{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,4]],"date-time":"2026-05-04T03:30:50Z","timestamp":1777865450474,"version":"3.51.4"},"reference-count":53,"publisher":"IEEE","license":[{"start":{"date-parts":[[2025,10,19]],"date-time":"2025-10-19T00:00:00Z","timestamp":1760832000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,10,19]],"date-time":"2025-10-19T00:00:00Z","timestamp":1760832000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025,10,19]]},"DOI":"10.1109\/iccv51701.2025.01565","type":"proceedings-article","created":{"date-parts":[[2026,4,29]],"date-time":"2026-04-29T19:45:49Z","timestamp":1777491949000},"page":"16851-16860","source":"Crossref","is-referenced-by-count":0,"title":["PLA: Prompt Learning Attack Against Text-To-Image Generative Models"],"prefix":"10.1109","author":[{"given":"Xinqi","family":"Lyu","sequence":"first","affiliation":[{"name":"The Hong Kong Polytechnic University,China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yihao","family":"Liu","sequence":"additional","affiliation":[{"name":"The Hong Kong Polytechnic University,China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yanjie","family":"Li","sequence":"additional","affiliation":[{"name":"The Hong Kong Polytechnic University,China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Bin","family":"Xiao","sequence":"additional","affiliation":[{"name":"The Hong Kong Polytechnic University,China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","volume-title":"Dall\u2022e 3"},{"key":"ref2","volume-title":"Gpt-4."},{"key":"ref3","volume-title":"Gen-2"},{"key":"ref4","volume-title":"Microsoft designer"},{"key":"ref5","volume-title":"Midjourney"},{"key":"ref6","volume-title":"Pixart"},{"key":"ref7","journal-title":"Stable diffusion v1.4 checkpoint,"},{"key":"ref8","journal-title":"Stable diffusion v1.5 checkpoint,"},{"key":"ref9","volume-title":"stability.ai"},{"key":"ref10","article-title":"Deepzero: Scaling up zeroth-order optimization for deep model training","author":"Chen","year":"2023","journal-title":"arXiv preprint"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/3128572.3140448"},{"key":"ref12","article-title":"Zo-adamm: Zeroth-order adaptive momentum method for black-box optimization","author":"Chen","year":"2019","journal-title":"Advances in neural information processing systems"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-72952-2_6"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1007\/s11831-022-09872-y"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51070.2023.00230"},{"key":"ref16","first-page":"6840","article-title":"Denoising diffusion probabilistic models","volume":"33","author":"Ho","year":"2020","journal-title":"Advances in neural information processing systems"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-73661-2_20"},{"key":"ref18","first-page":"2","article-title":"Bert: Pre-training of deep bidirectional transformers for language understanding","volume-title":"In Proceedings of naacL-HLT","author":"Devlin"},{"key":"ref19","article-title":"Adam: A method for stochastic optimization","author":"Kingma","year":"2014","journal-title":"arXiv preprint"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51070.2023.02074"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.52202\/075280-3067"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/3658644.3670295"},{"key":"ref23","article-title":"Uv-attack: Physical-world adversarial attacks for person detection via dynamic-nerf-based uv mapping","author":"Li","year":"2025","journal-title":"arXiv preprint"},{"key":"ref24","first-page":"20763","article-title":"Adversarial example does good: Preventing painting imitation from diffusion models via adversarial examples","volume-title":"In International Conference on Machine Learning","author":"Liang"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52734.2025.02403"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.01972"},{"key":"ref27","article-title":"Intriguing properties of text-guided diffusion models","author":"Liu","year":"2023","journal-title":"arXiv preprint"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-73347-5_6"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1007\/s10462-024-11024-6"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52733.2024.00615"},{"key":"ref31","article-title":"Black box adversarial prompting for foundation models","author":"Maus","year":"2023","journal-title":"In The Second Workshop on New Frontiers in Adversarial Machine Learning"},{"key":"ref32","article-title":"Sdxl: Improving latent diffusion models for high-resolution image synthesis","volume-title":"arXiv preprint","author":"Podell","year":"2023"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1145\/3576915.3616679"},{"key":"ref34","first-page":"8748","article-title":"Learning transferable visual models from natural language supervision","volume-title":"In International conference on machine learning","author":"Radford"},{"issue":"140","key":"ref35","first-page":"1","article-title":"Exploring the limits of transfer learning with a unified text-to-text transformer","volume":"21","author":"Raffel","year":"2020","journal-title":"Journal of machine learning research"},{"key":"ref36","article-title":"Red-teaming the stable diffusion safety filter","author":"Rando","year":"2022","journal-title":"arXiv preprint"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01042"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.52202\/068431-2643"},{"key":"ref39","first-page":"29894","article-title":"Raising the cost of malicious ai-powered image editing","volume-title":"In International Conference on Machine Learning","author":"Salman"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1145\/3531146.3533192"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.02157"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1002\/0471722138"},{"issue":"134","key":"ref43","first-page":"1","article-title":"Stochastic gradient descent as approximate bayesian inference","volume":"18","author":"Stephan","year":"2017","journal-title":"Journal of Machine Learning Research"},{"key":"ref44","article-title":"Ring-a-bell! how reliable are concept removal methods for diffusion models?","volume-title":"In International Conference on Learning Representations","author":"Tsai"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52733.2024.00739"},{"key":"ref46","article-title":"Guardt2i: Defending text-to-image models from adversarial prompts","author":"Yang","year":"2024","journal-title":"arXiv preprint"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/SP54263.2024.00123"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW63382.2024.00182"},{"key":"ref49","article-title":"On the robustness of latent diffusion models","author":"Zhang","year":"2023","journal-title":"arXiv preprint"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-72998-0_22"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2024.3392335"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1016\/j.enconman.2020.113751"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW59228.2023.00236"}],"event":{"name":"2025 IEEE\/CVF International Conference on Computer Vision (ICCV)","location":"Honolulu, HI, USA","start":{"date-parts":[[2025,10,19]]},"end":{"date-parts":[[2025,10,25]]}},"container-title":["2025 IEEE\/CVF International Conference on Computer Vision (ICCV)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11443115\/11443287\/11446226.pdf?arnumber=11446226","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,4,30]],"date-time":"2026-04-30T06:34:43Z","timestamp":1777530883000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11446226\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,10,19]]},"references-count":53,"URL":"https:\/\/doi.org\/10.1109\/iccv51701.2025.01565","relation":{},"subject":[],"published":{"date-parts":[[2025,10,19]]}}}