Degeneration-Tuning: Using Scrambled Grid shield Unwanted Concepts from Stable Diffusion
On the map: Diffusion models → Robustness, privacy and adversarial aspects
Abstract (arXiv)
Owing to the unrestricted nature of the content in the training data, large text-to-image diffusion models, such as Stable Diffusion (SD), are capable of generating images with potentially copyrighted or dangerous content based on corresponding textual concepts information. This includes specific intellectual property (IP), human faces, and various artistic styles. However, Negative Prompt, a widely used method for content removal, frequently fails to conceal this content due to inherent limitations in its inference logic. In this work, we propose a novel strategy named Degeneration-Tuning (DT) to shield contents of unwanted concepts from SD weights. By utilizing Scrambled Grid to reconstruct the correlation between undesired concepts and their corresponding image domain, we guide SD to generate meaningless content when such textual concepts are provided as input. As this adaptation occurs at the level of the model's weights, the SD, after DT, can be grafted onto other conditional diffusion frameworks like ControlNet to shield unwanted concepts. In addition to qualitatively showcasing the effectiveness of our DT method in protecting various types of concepts, a quantitative comparison of the SD before and after DT indicates that the DT method does not significantly impact the generative quality of other contents. The FID and IS scores of the model on COCO-30K exhibit only minor changes after DT, shifting from 12.61 and 39.20 to 13.04 and 38.25, respectively, which clearly outperforms the previous methods.
Key facts. Cited by 27 papers in the map (data through 7 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 44 of its 58 references that are in the map. First posted on arXiv 2 Aug 2023.
Builds on
44 of 58 references.
Closest ancestors · 4
Same direction, newest first
- 2023Erasing Concepts from Diffusion Models13 Mar
- 2023Extracting Training Data from Diffusion Models30 Jan
- 2022Safe Latent Diffusion: Mitigating Inappropriate Degeneration in Diffusion Models9 Nov
- 2022Red-Teaming the Stable Diffusion Safety Filter3 Oct
Other references · 40
- 2020Denoising Diffusion Probabilistic Modelscited by 20,851
- 2015U-Net: Convolutional Networks for Biomedical Image Segmentationcited by 19,604
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
- 2014Microsoft COCO: Common Objects in Contextcited by 17,498
- 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,084
- 2020Denoising Diffusion Implicit Modelscited by 9,655
- 2021Diffusion Models Beat GANs on Image Synthesiscited by 8,185
- 2015Deep Unsupervised Learning using Nonequilibrium Thermodynamicscited by 7,005
- 2022Photorealistic Text-to-Image Diffusion Models with Deep Language Understandingcited by 6,322
- 2018A Style-Based Generator Architecture for Generative Adversarial Networkscited by 5,986
- 2022Classifier-Free Diffusion Guidancecited by 5,717
- 2023Adding Conditional Control to Text-to-Image Diffusion Modelscited by 5,466
28 more
- 2015Rethinking the Inception Architecture for Computer Visioncited by 5,451
- 2016Overcoming catastrophic forgetting in neural networkscited by 4,718
- 2021GLIDE: Towards Photorealistic Image Generation and Editing with Text-Guided Diffusion Modelscited by 3,595
- 2022DreamBooth: Fine Tuning Text-to-Image Diffusion Models for Subject-Driven Generationcited by 3,286
- 2020Taming Transformers for High-Resolution Image Synthesiscited by 3,229
- 2022Prompt-to-Prompt Image Editing with Cross Attention Controlcited by 2,409
- 2016iCaRL: Incremental Classifier and Representation Learningcited by 2,313
- 2022An Image is Worth One Word: Personalizing Text-to-Image Generation using Textual Inversioncited by 2,231
- 2023T2I-Adapter: Learning Adapters to Dig out More Controllable Ability for Text-to-Image Diffusion Modelscited by 1,339
- 2022Imagic: Text-Based Real Image Editing with Diffusion Modelscited by 1,172
- 2013An Empirical Investigation of Catastrophic Forgetting in Gradient-Based Neural Networkscited by 711
- 2021Maximum Likelihood Training of Score-Based Diffusion Modelscited by 670
- 2021Vector-quantized Image Modeling with Improved VQGANcited by 656
- 2021VideoGPT: Video Generation using VQ-VAE and Transformerscited by 651
- 2021DiffusionCLIP: Text-Guided Diffusion Models for Robust Image Manipulationcited by 640
- 2021CLIPDraw: Exploring Text-to-Drawing Synthesis through Language-Image Encoderscited by 186
- 2020Anatomy of Catastrophic Forgetting: Hidden Representations and Task Semanticscited by 158
- 2023Cones: Concept Neurons in Diffusion Models for Customized Generationcited by 150
- 2022ProDiff: Progressive Fast Diffusion Model For High-Quality Text-to-Speechcited by 147
- 2022FastDiff: A Fast Conditional Diffusion Model for High-Quality Speech Synthesiscited by 136
- 2013Stabilitycited by 119
- 2023Cones 2: Customizable Image Synthesis with Multiple Subjectscited by 101
- 2022MVP: Multimodality-guided Visual Pre-trainingcited by 92
- 2022Fine-Grained Semantically Aligned Vision-Language Pre-Trainingcited by 68
- 2021Multi-Singer: Fast Multi-Singer Singing Voice Vocoder With A Large-Scale Corpuscited by 60
- 2023Continual Vision-Language Representation Learning with Off-Diagonal Informationcited by 40
- 2021SingGAN: Generative Adversarial Network For High-Fidelity Singing Voice Generationcited by 27
- 2021Revisiting Catastrophic Forgetting in Class Incremental Learningcited by 6
Built on by
Citing papers per year: 2023: 3; 2024: 11; 2025: 11; 2026: 2.
27 papers.
Sort:
By area:
- 2024MACE: Mass Concept Erasure in Diffusion Modelscited by 298
- 2023To Generate or Not? Safety-Driven Unlearned Diffusion Models Are Still Easy To Generate Unsafe Images ... For Nowcited by 204
- 2024Defensive Unlearning with Adversarial Training for Robust Concept Erasure in Diffusion Modelscited by 164
- 2023Self-Discovering Interpretable Diffusion Latent Directions for Responsible Text-to-Image Generationcited by 69
- 2024Adversarial Attacks and Defenses on Text-to-Image Diffusion Models: A Surveycited by 34
- 2024Attacks and Defenses for Generative Diffusion Models: A Comprehensive Surveycited by 32
- 2024Separable Multi-Concept Erasure from Diffusion Modelscited by 25
- 2024Iterative Ensemble Training with Anti-Gradient Control for Mitigating Memorization in Diffusion Modelscited by 12
- 2024Replication in Visual Diffusion Models: A Survey and Outlookcited by 11
- 2024Safeguard Text-to-Image Diffusion Models with Human Feedback Inversioncited by 10
- 2024FastEdit: Fast Text-Guided Single-Image Editing via Semantic-Aware Diffusion Fine-Tuningcited by 10
- 2025A Comprehensive Survey on Concept Erasure in Text-to-Image Diffusion Modelscited by 9
15 more
- 2025Erased but Not Forgotten: How Backdoors Compromise Concept Erasurecited by 9
- 2025Responsible Diffusion Models via Constraining Text Embeddings within Safe Regionscited by 8
- 2024Robust 3D Shape Reconstruction in Zero-Shot from a Single Image in the Wildcited by 7
- 2025TarPro: Targeted Protection against Malicious Image Editingcited by 7
- 2024A Comprehensive Survey on Diffusion Models and Their Applicationscited by 4
- 2025A Comprehensive Survey on Visual Concept Mining in Text-to-image Diffusion Modelscited by 4
- 2025Generative Model Unlearning: A Survey through Target Events, Unlearning Operators, and Evaluation Protocolscited by 4
- 2025Wukong Framework for Not Safe For Work Detection in Text-to-Image systemscited by 3
- 2026Differential Vector Erasure: Unified Training-Free Concept Erasure for Flow Matching Modelscited by 3
- 2025Detecting Malicious Concepts without Image Generation in AI-Generated Content (AIGC)cited by 2
- 2025Rethinking Robust Adversarial Concept Erasure in Diffusion Modelscited by 1
- 2023Trustworthy Large Models in Vision: A Surveycited by 0
- 2025Redistribute Ensemble Training for Mitigating Memorization in Diffusion Modelscited by 0
- 2025Security Risk of Misalignment between Text and Image in Multi-modal Modelcited by 0
- 2026SACE: Concept Erasure at the Semantic Singularity in Visual Autoregressive Modelscited by 0
- 2026SACE: Concept Erasure at the Semantic Singularity in Visual Autoregressive Models14 Jun 2026
- 2026Differential Vector Erasure: Unified Training-Free Concept Erasure for Flow Matching Models1 Feb 2026
- 2025Rethinking Robust Adversarial Concept Erasure in Diffusion Models31 Oct 2025
- 2025Security Risk of Misalignment between Text and Image in Multi-modal Model30 Oct 2025
- 2025Wukong Framework for Not Safe For Work Detection in Text-to-Image systems1 Aug 2025
- 2025Generative Model Unlearning: A Survey through Target Events, Unlearning Operators, and Evaluation Protocols26 Jul 2025
- 2025Responsible Diffusion Models via Constraining Text Embeddings within Safe Regions21 May 2025
- 2025Erased but Not Forgotten: How Backdoors Compromise Concept Erasure29 Apr 2025
- 2025TarPro: Targeted Protection against Malicious Image Editing18 Mar 2025
- 2025A Comprehensive Survey on Visual Concept Mining in Text-to-image Diffusion Models17 Mar 2025
- 2025A Comprehensive Survey on Concept Erasure in Text-to-Image Diffusion Models17 Feb 2025
- 2025Redistribute Ensemble Training for Mitigating Memorization in Diffusion Models13 Feb 2025
15 more
- 2025Detecting Malicious Concepts without Image Generation in AI-Generated Content (AIGC)13 Feb 2025
- 2024Attacks and Defenses for Generative Diffusion Models: A Comprehensive Survey6 Aug 2024
- 2024FastEdit: Fast Text-Guided Single-Image Editing via Semantic-Aware Diffusion Fine-Tuning6 Aug 2024
- 2024Iterative Ensemble Training with Anti-Gradient Control for Mitigating Memorization in Diffusion Models22 Jul 2024
- 2024Safeguard Text-to-Image Diffusion Models with Human Feedback Inversion17 Jul 2024
- 2024Adversarial Attacks and Defenses on Text-to-Image Diffusion Models: A Survey10 Jul 2024
- 2024Replication in Visual Diffusion Models: A Survey and Outlook7 Jul 2024
- 2024A Comprehensive Survey on Diffusion Models and Their Applications1 Jul 2024
- 2024Defensive Unlearning with Adversarial Training for Robust Concept Erasure in Diffusion Models24 May 2024
- 2024Robust 3D Shape Reconstruction in Zero-Shot from a Single Image in the Wild21 Mar 2024
- 2024MACE: Mass Concept Erasure in Diffusion Models10 Mar 2024
- 2024Separable Multi-Concept Erasure from Diffusion Models3 Feb 2024
- 2023Self-Discovering Interpretable Diffusion Latent Directions for Responsible Text-to-Image Generation28 Nov 2023
- 2023Trustworthy Large Models in Vision: A Survey16 Nov 2023
- 2023To Generate or Not? Safety-Driven Unlearned Diffusion Models Are Still Easy To Generate Unsafe Images ... For Now18 Oct 2023
- 2024MACE: Mass Concept Erasure in Diffusion Modelscited by 298
- 2023To Generate or Not? Safety-Driven Unlearned Diffusion Models Are Still Easy To Generate Unsafe Images ... For Nowcited by 204
- 2024Defensive Unlearning with Adversarial Training for Robust Concept Erasure in Diffusion Modelscited by 164
- 2023Self-Discovering Interpretable Diffusion Latent Directions for Responsible Text-to-Image Generationcited by 69
- 2024Adversarial Attacks and Defenses on Text-to-Image Diffusion Models: A Surveycited by 34
- 2024Attacks and Defenses for Generative Diffusion Models: A Comprehensive Surveycited by 32
- 2024Separable Multi-Concept Erasure from Diffusion Modelscited by 25
- 2024Iterative Ensemble Training with Anti-Gradient Control for Mitigating Memorization in Diffusion Modelscited by 12
- 2024Replication in Visual Diffusion Models: A Survey and Outlookcited by 11
- 2024Safeguard Text-to-Image Diffusion Models with Human Feedback Inversioncited by 10
- 2025A Comprehensive Survey on Concept Erasure in Text-to-Image Diffusion Modelscited by 9
- 2025Erased but Not Forgotten: How Backdoors Compromise Concept Erasurecited by 9
12 most cited of 20 All 20 (JSON)
- 2026Differential Vector Erasure: Unified Training-Free Concept Erasure for Flow Matching Models1 Feb 2026
- 2025Rethinking Robust Adversarial Concept Erasure in Diffusion Models31 Oct 2025
- 2025Security Risk of Misalignment between Text and Image in Multi-modal Model30 Oct 2025
- 2025Wukong Framework for Not Safe For Work Detection in Text-to-Image systems1 Aug 2025
- 2025Responsible Diffusion Models via Constraining Text Embeddings within Safe Regions21 May 2025
- 2025Erased but Not Forgotten: How Backdoors Compromise Concept Erasure29 Apr 2025
- 2025A Comprehensive Survey on Visual Concept Mining in Text-to-image Diffusion Models17 Mar 2025
- 2025A Comprehensive Survey on Concept Erasure in Text-to-Image Diffusion Models17 Feb 2025
- 2025Redistribute Ensemble Training for Mitigating Memorization in Diffusion Models13 Feb 2025
- 2024Attacks and Defenses for Generative Diffusion Models: A Comprehensive Survey6 Aug 2024
- 2024Iterative Ensemble Training with Anti-Gradient Control for Mitigating Memorization in Diffusion Models22 Jul 2024
- 2024Safeguard Text-to-Image Diffusion Models with Human Feedback Inversion17 Jul 2024
12 newest of 20 All 20 (JSON)
- 2024FastEdit: Fast Text-Guided Single-Image Editing via Semantic-Aware Diffusion Fine-Tuningcited by 10
- 2024Robust 3D Shape Reconstruction in Zero-Shot from a Single Image in the Wildcited by 7
- 2025TarPro: Targeted Protection against Malicious Image Editingcited by 7
- 2025Detecting Malicious Concepts without Image Generation in AI-Generated Content (AIGC)cited by 2
- 2023Trustworthy Large Models in Vision: A Surveycited by 0
- 2025TarPro: Targeted Protection against Malicious Image Editing18 Mar 2025
- 2025Detecting Malicious Concepts without Image Generation in AI-Generated Content (AIGC)13 Feb 2025
- 2024FastEdit: Fast Text-Guided Single-Image Editing via Semantic-Aware Diffusion Fine-Tuning6 Aug 2024
- 2024Robust 3D Shape Reconstruction in Zero-Shot from a Single Image in the Wild21 Mar 2024
- 2023Trustworthy Large Models in Vision: A Survey16 Nov 2023
Similar, not cited
Close in wording, no citation either way
- 2023Ablating Concepts in Text-to-Image Diffusion Models
- 2023Towards Safe Self-Distillation of Internet-Scale Text-to-Image Diffusion Models
- 2024ConceptPrune: Concept Editing in Diffusion Models via Skilled Neuron Pruning
- 2024Hiding and Recovering Knowledge in Text-to-Image Diffusion Models via Learnable Prompts
- 2026Test-Time Scaling for Safe Text-Guided Image Generation via Intermediate Clean Estimates
- 2024Growth Inhibitors for Suppressing Inappropriate Image Concepts in Diffusion Models
- 2026Localized Concept Erasure in Text-to-Image Diffusion Models via High-Level Representation Misdirection
- 2025Detect-and-Guide: Self-regulation of Diffusion Models for Safe Text-to-Image Generation via Guideline Token Optimization