{"id":"https://openalex.org/W4385767419","doi":"https://doi.org/10.24963/ijcai.2023/109","title":"Character As Pixels: A Controllable Prompt Adversarial Attacking Framework for Black-Box Text Guided Image Generation Models","display_name":"Character As Pixels: A Controllable Prompt Adversarial Attacking Framework for Black-Box Text Guided Image Generation Models","publication_year":2023,"publication_date":"2023-08-01","ids":{"openalex":"https://openalex.org/W4385767419","doi":"https://doi.org/10.24963/ijcai.2023/109"},"language":"en","primary_location":{"id":"doi:10.24963/ijcai.2023/109","is_oa":true,"landing_page_url":"https://doi.org/10.24963/ijcai.2023/109","pdf_url":"https://www.ijcai.org/proceedings/2023/0109.pdf","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Thirty-Second International Joint Conference on Artificial Intelligence","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://www.ijcai.org/proceedings/2023/0109.pdf","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5045401193","display_name":"Ziyi Kou","orcid":"https://orcid.org/0000-0002-9916-0930"},"institutions":[{"id":"https://openalex.org/I107639228","display_name":"University of Notre Dame","ror":"https://ror.org/00mkhxb43","country_code":"US","type":"education","lineage":["https://openalex.org/I107639228"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ziyi Kou","raw_affiliation_strings":["University of Notre Dame"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Notre Dame","institution_ids":["https://openalex.org/I107639228"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5034495880","display_name":"Shichao Pei","orcid":"https://orcid.org/0000-0002-0802-1506"},"institutions":[{"id":"https://openalex.org/I107639228","display_name":"University of Notre Dame","ror":"https://ror.org/00mkhxb43","country_code":"US","type":"education","lineage":["https://openalex.org/I107639228"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Shichao Pei","raw_affiliation_strings":["University of Notre Dame"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Notre Dame","institution_ids":["https://openalex.org/I107639228"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5057838053","display_name":"Yijun Tian","orcid":"https://orcid.org/0000-0003-2795-6080"},"institutions":[{"id":"https://openalex.org/I107639228","display_name":"University of Notre Dame","ror":"https://ror.org/00mkhxb43","country_code":"US","type":"education","lineage":["https://openalex.org/I107639228"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yijun Tian","raw_affiliation_strings":["University of Notre Dame"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Notre Dame","institution_ids":["https://openalex.org/I107639228"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5000755750","display_name":"Xiangliang Zhang","orcid":"https://orcid.org/0000-0002-3574-5665"},"institutions":[{"id":"https://openalex.org/I107639228","display_name":"University of Notre Dame","ror":"https://ror.org/00mkhxb43","country_code":"US","type":"education","lineage":["https://openalex.org/I107639228"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Xiangliang Zhang","raw_affiliation_strings":["University of Notre Dame"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Notre Dame","institution_ids":["https://openalex.org/I107639228"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I107639228"],"apc_list":null,"apc_paid":null,"fwci":0.8497,"has_fulltext":false,"cited_by_count":7,"citation_normalized_percentile":{"value":0.81639604,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"983","last_page":"990"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11714","display_name":"Multimodal Machine Learning Applications","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11714","display_name":"Multimodal Machine Learning Applications","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9948999881744385,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10775","display_name":"Generative Adversarial Networks and Image Synthesis","score":0.9941999912261963,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.8288260102272034},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7409748435020447},{"id":"https://openalex.org/keywords/closed-captioning","display_name":"Closed captioning","score":0.6500120162963867},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.610511302947998},{"id":"https://openalex.org/keywords/pixel","display_name":"Pixel","score":0.606098473072052},{"id":"https://openalex.org/keywords/character","display_name":"Character (mathematics)","score":0.5760045051574707},{"id":"https://openalex.org/keywords/image","display_name":"Image (mathematics)","score":0.5463415384292603},{"id":"https://openalex.org/keywords/white-box","display_name":"White box","score":0.49651795625686646},{"id":"https://openalex.org/keywords/black-box","display_name":"Black box","score":0.4867801368236542},{"id":"https://openalex.org/keywords/proxy","display_name":"Proxy (statistics)","score":0.44007959961891174},{"id":"https://openalex.org/keywords/representation","display_name":"Representation (politics)","score":0.42459720373153687},{"id":"https://openalex.org/keywords/computer-vision","display_name":"Computer vision","score":0.38863980770111084},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.34020620584487915},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.33860939741134644},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.12027496099472046}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8288260102272034},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7409748435020447},{"id":"https://openalex.org/C157657479","wikidata":"https://www.wikidata.org/wiki/Q2367247","display_name":"Closed captioning","level":3,"score":0.6500120162963867},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.610511302947998},{"id":"https://openalex.org/C160633673","wikidata":"https://www.wikidata.org/wiki/Q355198","display_name":"Pixel","level":2,"score":0.606098473072052},{"id":"https://openalex.org/C2780861071","wikidata":"https://www.wikidata.org/wiki/Q1062934","display_name":"Character (mathematics)","level":2,"score":0.5760045051574707},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.5463415384292603},{"id":"https://openalex.org/C180932941","wikidata":"https://www.wikidata.org/wiki/Q997233","display_name":"White box","level":2,"score":0.49651795625686646},{"id":"https://openalex.org/C94966114","wikidata":"https://www.wikidata.org/wiki/Q29256","display_name":"Black box","level":2,"score":0.4867801368236542},{"id":"https://openalex.org/C2780148112","wikidata":"https://www.wikidata.org/wiki/Q1432581","display_name":"Proxy (statistics)","level":2,"score":0.44007959961891174},{"id":"https://openalex.org/C2776359362","wikidata":"https://www.wikidata.org/wiki/Q2145286","display_name":"Representation (politics)","level":3,"score":0.42459720373153687},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.38863980770111084},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.34020620584487915},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.33860939741134644},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.12027496099472046},{"id":"https://openalex.org/C94625758","wikidata":"https://www.wikidata.org/wiki/Q7163","display_name":"Politics","level":2,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.24963/ijcai.2023/109","is_oa":true,"landing_page_url":"https://doi.org/10.24963/ijcai.2023/109","pdf_url":"https://www.ijcai.org/proceedings/2023/0109.pdf","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Thirty-Second International Joint Conference on Artificial Intelligence","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.24963/ijcai.2023/109","is_oa":true,"landing_page_url":"https://doi.org/10.24963/ijcai.2023/109","pdf_url":"https://www.ijcai.org/proceedings/2023/0109.pdf","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Thirty-Second International Joint Conference on Artificial Intelligence","raw_type":"proceedings-article"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.4099999964237213}],"awards":[{"id":"https://openalex.org/G356514451","display_name":"NSF Center for Computer-Assisted Synthesis","funder_award_id":"2202693","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"grobid_xml":false,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4385767419.pdf"},"referenced_works_count":18,"referenced_works":["https://openalex.org/W1861492603","https://openalex.org/W2185175083","https://openalex.org/W2896457183","https://openalex.org/W2949128310","https://openalex.org/W2996851481","https://openalex.org/W3036167779","https://openalex.org/W3117433489","https://openalex.org/W3166396011","https://openalex.org/W3176393001","https://openalex.org/W4224035735","https://openalex.org/W4283811884","https://openalex.org/W4290944423","https://openalex.org/W4296567072","https://openalex.org/W4296960188","https://openalex.org/W4305001257","https://openalex.org/W4308504118","https://openalex.org/W4312933868","https://openalex.org/W4382317738"],"related_works":["https://openalex.org/W2047881532","https://openalex.org/W1984273188","https://openalex.org/W2727407240","https://openalex.org/W154189287","https://openalex.org/W3033197410","https://openalex.org/W3009622996","https://openalex.org/W2777690624","https://openalex.org/W3037859390","https://openalex.org/W2601181618","https://openalex.org/W1855700431"],"abstract_inverted_index":{"In":[0],"this":[1],"paper,":[2],"we":[3,84],"study":[4,59],"a":[5,33,39,87,98,124,165],"controllable":[6],"prompt":[7,53,99,112],"adversarial":[8,78,150],"attacking":[9,68,91,116,151,154],"problem":[10],"for":[11,110,118,129],"text":[12,149],"guided":[13],"image":[14,41,121,140],"generation":[15],"(Text2Image)":[16],"models":[17,163],"in":[18,38,164],"the":[19,23,48,51,63,107,111,115,119,135,175,178],"black-box":[20,161],"scenario,":[21],"where":[22],"goal":[24],"is":[25,60],"to":[26,36,56,76],"attack":[27],"specific":[28,95],"visual":[29],"subjects":[30,156],"(e.g.,":[31,54],"changing":[32],"brown":[34],"dog":[35],"white)":[37],"generated":[40,120,158],"by":[42,62,104,160],"slightly,":[43],"if":[44],"not":[45],"imperceptibly,":[46],"perturbing":[47],"characters":[49,96,176],"of":[50,65,97,157,177],"driven":[52],"``brown''":[55],"``br0wn'').":[57],"Our":[58],"motivated":[61],"limitations":[64],"current":[66],"Text2Image":[67,162],"approaches":[69,152],"that":[70,93,145],"still":[71],"rely":[72],"on":[73,123,153,174],"manual":[74],"trials":[75],"create":[77],"prompts.":[79,179],"To":[80],"address":[81],"such":[82],"limitations,":[83],"develop":[85],"CharGrad,":[86],"character-level":[88],"gradient":[89],"based":[90,122],"framework":[92],"replaces":[94],"with":[100,171],"pixel-level":[101],"similar":[102],"ones":[103],"interactively":[105],"learning":[106],"perturbation":[108,127,173],"direction":[109],"and":[113,168],"updating":[114],"examiner":[117],"novel":[125],"proxy":[126],"representation":[128],"characters.":[130],"We":[131],"evaluate":[132],"CharGrad":[133,146],"using":[134],"texts":[136],"from":[137],"two":[138],"public":[139],"captioning":[141],"datasets.":[142],"Results":[143],"demonstrate":[144],"outperforms":[147],"existing":[148],"various":[155],"images":[159],"more":[166],"effective":[167],"efficient":[169],"way":[170],"less":[172]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":4},{"year":2024,"cited_by_count":2}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}