On Copyright Risks of Text-to-Image Diffusion Models
On the map: Diffusion models → Robustness, privacy and adversarial aspects
Abstract (arXiv)
Diffusion models excel in many generative modeling tasks, notably in creating images from text prompts, a task referred to as text-to-image (T2I) generation. Despite the ability to generate high-quality images, these models often replicate elements from their training data, leading to increasing copyright concerns in real applications in recent years. In response to this raising concern about copyright infringement, recent studies have studied the copyright behavior of diffusion models when using direct, copyrighted prompts. Our research extends this by examining subtler forms of infringement, where even indirect prompts can trigger copyright issues. Specifically, we introduce a data generation pipeline to systematically produce data for studying copyright in diffusion models. Our pipeline enables us to investigate copyright infringement in a more practical setting, involving replicating visual features rather than entire works using seemingly irrelevant prompts for T2I generation. We generate data using our proposed pipeline to test various diffusion models, including the latest Stable Diffusion XL. Our findings reveal a widespread tendency that these models tend to produce copyright-infringing content, highlighting a significant challenge in this field.
Key facts. Cited by 20 papers in the map (data through 14 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 24 of its 31 references that are in the map. First posted on arXiv 15 Sep 2023.
Builds on
24 of 31 references.
Closest ancestors · 6
Same direction, newest first
- 2023DiffusionShield: A Watermark for Copyright Protection against Generative Diffusion Models25 May
- 2023Forget-Me-Not: Learning to Forget in Text-to-Image Diffusion Models30 Mar
- 2023Ablating Concepts in Text-to-Image Diffusion Models23 Mar
- 2023A Recipe for Watermarking Diffusion Models17 Mar
- 2023Erasing Concepts from Diffusion Models13 Mar
- 2023Extracting Training Data from Diffusion Models30 Jan
Other references · 18
- 2017Attention Is All You Needcited by 60,361
- 2020Denoising Diffusion Probabilistic Modelscited by 21,076
- 2015U-Net: Convolutional Networks for Biomedical Image Segmentationcited by 19,713
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,863
- 2020Score-Based Generative Modeling through Stochastic Differential Equationscited by 9,122
- 2021Diffusion Models Beat GANs on Image Synthesiscited by 8,255
- 2015Deep Unsupervised Learning using Nonequilibrium Thermodynamicscited by 7,058
- 2022Photorealistic Text-to-Image Diffusion Models with Deep Language Understandingcited by 6,355
- 2022Classifier-Free Diffusion Guidancecited by 5,847
- 2019BERTScore: Evaluating Text Generation with BERTcited by 5,512
- 2023SDXL: Improving Latent Diffusion Models for High-Resolution Image Synthesiscited by 4,356
- 2022LAION-5B: An open large-scale dataset for training next generation image-text modelscited by 4,152
6 more
- 2023Attend-and-Excite: Attention-Based Semantic Guidance for Text-to-Image Diffusion Modelscited by 702
- 2022Diffusion Art or Digital Forgery? Investigating Data Replication in Diffusion Modelscited by 424
- 2023Understanding and Mitigating Copying in Diffusion Modelscited by 209
- 2023On Provable Copyright Protection for Generative Modelscited by 98
- 2023How Does Information Bottleneck Help Deep Learning?cited by 93
- 2023Measuring the Success of Diffusion Models at Imitating Human Artistscited by 10
Built on by
Citing papers per year: 2024: 6; 2025: 7; 2026: 7.
20 papers.
Sort:
By area:
- 2024Fantastic Copyrighted Beasts and How (Not) to Generate Themcited by 24
- 2025Taking a Big Step: Large Learning Rates in Denoising Score Matching Prevent Memorizationcited by 17
- 2024Unstable Unlearning: The Hidden Risk of Concept Resurgence in Diffusion Modelscited by 15
- 2024Boosting Alignment for Post-Unlearning Text-to-Image Generative Modelscited by 15
- 2024Evaluating and Mitigating IP Infringement in Visual Generative AIcited by 13
- 2024Replication in Visual Diffusion Models: A Survey and Outlookcited by 11
- 2025Erased or Dormant? Rethinking Concept Erasure Through Reversibilitycited by 9
- 2025What Lurks Within? Concept Auditing for Shared Diffusion Models at Scalecited by 4
- 2025Responsible Diffusion: A Comprehensive Survey on Safety, Ethics, and Trust in Diffusion Modelscited by 3
- 2026Localized Concept Erasure in Text-to-Image Diffusion Models via High-Level Representation Misdirectioncited by 3
- 2026Understanding diffusion models requires rethinking (again) generalizationcited by 2
- 2025Guardians of Generation: Dynamic Inference-Time Copyright Shielding with Adaptive Guidance for AI Image Generationcited by 1
8 more
- 2024Exploiting Watermark-Based Defense Mechanisms in Text-to-Image Diffusion Models for Unauthorized Data Usagecited by 0
- 2025EDITOR: Effective and Interpretable Prompt Inversion for Text-to-Image Diffusion Modelscited by 0
- 2025Innocence in the Crossfire: Roles of Skip Connections in Jailbreaking Visual Language Modelscited by 0
- 2026Forgetting is Competition: Rethinking Unlearning as Representation Interference in Diffusion Modelscited by 0
- 2026Black-box Membership Inference Attacks on the Pre-training Data of Image-generation Modelscited by 0
- 2026Evaluating Intellectual Property Guardrails of Generative Image Models: A Technical Reportcited by 0
- 2026Measuring Similarity between Artistic and AI Generated Images using Siamese Neural Networkscited by 0
- 2026Distilling Diffusion Score Discrepancy for Efficient Training Data Attributioncited by 0
- 2026Distilling Diffusion Score Discrepancy for Efficient Training Data Attribution30 Sep 2026
- 2026Measuring Similarity between Artistic and AI Generated Images using Siamese Neural Networks24 Aug 2026
- 2026Evaluating Intellectual Property Guardrails of Generative Image Models: A Technical Report1 Jul 2026
- 2026Black-box Membership Inference Attacks on the Pre-training Data of Image-generation Models26 May 2026
- 2026Understanding diffusion models requires rethinking (again) generalization7 May 2026
- 2026Forgetting is Competition: Rethinking Unlearning as Representation Interference in Diffusion Models1 Mar 2026
- 2026Localized Concept Erasure in Text-to-Image Diffusion Models via High-Level Representation Misdirection23 Feb 2026
- 2025Responsible Diffusion: A Comprehensive Survey on Safety, Ethics, and Trust in Diffusion Models25 Sep 2025
- 2025Innocence in the Crossfire: Roles of Skip Connections in Jailbreaking Visual Language Models18 Jul 2025
- 2025EDITOR: Effective and Interpretable Prompt Inversion for Text-to-Image Diffusion Models3 Jun 2025
- 2025Erased or Dormant? Rethinking Concept Erasure Through Reversibility22 May 2025
- 2025What Lurks Within? Concept Auditing for Shared Diffusion Models at Scale21 Apr 2025
8 more
- 2025Guardians of Generation: Dynamic Inference-Time Copyright Shielding with Adaptive Guidance for AI Image Generation19 Mar 2025
- 2025Taking a Big Step: Large Learning Rates in Denoising Score Matching Prevent Memorization5 Feb 2025
- 2024Boosting Alignment for Post-Unlearning Text-to-Image Generative Models9 Dec 2024
- 2024Exploiting Watermark-Based Defense Mechanisms in Text-to-Image Diffusion Models for Unauthorized Data Usage22 Nov 2024
- 2024Unstable Unlearning: The Hidden Risk of Concept Resurgence in Diffusion Models10 Oct 2024
- 2024Replication in Visual Diffusion Models: A Survey and Outlook7 Jul 2024
- 2024Fantastic Copyrighted Beasts and How (Not) to Generate Them20 Jun 2024
- 2024Evaluating and Mitigating IP Infringement in Visual Generative AI7 Jun 2024
- 2025Taking a Big Step: Large Learning Rates in Denoising Score Matching Prevent Memorizationcited by 17
- 2024Unstable Unlearning: The Hidden Risk of Concept Resurgence in Diffusion Modelscited by 15
- 2024Boosting Alignment for Post-Unlearning Text-to-Image Generative Modelscited by 15
- 2024Replication in Visual Diffusion Models: A Survey and Outlookcited by 11
- 2025Erased or Dormant? Rethinking Concept Erasure Through Reversibilitycited by 9
- 2025What Lurks Within? Concept Auditing for Shared Diffusion Models at Scalecited by 4
- 2025Responsible Diffusion: A Comprehensive Survey on Safety, Ethics, and Trust in Diffusion Modelscited by 3
- 2026Localized Concept Erasure in Text-to-Image Diffusion Models via High-Level Representation Misdirectioncited by 3
- 2026Understanding diffusion models requires rethinking (again) generalizationcited by 2
- 2024Exploiting Watermark-Based Defense Mechanisms in Text-to-Image Diffusion Models for Unauthorized Data Usagecited by 0
- 2025EDITOR: Effective and Interpretable Prompt Inversion for Text-to-Image Diffusion Modelscited by 0
- 2026Forgetting is Competition: Rethinking Unlearning as Representation Interference in Diffusion Modelscited by 0
12 most cited of 14 All 14 (JSON)
- 2026Distilling Diffusion Score Discrepancy for Efficient Training Data Attribution30 Sep 2026
- 2026Black-box Membership Inference Attacks on the Pre-training Data of Image-generation Models26 May 2026
- 2026Understanding diffusion models requires rethinking (again) generalization7 May 2026
- 2026Forgetting is Competition: Rethinking Unlearning as Representation Interference in Diffusion Models1 Mar 2026
- 2026Localized Concept Erasure in Text-to-Image Diffusion Models via High-Level Representation Misdirection23 Feb 2026
- 2025Responsible Diffusion: A Comprehensive Survey on Safety, Ethics, and Trust in Diffusion Models25 Sep 2025
- 2025EDITOR: Effective and Interpretable Prompt Inversion for Text-to-Image Diffusion Models3 Jun 2025
- 2025Erased or Dormant? Rethinking Concept Erasure Through Reversibility22 May 2025
- 2025What Lurks Within? Concept Auditing for Shared Diffusion Models at Scale21 Apr 2025
- 2025Taking a Big Step: Large Learning Rates in Denoising Score Matching Prevent Memorization5 Feb 2025
- 2024Boosting Alignment for Post-Unlearning Text-to-Image Generative Models9 Dec 2024
- 2024Exploiting Watermark-Based Defense Mechanisms in Text-to-Image Diffusion Models for Unauthorized Data Usage22 Nov 2024
12 newest of 14 All 14 (JSON)
- 2024Fantastic Copyrighted Beasts and How (Not) to Generate Themcited by 24
- 2024Evaluating and Mitigating IP Infringement in Visual Generative AIcited by 13
- 2025Guardians of Generation: Dynamic Inference-Time Copyright Shielding with Adaptive Guidance for AI Image Generationcited by 1
- 2026Measuring Similarity between Artistic and AI Generated Images using Siamese Neural Networkscited by 0
- 2026Measuring Similarity between Artistic and AI Generated Images using Siamese Neural Networks24 Aug 2026
- 2025Guardians of Generation: Dynamic Inference-Time Copyright Shielding with Adaptive Guidance for AI Image Generation19 Mar 2025
- 2024Fantastic Copyrighted Beasts and How (Not) to Generate Them20 Jun 2024
- 2024Evaluating and Mitigating IP Infringement in Visual Generative AI7 Jun 2024
Similar, not cited
Close in wording, no citation either way
- 2024A Dataset and Benchmark for Copyright Infringement Unlearning from Text-to-Image Diffusion Models
- 2024Not Every Image is Worth a Thousand Words: Quantifying Originality in Stable Diffusion
- 2024RLCP: A Reinforcement Learning-based Copyright Protection Method for Text-to-Image Diffusion Model
- 2025CopyJudge: Automated Copyright Infringement Identification and Mitigation in Text-to-Image Diffusion Models
- 2024The Stronger the Diffusion Model, the Easier the Backdoor: Data Poisoning to Induce Copyright Breaches Without Adjusting Finetuning Pipeline
- 2024CopyrightMeter: Revisiting Copyright Protection in Text-to-image Models
- 2025Copyright Infringement Risk Reduction via Chain-of-Thought and Task Instruction Prompting
- 2024Copyright-Aware Incentive Scheme for Generative Art Models Using Hierarchical Reinforcement Learning