Poisoning attacks on textual inversion operate at low-noise timesteps and across the whole image; Safe-Zone Training (JPEG, high-timestep sampling, loss masking) nullifies six tested poisons and matches clean-data quality.
Zico Kolter
1 Pith paper cite this work. Polarity classification is still indexing.
1
Pith paper citing it
citation-role summary
background 1
citation-polarity summary
fields
cs.CR 1years
2025 1verdicts
CONDITIONAL 1roles
background 1polarities
unclear 1representative citing papers
citing papers explorer
-
When and Where do Data Poisons Attack Textual Inversion?
Poisoning attacks on textual inversion operate at low-noise timesteps and across the whole image; Safe-Zone Training (JPEG, high-timestep sampling, loss masking) nullifies six tested poisons and matches clean-data quality.