arXiv Computer Vision
Oct 2

A Comprehensive Review of One-Pixel Attack: Research Status, Taxonomy, Applications, Regulation Policy and Future Directions

The paper reviews one‑pixel attacks (OPAs), highlighting their extreme adversarial fragility across domains such as medical diagnosis, autonomous driving, biometrics, and quantum communication. It presents a PRISMA‑guided synthesis of studies from 2017 to 2026, offering a unified taxonomy that covers algorithmic foundations, black‑box evolutionary optimization, hybrid and program‑synthesis attacks, defence mechanisms, interpretability tools, and domain‑specific vulnerabilities. The review identifies dominant Differential Evolution strategies, emerging efficiency‑optimized and saliency‑guided methods, and gaps in dataset diversity, transferability, and evaluation standards, while proposing future research directions and a regulatory framework for robustness testing and AI security governance.

By Mirza Niaz Morshed, Md. Masudul Islam, Galib Muhammad Shahriar Himel, Md. Aslam Uddin, Hui Liu, Md. Shafiqul Islam
arXiv AI
Aug 19

DiSCO: Defending text-to-image generation through distribution-guided contrastive prompt optimization

DiSCO is a zero‑shot, black‑box defense for text‑to‑image models that operates solely at the prompt level. It expands prompts with a distribution‑guided suffix using beam search and contrastive scoring against safe and unsafe image pools generated by the target model, iteratively refining until safe content is produced. The method improves safety on the I2P benchmark under various red‑teaming attacks, reducing attack success rates by 37.7% and 25.13% while preserving semantic fidelity and image coherence.

By Tong Zhang, Motasem Alfarra, Carlos Hinojosa, Christos Louizos, Bernard Ghanem
arXiv Computer Vision
Sep 3

Generating Medical Image Counterfactuals using Causal Explanations

The paper introduces a new framework for generating medical image counterfactuals that does not rely on auxiliary generative models. By extracting causal evidence directly from a classifier, the method deterministically produces edits within user-specified regions, requiring no additional training. Experiments on real-world medical imaging datasets show that these counterfactuals alter classifier predictions while staying closer to the original image than generative baselines, offering a clearer view of the model’s decision boundary.

By David A. Kelly, Tom Yaacov, Nathan Blake, Sander Beckers, Hana Chockler