mlsanityData to 7 Oct 2026

CRoSS: Diffusion Model Makes Controllable, Robust and Secure Image Steganography

arXiv 2305.16936 ↗First posted 26 May 2023cs.CVcited by 50

On the map: Diffusion models → Robustness, privacy and adversarial aspects

Abstract (arXiv)

Current image steganography techniques are mainly focused on cover-based methods, which commonly have the risk of leaking secret images and poor robustness against degraded container images. Inspired by recent developments in diffusion models, we discovered that two properties of diffusion models, the ability to achieve translation between two images without training, and robustness to noisy data, can be used to improve security and natural robustness in image steganography tasks. For the choice of diffusion model, we selected Stable Diffusion, a type of conditional diffusion model, and fully utilized the latest tools from open-source communities, such as LoRAs and ControlNets, to improve the controllability and diversity of container images. In summary, we propose a novel image steganography framework, named Controllable, Robust and Secure Image Steganography (CRoSS), which has significant advantages in controllability, robustness, and security compared to cover-based image steganography methods. These benefits are obtained without additional training. To our knowledge, this is the first work to introduce diffusion models to the field of image steganography. In the experimental section, we conducted detailed experiments to demonstrate the advantages of our proposed CRoSS framework in controllability, robustness, and security.

Key facts. Cited by 50 papers in the map (data through 7 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 44 of its 78 references that are in the map. First posted on arXiv 26 May 2023.

Builds on

44 of 78 references.

References · 44

  1. 2020Denoising Diffusion Probabilistic Modelscited by 20,851
  2. 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
  3. 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,084
  4. 2020Denoising Diffusion Implicit Modelscited by 9,655
  5. 2020Score-Based Generative Modeling through Stochastic Differential Equationscited by 8,964
  6. 2021Diffusion Models Beat GANs on Image Synthesiscited by 8,185
  7. 2022Hierarchical Text-Conditional Image Generation with CLIP Latentscited by 6,539
  8. 2022Photorealistic Text-to-Image Diffusion Models with Deep Language Understandingcited by 6,322
  9. 2023Adding Conditional Control to Text-to-Image Diffusion Modelscited by 5,466
  10. 2022BLIP: Bootstrapping Language-Image Pre-training for Unified Vision-Language Understanding and Generationcited by 4,310
  11. 2019Generative Modeling by Estimating Gradients of the Data Distributioncited by 4,067
  12. 2022DreamBooth: Fine Tuning Text-to-Image Diffusion Models for Subject-Driven Generationcited by 3,286
32 more
  1. 2022InstructPix2Pix: Learning to Follow Image Editing Instructionscited by 2,591
  2. 2022Prompt-to-Prompt Image Editing with Cross Attention Controlcited by 2,409
  3. 2022An Image is Worth One Word: Personalizing Text-to-Image Generation using Textual Inversioncited by 2,231
  4. 2016Density estimation using Real NVPcited by 2,029
  5. 2021SDEdit: Guided Image Synthesis and Editing with Stochastic Differential Equationscited by 1,903
  6. 2021Image Super-Resolution via Iterative Refinementcited by 1,506
  7. 2022RePaint: Inpainting using Denoising Diffusion Probabilistic Modelscited by 1,419
  8. 2023T2I-Adapter: Learning Adapters to Dig out More Controllable Ability for Text-to-Image Diffusion Modelscited by 1,339
  9. 2022Null-text Inversion for Editing Real Images using Guided Diffusion Modelscited by 1,168
  10. 2014NICE: Non-linear Independent Components Estimationcited by 1,052
  11. 2021Real-ESRGAN: Training Real-World Blind Super-Resolution with Pure Synthetic Datacited by 961
  12. 2022Denoising Diffusion Restoration Modelscited by 951
  13. 2017Masked Autoregressive Flow for Density Estimationcited by 680
  14. 2019Image2StyleGAN: How to Embed Images Into the StyleGAN Latent Space?cited by 675
  15. 2021DiffusionCLIP: Text-Guided Diffusion Models for Robust Image Manipulationcited by 640
  16. 2016Improving Variational Inference with Inverse Autoregressive Flowcited by 636
  17. 2021ILVR: Conditioning Method for Denoising Diffusion Probabilistic Modelscited by 634
  18. 2022Zero-Shot Image Restoration Using Denoising Diffusion Null-Space Modelcited by 574
  19. 2018HiDDeN: Hiding Data With Deep Networkscited by 384
  20. 2023FreeDoM: Training-Free Energy-Guided Conditional Diffusion Modelcited by 290
  21. 2022Dual Diffusion Implicit Bridges for Image-to-Image Translationcited by 212
  22. 2022EGSDE: Unpaired Image-to-Image Translation via Energy-Guided Stochastic Differential Equationscited by 172
  23. 2020Invertible Image Rescalingcited by 92
  24. 2023DR2: Diffusion-based Robust Degradation Remover for Blind Face Restorationcited by 79
  25. 2019SteganoGAN: High Capacity Image Steganography with GANscited by 70
  26. 2019Sum-of-Squares Polynomial Flowcited by 62
  27. 2014StegExpose - A Tool for Detecting LSB Steganographycited by 25
  28. 2018CNN Based Adversarial Embedding with Minimum Alteration for Image Steganographycited by 22
  29. 2022M3ST: Mix at Three Levels for Speech Translationcited by 21
  30. 2018Yedrouj-Net: An efficient CNN for spatial steganalysiscited by 19
  31. 2017SSGAN: Secure Steganography Based on Generative Adversarial Networkscited by 18
  32. 2023Unlimited-Size Diffusion Restorationcited by 15

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2023: 3; 2024: 16; 2025: 18; 2026: 13.

50 papers.

Sort:

By area:

  1. 2024FakeShield: Explainable Image Forgery Detection and Localization via Multi-modal Large Language Modelscited by 111
  2. 2023EditGuard: Versatile Image Watermarking for Tamper Localization and Copyright Protectioncited by 109
  3. 2024360DVD: Controllable Panorama Video Generation with 360-Degree Video Diffusion Modelcited by 56
  4. 2024ROBIN: Robust and Invisible Watermarks for Diffusion Models with Adversarial Optimizationcited by 45
  5. 2024OmniGuard: Hybrid Manipulation Localization via Augmented Versatile Deep Image Watermarkingcited by 35
  6. 2024V2A-Mark: Versatile Deep Visual-Audio Watermarking for Manipulation Localization and Copyright Protectioncited by 27
  7. 2024GS-Hider: Hiding Messages into 3D Gaussian Splattingcited by 26
  8. 2023AnimateZero: Video Diffusion Models are Zero-Shot Image Animatorscited by 19
  9. 2024Generative Text Steganography with Large Language Modelcited by 16
  10. 2024DiffStega: Towards Universal Training-Free Coverless Image Steganography with Diffusion Modelscited by 15
  11. 2025All That Glitters Is Not Gold: Key-Secured 3D Secrets within 3D Gaussian Splattingcited by 15
  12. 2025SecureGS: Boosting the Security and Fidelity of 3D Gaussian Splatting Steganographycited by 14
38 more
  1. 2024OmniSSR: Zero-shot Omnidirectional Image Super-Resolution using Stable Diffusion Modelcited by 11
  2. 2024Robust Message Embedding via Attention Flow-Based Steganographycited by 5
  3. 2024Diffusion-Based Hierarchical Image Steganographycited by 4
  4. 2025GaussianSeal: Rooting Adaptive Watermarks for 3D Gaussian Generation Modelcited by 4
  5. 2025StableGuard: Towards Unified Copyright Protection and Tamper Localization in Latent Diffusion Modelscited by 4
  6. 2024Data-Free Federated Class Incremental Learning with Diffusion-Based Generative Memorycited by 3
  7. 2025PSyDUCK: Training-Free Steganography for Latent Diffusioncited by 3
  8. 2025VideoGuard: Protecting Video Content from Unauthorized Editingcited by 3
  9. 2026TalkPhoto: A Versatile Training-Free Conversational Assistant for Intelligent Image Editingcited by 3
  10. 2024UVCG: Leveraging Temporal Consistency for Universal Video Protectioncited by 2
  11. 2025VisGuard: Securing Visualization Dissemination through Tamper-Resistant Data Retrievalcited by 2
  12. 2023Implicit Steganography Beyond the Constraints of Modalitycited by 1
  13. 2025Detecting Text Manipulation in Images using Vision Language Modelscited by 1
  14. 2026Stego Battlefield: Evaluating Image Steganography Attacks and Steganalysis Defensescited by 1
  15. 2024FIIH: Fully Invertible Image Hiding for Secure and Robustcited by 0
  16. 2024Neural Cover Selection for Image Steganographycited by 0
  17. 2024DDIM-Driven Coverless Steganography Scheme with Real Keycited by 0
  18. 2025Provably Secure Covert Messaging Using Image-based Diffusion Processescited by 0
  19. 2025DocShaDiffusion: Diffusion Model in Latent Space for Document Image Shadow Removalcited by 0
  20. 2025CIF: A Constrained Inversion Framework for Reliable Message Extraction in Diffusion-Based Generative Steganographycited by 0
  21. 2025Tackling Ill-posedness of Reversible Image Conversion with Well-posed Invertible Networkcited by 0
  22. 2025Deep Data Hiding for ICAO-Compliant Face Images: A Surveycited by 0
  23. 2025Attacks on Approximate Caches in Text-to-Image Diffusion Modelscited by 0
  24. 2025SemSteDiff: Generative Diffusion Model-based Coverless Semantic Steganography Communicationcited by 0
  25. 2025Approximate Gaussian Mapping for Generative Image Steganographycited by 0
  26. 2025S2LM: Towards Semantic Steganography via Large Language Modelscited by 0
  27. 2025Training-Free Color-Aware Adversarial Diffusion Sanitization for Diffusion Stegomalware Defense at Security Gatewayscited by 0
  28. 2026Breaking the Resolution Barrier: Arbitrary-resolution Deep Image Steganography Frameworkcited by 0
  29. 2026DTAMS: High-Capacity Generative Steganography via Dynamic Multi-Timestep Selection and Adaptive Deviation Mapping in Latent Diffusioncited by 0
  30. 2026Rethinking Security of Diffusion-based Generative Steganographycited by 0
  31. 2026Training-Free Coverless Multi-Image Steganography with Access Controlcited by 0
  32. 2026PRoADS: Provably Secure and Robust Audio Diffusion Steganography with latent optimization and backward Euler Inversioncited by 0
  33. 2026Watch Your Step: Information Injection in Diffusion Models via Shadow Timestep Embeddingcited by 0
  34. 2026No Prompt, No Leaks: A Robust Generative Steganography Framework via Prompt-Free Diffusioncited by 0
  35. 2026Histogram-constrained Image Generationcited by 0
  36. 2026Secret-Stego Dissimilarity as a Design Axis: Invertible Coverless Image Steganography with Diffusion Modelscited by 0
  37. 2026TDDM-Melatt: A Decoupled Memory and Diffusion Framework for Generalizable Encrypted Traffic Classificationcited by 0
  38. 2026StegGNN: Learning Graphical Representation for Image Steganographycited by 0

Similar, not cited

Close in wording, no citation either way

  1. 2025Hiding Images in Diffusion Models by Editing Learned Score Functions
  2. 2023Diffusion-Stego: Training-free Diffusion Generative Steganography via Message Projection
  3. 2024Plug-and-Hide: Provable and Adjustable Diffusion Generative Steganography
  4. 2025Parasite: A Steganography-based Backdoor Attack Framework for Diffusion Models
  5. 2023Unlearnable Examples for Diffusion Models: Protect Data from Unauthorized Exploitation
  6. 2024DiffusionGuard: A Robust Defense Against Malicious Diffusion-based Image Editing
  7. 2023A Recipe for Watermarking Diffusion Models
  8. 2023Diffusion models meet image counter-forensics