Searcharxiv⌕ Search

arXiv subjects

Xun Lin

Publications and source records attributed to Xun Lin.

49 records · Page 3Linked to original sources

DDAP: Dual-Domain Anti-Personalization against Text-to-Image Diffusion Models

Diffusion-based personalized visual content generation technologies have achieved significant breakthroughs, allowing for the creation of specific objects by just learning from a few reference photos. However, when misused to fabricate fake news or unsettling content targeting individuals, these technologies could cause considerable societal harm. To address this problem, current methods generate adversarial samples by adversarially maximizing the training loss, thereby disrupting the output of any personalized generation model trained with these samples. However, the existing methods fail to achieve effective defense and maintain stealthiness, as they overlook the intrinsic properties of diffusion models. In this paper, we introduce a novel Dual-Domain Anti-Personalization framework (DDAP). Specifically, we have developed Spatial Perturbation Learning (SPL) by exploiting the fixed and perturbation-sensitive nature of the image encoder in personalized generation. Subsequently, we have designed a Frequency Perturbation Learning (FPL) method that utilizes the characteristics of diffusion models in the frequency domain. The SPL disrupts the overall texture of the generated images, while the FPL focuses on image details. By alternating between these two methods, we construct the DDAP framework, effectively harnessing the strengths of both domains. To further enhance the visual quality of the adversarial samples, we design a localization module to accurately capture attentive areas while ensuring the effectiveness of the attack and avoiding unnecessary disturbances in the background. Extensive experiments on facial benchmarks have shown that the proposed DDAP enhances the disruption of personalized generation models while also maintaining high quality in adversarial samples, making it more effective in protecting privacy in practical applications.

cs.CV↗

Serre algebra, matrix factorization and categorical Torelli theorem for hypersurfaces

Let $X$ be a smooth Fano variety. We attach a bi-graded associative algebra $\mathrm{HS}(\mathcal{K}u(X))=\bigoplus_{i,j\in \mathbb{Z}} \mathrm{Hom}(\mathrm{Id},S_{\mathcal{K}u(X)}^{i}[j])$ to the Kuznetsov component $\mathcal{K}u(X)$ whenever it is defined. Then we construct a natural sub-algebra of $\mathrm{HS}(\mathcal{K}u(X))$ when $X$ is a Fano hypersurface and establish its relation with Jacobian ring $\mathrm{Jac}(X)$. As an application, we prove a categorical Torelli theorem for Fano hypersurface $X\subset\mathbb{P}^n(n\geq 2)$ of degree $d$ if $\mathrm{gcd}(n+1,d)=1.$ In addition, we give a new proof of the $[Pir22, Theorem 1.2]$ using a similar idea.

math.AG↗

Exposing Image Splicing Traces in Scientific Publications via Uncertainty-guided Refinement

Recently, a surge in scientific publications suspected of image manipulation has led to numerous retractions, bringing the issue of image integrity into sharp focus. Although research on forensic detectors for image plagiarism and image synthesis exists, the detection of image splicing traces in scientific publications remains unexplored. Compared to image duplication and synthesis, image splicing detection is more challenging due to the lack of reference images and the typically small tampered areas. Furthermore, disruptive factors in scientific images, such as artifacts from digital compression, abnormal patterns, and noise from physical operations, present misleading features like splicing traces, significantly increasing the difficulty of this task. Moreover, the scarcity of high-quality datasets of spliced scientific images limits potential advancements. In this work, we propose an Uncertainty-guided Refinement Network (URN) to mitigate the impact of these disruptive factors. Our URN can explicitly suppress the propagation of unreliable information flow caused by disruptive factors between regions, thus obtaining robust splicing features. Additionally, the URN is designed to concentrate improvements in uncertain prediction areas during the decoding phase. We also construct a dataset for image splicing detection (SciSp) containing 1,290 spliced images. Compared to existing datasets, SciSp includes the largest number of spliced images and the most diverse sources. Comprehensive experiments conducted on three benchmark datasets demonstrate the superiority of our approach. We also validate the URN's generalisability in resisting cross-dataset domain shifts and its robustness against various post-processing techniques, including advanced deep-learning-based inpainting.

cs.CV↗

Safeguarding Medical Image Segmentation Datasets against Unauthorized Training via Contour- and Texture-Aware Perturbations

The widespread availability of publicly accessible medical images has significantly propelled advancements in various research and clinical fields. Nonetheless, concerns regarding unauthorized training of AI systems for commercial purposes and the duties of patient privacy protection have led numerous institutions to hesitate to share their images. This is particularly true for medical image segmentation (MIS) datasets, where the processes of collection and fine-grained annotation are time-intensive and laborious. Recently, Unlearnable Examples (UEs) methods have shown the potential to protect images by adding invisible shortcuts. These shortcuts can prevent unauthorized deep neural networks from generalizing. However, existing UEs are designed for natural image classification and fail to protect MIS datasets imperceptibly as their protective perturbations are less learnable than important prior knowledge in MIS, e.g., contour and texture features. To this end, we propose an Unlearnable Medical image generation method, termed UMed. UMed integrates the prior knowledge of MIS by injecting contour- and texture-aware perturbations to protect images. Given that our target is to only poison features critical to MIS, UMed requires only minimal perturbations within the ROI and its contour to achieve greater imperceptibility (average PSNR is 50.03) and protective performance (clean average DSC degrades from 82.18% to 6.80%).

eess.IV↗

Suppress and Rebalance: Towards Generalized Multi-Modal Face Anti-Spoofing

Face Anti-Spoofing (FAS) is crucial for securing face recognition systems against presentation attacks. With advancements in sensor manufacture and multi-modal learning techniques, many multi-modal FAS approaches have emerged. However, they face challenges in generalizing to unseen attacks and deployment conditions. These challenges arise from (1) modality unreliability, where some modality sensors like depth and infrared undergo significant domain shifts in varying environments, leading to the spread of unreliable information during cross-modal feature fusion, and (2) modality imbalance, where training overly relies on a dominant modality hinders the convergence of others, reducing effectiveness against attack types that are indistinguishable sorely using the dominant modality. To address modality unreliability, we propose the Uncertainty-Guided Cross-Adapter (U-Adapter) to recognize unreliably detected regions within each modality and suppress the impact of unreliable regions on other modalities. For modality imbalance, we propose a Rebalanced Modality Gradient Modulation (ReGrad) strategy to rebalance the convergence speed of all modalities by adaptively adjusting their gradients. Besides, we provide the first large-scale benchmark for evaluating multi-modal FAS performance under domain generalization scenarios. Extensive experiments demonstrate that our method outperforms state-of-the-art methods. Source code and protocols will be released on https://github.com/OMGGGGG/mmdg.

cs.CV↗

Categorical Torelli theorems for Gushel-Mukai threefolds

We show that a general ordinary Gushel-Mukai(GM) threefold $X$ is reconstructed from the Kuznetsov component $\mathcal{K}u(X)$ together with an extra data coming from tautological sub-bundle of Grassmannian $\mathrm{Gr}(2,5)$. We also prove that $\mathcal{K}u(X)$ determines birational isomorphism class of $X$, while $\mathcal{K}u(X')$ determines the isomorphism class of a general special GM threefold $X'$. As an application, we prove a conjecture of Kuznetsov-Perry in dimension three under a mild assumption. Finally, we use $\mathcal{K}u(X)$ to restate a conjecture of Debarre-Iliev-Manivel regarding fibers of the period map for ordinary GM threefolds.

math.AG↗

Fully faithful functors, skyscraper sheaves, and birational equivalence

Let $X$ and $Y$ be two smooth projective varieties such that there is a fully faithful exact functor from $D^b(\mathrm{Coh}(X))$ to $D^b(\mathrm{Coh}(Y))$. We show that $X$ and $Y$ are birational equivalent if the functor maps one skyscraper sheaf to a skyscraper sheaf. Further assuming that $X$ and $Y$ are of the same dimension, we show that if $X$ has ample canonical bundle and $H^0(X ,K_X)\neq 0$, or if $X$ is a K3 surface with Picard number one, then $Y$ is birational to a Fourier--Mukai partner of $X$.

math.AG↗

Infinitesimal categorical Torelli theorems for Fano threefolds

Let $X$ be a smooth Fano variety and $\mathcal{K}u(X)$ the Kuznetsov component. Torelli theorems for $\mathcal{K}u(X)$ says that it is uniquely determined by a polarized abelian variety attached to it. An infinitesimal Torelli theorem for $X$ says that the differential of the period map is injective. A categorical variant of infinitesimal Torelli theorem for $X$ says that the morphism $H^1(X,T_X)\xrightarrowη HH^2(\mathcal{K}u(X))$ is injective. In the present article, we use the machinery of Hochschild (co)homology to relate the three Torelli-type theorems for smooth Fano varieties via a commutative diagram. As an application, we first prove infinitesimal categorical Torelli theorem for a class of prime Fano threefolds. Then we prove a restatement of the Debarre-Iliev-Manivel conjecture infinitesimally.

math.AG↗

Some remarks of Hochschild homology and semi-orthogonal decompositions

Given a nontrivial semi-orthogonal decomposition $\Perf(\X)=\langle \mathcal{A},\mathcal{B}\rangle$, and assume that the base locus of $ω_{\X}$ is a proper closed subset, it was proved by Kotaro Kawatani and Shinnosuke Okawa that all skyscraper sheaves $\k(\x)$ with $\x\notin \mathsf{Bs}\vert ω_{\X}\vert$ belong to exactly one and only one of the components. It is natural to ask which one it is, and whether we can determine this by certain linear invariants. In this note we use Hochschild homology of derived category of coherent sheaves with support to provide another proof that if the $-\n^þ$ Hochschild homology of a component is nonzero, then the skyscraper sheaves we consider above belong to such component, which was originally proved by Dmitrii Pirozhkov \cite[Lemma 5.3]{pirozhkov2020admissible}. Furthermore, we prove a conjecture proposed by Kuznetsov about classifying $\n$-Calabi-Yau admissible subcategory of $\Perf(\X)$ ($\dim \X=\n$) for certain projective smooth variety $\X$ if we put more assumptions to the Calabi-Yau categories. Finally we remark that the additive invariants of derived category with support could provide more linear obstructions to semi-orthogonal decompositions.

math.AG↗

On nonexistence of semi-orthogonal decompositions in algebraic geometry

The nonexistence of semi-orthogonal decompositions in algebraic geometry is known to be governed by the base locus of the canonical bundle. We study another locus, namely the intersection of the base loci of line bundles that are isomorphic to the canonical bundle in the Néron-Severi group, and show that it also governs the nonexistence of semi-orthogonal decompositions. As an application by using algebraically moving techniques, we prove that the bounded derived category of the $i$-th symmetric product of a smooth projective curve $C$ has no nontrivial semi-orthogonal decompositions when the genus $g(C)\geq 2$ and $i\leq g(C)-1$. We prove indecomposability of derived categories of some examples of elliptic surfaces with $P_{g}(X)=0$, and some natural examples of minimal surfaces of general type. Finally, an inequality involving phases of skyscraper sheaves for any Bridgeland stability condition is obtained.

math.AG↗

Noncommutative Hodge conjecture

The paper provides a version of the rational Hodge conjecture for $\3\dg$ categories. The noncommutative Hodge conjecture is equivalent to the version proposed in \cite{perry2020integral} for admissible subcategories. We obtain examples of evidence of the Hodge conjecture by techniques of noncommutative geometry. Finally, we show that the noncommutative Hodge conjecture for smooth proper connective $\3\dg$ algebras is true.

math.AG↗

A Distributed Approach towards Discriminative Distance Metric Learning

Distance metric learning is successful in discovering intrinsic relations in data. However, most algorithms are computationally demanding when the problem size becomes large. In this paper, we propose a discriminative metric learning algorithm, and develop a distributed scheme learning metrics on moderate-sized subsets of data, and aggregating the results into a global solution. The technique leverages the power of parallel computation. The algorithm of the aggregated distance metric learning (ADML) scales well with the data size and can be controlled by the partition. We theoretically analyse and provide bounds for the error induced by the distributed treatment. We have conducted experimental evaluation of ADML, both on specially designed tests and on practical image annotation tasks. Those tests have shown that ADML achieves the state-of-the-art performance at only a fraction of the cost incurred by most existing methods.

cs.LG↗