Intriguing Properties of Data Attribution on Diffusion Models
On the map: Diffusion models → Diffusion foundations and sampling
Abstract (arXiv)
Data attribution seeks to trace model outputs back to training data. With the recent development of diffusion models, data attribution has become a desired module to properly assign valuations for high-quality or copyrighted training samples, ensuring that data contributors are fairly compensated or credited. Several theoretically motivated methods have been proposed to implement data attribution, in an effort to improve the trade-off between computational scalability and effectiveness. In this work, we conduct extensive experiments and ablation studies on attributing diffusion models, specifically focusing on DDPMs trained on CIFAR-10 and CelebA, as well as a Stable Diffusion model LoRA-finetuned on ArtBench. Intriguingly, we report counter-intuitive observations that theoretically unjustified design choices for attribution empirically outperform previous baselines by a large margin, in terms of both linear datamodeling score and counterfactual evaluation. Our work presents a significantly more efficient approach for attributing diffusion models, while the unexpected findings suggest that at least in non-convex settings, constructions guided by theoretical assumptions may lead to inferior attribution performance. The code is available at https://github.com/sail-sg/D-TRAK.
Key facts. Cited by 47 papers in the map (data through 14 Oct 2026). Placed in Diffusion foundations and sampling, one of 14 directions in Diffusion models. Builds on 47 of its 62 references that are in the map. First posted on arXiv 1 Nov 2023.
Builds on
47 of 62 references.
Closest ancestors · 8
Same direction, newest first
- 2023On Memorization in Diffusion Models4 Oct
- 2023Training Data Attribution for Diffusion Models3 Jun
- 2022Classifier-Free Diffusion Guidance26 Jul
- 2022Analytic-DPM: an Analytic Estimate of the Optimal Reverse Variance in Diffusion Probabilistic Models17 Jan
- 2021High-Resolution Image Synthesis with Latent Diffusion Models20 Dec
- 2020Score-Based Generative Modeling through Stochastic Differential Equations26 Nov
- 2020Denoising Diffusion Implicit Models6 Oct
- 2020Denoising Diffusion Probabilistic Models19 Jun
Other references · 39
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
- 2015Deep Unsupervised Learning using Nonequilibrium Thermodynamicscited by 7,058
- 2017A Unified Approach to Interpreting Model Predictionscited by 6,555
- 2023Adding Conditional Control to Text-to-Image Diffusion Modelscited by 5,503
- 2017Neural Discrete Representation Learningcited by 4,712
- 2014Deep Learning Face Attributes in the Wildcited by 3,693
- 2016Towards Evaluating the Robustness of Neural Networkscited by 2,998
- 2017Understanding Black-box Predictions via Influence Functionscited by 1,741
- 2020Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attackscited by 1,451
- 2018Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examplescited by 1,268
- 2019Machine Unlearningcited by 1,061
- 2019Data Shapley: Equitable Valuation of Data for Machine Learningcited by 629
27 more
- 2020Estimating Training Data Influence by Tracing Gradient Descentcited by 580
- 2020What Neural Networks Memorize and Why: Discovering the Long Tail via Influence Estimationcited by 497
- 2018A Benchmark for Interpretability Methods in Deep Neural Networkscited by 476
- 2014New insights and perspectives on the natural gradient methodcited by 443
- 2023Studying Large Language Model Generalization with Influence Functionscited by 326
- 2023TRAK: Attributing Model Behavior at Scalecited by 283
- 2020Influence Functions in Deep Learning Are Fragilecited by 252
- 2016Model-Agnostic Interpretability of Machine Learningcited by 219
- 2022Datamodels: Predicting Predictions from Training Datacited by 189
- 2018Representer Point Selection for Explaining Deep Neural Networkscited by 187
- 2019On the Accuracy of Influence Functions for Measuring Group Effectscited by 147
- 2022Training Data Influence Analysis and Estimation: A Surveycited by 135
- 2021Scaling Up Influence Functionscited by 132
- 2021Influence Selection for Active Learningcited by 84
- 2021Input Similarity from the Neural Network Perspectivecited by 79
- 2022The ArtBench Dataset: Benchmarking Generative Models with Artworkscited by 64
- 2022Measuring the Effect of Training Data on Deep Learning Predictions via Randomized Experimentscited by 50
- 2021Interactive Label Cleaning with Example-based Explanationscited by 49
- 2018Interpreting Black Box Predictions using Fisher Kernelscited by 48
- 2023Evaluating Data Attribution for Text-to-Image Modelscited by 45
- 2021HYDRA: Hypergradient Data Relevance Analysis for Interpreting Deep Neural Networkscited by 38
- 2022Identifying a Training-Set Attack's Target Using Renormalized Influence Estimationcited by 32
- 2021Understanding Instance-based Interpretability of Variational Auto-Encoderscited by 21
- 2022An Empirical Study of Memorization in NLPcited by 21
- 2020Ridge Regularization: an Essential Concept in Data Sciencecited by 19
- 2022Adapting and Evaluating Influence-Estimation Methods for Gradient-Boosted Decision Treescited by 16
- 2021Influence Estimation for Generative Adversarial Networkscited by 11
Built on by
Citing papers per year: 2024: 21; 2025: 12; 2026: 14.
47 papers.
Sort:
By area:
- 2024Agent Smith: A Single Image Can Jailbreak One Million Multimodal LLM Agents Exponentially Fastcited by 153
- 2024Finding NeMo: Localizing Neurons Responsible For Memorization in Diffusion Modelscited by 37
- 2024Training Data Attribution via Approximate Unrolled Differentiationcited by 34
- 2025A Survey on Mechanistic Interpretability for Multi-Modal Foundation Modelscited by 34
- 2024Influence Functions for Scalable Data Attribution in Diffusion Modelscited by 33
- 2024Most Influential Subset Selection: Challenges, Promises, and Beyondcited by 32
- 2024Stretching Each Dollar: Diffusion Training from Scratch on a Micro-Budgetcited by 30
- 2025CUPID: Curating Data your Robot Loves with Influence Functionscited by 23
- 2024Data Attribution for Text-to-Image Models by Unlearning Synthesized Imagescited by 22
- 2024Diffusion Attribution Score: Evaluating Training Data Influence in Diffusion Modelscited by 22
- 2024Decomposing and Editing Predictions by Modeling Model Computationcited by 19
- 2024An Economic Solution to Copyright Challenges of Generative AIcited by 18
35 more
- 2024CDI: Copyrighted Data Identification in Diffusion Modelscited by 17
- 2024DiffusionPID: Interpreting Diffusion via Partial Information Decompositioncited by 16
- 2024Data Attribution for Diffusion Models: Timestep-induced Bias in Influence Estimationcited by 14
- 2024A Survey of Defenses Against AI-Generated Visual Media: Detection,Disruption, and Authenticationcited by 13
- 2025A Snapshot of Influence: A Local Data Attribution Framework for Online Reinforcement Learningcited by 11
- 2024A Survey on Responsible Generative AI: What to Generate and What Notcited by 8
- 2024A LoRA is Worth a Thousand Picturescited by 7
- 2025Fast Data Attribution for Text-to-Image Modelscited by 7
- 2024CopyrightShield: Enhancing Diffusion Model Security against Copyright Infringement Attackscited by 6
- 2026Motion Attribution for Video Generationcited by 5
- 2024An Efficient Framework for Crediting Data Contributors of Diffusion Modelscited by 4
- 2025Nonparametric Data Attribution for Diffusion Modelscited by 4
- 2024Towards User-Focused Research in Training Data Attribution for Human-Centered Explainable AIcited by 3
- 2025Learning to Weight Parameters for Training Data Attributioncited by 3
- 2025Concept-TRAK: Understanding how diffusion models learn concepts through concept-level attributioncited by 3
- 2025Attribution-by-design: Ensuring Inference-Time Provenance in Generative Music Systemscited by 3
- 2024Enhancing High-Energy Particle Physics Collision Analysis through Graph Data Attribution Techniquescited by 1
- 2025Small-to-Large Generalization: Data Influences Models Consistently Across Scalecited by 1
- 2025Identifying Prompted Artist Names from Generated Imagescited by 1
- 2026Unsupervised Synthetic Image Attribution: Alignment and Disentanglementcited by 1
- 2026A Unified Theory of Random Projection for Influence Functionscited by 1
- 2026Training data attribution in diffusion models via mirrored unlearning and noise-consistent skewcited by 1
- 2026What's a Credit Worth? A Market Framework for Attribution-Aware Compensation in Generative Musiccited by 1
- 2026Do Neural Networks Preserve Case Structure? Case-Based Decomposition, Interpretation, and Decision Consistencycited by 1
- 2024Empirical influence functions to understand the logic of fine-tuningcited by 0
- 2025Concept Reachability in Diffusion Models: Beyond Dataset Constraintscited by 0
- 2025Harnessing the Power of Training-Free Techniques in Text-to-2D Generation for Text-to-3D Generation via Score Distillation Samplingcited by 0
- 2026SurrogateSHAP: Training-Free Contributor Attribution for Text-to-Image (T2I) Modelscited by 0
- 2026GUDA: Counterfactual Group-wise Training Data Attribution for Diffusion Models via Unlearningcited by 0
- 2026On the Fragility of Data Attribution When Learning Is Distributedcited by 0
- 2026Position: Preventing AI-Generated CSAM Necessitates New Approaches to AI Safetycited by 0
- 2026FrED: External Data Influence Estimation via Domain Knowledge Graph Groundingcited by 0
- 2026Tracing Generated Samples to Training-Data Clusters in Flow-Matching Modelscited by 0
- 2026Background Gradients Shape Memorization in Flow Matchingcited by 0
- 2026Distilling Diffusion Score Discrepancy for Efficient Training Data Attributioncited by 0
- 2026Distilling Diffusion Score Discrepancy for Efficient Training Data Attribution30 Sep 2026
- 2026Background Gradients Shape Memorization in Flow Matching27 Sep 2026
- 2026Tracing Generated Samples to Training-Data Clusters in Flow-Matching Models30 Aug 2026
- 2026Do Neural Networks Preserve Case Structure? Case-Based Decomposition, Interpretation, and Decision Consistency13 Jul 2026
- 2026What's a Credit Worth? A Market Framework for Attribution-Aware Compensation in Generative Music1 Jul 2026
- 2026Position: Preventing AI-Generated CSAM Necessitates New Approaches to AI Safety9 Jun 2026
- 2026FrED: External Data Influence Estimation via Domain Knowledge Graph Grounding26 May 2026
- 2026Training data attribution in diffusion models via mirrored unlearning and noise-consistent skew18 May 2026
- 2026On the Fragility of Data Attribution When Learning Is Distributed15 May 2026
- 2026A Unified Theory of Random Projection for Influence Functions11 Feb 2026
- 2026Unsupervised Synthetic Image Attribution: Alignment and Disentanglement30 Jan 2026
- 2026GUDA: Counterfactual Group-wise Training Data Attribution for Diffusion Models via Unlearning30 Jan 2026
35 more
- 2026SurrogateSHAP: Training-Free Contributor Attribution for Text-to-Image (T2I) Models29 Jan 2026
- 2026Motion Attribution for Video Generation13 Jan 2026
- 2025Fast Data Attribution for Text-to-Image Models13 Nov 2025
- 2025Nonparametric Data Attribution for Diffusion Models16 Oct 2025
- 2025Attribution-by-design: Ensuring Inference-Time Provenance in Generative Music Systems9 Oct 2025
- 2025Identifying Prompted Artist Names from Generated Images24 Jul 2025
- 2025Concept-TRAK: Understanding how diffusion models learn concepts through concept-level attribution9 Jul 2025
- 2025CUPID: Curating Data your Robot Loves with Influence Functions23 Jun 2025
- 2025Learning to Weight Parameters for Training Data Attribution6 Jun 2025
- 2025Harnessing the Power of Training-Free Techniques in Text-to-2D Generation for Text-to-3D Generation via Score Distillation Sampling26 May 2025
- 2025Concept Reachability in Diffusion Models: Beyond Dataset Constraints25 May 2025
- 2025A Snapshot of Influence: A Local Data Attribution Framework for Online Reinforcement Learning25 May 2025
- 2025Small-to-Large Generalization: Data Influences Models Consistently Across Scale22 May 2025
- 2025A Survey on Mechanistic Interpretability for Multi-Modal Foundation Models22 Feb 2025
- 2024A LoRA is Worth a Thousand Pictures16 Dec 2024
- 2024CopyrightShield: Enhancing Diffusion Model Security against Copyright Infringement Attacks2 Dec 2024
- 2024CDI: Copyrighted Data Identification in Diffusion Models19 Nov 2024
- 2024Diffusion Attribution Score: Evaluating Training Data Influence in Diffusion Models24 Oct 2024
- 2024Influence Functions for Scalable Data Attribution in Diffusion Models17 Oct 2024
- 2024Most Influential Subset Selection: Challenges, Promises, and Beyond25 Sep 2024
- 2024Towards User-Focused Research in Training Data Attribution for Human-Centered Explainable AI25 Sep 2024
- 2024Stretching Each Dollar: Diffusion Training from Scratch on a Micro-Budget22 Jul 2024
- 2024Enhancing High-Energy Particle Physics Collision Analysis through Graph Data Attribution Techniques20 Jul 2024
- 2024A Survey of Defenses Against AI-Generated Visual Media: Detection,Disruption, and Authentication15 Jul 2024
- 2024Data Attribution for Text-to-Image Models by Unlearning Synthesized Images13 Jun 2024
- 2024An Efficient Framework for Crediting Data Contributors of Diffusion Models9 Jun 2024
- 2024DiffusionPID: Interpreting Diffusion via Partial Information Decomposition7 Jun 2024
- 2024Finding NeMo: Localizing Neurons Responsible For Memorization in Diffusion Models4 Jun 2024
- 2024Empirical influence functions to understand the logic of fine-tuning1 Jun 2024
- 2024Training Data Attribution via Approximate Unrolled Differentiation20 May 2024
- 2024An Economic Solution to Copyright Challenges of Generative AI22 Apr 2024
- 2024Decomposing and Editing Predictions by Modeling Model Computation17 Apr 2024
- 2024A Survey on Responsible Generative AI: What to Generate and What Not8 Apr 2024
- 2024Agent Smith: A Single Image Can Jailbreak One Million Multimodal LLM Agents Exponentially Fast13 Feb 2024
- 2024Data Attribution for Diffusion Models: Timestep-induced Bias in Influence Estimation17 Jan 2024
- 2024Finding NeMo: Localizing Neurons Responsible For Memorization in Diffusion Modelscited by 37
- 2024Influence Functions for Scalable Data Attribution in Diffusion Modelscited by 33
- 2024Stretching Each Dollar: Diffusion Training from Scratch on a Micro-Budgetcited by 30
- 2024Diffusion Attribution Score: Evaluating Training Data Influence in Diffusion Modelscited by 22
- 2024CDI: Copyrighted Data Identification in Diffusion Modelscited by 17
- 2024DiffusionPID: Interpreting Diffusion via Partial Information Decompositioncited by 16
- 2024Data Attribution for Diffusion Models: Timestep-induced Bias in Influence Estimationcited by 14
- 2024A LoRA is Worth a Thousand Picturescited by 7
- 2025Fast Data Attribution for Text-to-Image Modelscited by 7
- 2024CopyrightShield: Enhancing Diffusion Model Security against Copyright Infringement Attackscited by 6
- 2024An Efficient Framework for Crediting Data Contributors of Diffusion Modelscited by 4
- 2025Nonparametric Data Attribution for Diffusion Modelscited by 4
12 most cited of 20 All 20 (JSON)
- 2026Distilling Diffusion Score Discrepancy for Efficient Training Data Attribution30 Sep 2026
- 2026Background Gradients Shape Memorization in Flow Matching27 Sep 2026
- 2026Tracing Generated Samples to Training-Data Clusters in Flow-Matching Models30 Aug 2026
- 2026Training data attribution in diffusion models via mirrored unlearning and noise-consistent skew18 May 2026
- 2026GUDA: Counterfactual Group-wise Training Data Attribution for Diffusion Models via Unlearning30 Jan 2026
- 2026SurrogateSHAP: Training-Free Contributor Attribution for Text-to-Image (T2I) Models29 Jan 2026
- 2025Fast Data Attribution for Text-to-Image Models13 Nov 2025
- 2025Nonparametric Data Attribution for Diffusion Models16 Oct 2025
- 2025Concept-TRAK: Understanding how diffusion models learn concepts through concept-level attribution9 Jul 2025
- 2025Concept Reachability in Diffusion Models: Beyond Dataset Constraints25 May 2025
- 2024A LoRA is Worth a Thousand Pictures16 Dec 2024
- 2024CopyrightShield: Enhancing Diffusion Model Security against Copyright Infringement Attacks2 Dec 2024
12 newest of 20 All 20 (JSON)
- 2024Training Data Attribution via Approximate Unrolled Differentiationcited by 34
- 2024Most Influential Subset Selection: Challenges, Promises, and Beyondcited by 32
- 2024Decomposing and Editing Predictions by Modeling Model Computationcited by 19
- 2024An Economic Solution to Copyright Challenges of Generative AIcited by 18
- 2024A Survey of Defenses Against AI-Generated Visual Media: Detection,Disruption, and Authenticationcited by 13
- 2024A Survey on Responsible Generative AI: What to Generate and What Notcited by 8
- 2026Motion Attribution for Video Generationcited by 5
- 2024Towards User-Focused Research in Training Data Attribution for Human-Centered Explainable AIcited by 3
- 2025Learning to Weight Parameters for Training Data Attributioncited by 3
- 2025Attribution-by-design: Ensuring Inference-Time Provenance in Generative Music Systemscited by 3
- 2024Enhancing High-Energy Particle Physics Collision Analysis through Graph Data Attribution Techniquescited by 1
- 2025Small-to-Large Generalization: Data Influences Models Consistently Across Scalecited by 1
12 most cited of 22 All 22 (JSON)
- 2026Do Neural Networks Preserve Case Structure? Case-Based Decomposition, Interpretation, and Decision Consistency13 Jul 2026
- 2026What's a Credit Worth? A Market Framework for Attribution-Aware Compensation in Generative Music1 Jul 2026
- 2026Position: Preventing AI-Generated CSAM Necessitates New Approaches to AI Safety9 Jun 2026
- 2026FrED: External Data Influence Estimation via Domain Knowledge Graph Grounding26 May 2026
- 2026On the Fragility of Data Attribution When Learning Is Distributed15 May 2026
- 2026A Unified Theory of Random Projection for Influence Functions11 Feb 2026
- 2026Unsupervised Synthetic Image Attribution: Alignment and Disentanglement30 Jan 2026
- 2026Motion Attribution for Video Generation13 Jan 2026
- 2025Attribution-by-design: Ensuring Inference-Time Provenance in Generative Music Systems9 Oct 2025
- 2025Identifying Prompted Artist Names from Generated Images24 Jul 2025
- 2025Learning to Weight Parameters for Training Data Attribution6 Jun 2025
- 2025Harnessing the Power of Training-Free Techniques in Text-to-2D Generation for Text-to-3D Generation via Score Distillation Sampling26 May 2025
12 newest of 22 All 22 (JSON)
Similar, not cited
Close in wording, no citation either way
- 2023The Journey, Not the Destination: How Data Guides Diffusion Models
- 2023The Emergence of Reproducibility and Generalizability in Diffusion Models
- 2025Selective Underfitting in Diffusion Models
- 2026Attributing HOW, Not Just WHICH: Counterfactual Response Trajectories for Diffusion Models
- 2026Understanding diffusion models requires rethinking (again) generalization
- 2025On the Edge of Memorization in Diffusion Models
- 2026Data Attribution via Sketched Metadifferentiation
- 2023On the Generalization Properties of Diffusion Models