Abstract:The Internet has become the main channel of information communication, which contains a large amount of secret information. Although network communication provides a convenient channel for human communication, there is also a risk of information leakage. Traditional image steganography algorithms use manually crafted steganographic algorithms or custom models for steganography, while our approach uses ordinary OCR models for information embedding and extraction. Even if our OCR models for steganography are intercepted, it is difficult to find their relevance to steganography. We propose a novel steganography method for character-level text images based on adversarial attacks. We exploit the complexity and uniqueness of neural network boundaries and use neural networks as a tool for information embedding and extraction. We use an adversarial attack to embed the steganographic information into the character region of the image. To avoid detection by other OCR models, we optimize the generation of the adversarial samples and use a verification model to filter the generated steganographic images, which, in turn, ensures that the embedded information can only be recognized by our local model. The decoupling experiments show that the strategies we adopt to weaken the transferability can reduce the possibility of other OCR models recognizing the embedded information while ensuring the success rate of information embedding. Meanwhile, the perturbations we add to embed the information are acceptable. Finally, we explored the impact of different parameters on the algorithm with the potential of our steganography algorithm through parameter selection experiments. We also verify the effectiveness of our validation model to select the best steganographic images. The experiments show that our algorithm can achieve a 100% information embedding rate and more than 95% steganography success rate under the set condition of 3 samples per group. In addition, our embedded information can be hardly detected by other OCR models.

MailLeak: Obfuscation-Robust Character Extraction Using Transfer Learning

Extracting Robust Models with Uncertain Examples

Special Characters Attack: Toward Scalable Training Data Extraction From Large Language Models

Modeling Deep Learning Based Privacy Attacks on Physical Mail

Robust Feature Extraction For Character Recognition Based On Binary Images

CodeCipher: Learning to Obfuscate Source Code Against LLMs

Robust CAPTCHAs Towards Malicious OCR

A Novel Steganography Method for Character-Level Text Image Based on Adversarial Attacks

Leveraging deep learning-assisted attacks against image obfuscation via federated learning

HideSeeker

Breaking reCAPTCHAs with Unpredictable Collapse: Heuristic Character Segmentation and Recognition

Universal Defensive Underpainting Patch: Making Your Text Invisible to Optical Character Recognition

Embedding is Not Cipher: Understanding the Risk of Embedding Leakages

TextObfuscator: Making Pre-trained Language Model a Privacy Protector via Obfuscating Word Representations

Privacy-preserving Machine Learning through Data Obfuscation

Evading Deep Learning-Based Malware Detectors via Obfuscation: A Deep Reinforcement Learning Approach

Fooling OCR Systems with Adversarial Text Images

Decoding Secret Memorization in Code LLMs Through Token-Level Characterization

Attacking Optical Character Recognition (OCR) Systems with Adversarial Watermarks

blessing in disguise: Designing Robust Turing Test by Employing Algorithm Unrobustness

Harnessing LLM to Attack LLM-Guarded Text-to-Image Models