MadryLab (Hadi Salman, Alaa Khaddaj, Guillaume Leclerc, Andrew Ilyas, Aleksander Madry) · Image edit protection

PhotoGuard

PhotoGuard is the code release for a paper from MadryLab on safeguarding images against manipulation by AI photo-editing models such as Stable Diffusion. It "immunises" an image so that edits made with image-to-image or inpainting pipelines come out unrealistic or unrelated to the original. Two methods are provided: a simple encoder attack, which runs a PGD attack on the image embedding part of Stable Diffusion, and a more complex diffusion attack that targets the model end-to-end and is described as more effective against inpainting. The README shows example outputs and notebooks but gives no measured results in the page. The code builds on the Hugging Face diffusers Stable Diffusion implementation, and a Gradio demo is hosted on Hugging Face Spaces and can be run locally. It is released under the MIT licence with 809 stars, with no tagged releases; the last push was on 27 February 2023.