{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,1]],"date-time":"2026-05-01T17:19:21Z","timestamp":1777655961689,"version":"3.51.4"},"reference-count":65,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62302170"],"award-info":[{"award-number":["62302170"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100021171","name":"Basic and Applied Basic Research Foundation of Guangdong Province","doi-asserted-by":"publisher","award":["2024A1515010187"],"award-info":[{"award-number":["2024A1515010187"]}],"id":[{"id":"10.13039\/501100021171","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Guangzhou Basic and Applied Basic Research Foundation","award":["2024A04J3750"],"award-info":[{"award-number":["2024A04J3750"]}]},{"name":"Guangdong Provincial Natural Science Foundation for Outstanding Youth","award":["2024B1515040010"],"award-info":[{"award-number":["2024B1515040010"]}]},{"name":"China National Key Research and Development Program","award":["2023YFE0202700"],"award-info":[{"award-number":["2023YFE0202700"]}]},{"name":"China National Key Research and Development Program","award":["2024YFB4709200"],"award-info":[{"award-number":["2024YFB4709200"]}]},{"name":"NSFC Key Project","award":["U23A20391"],"award-info":[{"award-number":["U23A20391"]}]},{"name":"Key-Area Research and Development Program of Guangzhou","award":["2023B01J0022"],"award-info":[{"award-number":["2023B01J0022"]}]},{"name":"Guangdong Natural Science Funds for Distinguished Young Scholars","award":["2023B1515020097"],"award-info":[{"award-number":["2023B1515020097"]}]},{"name":"AI Singapore Programme through the National Research Foundation Singapore","award":["AISG3-GV-2023-011"],"award-info":[{"award-number":["AISG3-GV-2023-011"]}]},{"name":"Lee Kong Chian Fellowships"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans.Inform.Forensic Secur."],"published-print":{"date-parts":[[2025]]},"DOI":"10.1109\/tifs.2025.3555552","type":"journal-article","created":{"date-parts":[[2025,3,28]],"date-time":"2025-03-28T03:25:46Z","timestamp":1743132346000},"page":"3936-3949","source":"Crossref","is-referenced-by-count":2,"title":["SITA: Structurally Imperceptible and Transferable Adversarial Attacks for Stylized Image Generation"],"prefix":"10.1109","volume":"20","author":[{"given":"Jingdan","family":"Kang","sequence":"first","affiliation":[{"name":"School of Future Technology, South China University of Technology, Guangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0008-5988-9816","authenticated-orcid":false,"given":"Haoxin","family":"Yang","sequence":"additional","affiliation":[{"name":"School of Computer Science and Engineering, South China University of Technology, Guangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yan","family":"Cai","sequence":"additional","affiliation":[{"name":"School of Future Technology, South China University of Technology, Guangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7662-9831","authenticated-orcid":false,"given":"Huaidong","family":"Zhang","sequence":"additional","affiliation":[{"name":"School of Future Technology, South China University of Technology, Guangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8006-3663","authenticated-orcid":false,"given":"Xuemiao","family":"Xu","sequence":"additional","affiliation":[{"name":"School of Computer Science and Engineering, South China University of Technology, Guangzhou, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1864-8326","authenticated-orcid":false,"given":"Yong","family":"Du","sequence":"additional","affiliation":[{"name":"School of Computer Science and Technology, Ocean University of China, Qingdao, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3802-4644","authenticated-orcid":false,"given":"Shengfeng","family":"He","sequence":"additional","affiliation":[{"name":"School of Computing and Information Systems, Singapore Management University, Bras Basah, Singapore"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","first-page":"2256","article-title":"Deep unsupervised learning using nonequilibrium thermodynamics","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Sohl-Dickstein"},{"key":"ref2","first-page":"6840","article-title":"Denoising diffusion probabilistic models","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"33","author":"Ho"},{"key":"ref3","article-title":"DreamBooth: Fine tuning text-to-image diffusion models for subject-driven generation","author":"Ruiz","year":"2022","journal-title":"arXiv:2208.12242"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v38i5.28226"},{"key":"ref5","article-title":"An image is worth one word: Personalizing text-to-image generation using textual inversion","volume-title":"Proc. 11th Int. Conf. Learn. Represent.","author":"Gal"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01042"},{"key":"ref7","article-title":"Intriguing properties of neural networks","author":"Szegedy","year":"2013","journal-title":"arXiv:1312.6199"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2022.3162397"},{"key":"ref9","first-page":"20763","article-title":"Adversarial example does good: Preventing painting imitation from diffusion models via adversarial examples","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Liang"},{"key":"ref10","first-page":"1","article-title":"Toward effective protection against diffusion-based mimicry through score distillation","volume-title":"Proc. 12th Int. Conf. Learn. Represent.","author":"Xue"},{"key":"ref11","first-page":"2187","article-title":"Glaze: Protecting artists from style mimicry by text-to-image models","volume-title":"Proc. 32nd USENIX Secur. Symp.","author":"Shan"},{"key":"ref12","article-title":"PID: Prompt-independent data protection against latent diffusion models","author":"Li","year":"2024","journal-title":"arXiv:2406.15305"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51070.2023.00202"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52733.2024.02286"},{"key":"ref15","first-page":"8748","article-title":"Learning transferable visual models from natural language supervision","volume-title":"Proc. Int. Conf. Mach. Learn.","volume":"139","author":"Radford"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51070.2023.00699"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-19778-9_40"},{"key":"ref18","article-title":"Hierarchical text-conditional image generation with CLIP latents","author":"Ramesh","year":"2022","journal-title":"arXiv:2204.06125"},{"key":"ref19","first-page":"5207","article-title":"CLIPDraw: Exploring text-to-drawing synthesis through language-image encoders","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Frans"},{"key":"ref20","article-title":"Denoising diffusion implicit models","author":"Song","year":"2020","journal-title":"arXiv:2010.02502"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01104"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.265"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/3528233.3530736"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/TVCG.2022.3228707"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.02155"},{"key":"ref26","article-title":"Explaining and harnessing adversarial examples","author":"Goodfellow","year":"2014","journal-title":"arXiv:1412.6572"},{"key":"ref27","article-title":"Towards deep learning models resistant to adversarial attacks","author":"Madry","year":"2017","journal-title":"arXiv:1706.06083"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.282"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2016.36"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2023.3310352"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2023.3284649"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2024.3480519"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2024.3359441"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01488"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.00741"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-19772-7_32"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51070.2023.00401"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.17"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.00209"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01753"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1145\/3528223.3530068"},{"key":"ref43","article-title":"A neural algorithm of artistic style","author":"Gatys","year":"2015","journal-title":"arXiv:1508.06576"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-46475-6_43"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.167"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51070.2023.00706"},{"key":"ref47","first-page":"3","article-title":"Toward a theory of style","author":"Meyer","year":"1979","journal-title":"The Concept of Style"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1007\/11848035_47"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/MMSP.2009.5293271"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/WACV.2015.84"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/78.157290"},{"key":"ref52","article-title":"Large-scale classification of fine-art paintings: Learning the right metric on the right feature","author":"Saleh","year":"2015","journal-title":"arXiv:1505.00855"},{"key":"ref53","article-title":"The ArtBench dataset: Benchmarking generative models with artworks","author":"Liao","year":"2022","journal-title":"arXiv:2206.11404"},{"key":"ref54","first-page":"1","article-title":"PyTorch: An imperative style, high-performance deep learning library","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Paszke"},{"key":"ref55","first-page":"1","article-title":"GANs trained by a two time-scale update rule converge to a local Nash equilibrium","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Heusel"},{"key":"ref56","article-title":"Multi-concept customization of Text-to-Image diffusion","author":"Kumari","year":"2022","journal-title":"arXiv:2212.04488"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2003.819861"},{"key":"ref58","volume-title":"Digital Image Processing","author":"Gonzalez","year":"2008"},{"key":"ref59","article-title":"RB-modulation: Training-free personalization of diffusion models using stochastic optimal control","author":"Rout","year":"2024","journal-title":"arXiv:2405.17401"},{"key":"ref60","article-title":"Wuerstchen: An efficient architecture for large-scale text-to-image diffusion models","author":"Pernias","year":"2023","journal-title":"arXiv:2306.00637"},{"key":"ref61","article-title":"Countering adversarial images using input transformations","author":"Guo","year":"2017","journal-title":"arXiv:1711.00117"},{"key":"ref62","article-title":"A study of the effect of JPG compression on adversarial images","author":"Karolina Dziugaite","year":"2016","journal-title":"arXiv:1608.00853"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52733.2024.00840"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW59228.2023.00087"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.00787"}],"container-title":["IEEE Transactions on Information Forensics and Security"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/10206\/10810755\/10943240.pdf?arnumber=10943240","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,4,19]],"date-time":"2025-04-19T04:31:23Z","timestamp":1745037083000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10943240\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025]]},"references-count":65,"URL":"https:\/\/doi.org\/10.1109\/tifs.2025.3555552","relation":{},"ISSN":["1556-6013","1556-6021"],"issn-type":[{"value":"1556-6013","type":"print"},{"value":"1556-6021","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025]]}}}