Beauty and the Beast: Imperceptible Perturbations Against Diffusion-Based Face Swapping via Directional Attribute Editing
By: Yilong Huang, Songze Li
Potential Business Impact:
Protects faces from being copied by AI.
Diffusion-based face swapping achieves state-of-the-art performance, yet it also exacerbates the potential harm of malicious face swapping to violate portraiture right or undermine personal reputation. This has spurred the development of proactive defense methods. However, existing approaches face a core trade-off: large perturbations distort facial structures, while small ones weaken protection effectiveness. To address these issues, we propose FaceDefense, an enhanced proactive defense framework against diffusion-based face swapping. Our method introduces a new diffusion loss to strengthen the defensive efficacy of adversarial examples, and employs a directional facial attribute editing to restore perturbation-induced distortions, thereby enhancing visual imperceptibility. A two-phase alternating optimization strategy is designed to generate final perturbed face images. Extensive experiments show that FaceDefense significantly outperforms existing methods in both imperceptibility and defense effectiveness, achieving a superior trade-off.
Similar Papers
Safeguarding Facial Identity against Diffusion-based Face Swapping via Cascading Pathway Disruption
CV and Pattern Recognition
Stops fake faces from looking real.
Disruptive Attacks on Face Swapping via Low-Frequency Perceptual Perturbations
CV and Pattern Recognition
Stops fake videos from fooling people.
Fragile by Design: On the Limits of Adversarial Defenses in Personalized Generation
CV and Pattern Recognition
Protects your face from AI stealing your identity.