Attributing Image Generative Models using Latent Fingerprints
Not on the map. Why?
Abstract (arXiv)
Generative models have enabled the creation of contents that are indistinguishable from those taken from nature. Open-source development of such models raised concerns about the risks of their misuse for malicious purposes. One potential risk mitigation strategy is to attribute generative models via fingerprinting. Current fingerprinting methods exhibit a significant tradeoff between robust attribution accuracy and generation quality while lacking design principles to improve this tradeoff. This paper investigates the use of latent semantic dimensions as fingerprints, from where we can analyze the effects of design variables, including the choice of fingerprinting dimensions, strength, and capacity, on the accuracy-quality tradeoff. Compared with previous SOTA, our method requires minimum computation and is more applicable to large-scale models. We use StyleGAN2 and the latent diffusion model to demonstrate the efficacy of our method.
Key facts. Cited by 20 papers in the map (data through 7 Oct 2026). Builds on 17 of its 28 references that are in the map. First posted on arXiv 17 Apr 2023.
Builds on
17 of 28 references.
References · 17
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
- 2018The Unreasonable Effectiveness of Deep Features as a Perceptual Metriccited by 11,029
- 2022Hierarchical Text-Conditional Image Generation with CLIP Latentscited by 6,539
- 2018A Style-Based Generator Architecture for Generative Adversarial Networkscited by 5,986
- 2021Zero-Shot Text-to-Image Generationcited by 4,276
- 2019Analyzing and Improving the Image Quality of StyleGANcited by 3,580
- 2016Improved Techniques for Training GANscited by 2,938
- 2019StarGAN v2: Diverse Image Synthesis for Multiple Domainscited by 1,095
- 2019Image2StyleGAN: How to Embed Images Into the StyleGAN Latent Space?cited by 675
- 2020GANSpace: Discovering Interpretable GAN Controlscited by 612
- 2021GAN Inversion: A Surveycited by 366
- 2016Invertible Conditional GANs for image editingcited by 118
5 more
- 2020Responsible Disclosure of Generative Models Using Scalable Fingerprintingcited by 90
- 2020Transforming and Projecting Images into Class-conditional Generative Networkscited by 76
- 2021Low-Rank Subspaces in GANscited by 52
- 2022Multi-instrument Music Synthesis with Spectrogram Diffusioncited by 42
- 2020Decentralized Attribution of Generative Modelscited by 16
Built on by
Citing papers per year: 2023: 5; 2024: 6; 2025: 6; 2026: 3.
20 papers.
Sort:
By area:
- 2024R.A.C.E.: Robust Adversarial Concept Erasure for Secure Text-to-Image Diffusion Modelcited by 56
- 2023WOUAF: Weight Modulation for User Attribution and Fingerprinting in Text-to-Image Diffusion Modelscited by 51
- 2024Copyright Protection in Generative AI: A Technical Perspectivecited by 35
- 2023ECLIPSE: A Resource-Efficient Text-to-Image Prior for Image Generationscited by 24
- 2023Single-Model Attribution of Generative Models Through Final-Layer Inversioncited by 10
- 2025A Comprehensive Survey on Concept Erasure in Text-to-Image Diffusion Modelscited by 9
- 2024A Survey on Responsible Generative AI: What to Generate and What Notcited by 8
- 2025EraseFlow: Learning Concept Erasure Policies via GFlowNet-Driven Alignmentcited by 8
- 2024RAW: A Robust and Agile Plug-and-Play Watermark Framework for AI-Generated Images with Provable Guaranteescited by 7
- 2023Model Synthesis for Zero-Shot Model Attributioncited by 5
- 2025SPRINT: Robust Model Attribution of Generated Images via Secret Pixel Reconstructioncited by 4
- 2023CopyScope: Model-level Copyright Infringement Quantification in the Diffusion Workflowcited by 3
8 more
- 2024Protect-Your-IP: Scalable Source-Tracing and Attribution against Personalized Generationcited by 3
- 2024Evaluating Durability: Benchmark Insights into Multimodal Watermarkingcited by 3
- 2025SpecGuard: Spectral Projection-based Advanced Invisible Watermarkingcited by 2
- 2025Modelship Attribution: Tracing Multi-Stage Manipulations Across Generative Modelscited by 1
- 2026Data Provenance for Image Auto-Regressive Generationcited by 1
- 2025PRISM: Phase-enhanced Radial-based Image Signature Mapping framework for fingerprinting AI-generated imagescited by 0
- 2026Identifying Models Behind Text-to-Image Leaderboardscited by 0
- 2026DNA: Dual-stage Native Attribution for Generated Image Source Tracingcited by 0
- 2026DNA: Dual-stage Native Attribution for Generated Image Source Tracing15 Jul 2026
- 2026Data Provenance for Image Auto-Regressive Generation22 Jun 2026
- 2026Identifying Models Behind Text-to-Image Leaderboards14 Jan 2026
- 2025EraseFlow: Learning Concept Erasure Policies via GFlowNet-Driven Alignment2 Nov 2025
- 2025SpecGuard: Spectral Projection-based Advanced Invisible Watermarking8 Oct 2025
- 2025PRISM: Phase-enhanced Radial-based Image Signature Mapping framework for fingerprinting AI-generated images18 Sep 2025
- 2025SPRINT: Robust Model Attribution of Generated Images via Secret Pixel Reconstruction6 Aug 2025
- 2025Modelship Attribution: Tracing Multi-Stage Manipulations Across Generative Models3 Jun 2025
- 2025A Comprehensive Survey on Concept Erasure in Text-to-Image Diffusion Models17 Feb 2025
- 2024Evaluating Durability: Benchmark Insights into Multimodal Watermarking6 Jun 2024
- 2024Protect-Your-IP: Scalable Source-Tracing and Attribution against Personalized Generation26 May 2024
- 2024R.A.C.E.: Robust Adversarial Concept Erasure for Secure Text-to-Image Diffusion Model25 May 2024
8 more
- 2024A Survey on Responsible Generative AI: What to Generate and What Not8 Apr 2024
- 2024Copyright Protection in Generative AI: A Technical Perspective4 Feb 2024
- 2024RAW: A Robust and Agile Plug-and-Play Watermark Framework for AI-Generated Images with Provable Guarantees23 Jan 2024
- 2023ECLIPSE: A Resource-Efficient Text-to-Image Prior for Image Generations7 Dec 2023
- 2023CopyScope: Model-level Copyright Infringement Quantification in the Diffusion Workflow13 Oct 2023
- 2023Model Synthesis for Zero-Shot Model Attribution29 Jul 2023
- 2023WOUAF: Weight Modulation for User Attribution and Fingerprinting in Text-to-Image Diffusion Models7 Jun 2023
- 2023Single-Model Attribution of Generative Models Through Final-Layer Inversion26 May 2023
- 2024R.A.C.E.: Robust Adversarial Concept Erasure for Secure Text-to-Image Diffusion Modelcited by 56
- 2023WOUAF: Weight Modulation for User Attribution and Fingerprinting in Text-to-Image Diffusion Modelscited by 51
- 2023ECLIPSE: A Resource-Efficient Text-to-Image Prior for Image Generationscited by 24
- 2025A Comprehensive Survey on Concept Erasure in Text-to-Image Diffusion Modelscited by 9
- 2023CopyScope: Model-level Copyright Infringement Quantification in the Diffusion Workflowcited by 3
- 2026DNA: Dual-stage Native Attribution for Generated Image Source Tracingcited by 0
- 2026DNA: Dual-stage Native Attribution for Generated Image Source Tracing15 Jul 2026
- 2025A Comprehensive Survey on Concept Erasure in Text-to-Image Diffusion Models17 Feb 2025
- 2024R.A.C.E.: Robust Adversarial Concept Erasure for Secure Text-to-Image Diffusion Model25 May 2024
- 2023ECLIPSE: A Resource-Efficient Text-to-Image Prior for Image Generations7 Dec 2023
- 2023CopyScope: Model-level Copyright Infringement Quantification in the Diffusion Workflow13 Oct 2023
- 2023WOUAF: Weight Modulation for User Attribution and Fingerprinting in Text-to-Image Diffusion Models7 Jun 2023
- 2024Copyright Protection in Generative AI: A Technical Perspectivecited by 35
- 2023Single-Model Attribution of Generative Models Through Final-Layer Inversioncited by 10
- 2024A Survey on Responsible Generative AI: What to Generate and What Notcited by 8
- 2023Model Synthesis for Zero-Shot Model Attributioncited by 5
- 2025SPRINT: Robust Model Attribution of Generated Images via Secret Pixel Reconstructioncited by 4
- 2024Evaluating Durability: Benchmark Insights into Multimodal Watermarkingcited by 3
- 2025SpecGuard: Spectral Projection-based Advanced Invisible Watermarkingcited by 2
- 2025Modelship Attribution: Tracing Multi-Stage Manipulations Across Generative Modelscited by 1
- 2025PRISM: Phase-enhanced Radial-based Image Signature Mapping framework for fingerprinting AI-generated imagescited by 0
- 2026Identifying Models Behind Text-to-Image Leaderboardscited by 0
- 2026Identifying Models Behind Text-to-Image Leaderboards14 Jan 2026
- 2025SpecGuard: Spectral Projection-based Advanced Invisible Watermarking8 Oct 2025
- 2025PRISM: Phase-enhanced Radial-based Image Signature Mapping framework for fingerprinting AI-generated images18 Sep 2025
- 2025SPRINT: Robust Model Attribution of Generated Images via Secret Pixel Reconstruction6 Aug 2025
- 2025Modelship Attribution: Tracing Multi-Stage Manipulations Across Generative Models3 Jun 2025
- 2024Evaluating Durability: Benchmark Insights into Multimodal Watermarking6 Jun 2024
- 2024A Survey on Responsible Generative AI: What to Generate and What Not8 Apr 2024
- 2024Copyright Protection in Generative AI: A Technical Perspective4 Feb 2024
- 2023Model Synthesis for Zero-Shot Model Attribution29 Jul 2023
- 2023Single-Model Attribution of Generative Models Through Final-Layer Inversion26 May 2023
Similar, not cited
Close in wording, no citation either way
- 2025Causal Fingerprints of AI Generative Models
- 2022Learning Robust Representations Of Generative Models Using Set-Based Artificial Fingerprints
- 2025PALADIN : Robust Neural Fingerprinting for Text-to-Image Diffusion Models
- 2026Intra-finger Variability of Diffusion-based Latent Fingerprint Generation
- 2026Efficient, Robust, and Anti-Collusion Fingerprinting of Image Diffusion Models
- 2023Deep Image Fingerprint: Towards Low Budget Synthetic Image Detection and Model Lineage Analysis
- 2026Fingerprinting Text-to-Image Diffusion Models via Collapsed Generation
- 2024Universal Fingerprint Generation: Controllable Diffusion Model with Multimodal Conditions