mlsanityData to 7 Oct 2026

Unlearnable Examples for Diffusion Models: Protect Data from Unauthorized Exploitation

arXiv 2306.01902 ↗First posted 2 Jun 2023cs.CVcited by 37

On the map: Diffusion models → Robustness, privacy and adversarial aspects

Abstract (arXiv)

Diffusion models have demonstrated remarkable performance in image generation tasks, paving the way for powerful AIGC applications. However, these widely-used generative models can also raise security and privacy concerns, such as copyright infringement, and sensitive data leakage. To tackle these issues, we propose a method, Unlearnable Diffusion Perturbation, to safeguard images from unauthorized exploitation. Our approach involves designing an algorithm to generate sample-wise perturbation noise for each image to be protected. This imperceptible protective noise makes the data almost unlearnable for diffusion models, i.e., diffusion models trained or fine-tuned on the protected data cannot generate high-quality and diverse images related to the protected training data. Theoretically, we frame this as a max-min optimization problem and introduce EUDP, a noise scheduler-based method to enhance the effectiveness of the protective noise. We evaluate our methods on both Denoising Diffusion Probabilistic Model and Latent Diffusion Models, demonstrating that training diffusion models on the protected data lead to a significant reduction in the quality of the generated images. Especially, the experimental results on Stable Diffusion demonstrate that our method effectively safeguards images from being used to train Diffusion Models in various tasks, such as training specific objects and styles. This achievement holds significant importance in real-world scenarios, as it contributes to the protection of privacy and copyright against AI-generated content.

Key facts. Cited by 37 papers in the map (data through 7 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 35 of its 45 references that are in the map. First posted on arXiv 2 Jun 2023.

Builds on

35 of 45 references.

Closest ancestors · 5

Same direction, newest first

  1. 2023The Stable Signature: Rooting Watermarks in Latent Diffusion Models27 Mar
  2. 2023Anti-DreamBooth: Protecting users from personalized text-to-image synthesis27 Mar
  3. 2023Erasing Concepts from Diffusion Models13 Mar
  4. 2023Raising the Cost of Malicious AI-Powered Image Editing13 Feb
  5. 2023Adversarial Example Does Good: Preventing Painting Imitation from Diffusion Models via Adversarial Examples9 Feb

Other references · 30

  1. 2020Denoising Diffusion Probabilistic Modelscited by 20,851
  2. 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
  3. 2020Score-Based Generative Modeling through Stochastic Differential Equationscited by 8,964
  4. 2021Diffusion Models Beat GANs on Image Synthesiscited by 8,185
  5. 2014Explaining and Harnessing Adversarial Examplescited by 7,287
  6. 2015Deep Unsupervised Learning using Nonequilibrium Thermodynamicscited by 7,005
  7. 2022Generative Adversarial Networkscited by 5,603
  8. 2013Auto-Encoding Variational Bayescited by 3,980
  9. 2021Improved Denoising Diffusion Probabilistic Modelscited by 3,736
  10. 2022DreamBooth: Fine Tuning Text-to-Image Diffusion Models for Subject-Driven Generationcited by 3,286
  11. 2018Large Scale GAN Training for High Fidelity Natural Image Synthesiscited by 2,609
  12. 2022An Image is Worth One Word: Personalizing Text-to-Image Generation using Textual Inversioncited by 2,231
18 more
  1. 2019Improved Precision and Recall Metric for Assessing Generative Modelscited by 925
  2. 2020Leveraging Frequency Analysis for Deep Fake Image Recognitioncited by 501
  3. 2018Assessing Generative Models via Precision and Recallcited by 401
  4. 2023DIRE for Diffusion-Generated Image Detectioncited by 386
  5. 2021Multi-attentional Deepfake Detectioncited by 339
  6. 2022Analytic-DPM: an Analytic Estimate of the Optimal Reverse Variance in Diffusion Probabilistic Modelscited by 331
  7. 2023Glaze: Protecting Artists from Style Mimicry by Text-to-Image Modelscited by 200
  8. 2021Unlearnable Examples: Making Personal Data Unexploitablecited by 188
  9. 2023Hierarchical Fine-Grained Image Forgery Detection and Localizationcited by 134
  10. 2020Adversarial Watermarking Transformer: Towards Tracing Text Provenance with Data Hidingcited by 121
  11. 2021Adversarial Examples Make Strong Poisonscited by 115
  12. 2019NATTACK: Learning the Distributions of Adversarial Examples for an Improved Black-Box Attack on Deep Neural Networkscited by 94
  13. 2023Evading Watermark based Detection of AI-Generated Contentcited by 74
  14. 2018Structured Adversarial Attack: Towards General Implementation and Better Interpretabilitycited by 63
  15. 2021Availability Attacks Create Shortcutscited by 60
  16. 2021Better Safe Than Sorry: Preventing Delusive Adversaries with Adversarial Trainingcited by 58
  17. 2022Robust Unlearnable Examples: Protecting Data Against Adversarial Learningcited by 34
  18. 2022Poisons that are learned faster are more effectivecited by 14

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2023: 7; 2024: 15; 2025: 7; 2026: 8.

37 papers.

Sort:

By area:

  1. 2024MACE: Mass Concept Erasure in Diffusion Modelscited by 298
  2. 2023Robustness of AI-Image Detectors: Fundamental Limits and Practical Attackscited by 75
  3. 2023On the Design Fundamentals of Diffusion Models: A Surveycited by 59
  4. 2023Exposing the Fake: Effective Diffusion-Generated Images Detectioncited by 48
  5. 2024Membership Inference on Text-to-Image Diffusion Models via Conditional Likelihood Discrepancycited by 38
  6. 2023Can Protective Perturbation Safeguard Personal Data from Being Exploited by Stable Diffusion?cited by 37
  7. 2024On the Challenges and Opportunities in Generative AIcited by 31
  8. 2023DUAW: Data-free Universal Adversarial Watermark against Stable Diffusion Customizationcited by 18
  9. 2023Targeted Attack Improves Protection against Unauthorized Diffusion Customizationcited by 18
  10. 2024Perturbing Attention Gives You More Bang for the Buck: Subtle Imaging Perturbations That Efficiently Fool Customized Diffusion Modelscited by 18
  11. 2023IMMA: Immunizing text-to-image Models against Malicious Adaptationcited by 17
  12. 2024Prompt-Agnostic Adversarial Perturbation for Customized Diffusion Modelscited by 14
25 more
  1. 2024A Survey of Defenses Against AI-Generated Visual Media: Detection,Disruption, and Authenticationcited by 12
  2. 2024Replication in Visual Diffusion Models: A Survey and Outlookcited by 11
  3. 2024Imperceptible Protection against Style Imitation from Diffusion Modelscited by 8
  4. 2024A Survey on Responsible Generative AI: What to Generate and What Notcited by 8
  5. 2024U Can't Gen This? A Survey of Intellectual Property Protection Methods for Data in Generative AIcited by 7
  6. 2024Nearly Zero-Cost Protection Against Mimicry by Personalized Diffusion Modelscited by 6
  7. 2025A Survey on Unlearnable Datacited by 5
  8. 2026When Priors Backfire: On the Vulnerability of Unlearnable Examples to Pretrainingcited by 5
  9. 2024A Comprehensive Survey on Diffusion Models and Their Applicationscited by 4
  10. 2025Visual Watermarking in the Era of Diffusion Models: Advances and Challengescited by 4
  11. 2025Beyond Vulnerabilities: A Survey of Adversarial Attacks as Both Threats and Defenses in Computer Vision Systemscited by 4
  12. 2024Towards Operationalizing Right to Data Protectioncited by 3
  13. 2024Watermarking Visual Concepts for Diffusion Modelscited by 3
  14. 2024Protective Perturbations against Unauthorized Data Usage in Diffusion-based Image Generationcited by 2
  15. 2025Privacy Protection Against Personalized Text-to-Image Synthesis via Cross-image Consistency Constraintscited by 2
  16. 2025An h-space Based Adversarial Attack for Protection Against Few-shot Personalizationcited by 2
  17. 2026To See is Not to Learn: Protecting Multimodal Data from Unauthorized Fine-Tuning of Large Vision-Language Modelcited by 2
  18. 2025Targeted Data Protection for Diffusion Model by Matching Training Trajectorycited by 1
  19. 2026Delving into the Temporal Challenges of Unified Video Protection Against Image-to-Video and Fine-Tuning-based Customizationcited by 1
  20. 2025Learning to Generate Cross-Task Unexploitable Examplescited by 0
  21. 2026Deepfake Detection Generalization with Diffusion Noisecited by 0
  22. 2026SoK: Unlearnability and Unlearning for Model Dememorizationcited by 0
  23. 2026VOID: Defeating Unauthorized Mimicry in Latent Diffusion Modelscited by 0
  24. 2026DiffUE: Enhancing Utility-Unlearnability Trade-off of Unlearnable Examples via Diffusion Autoencoderscited by 0
  25. 2026IP Protection in the Era of Visual Generative AI: A Surveycited by 0

Similar, not cited

Close in wording, no citation either way

  1. 2025Latent Diffusion Unlearning: Protecting Against Unauthorized Personalization Through Trajectory Shifted Perturbations
  2. 2025Training-Free Safe Denoisers for Safe Use of Diffusion Models
  3. 2025Positive-Unlabeled Diffusion Models for Preventing Sensitive Data Generation
  4. 2025Towards Irreversible Machine Unlearning for Diffusion Models
  5. 2023Differentially Private Diffusion Models Generate Useful Synthetic Images
  6. 2026Noise as a Probe: Membership Inference Attacks on Diffusion Models Leveraging Initial Noise
  7. 2025Hiding Images in Diffusion Models by Editing Learned Score Functions
  8. 2024Gradient-Guided Conditional Diffusion Models for Private Image Reconstruction: Analyzing Adversarial Impacts of Differential Privacy and Denoising