mlsanityData to 7 Oct 2026

Degeneration-Tuning: Using Scrambled Grid shield Unwanted Concepts from Stable Diffusion

arXiv 2308.02552 ↗First posted 2 Aug 2023cs.CVcited by 27

On the map: Diffusion models → Robustness, privacy and adversarial aspects

Abstract (arXiv)

Owing to the unrestricted nature of the content in the training data, large text-to-image diffusion models, such as Stable Diffusion (SD), are capable of generating images with potentially copyrighted or dangerous content based on corresponding textual concepts information. This includes specific intellectual property (IP), human faces, and various artistic styles. However, Negative Prompt, a widely used method for content removal, frequently fails to conceal this content due to inherent limitations in its inference logic. In this work, we propose a novel strategy named Degeneration-Tuning (DT) to shield contents of unwanted concepts from SD weights. By utilizing Scrambled Grid to reconstruct the correlation between undesired concepts and their corresponding image domain, we guide SD to generate meaningless content when such textual concepts are provided as input. As this adaptation occurs at the level of the model's weights, the SD, after DT, can be grafted onto other conditional diffusion frameworks like ControlNet to shield unwanted concepts. In addition to qualitatively showcasing the effectiveness of our DT method in protecting various types of concepts, a quantitative comparison of the SD before and after DT indicates that the DT method does not significantly impact the generative quality of other contents. The FID and IS scores of the model on COCO-30K exhibit only minor changes after DT, shifting from 12.61 and 39.20 to 13.04 and 38.25, respectively, which clearly outperforms the previous methods.

Key facts. Cited by 27 papers in the map (data through 7 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 44 of its 58 references that are in the map. First posted on arXiv 2 Aug 2023.

Builds on

44 of 58 references.

Closest ancestors · 4

Same direction, newest first

  1. 2023Erasing Concepts from Diffusion Models13 Mar
  2. 2023Extracting Training Data from Diffusion Models30 Jan
  3. 2022Safe Latent Diffusion: Mitigating Inappropriate Degeneration in Diffusion Models9 Nov
  4. 2022Red-Teaming the Stable Diffusion Safety Filter3 Oct

Other references · 40

  1. 2020Denoising Diffusion Probabilistic Modelscited by 20,851
  2. 2015U-Net: Convolutional Networks for Biomedical Image Segmentationcited by 19,604
  3. 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
  4. 2014Microsoft COCO: Common Objects in Contextcited by 17,498
  5. 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,084
  6. 2020Denoising Diffusion Implicit Modelscited by 9,655
  7. 2021Diffusion Models Beat GANs on Image Synthesiscited by 8,185
  8. 2015Deep Unsupervised Learning using Nonequilibrium Thermodynamicscited by 7,005
  9. 2022Photorealistic Text-to-Image Diffusion Models with Deep Language Understandingcited by 6,322
  10. 2018A Style-Based Generator Architecture for Generative Adversarial Networkscited by 5,986
  11. 2022Classifier-Free Diffusion Guidancecited by 5,717
  12. 2023Adding Conditional Control to Text-to-Image Diffusion Modelscited by 5,466
28 more
  1. 2015Rethinking the Inception Architecture for Computer Visioncited by 5,451
  2. 2016Overcoming catastrophic forgetting in neural networkscited by 4,718
  3. 2021GLIDE: Towards Photorealistic Image Generation and Editing with Text-Guided Diffusion Modelscited by 3,595
  4. 2022DreamBooth: Fine Tuning Text-to-Image Diffusion Models for Subject-Driven Generationcited by 3,286
  5. 2020Taming Transformers for High-Resolution Image Synthesiscited by 3,229
  6. 2022Prompt-to-Prompt Image Editing with Cross Attention Controlcited by 2,409
  7. 2016iCaRL: Incremental Classifier and Representation Learningcited by 2,313
  8. 2022An Image is Worth One Word: Personalizing Text-to-Image Generation using Textual Inversioncited by 2,231
  9. 2023T2I-Adapter: Learning Adapters to Dig out More Controllable Ability for Text-to-Image Diffusion Modelscited by 1,339
  10. 2022Imagic: Text-Based Real Image Editing with Diffusion Modelscited by 1,172
  11. 2013An Empirical Investigation of Catastrophic Forgetting in Gradient-Based Neural Networkscited by 711
  12. 2021Maximum Likelihood Training of Score-Based Diffusion Modelscited by 670
  13. 2021Vector-quantized Image Modeling with Improved VQGANcited by 656
  14. 2021VideoGPT: Video Generation using VQ-VAE and Transformerscited by 651
  15. 2021DiffusionCLIP: Text-Guided Diffusion Models for Robust Image Manipulationcited by 640
  16. 2021CLIPDraw: Exploring Text-to-Drawing Synthesis through Language-Image Encoderscited by 186
  17. 2020Anatomy of Catastrophic Forgetting: Hidden Representations and Task Semanticscited by 158
  18. 2023Cones: Concept Neurons in Diffusion Models for Customized Generationcited by 150
  19. 2022ProDiff: Progressive Fast Diffusion Model For High-Quality Text-to-Speechcited by 147
  20. 2022FastDiff: A Fast Conditional Diffusion Model for High-Quality Speech Synthesiscited by 136
  21. 2013Stabilitycited by 119
  22. 2023Cones 2: Customizable Image Synthesis with Multiple Subjectscited by 101
  23. 2022MVP: Multimodality-guided Visual Pre-trainingcited by 92
  24. 2022Fine-Grained Semantically Aligned Vision-Language Pre-Trainingcited by 68
  25. 2021Multi-Singer: Fast Multi-Singer Singing Voice Vocoder With A Large-Scale Corpuscited by 60
  26. 2023Continual Vision-Language Representation Learning with Off-Diagonal Informationcited by 40
  27. 2021SingGAN: Generative Adversarial Network For High-Fidelity Singing Voice Generationcited by 27
  28. 2021Revisiting Catastrophic Forgetting in Class Incremental Learningcited by 6

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2023: 3; 2024: 11; 2025: 11; 2026: 2.

27 papers.

Sort:

By area:

  1. 2024MACE: Mass Concept Erasure in Diffusion Modelscited by 298
  2. 2023To Generate or Not? Safety-Driven Unlearned Diffusion Models Are Still Easy To Generate Unsafe Images ... For Nowcited by 204
  3. 2024Defensive Unlearning with Adversarial Training for Robust Concept Erasure in Diffusion Modelscited by 164
  4. 2023Self-Discovering Interpretable Diffusion Latent Directions for Responsible Text-to-Image Generationcited by 69
  5. 2024Adversarial Attacks and Defenses on Text-to-Image Diffusion Models: A Surveycited by 34
  6. 2024Attacks and Defenses for Generative Diffusion Models: A Comprehensive Surveycited by 32
  7. 2024Separable Multi-Concept Erasure from Diffusion Modelscited by 25
  8. 2024Iterative Ensemble Training with Anti-Gradient Control for Mitigating Memorization in Diffusion Modelscited by 12
  9. 2024Replication in Visual Diffusion Models: A Survey and Outlookcited by 11
  10. 2024Safeguard Text-to-Image Diffusion Models with Human Feedback Inversioncited by 10
  11. 2024FastEdit: Fast Text-Guided Single-Image Editing via Semantic-Aware Diffusion Fine-Tuningcited by 10
  12. 2025A Comprehensive Survey on Concept Erasure in Text-to-Image Diffusion Modelscited by 9
15 more
  1. 2025Erased but Not Forgotten: How Backdoors Compromise Concept Erasurecited by 9
  2. 2025Responsible Diffusion Models via Constraining Text Embeddings within Safe Regionscited by 8
  3. 2024Robust 3D Shape Reconstruction in Zero-Shot from a Single Image in the Wildcited by 7
  4. 2025TarPro: Targeted Protection against Malicious Image Editingcited by 7
  5. 2024A Comprehensive Survey on Diffusion Models and Their Applicationscited by 4
  6. 2025A Comprehensive Survey on Visual Concept Mining in Text-to-image Diffusion Modelscited by 4
  7. 2025Generative Model Unlearning: A Survey through Target Events, Unlearning Operators, and Evaluation Protocolscited by 4
  8. 2025Wukong Framework for Not Safe For Work Detection in Text-to-Image systemscited by 3
  9. 2026Differential Vector Erasure: Unified Training-Free Concept Erasure for Flow Matching Modelscited by 3
  10. 2025Detecting Malicious Concepts without Image Generation in AI-Generated Content (AIGC)cited by 2
  11. 2025Rethinking Robust Adversarial Concept Erasure in Diffusion Modelscited by 1
  12. 2023Trustworthy Large Models in Vision: A Surveycited by 0
  13. 2025Redistribute Ensemble Training for Mitigating Memorization in Diffusion Modelscited by 0
  14. 2025Security Risk of Misalignment between Text and Image in Multi-modal Modelcited by 0
  15. 2026SACE: Concept Erasure at the Semantic Singularity in Visual Autoregressive Modelscited by 0

Similar, not cited

Close in wording, no citation either way

  1. 2023Ablating Concepts in Text-to-Image Diffusion Models
  2. 2023Towards Safe Self-Distillation of Internet-Scale Text-to-Image Diffusion Models
  3. 2024ConceptPrune: Concept Editing in Diffusion Models via Skilled Neuron Pruning
  4. 2024Hiding and Recovering Knowledge in Text-to-Image Diffusion Models via Learnable Prompts
  5. 2026Test-Time Scaling for Safe Text-Guided Image Generation via Intermediate Clean Estimates
  6. 2024Growth Inhibitors for Suppressing Inappropriate Image Concepts in Diffusion Models
  7. 2026Localized Concept Erasure in Text-to-Image Diffusion Models via High-Level Representation Misdirection
  8. 2025Detect-and-Guide: Self-regulation of Diffusion Models for Safe Text-to-Image Generation via Guideline Token Optimization