Manipulating and Mitigating Generative Model Biases without Retraining
On the map: LLM safety and security → Vision-language and text-to-image safety
Abstract (arXiv)
Text-to-image (T2I) generative models have gained increased popularity in the public domain. While boasting impressive user-guided generative abilities, their black-box nature exposes users to intentionally- and intrinsically-biased outputs. Bias manipulation (and mitigation) techniques typically rely on careful tuning of learning parameters and training data to adjust decision boundaries to influence model bias characteristics, which is often computationally demanding. We propose a dynamic and computationally efficient manipulation of T2I model biases by exploiting their rich language embedding spaces without model retraining. We show that leveraging foundational vector algebra allows for a convenient control over language model embeddings to shift T2I model outputs and control the distribution of generated classes. As a by-product, this control serves as a form of precise prompt engineering to generate images which are generally implausible using regular text prompts. We demonstrate a constructive application of our technique by balancing the frequency of social classes in generated images, effectively balancing class distributions across three social bias dimensions. We also highlight a negative implication of bias manipulation by framing our method as a backdoor attack with severity control using semantically-null input triggers, reporting up to 100% attack success rate. Key-words: Text-to-Image Models, Generative Models, Bias, Prompt Engineering, Backdoor Attacks
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Placed in Vision-language and text-to-image safety, one of 12 directions in LLM safety and security. Builds on 30 of its 41 references that are in the map. First posted on arXiv 3 Apr 2024.
Builds on
30 of 41 references.
References · 30
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
- 2015U-Net: Convolutional Networks for Biomedical Image Segmentationcited by 19,604
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
- 2014Microsoft COCO: Common Objects in Contextcited by 17,498
- 2022Hierarchical Text-Conditional Image Generation with CLIP Latentscited by 6,539
- 2022Photorealistic Text-to-Image Diffusion Models with Deep Language Understandingcited by 6,322
- 2022Generative Adversarial Networkscited by 5,603
- 2022BLIP: Bootstrapping Language-Image Pre-training for Unified Vision-Language Understanding and Generationcited by 4,310
- 2019A Survey on Bias and Fairness in Machine Learningcited by 1,911
- 2016Man is to Computer Programmer as Woman is to Homemaker? Debiasing Word Embeddingscited by 1,304
- 2020Backdoor Learning: A Surveycited by 412
- 2023Shap-E: Generating Conditional 3D Implicit Functionscited by 379
18 more
- 2023VideoFusion: Decomposed Diffusion Models for High-Quality Video Generationcited by 330
- 2022Diffusion Models already have a Semantic Latent Spacecited by 324
- 2022DALL-Eval: Probing the Reasoning Skills and Social Biases of Text-to-Image Generation Modelscited by 230
- 2023Stable Bias: Analyzing Societal Representations in Diffusion Modelscited by 225
- 2021Advances in adversarial attacks and defenses in computer vision: A surveycited by 127
- 2023Social Biases through the Text-to-Image Generation Lenscited by 126
- 2022How to Backdoor Diffusion Models?cited by 102
- 2023Text-to-Image Diffusion Models can be Easily Backdoored through Multimodal Data Poisoningcited by 91
- 2023TrojDiff: Trojan Attacks on Diffusion Models with Diverse Targetscited by 88
- 2023VillanDiffusion: A Unified Backdoor Attack Framework for Diffusion Modelscited by 68
- 2023ITI-GEN: Inclusive Text-to-Image Generationcited by 64
- 2022Rickrolling the Artist: Injecting Backdoors into Text Encoders for Text-to-Image Synthesiscited by 59
- 2020Evaluating and Mitigating Bias in Image Classifiers: A Causal Perspective Using Counterfactualscited by 56
- 2023Smooth Diffusion: Crafting Smooth Latent Spaces in Diffusion Modelscited by 48
- 2023Interpolating between Images with Diffusion Modelscited by 37
- 2023BAGM: A Backdoor Attack for Manipulating Text-to-Image Generative Modelscited by 37
- 2022TrojViT: Trojan Insertion in Vision Transformerscited by 30
- 2023Quantifying Bias in Text-to-Image Generative Modelscited by 16
Built on by
Not cited yet.