Step Vulnerability Guided Mean Fluctuation Adversarial Attack against Conditional Diffusion Models

The high-quality generation results of conditional diffusion models have brought about concerns regarding privacy and copyright issues. As a possible technique for preventing the abuse of diffusion models, the adversarial attack against diffusion models has attracted academic attention recently. In this work, utilizing the phenomenon that diffusion models are highly sensitive to the mean value of the input noise, we propose the Mean Fluctuation Attack (MFA) to introduce mean fluctuations by shifting the mean values of the estimated noises during the reverse process. In addition, we reveal that the vulnerability of different reverse steps against adversarial attacks actually varies significantly. By modeling the step vulnerability and using it as guidance to sample the target steps for generating adversarial examples, the effectiveness of adversarial attacks can be substantially enhanced. Extensive experiments show that our algorithm can steadily cause the mean shift of the predicted noises so as to disrupt the entire reverse generation process and degrade the generation results significantly. We also demonstrate that the step vulnerability is intrinsic to the reverse process by verifying its effectiveness in an attack method other than MFA. Code and Supplementary is available at https://github.com/yuhongwei22/MFA

Authors

• Hongwei Yu University of Science and Technology Beijing
• Jiansheng Chen University of Science and Technology Beijing
• Xinlong Ding University of Science and Technology Beijing
• Yudong Zhang University of Science and Technology of China
• Ting Tang University of Science and Technology Beijing
• Huimin Ma University of Science and Technology Beijing

Keywords

• CV: Adversarial Attacks & Robustness
• ML: Adversarial Learning & Robustness
• ML: Deep Generative Models & Autoencoders