesizes sentinel images that maintain visual consistency with the original dataset. These sentinels enable protection verification through randomly generated character sequences that serve as retrieval keys. To ensure seamless integration, we leverage vision-language models to generate the sentinel images. Experimental results demonstrate that ImageSentinel effectively detects unauthorized dataset usage while preserving generation quality for authorized applications. Code is available at https://github.com/luo-ziyuan/ImageSentinel.","url_abs":"https://arxiv.org/abs/2510.12119","url_pdf":"https://arxiv.org/pdf/2510.12119","source":{"archive":null,"snapshot":"2025-07-28","note":"not in the Papers with Code archive (frozen at the snapshot)","row_kind":"graph","title_abstract_authors_date":"arXiv metadata, CC0 1.0 (https://info.arxiv.org/help/license)"},"code_links":[],"tasks":[],"methods":[],"datasets_introduced":[],"methods_introduced":[],"results":[],"syntology":{"atlas_url":"https://app.syntology.ai/?focus=2510.12119","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2510.12119"}},"developers":"https://syntology.ai/developers","read_at":"2026-09-24T18:15:14+00:00","read_at_is":"when the build read Syntology's graph, not when any sample ran","claim":"Per-sample execution status on synthesized fixtures; not a correctness claim about the paper. Samples come from repositories linked to the paper, official or community; repo_kind says which.","repos":[{"mentioned_in_github":null,"is_official":null,"provenance":"deterministic:regex_extraction","mentioned_in_paper":null,"url":"https://github.com/luo-ziyuan/ImageSentinel","reach":{"status":"ok"}}],"summary":{"ran_draft_wrong":1,"unverified":11},"by_repo_kind":{"found_in_text":{"samples":12,"ran":1,"repositories":1}},"repo_kind_vocabulary":{"official":"The archive marks this repository official for the paper","named_in_paper":"The archive records that the paper mentions this repository; it is not marked official","listed":"In the archive's code links for this paper, not marked official and not recorded as mentioned in the paper","found_in_text":"Syntology found this repository in the paper's own text; whether it is the authors' implementation is not asserted","community":"Not in the archive's code links for this paper; a community repository Syntology harvested"},"n_pointer_only_for_licence":12,"samples":[{"code_sha256_prefix":"f41cb1a19b154297","entry":"encode_image","repo":"luo-ziyuan/ImageSentinel","repo_kind":"found_in_text","path":"ImageSentinel/utils.py","file_url":"https://github.com/luo-ziyuan/ImageSentinel/blob/HEAD/ImageSentinel/utils.py","link_basis":"harvester_set","language":"python","status":"ran_draft_wrong","verification_level":1,"contract_check":"OUTPUT_MISDECLARED","metamorphic_tier":"deterministic","behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"f41cb1a19b154297"}},{"code_sha256_prefix":"0deb896bad0d3b7b","entry":"calculate_clip_similarity","repo":"luo-ziyuan/ImageSentinel","repo_kind":"found_in_text","path":"compute_similarities.py","file_url":"https://github.com/luo-ziyuan/ImageSentinel/blob/HEAD/compute_similarities.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"0deb896bad0d3b7b"}},{"code_sha256_prefix":"81e811d605292b6e","entry":"calculate_dino_similarity","repo":"luo-ziyuan/ImageSentinel","repo_kind":"found_in_text","path":"compute_similarities.py","file_url":"https://github.com/luo-ziyuan/ImageSentinel/blob/HEAD/compute_similarities.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"81e811d605292b6e"}},{"code_sha256_prefix":"c18eab3d2bf63ca5","entry":"calculate_metrics","repo":"luo-ziyuan/ImageSentinel","repo_kind":"found_in_text","path":"evaluate_similarities.py","file_url":"https://github.com/luo-ziyuan/ImageSentinel/blob/HEAD/evaluate_similarities.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"c18eab3d2bf63ca5"}},{"code_sha256_prefix":"4c7b45ba03369ddf","entry":"check_retrieval_accuracy","repo":"luo-ziyuan/ImageSentinel","repo_kind":"found_in_text","path":"evaluate_similarities.py","file_url":"https://github.com/luo-ziyuan/ImageSentinel/blob/HEAD/evaluate_similarities.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"4c7b45ba03369ddf"}},{"code_sha256_prefix":"1ee991a42bbf7c52","entry":"collect_image_paths","repo":"luo-ziyuan/ImageSentinel","repo_kind":"found_in_text","path":"embedding_generation.py","file_url":"https://github.com/luo-ziyuan/ImageSentinel/blob/HEAD/embedding_generation.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"1ee991a42bbf7c52"}},{"code_sha256_prefix":"5db5540ff678809e","entry":"convert_res_to_captions","repo":"luo-ziyuan/ImageSentinel","repo_kind":"found_in_text","path":"ImageSentinel/utils.py","file_url":"https://github.com/luo-ziyuan/ImageSentinel/blob/HEAD/ImageSentinel/utils.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"5db5540ff678809e"}},{"code_sha256_prefix":"9d9ccb5c715623dd","entry":"get_sorted_images","repo":"luo-ziyuan/ImageSentinel","repo_kind":"found_in_text","path":"imageRAG_GPT4o_sentinel.py","file_url":"https://github.com/luo-ziyuan/ImageSentinel/blob/HEAD/imageRAG_GPT4o_sentinel.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"9d9ccb5c715623dd"}},{"code_sha256_prefix":"58e5176a0999cd77","entry":"image_generation_gpt","repo":"luo-ziyuan/ImageSentinel","repo_kind":"found_in_text","path":"imageRAG_GPT4o_sentinel.py","file_url":"https://github.com/luo-ziyuan/ImageSentinel/blob/HEAD/imageRAG_GPT4o_sentinel.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"58e5176a0999cd77"}},{"code_sha256_prefix":"3e7215b3a6e398f2","entry":"load_similarities","repo":"luo-ziyuan/ImageSentinel","repo_kind":"found_in_text","path":"evaluate_similarities.py","file_url":"https://github.com/luo-ziyuan/ImageSentinel/blob/HEAD/evaluate_similarities.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"3e7215b3a6e398f2"}},{"code_sha256_prefix":"b59db8015978edaf","entry":"message_gpt","repo":"luo-ziyuan/ImageSentinel","repo_kind":"found_in_text","path":"ImageSentinel/utils.py","file_url":"https://github.com/luo-ziyuan/ImageSentinel/blob/HEAD/ImageSentinel/utils.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"b59db8015978edaf"}},{"code_sha256_prefix":"53b4709155b99170","entry":"rerank_BM25","repo":"luo-ziyuan/ImageSentinel","repo_kind":"found_in_text","path":"retrieval_sentinel.py","file_url":"https://github.com/luo-ziyuan/ImageSentinel/blob/HEAD/retrieval_sentinel.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"53b4709155b99170"}}]},"arxiv_metadata":{"licence":"arXiv metadata, CC0 1.0 (https://info.arxiv.org/help/license)","fields":["title","abstract","authors","date"],"primary_category":"cs.CV","source":"arxiv_api"},"syntology_extracted_results":null}