Exploiting Cultural Biases via Homoglyphs in Text-to-Image Synthesis
On the map: Diffusion models → Image generation, text-to-image and editing
Abstract (arXiv)
Models for text-to-image synthesis, such as DALL-E~2 and Stable Diffusion, have recently drawn a lot of interest from academia and the general public. These models are capable of producing high-quality images that depict a variety of concepts and styles when conditioned on textual descriptions. However, these models adopt cultural characteristics associated with specific Unicode scripts from their vast amount of training data, which may not be immediately apparent. We show that by simply inserting single non-Latin characters in a textual description, common models reflect cultural stereotypes and biases in their generated images. We analyze this behavior both qualitatively and quantitatively, and identify a model's text encoder as the root cause of the phenomenon. Additionally, malicious users or service providers may try to intentionally bias the image generation to create racist stereotypes by replacing Latin characters with similarly-looking characters from non-Latin scripts, so-called homoglyphs. To mitigate such unnoticed script attacks, we propose a novel homoglyph unlearning method to fine-tune a text encoder, making it robust against homoglyph manipulations.
Key facts. Cited by 29 papers in the map (data through 14 Oct 2026). Placed in Image generation, text-to-image and editing, one of 14 directions in Diffusion models. Builds on 36 of its 98 references that are in the map. First posted on arXiv 19 Sep 2022.
Builds on
36 of 98 references.
Closest ancestors · 3
Same direction, newest first
- 2022Photorealistic Text-to-Image Diffusion Models with Deep Language Understanding23 May
- 2022Hierarchical Text-Conditional Image Generation with CLIP Latents13 Apr
- 2021GLIDE: Towards Photorealistic Image Generation and Editing with Text-Guided Diffusion Models20 Dec
Other references · 33
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
- 2020Denoising Diffusion Probabilistic Modelscited by 21,076
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,863
- 2014Microsoft COCO: Common Objects in Contextcited by 17,608
- 2014Explaining and Harnessing Adversarial Examplescited by 7,364
- 2013Intriguing properties of neural networkscited by 5,155
- 2021Zero-Shot Text-to-Image Generationcited by 4,288
- 2021Improved Denoising Diffusion Probabilistic Modelscited by 3,761
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,281
- 2019A Survey on Bias and Fairness in Machine Learningcited by 1,917
- 2021LAION-400M: Open Dataset of CLIP-Filtered 400 Million Image-Text Pairscited by 1,555
- 2022Scaling Autoregressive Models for Content-Rich Text-to-Image Generationcited by 1,295
21 more
- 2020Improved Techniques for Training Score-Based Generative Modelscited by 1,043
- 2021Ethical and social risks of harm from Language Modelscited by 966
- 2016Semantics derived automatically from language corpora contain human-like biasescited by 901
- 2022Make-A-Scene: Scene-Based Text-to-Image Generation with Human Priorscited by 487
- 2018Black-box Generation of Adversarial Text Sequences to Evade Deep Learning Classifierscited by 345
- 2021Multimodal datasets: misogyny, pornography, and malignant stereotypescited by 327
- 2020Data and its (dis)contents: A survey of dataset development and use in machine learning researchcited by 260
- 2018FairGAN: Fairness-aware Generative Adversarial Networkscited by 164
- 2021Poisoning and Backdooring Contrastive Learningcited by 151
- 2021Are Gender-Neutral Queries Really Gender-Neutral? Mitigating Gender Bias in Image Searchcited by 90
- 2022A very preliminary analysis of DALL-E 2cited by 82
- 2021Bad Characters: Imperceptible NLP Attackscited by 71
- 2022Plug & Play Attacks: Towards Robust and Flexible Model Inversion Attackscited by 60
- 2022Testing Relational Understanding in Text-Guided Image Generationcited by 59
- 2022Adversarial Attacks on Image Generation With Made-Up Wordscited by 32
- 2022Evidence for Hypodescent in Visual Semantic AIcited by 30
- 2021Learning to Break Deep Perceptual Hashing: The Use Case NeuralHashcited by 25
- 2020Fairness, Welfare, and Equity in Personalized Pricingcited by 17
- 2022Tackling Algorithmic Disability Discrimination in the Hiring Process: An Ethical, Legal and Technical Analysiscited by 10
- 2020Black Loans Matter: Distributionally Robust Fairness for Fighting Subgroup Discriminationcited by 3
- 2022Context-Aware Discrimination Detection in Job Vacancies using Computational Language Modelscited by 1
Built on by
Citing papers per year: 2022: 1; 2023: 4; 2024: 12; 2025: 8; 2026: 4.
29 papers.
Sort:
By area:
- 2024Survey of Bias In Text-to-Image Generation: Definition, Evaluation, and Mitigationcited by 66
- 2022Rickrolling the Artist: Injecting Backdoors into Text Encoders for Text-to-Image Synthesiscited by 59
- 2023T2IAT: Measuring Valence and Stereotypical Biases in Text-to-Image Generationcited by 39
- 2024Adversarial Attacks and Defenses on Text-to-Image Diffusion Models: A Surveycited by 35
- 2024Would Deep Generative Models Amplify Bias in Future Models?cited by 24
- 2023Navigating Cultural Chasms: Exploring and Unlocking the Cultural POV of Text-To-Image Modelscited by 16
- 2025CulturalFrames: Assessing Cultural Expectation Alignment in Text-to-Image Models and Evaluation Metricscited by 15
- 2024Backdooring Bias (B2) into Stable Diffusion Modelscited by 12
- 2024Replication in Visual Diffusion Models: A Survey and Outlookcited by 11
- 2024Trustworthy Text-to-Image Diffusion Models: A Timely and Focused Surveycited by 6
- 2025ACE: Concept Editing in Diffusion Models without Performance Degradationcited by 6
- 2025CRCE: Coreference-Retention Concept Erasure in Text-to-Image Diffusion Modelscited by 6
17 more
- 2024Navigating Text-to-Image Generative Bias across Indic Languagescited by 5
- 2025BlurGuard: A Simple Approach for Robustifying Image Protection Against AI-Powered Editingcited by 5
- 2024Can Prompt Modifiers Control Bias? A Comparative Analysis of Text-to-Image Generative Modelscited by 4
- 2024CollaFuse: Collaborative Diffusion Modelscited by 4
- 2025Implicit Bias Injection Attacks against Text-to-Image Diffusion Modelscited by 4
- 2023Hypernymy Understanding Evaluation of Text-to-Image Models via WordNet Hierarchycited by 3
- 2024Discovering Universal Semantic Triggers for Text-to-Image Synthesiscited by 3
- 2024From Fake Perfects to Conversational Imperfects: Exploring Image-Generative AI as a Boundary Object for Participatory Design of Public Spacescited by 3
- 2024Prompt and Prejudicecited by 1
- 2025RusCode: Russian Cultural Code Benchmark for Text-to-Image Generationcited by 1
- 2025Synthetic History: Evaluating Visual Representations of the Past in Diffusion Modelscited by 1
- 2026Order Is Not Layout: Order-to-Space Bias in Image Generationcited by 1
- 2026Training-Free Debiasing of Diffusion Models via CLIP-Guided Denoising Optimizationcited by 1
- 2026On the Limitations of Cross-Lingual Consistency in Multilingual Text-to-image Generationcited by 1
- 2023Trustworthy Large Models in Vision: A Surveycited by 0
- 2025CRAFT: Cultural Russian-Oriented Dataset Adaptation for Focused Text-to-Image Generationcited by 0
- 2026No Safe Dose: How Training Data Drives Unsafe Image Generationcited by 0
- 2026On the Limitations of Cross-Lingual Consistency in Multilingual Text-to-image Generation11 Aug 2026
- 2026Training-Free Debiasing of Diffusion Models via CLIP-Guided Denoising Optimization1 Jul 2026
- 2026No Safe Dose: How Training Data Drives Unsafe Image Generation27 May 2026
- 2026Order Is Not Layout: Order-to-Space Bias in Image Generation4 Mar 2026
- 2025BlurGuard: A Simple Approach for Robustifying Image Protection Against AI-Powered Editing31 Oct 2025
- 2025CulturalFrames: Assessing Cultural Expectation Alignment in Text-to-Image Models and Evaluation Metrics10 Jun 2025
- 2025Synthetic History: Evaluating Visual Representations of the Past in Diffusion Models18 May 2025
- 2025CRAFT: Cultural Russian-Oriented Dataset Adaptation for Focused Text-to-Image Generation7 May 2025
- 2025Implicit Bias Injection Attacks against Text-to-Image Diffusion Models2 Apr 2025
- 2025CRCE: Coreference-Retention Concept Erasure in Text-to-Image Diffusion Models18 Mar 2025
- 2025ACE: Concept Editing in Diffusion Models without Performance Degradation11 Mar 2025
- 2025RusCode: Russian Cultural Code Benchmark for Text-to-Image Generation11 Feb 2025
17 more
- 2024From Fake Perfects to Conversational Imperfects: Exploring Image-Generative AI as a Boundary Object for Participatory Design of Public Spaces1 Nov 2024
- 2024Trustworthy Text-to-Image Diffusion Models: A Timely and Focused Survey26 Sep 2024
- 2024Prompt and Prejudice7 Aug 2024
- 2024Navigating Text-to-Image Generative Bias across Indic Languages1 Aug 2024
- 2024Adversarial Attacks and Defenses on Text-to-Image Diffusion Models: A Survey10 Jul 2024
- 2024Replication in Visual Diffusion Models: A Survey and Outlook7 Jul 2024
- 2024Backdooring Bias (B2) into Stable Diffusion Models21 Jun 2024
- 2024CollaFuse: Collaborative Diffusion Models20 Jun 2024
- 2024Can Prompt Modifiers Control Bias? A Comparative Analysis of Text-to-Image Generative Models9 Jun 2024
- 2024Would Deep Generative Models Amplify Bias in Future Models?4 Apr 2024
- 2024Survey of Bias In Text-to-Image Generation: Definition, Evaluation, and Mitigation1 Apr 2024
- 2024Discovering Universal Semantic Triggers for Text-to-Image Synthesis12 Feb 2024
- 2023Trustworthy Large Models in Vision: A Survey16 Nov 2023
- 2023Hypernymy Understanding Evaluation of Text-to-Image Models via WordNet Hierarchy13 Oct 2023
- 2023Navigating Cultural Chasms: Exploring and Unlocking the Cultural POV of Text-To-Image Models3 Oct 2023
- 2023T2IAT: Measuring Valence and Stereotypical Biases in Text-to-Image Generation1 Jun 2023
- 2022Rickrolling the Artist: Injecting Backdoors into Text Encoders for Text-to-Image Synthesis4 Nov 2022
- 2024Adversarial Attacks and Defenses on Text-to-Image Diffusion Models: A Surveycited by 35
- 2024Backdooring Bias (B2) into Stable Diffusion Modelscited by 12
- 2024Replication in Visual Diffusion Models: A Survey and Outlookcited by 11
- 2024Trustworthy Text-to-Image Diffusion Models: A Timely and Focused Surveycited by 6
- 2025ACE: Concept Editing in Diffusion Models without Performance Degradationcited by 6
- 2025CRCE: Coreference-Retention Concept Erasure in Text-to-Image Diffusion Modelscited by 6
- 2024CollaFuse: Collaborative Diffusion Modelscited by 4
- 2025Implicit Bias Injection Attacks against Text-to-Image Diffusion Modelscited by 4
- 2023Hypernymy Understanding Evaluation of Text-to-Image Models via WordNet Hierarchycited by 3
- 2025Synthetic History: Evaluating Visual Representations of the Past in Diffusion Modelscited by 1
- 2026Training-Free Debiasing of Diffusion Models via CLIP-Guided Denoising Optimizationcited by 1
- 2026Training-Free Debiasing of Diffusion Models via CLIP-Guided Denoising Optimization1 Jul 2026
- 2025Synthetic History: Evaluating Visual Representations of the Past in Diffusion Models18 May 2025
- 2025Implicit Bias Injection Attacks against Text-to-Image Diffusion Models2 Apr 2025
- 2025CRCE: Coreference-Retention Concept Erasure in Text-to-Image Diffusion Models18 Mar 2025
- 2025ACE: Concept Editing in Diffusion Models without Performance Degradation11 Mar 2025
- 2024Trustworthy Text-to-Image Diffusion Models: A Timely and Focused Survey26 Sep 2024
- 2024Adversarial Attacks and Defenses on Text-to-Image Diffusion Models: A Survey10 Jul 2024
- 2024Replication in Visual Diffusion Models: A Survey and Outlook7 Jul 2024
- 2024Backdooring Bias (B2) into Stable Diffusion Models21 Jun 2024
- 2024CollaFuse: Collaborative Diffusion Models20 Jun 2024
- 2023Hypernymy Understanding Evaluation of Text-to-Image Models via WordNet Hierarchy13 Oct 2023
- 2024Prompt and Prejudicecited by 1
- 2024Prompt and Prejudice7 Aug 2024
- 2024Survey of Bias In Text-to-Image Generation: Definition, Evaluation, and Mitigationcited by 66
- 2023T2IAT: Measuring Valence and Stereotypical Biases in Text-to-Image Generationcited by 39
- 2024Would Deep Generative Models Amplify Bias in Future Models?cited by 24
- 2023Navigating Cultural Chasms: Exploring and Unlocking the Cultural POV of Text-To-Image Modelscited by 16
- 2025CulturalFrames: Assessing Cultural Expectation Alignment in Text-to-Image Models and Evaluation Metricscited by 15
- 2024Navigating Text-to-Image Generative Bias across Indic Languagescited by 5
- 2025BlurGuard: A Simple Approach for Robustifying Image Protection Against AI-Powered Editingcited by 5
- 2024Can Prompt Modifiers Control Bias? A Comparative Analysis of Text-to-Image Generative Modelscited by 4
- 2024Discovering Universal Semantic Triggers for Text-to-Image Synthesiscited by 3
- 2024From Fake Perfects to Conversational Imperfects: Exploring Image-Generative AI as a Boundary Object for Participatory Design of Public Spacescited by 3
- 2025RusCode: Russian Cultural Code Benchmark for Text-to-Image Generationcited by 1
- 2026Order Is Not Layout: Order-to-Space Bias in Image Generationcited by 1
12 most cited of 16 All 16 (JSON)
- 2026On the Limitations of Cross-Lingual Consistency in Multilingual Text-to-image Generation11 Aug 2026
- 2026No Safe Dose: How Training Data Drives Unsafe Image Generation27 May 2026
- 2026Order Is Not Layout: Order-to-Space Bias in Image Generation4 Mar 2026
- 2025BlurGuard: A Simple Approach for Robustifying Image Protection Against AI-Powered Editing31 Oct 2025
- 2025CulturalFrames: Assessing Cultural Expectation Alignment in Text-to-Image Models and Evaluation Metrics10 Jun 2025
- 2025CRAFT: Cultural Russian-Oriented Dataset Adaptation for Focused Text-to-Image Generation7 May 2025
- 2025RusCode: Russian Cultural Code Benchmark for Text-to-Image Generation11 Feb 2025
- 2024From Fake Perfects to Conversational Imperfects: Exploring Image-Generative AI as a Boundary Object for Participatory Design of Public Spaces1 Nov 2024
- 2024Navigating Text-to-Image Generative Bias across Indic Languages1 Aug 2024
- 2024Can Prompt Modifiers Control Bias? A Comparative Analysis of Text-to-Image Generative Models9 Jun 2024
- 2024Would Deep Generative Models Amplify Bias in Future Models?4 Apr 2024
- 2024Survey of Bias In Text-to-Image Generation: Definition, Evaluation, and Mitigation1 Apr 2024
12 newest of 16 All 16 (JSON)
Similar, not cited
Close in wording, no citation either way
- 2025Deconstructing Bias: A Multifaceted Framework for Diagnosing Cultural and Compositional Inequities in Text-to-Image Generative Models
- 2023Word-Level Explanations for Analyzing Bias in Text-to-Image Models
- 2025Exposing Blindspots: Cultural Bias Evaluation in Generative Image Models
- 2025Hidden Bias in the Machine: Stereotypes in Text-to-Image Models
- 2022Easily Accessible Text-to-Image Generation Amplifies Demographic Stereotypes at Large Scale
- 2024Image-Perfect Imperfections: Safety, Bias, and Authenticity in the Shadow of Text-To-Image Model Evolution
- 2024AI-generated faces influence gender stereotypes and racial homogenization
- 2023RS-Corrector: Correcting the Racial Stereotypes in Latent Diffusion Models