CRoSS: Diffusion Model Makes Controllable, Robust and Secure Image Steganography
On the map: Diffusion models → Robustness, privacy and adversarial aspects
Abstract (arXiv)
Current image steganography techniques are mainly focused on cover-based methods, which commonly have the risk of leaking secret images and poor robustness against degraded container images. Inspired by recent developments in diffusion models, we discovered that two properties of diffusion models, the ability to achieve translation between two images without training, and robustness to noisy data, can be used to improve security and natural robustness in image steganography tasks. For the choice of diffusion model, we selected Stable Diffusion, a type of conditional diffusion model, and fully utilized the latest tools from open-source communities, such as LoRAs and ControlNets, to improve the controllability and diversity of container images. In summary, we propose a novel image steganography framework, named Controllable, Robust and Secure Image Steganography (CRoSS), which has significant advantages in controllability, robustness, and security compared to cover-based image steganography methods. These benefits are obtained without additional training. To our knowledge, this is the first work to introduce diffusion models to the field of image steganography. In the experimental section, we conducted detailed experiments to demonstrate the advantages of our proposed CRoSS framework in controllability, robustness, and security.
Key facts. Cited by 50 papers in the map (data through 7 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 44 of its 78 references that are in the map. First posted on arXiv 26 May 2023.
Builds on
44 of 78 references.
References · 44
- 2020Denoising Diffusion Probabilistic Modelscited by 20,851
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
- 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,084
- 2020Denoising Diffusion Implicit Modelscited by 9,655
- 2020Score-Based Generative Modeling through Stochastic Differential Equationscited by 8,964
- 2021Diffusion Models Beat GANs on Image Synthesiscited by 8,185
- 2022Hierarchical Text-Conditional Image Generation with CLIP Latentscited by 6,539
- 2022Photorealistic Text-to-Image Diffusion Models with Deep Language Understandingcited by 6,322
- 2023Adding Conditional Control to Text-to-Image Diffusion Modelscited by 5,466
- 2022BLIP: Bootstrapping Language-Image Pre-training for Unified Vision-Language Understanding and Generationcited by 4,310
- 2019Generative Modeling by Estimating Gradients of the Data Distributioncited by 4,067
- 2022DreamBooth: Fine Tuning Text-to-Image Diffusion Models for Subject-Driven Generationcited by 3,286
32 more
- 2022InstructPix2Pix: Learning to Follow Image Editing Instructionscited by 2,591
- 2022Prompt-to-Prompt Image Editing with Cross Attention Controlcited by 2,409
- 2022An Image is Worth One Word: Personalizing Text-to-Image Generation using Textual Inversioncited by 2,231
- 2016Density estimation using Real NVPcited by 2,029
- 2021SDEdit: Guided Image Synthesis and Editing with Stochastic Differential Equationscited by 1,903
- 2021Image Super-Resolution via Iterative Refinementcited by 1,506
- 2022RePaint: Inpainting using Denoising Diffusion Probabilistic Modelscited by 1,419
- 2023T2I-Adapter: Learning Adapters to Dig out More Controllable Ability for Text-to-Image Diffusion Modelscited by 1,339
- 2022Null-text Inversion for Editing Real Images using Guided Diffusion Modelscited by 1,168
- 2014NICE: Non-linear Independent Components Estimationcited by 1,052
- 2021Real-ESRGAN: Training Real-World Blind Super-Resolution with Pure Synthetic Datacited by 961
- 2022Denoising Diffusion Restoration Modelscited by 951
- 2017Masked Autoregressive Flow for Density Estimationcited by 680
- 2019Image2StyleGAN: How to Embed Images Into the StyleGAN Latent Space?cited by 675
- 2021DiffusionCLIP: Text-Guided Diffusion Models for Robust Image Manipulationcited by 640
- 2016Improving Variational Inference with Inverse Autoregressive Flowcited by 636
- 2021ILVR: Conditioning Method for Denoising Diffusion Probabilistic Modelscited by 634
- 2022Zero-Shot Image Restoration Using Denoising Diffusion Null-Space Modelcited by 574
- 2018HiDDeN: Hiding Data With Deep Networkscited by 384
- 2023FreeDoM: Training-Free Energy-Guided Conditional Diffusion Modelcited by 290
- 2022Dual Diffusion Implicit Bridges for Image-to-Image Translationcited by 212
- 2022EGSDE: Unpaired Image-to-Image Translation via Energy-Guided Stochastic Differential Equationscited by 172
- 2020Invertible Image Rescalingcited by 92
- 2023DR2: Diffusion-based Robust Degradation Remover for Blind Face Restorationcited by 79
- 2019SteganoGAN: High Capacity Image Steganography with GANscited by 70
- 2019Sum-of-Squares Polynomial Flowcited by 62
- 2014StegExpose - A Tool for Detecting LSB Steganographycited by 25
- 2018CNN Based Adversarial Embedding with Minimum Alteration for Image Steganographycited by 22
- 2022M3ST: Mix at Three Levels for Speech Translationcited by 21
- 2018Yedrouj-Net: An efficient CNN for spatial steganalysiscited by 19
- 2017SSGAN: Secure Steganography Based on Generative Adversarial Networkscited by 18
- 2023Unlimited-Size Diffusion Restorationcited by 15
Built on by
Citing papers per year: 2023: 3; 2024: 16; 2025: 18; 2026: 13.
50 papers.
Sort:
By area:
- 2024FakeShield: Explainable Image Forgery Detection and Localization via Multi-modal Large Language Modelscited by 111
- 2023EditGuard: Versatile Image Watermarking for Tamper Localization and Copyright Protectioncited by 109
- 2024360DVD: Controllable Panorama Video Generation with 360-Degree Video Diffusion Modelcited by 56
- 2024ROBIN: Robust and Invisible Watermarks for Diffusion Models with Adversarial Optimizationcited by 45
- 2024OmniGuard: Hybrid Manipulation Localization via Augmented Versatile Deep Image Watermarkingcited by 35
- 2024V2A-Mark: Versatile Deep Visual-Audio Watermarking for Manipulation Localization and Copyright Protectioncited by 27
- 2024GS-Hider: Hiding Messages into 3D Gaussian Splattingcited by 26
- 2023AnimateZero: Video Diffusion Models are Zero-Shot Image Animatorscited by 19
- 2024Generative Text Steganography with Large Language Modelcited by 16
- 2024DiffStega: Towards Universal Training-Free Coverless Image Steganography with Diffusion Modelscited by 15
- 2025All That Glitters Is Not Gold: Key-Secured 3D Secrets within 3D Gaussian Splattingcited by 15
- 2025SecureGS: Boosting the Security and Fidelity of 3D Gaussian Splatting Steganographycited by 14
38 more
- 2024OmniSSR: Zero-shot Omnidirectional Image Super-Resolution using Stable Diffusion Modelcited by 11
- 2024Robust Message Embedding via Attention Flow-Based Steganographycited by 5
- 2024Diffusion-Based Hierarchical Image Steganographycited by 4
- 2025GaussianSeal: Rooting Adaptive Watermarks for 3D Gaussian Generation Modelcited by 4
- 2025StableGuard: Towards Unified Copyright Protection and Tamper Localization in Latent Diffusion Modelscited by 4
- 2024Data-Free Federated Class Incremental Learning with Diffusion-Based Generative Memorycited by 3
- 2025PSyDUCK: Training-Free Steganography for Latent Diffusioncited by 3
- 2025VideoGuard: Protecting Video Content from Unauthorized Editingcited by 3
- 2026TalkPhoto: A Versatile Training-Free Conversational Assistant for Intelligent Image Editingcited by 3
- 2024UVCG: Leveraging Temporal Consistency for Universal Video Protectioncited by 2
- 2025VisGuard: Securing Visualization Dissemination through Tamper-Resistant Data Retrievalcited by 2
- 2023Implicit Steganography Beyond the Constraints of Modalitycited by 1
- 2025Detecting Text Manipulation in Images using Vision Language Modelscited by 1
- 2026Stego Battlefield: Evaluating Image Steganography Attacks and Steganalysis Defensescited by 1
- 2024FIIH: Fully Invertible Image Hiding for Secure and Robustcited by 0
- 2024Neural Cover Selection for Image Steganographycited by 0
- 2024DDIM-Driven Coverless Steganography Scheme with Real Keycited by 0
- 2025Provably Secure Covert Messaging Using Image-based Diffusion Processescited by 0
- 2025DocShaDiffusion: Diffusion Model in Latent Space for Document Image Shadow Removalcited by 0
- 2025CIF: A Constrained Inversion Framework for Reliable Message Extraction in Diffusion-Based Generative Steganographycited by 0
- 2025Tackling Ill-posedness of Reversible Image Conversion with Well-posed Invertible Networkcited by 0
- 2025Deep Data Hiding for ICAO-Compliant Face Images: A Surveycited by 0
- 2025Attacks on Approximate Caches in Text-to-Image Diffusion Modelscited by 0
- 2025SemSteDiff: Generative Diffusion Model-based Coverless Semantic Steganography Communicationcited by 0
- 2025Approximate Gaussian Mapping for Generative Image Steganographycited by 0
- 2025S2LM: Towards Semantic Steganography via Large Language Modelscited by 0
- 2025Training-Free Color-Aware Adversarial Diffusion Sanitization for Diffusion Stegomalware Defense at Security Gatewayscited by 0
- 2026Breaking the Resolution Barrier: Arbitrary-resolution Deep Image Steganography Frameworkcited by 0
- 2026DTAMS: High-Capacity Generative Steganography via Dynamic Multi-Timestep Selection and Adaptive Deviation Mapping in Latent Diffusioncited by 0
- 2026Rethinking Security of Diffusion-based Generative Steganographycited by 0
- 2026Training-Free Coverless Multi-Image Steganography with Access Controlcited by 0
- 2026PRoADS: Provably Secure and Robust Audio Diffusion Steganography with latent optimization and backward Euler Inversioncited by 0
- 2026Watch Your Step: Information Injection in Diffusion Models via Shadow Timestep Embeddingcited by 0
- 2026No Prompt, No Leaks: A Robust Generative Steganography Framework via Prompt-Free Diffusioncited by 0
- 2026Histogram-constrained Image Generationcited by 0
- 2026Secret-Stego Dissimilarity as a Design Axis: Invertible Coverless Image Steganography with Diffusion Modelscited by 0
- 2026TDDM-Melatt: A Decoupled Memory and Diffusion Framework for Generalizable Encrypted Traffic Classificationcited by 0
- 2026StegGNN: Learning Graphical Representation for Image Steganographycited by 0
- 2026StegGNN: Learning Graphical Representation for Image Steganography26 Sep 2026
- 2026TDDM-Melatt: A Decoupled Memory and Diffusion Framework for Generalizable Encrypted Traffic Classification31 Aug 2026
- 2026Secret-Stego Dissimilarity as a Design Axis: Invertible Coverless Image Steganography with Diffusion Models31 Jul 2026
- 2026Histogram-constrained Image Generation30 Jun 2026
- 2026No Prompt, No Leaks: A Robust Generative Steganography Framework via Prompt-Free Diffusion30 Jun 2026
- 2026Stego Battlefield: Evaluating Image Steganography Attacks and Steganalysis Defenses7 May 2026
- 2026Watch Your Step: Information Injection in Diffusion Models via Shadow Timestep Embedding1 May 2026
- 2026PRoADS: Provably Secure and Robust Audio Diffusion Steganography with latent optimization and backward Euler Inversion11 Mar 2026
- 2026Training-Free Coverless Multi-Image Steganography with Access Control10 Mar 2026
- 2026Rethinking Security of Diffusion-based Generative Steganography10 Feb 2026
- 2026DTAMS: High-Capacity Generative Steganography via Dynamic Multi-Timestep Selection and Adaptive Deviation Mapping in Latent Diffusion1 Feb 2026
- 2026Breaking the Resolution Barrier: Arbitrary-resolution Deep Image Steganography Framework22 Jan 2026
38 more
- 2026TalkPhoto: A Versatile Training-Free Conversational Assistant for Intelligent Image Editing5 Jan 2026
- 2025Training-Free Color-Aware Adversarial Diffusion Sanitization for Diffusion Stegomalware Defense at Security Gateways30 Dec 2025
- 2025S2LM: Towards Semantic Steganography via Large Language Models7 Nov 2025
- 2025Approximate Gaussian Mapping for Generative Image Steganography8 Oct 2025
- 2025StableGuard: Towards Unified Copyright Protection and Tamper Localization in Latent Diffusion Models22 Sep 2025
- 2025Detecting Text Manipulation in Images using Vision Language Models12 Sep 2025
- 2025SemSteDiff: Generative Diffusion Model-based Coverless Semantic Steganography Communication5 Sep 2025
- 2025Attacks on Approximate Caches in Text-to-Image Diffusion Models28 Aug 2025
- 2025Deep Data Hiding for ICAO-Compliant Face Images: A Survey26 Aug 2025
- 2025VideoGuard: Protecting Video Content from Unauthorized Editing5 Aug 2025
- 2025Tackling Ill-posedness of Reversible Image Conversion with Well-posed Invertible Network4 Aug 2025
- 2025CIF: A Constrained Inversion Framework for Reliable Message Extraction in Diffusion-Based Generative Steganography1 Aug 2025
- 2025VisGuard: Securing Visualization Dissemination through Tamper-Resistant Data Retrieval19 Jul 2025
- 2025DocShaDiffusion: Diffusion Model in Latent Space for Document Image Shadow Removal2 Jul 2025
- 2025Provably Secure Covert Messaging Using Image-based Diffusion Processes13 Mar 2025
- 2025All That Glitters Is Not Gold: Key-Secured 3D Secrets within 3D Gaussian Splatting10 Mar 2025
- 2025SecureGS: Boosting the Security and Fidelity of 3D Gaussian Splatting Steganography8 Mar 2025
- 2025GaussianSeal: Rooting Adaptive Watermarks for 3D Gaussian Generation Model1 Mar 2025
- 2025PSyDUCK: Training-Free Steganography for Latent Diffusion31 Jan 2025
- 2024OmniGuard: Hybrid Manipulation Localization via Augmented Versatile Deep Image Watermarking2 Dec 2024
- 2024UVCG: Leveraging Temporal Consistency for Universal Video Protection25 Nov 2024
- 2024DDIM-Driven Coverless Steganography Scheme with Real Key10 Nov 2024
- 2024ROBIN: Robust and Invisible Watermarks for Diffusion Models with Adversarial Optimization6 Nov 2024
- 2024Neural Cover Selection for Image Steganography23 Oct 2024
- 2024FakeShield: Explainable Image Forgery Detection and Localization via Multi-modal Large Language Models3 Oct 2024
- 2024FIIH: Fully Invertible Image Hiding for Secure and Robust24 Jul 2024
- 2024DiffStega: Towards Universal Training-Free Coverless Image Steganography with Diffusion Models15 Jul 2024
- 2024Robust Message Embedding via Attention Flow-Based Steganography26 May 2024
- 2024GS-Hider: Hiding Messages into 3D Gaussian Splatting24 May 2024
- 2024Data-Free Federated Class Incremental Learning with Diffusion-Based Generative Memory22 May 2024
- 2024Diffusion-Based Hierarchical Image Steganography19 May 2024
- 2024V2A-Mark: Versatile Deep Visual-Audio Watermarking for Manipulation Localization and Copyright Protection25 Apr 2024
- 2024OmniSSR: Zero-shot Omnidirectional Image Super-Resolution using Stable Diffusion Model16 Apr 2024
- 2024Generative Text Steganography with Large Language Model16 Apr 2024
- 2024360DVD: Controllable Panorama Video Generation with 360-Degree Video Diffusion Model12 Jan 2024
- 2023EditGuard: Versatile Image Watermarking for Tamper Localization and Copyright Protection12 Dec 2023
- 2023Implicit Steganography Beyond the Constraints of Modality9 Dec 2023
- 2023AnimateZero: Video Diffusion Models are Zero-Shot Image Animators6 Dec 2023
- 2024360DVD: Controllable Panorama Video Generation with 360-Degree Video Diffusion Modelcited by 56
- 2024ROBIN: Robust and Invisible Watermarks for Diffusion Models with Adversarial Optimizationcited by 45
- 2023AnimateZero: Video Diffusion Models are Zero-Shot Image Animatorscited by 19
- 2024DiffStega: Towards Universal Training-Free Coverless Image Steganography with Diffusion Modelscited by 15
- 2024OmniSSR: Zero-shot Omnidirectional Image Super-Resolution using Stable Diffusion Modelcited by 11
- 2024Diffusion-Based Hierarchical Image Steganographycited by 4
- 2025StableGuard: Towards Unified Copyright Protection and Tamper Localization in Latent Diffusion Modelscited by 4
- 2024Data-Free Federated Class Incremental Learning with Diffusion-Based Generative Memorycited by 3
- 2025PSyDUCK: Training-Free Steganography for Latent Diffusioncited by 3
- 2025VideoGuard: Protecting Video Content from Unauthorized Editingcited by 3
- 2025Provably Secure Covert Messaging Using Image-based Diffusion Processescited by 0
- 2025DocShaDiffusion: Diffusion Model in Latent Space for Document Image Shadow Removalcited by 0
12 most cited of 22 All 22 (JSON)
- 2026Secret-Stego Dissimilarity as a Design Axis: Invertible Coverless Image Steganography with Diffusion Models31 Jul 2026
- 2026Histogram-constrained Image Generation30 Jun 2026
- 2026Watch Your Step: Information Injection in Diffusion Models via Shadow Timestep Embedding1 May 2026
- 2026PRoADS: Provably Secure and Robust Audio Diffusion Steganography with latent optimization and backward Euler Inversion11 Mar 2026
- 2026Rethinking Security of Diffusion-based Generative Steganography10 Feb 2026
- 2026DTAMS: High-Capacity Generative Steganography via Dynamic Multi-Timestep Selection and Adaptive Deviation Mapping in Latent Diffusion1 Feb 2026
- 2025Approximate Gaussian Mapping for Generative Image Steganography8 Oct 2025
- 2025StableGuard: Towards Unified Copyright Protection and Tamper Localization in Latent Diffusion Models22 Sep 2025
- 2025SemSteDiff: Generative Diffusion Model-based Coverless Semantic Steganography Communication5 Sep 2025
- 2025Attacks on Approximate Caches in Text-to-Image Diffusion Models28 Aug 2025
- 2025VideoGuard: Protecting Video Content from Unauthorized Editing5 Aug 2025
- 2025CIF: A Constrained Inversion Framework for Reliable Message Extraction in Diffusion-Based Generative Steganography1 Aug 2025
12 newest of 22 All 22 (JSON)
- 2024FakeShield: Explainable Image Forgery Detection and Localization via Multi-modal Large Language Modelscited by 111
- 2026TalkPhoto: A Versatile Training-Free Conversational Assistant for Intelligent Image Editingcited by 3
- 2025Detecting Text Manipulation in Images using Vision Language Modelscited by 1
- 2026TalkPhoto: A Versatile Training-Free Conversational Assistant for Intelligent Image Editing5 Jan 2026
- 2025Detecting Text Manipulation in Images using Vision Language Models12 Sep 2025
- 2024FakeShield: Explainable Image Forgery Detection and Localization via Multi-modal Large Language Models3 Oct 2024
- 2023EditGuard: Versatile Image Watermarking for Tamper Localization and Copyright Protectioncited by 109
- 2024OmniGuard: Hybrid Manipulation Localization via Augmented Versatile Deep Image Watermarkingcited by 35
- 2024V2A-Mark: Versatile Deep Visual-Audio Watermarking for Manipulation Localization and Copyright Protectioncited by 27
- 2024GS-Hider: Hiding Messages into 3D Gaussian Splattingcited by 26
- 2024Generative Text Steganography with Large Language Modelcited by 16
- 2025All That Glitters Is Not Gold: Key-Secured 3D Secrets within 3D Gaussian Splattingcited by 15
- 2025SecureGS: Boosting the Security and Fidelity of 3D Gaussian Splatting Steganographycited by 14
- 2024Robust Message Embedding via Attention Flow-Based Steganographycited by 5
- 2024UVCG: Leveraging Temporal Consistency for Universal Video Protectioncited by 2
- 2025VisGuard: Securing Visualization Dissemination through Tamper-Resistant Data Retrievalcited by 2
- 2023Implicit Steganography Beyond the Constraints of Modalitycited by 1
- 2026Stego Battlefield: Evaluating Image Steganography Attacks and Steganalysis Defensescited by 1
12 most cited of 24 All 24 (JSON)
- 2026StegGNN: Learning Graphical Representation for Image Steganography26 Sep 2026
- 2026TDDM-Melatt: A Decoupled Memory and Diffusion Framework for Generalizable Encrypted Traffic Classification31 Aug 2026
- 2026No Prompt, No Leaks: A Robust Generative Steganography Framework via Prompt-Free Diffusion30 Jun 2026
- 2026Stego Battlefield: Evaluating Image Steganography Attacks and Steganalysis Defenses7 May 2026
- 2026Training-Free Coverless Multi-Image Steganography with Access Control10 Mar 2026
- 2026Breaking the Resolution Barrier: Arbitrary-resolution Deep Image Steganography Framework22 Jan 2026
- 2025Training-Free Color-Aware Adversarial Diffusion Sanitization for Diffusion Stegomalware Defense at Security Gateways30 Dec 2025
- 2025S2LM: Towards Semantic Steganography via Large Language Models7 Nov 2025
- 2025Deep Data Hiding for ICAO-Compliant Face Images: A Survey26 Aug 2025
- 2025Tackling Ill-posedness of Reversible Image Conversion with Well-posed Invertible Network4 Aug 2025
- 2025VisGuard: Securing Visualization Dissemination through Tamper-Resistant Data Retrieval19 Jul 2025
- 2025All That Glitters Is Not Gold: Key-Secured 3D Secrets within 3D Gaussian Splatting10 Mar 2025
12 newest of 24 All 24 (JSON)
Similar, not cited
Close in wording, no citation either way
- 2025Hiding Images in Diffusion Models by Editing Learned Score Functions
- 2023Diffusion-Stego: Training-free Diffusion Generative Steganography via Message Projection
- 2024Plug-and-Hide: Provable and Adjustable Diffusion Generative Steganography
- 2025Parasite: A Steganography-based Backdoor Attack Framework for Diffusion Models
- 2023Unlearnable Examples for Diffusion Models: Protect Data from Unauthorized Exploitation
- 2024DiffusionGuard: A Robust Defense Against Malicious Diffusion-based Image Editing
- 2023A Recipe for Watermarking Diffusion Models
- 2023Diffusion models meet image counter-forensics