Skip to content

Translation in progress Some entries still include text in the original language.

Oct 12 · Monday

All papers

Found 2 papers
Filter4

Attack type

Model tampering6Extraction and theft2

Attack technique

Gradient and representation optimization0Automated search2

Layer

Model layer2Application layer3
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 240papers have no tags yet and are not included in filtered results.
Attack type：Extraction and theftAttack technique：Gradient and representation optimizationAttack technique：Automated searchLayer：Model layerClear all

Another 240papers do not have category tags yet and are not included in filtered results.

  1. AttacksarXiv 2602.01757

    Zero2Text: Training-Free Cross-Domain Text Embedding Inversion Attack

    提出 Zero2Text，无需训练地跨域反演文本嵌入

    arXiv
    2602.01757
    Published
    Layer
    Model layer
    Setting
    Models and APIs
    Attacker
    Black-box
    Evaluated models
    GTR-Base, Qwen3-Embedding-0.6B, Text-Embedding-3-small and others4
    Abstract零训练在线对齐可在未知域、无泄漏对时从黑盒 embedding 还原句子。

    Zero2Text 是一种不训练 decoder、也不使用泄漏文本–向量对的文本 embedding 反演，针对 RAG 向量库在严格黑盒、目标域未知时的还原。

    Paper analysisRead analysis
  2. AttacksarXiv 2508.06837

    Prometheus：针对文生图扩散模型的免训练提示词窃取攻击

    提出 Prometheus，从展示图反推文生图模型的在售提示词

    arXiv
    2508.06837
    Published
    Layer
    Model layer
    Setting
    Models and APIs
    Attacker
    No-box (offline transfer)
    Evaluated models
    Midjourney, Leonardo.ai, DALL·E and others4
    Abstract训练无关的 proxy 搜索攻击。

    Prometheus 是针对文生图市场 showcase 的训练无关提示词窃取：攻击者看不到在售文本，只用本地开源 proxy 恢复 subject 和 modifier，并希望换 subject 后风格仍在。

    Paper analysisRead analysis
You have reached the end