Disguised Copyright Infringement of Latent Diffusion Models
On the map: Diffusion models → Robustness, privacy and adversarial aspects
Abstract (arXiv)
Copyright infringement may occur when a generative model produces samples substantially similar to some copyrighted data that it had access to during the training phase. The notion of access usually refers to including copyrighted samples directly in the training dataset, which one may inspect to identify an infringement. We argue that such visual auditing largely overlooks a concealed copyright infringement, where one constructs a disguise that looks drastically different from the copyrighted sample yet still induces the effect of training Latent Diffusion Models on it. Such disguises only require indirect access to the copyrighted material and cannot be visually distinguished, thus easily circumventing the current auditing tools. In this paper, we provide a better understanding of such disguised copyright infringement by uncovering the disguises generation algorithm, the revelation of the disguises, and importantly, how to detect them to augment the existing toolbox. Additionally, we introduce a broader notion of acknowledgment for comprehending such indirect access. Our code is available at https://github.com/watml/disguised_copyright_infringement.
Key facts. Cited by 10 papers in the map (data through 14 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 40 of its 52 references that are in the map. First posted on arXiv 10 Apr 2024.
Builds on
40 of 52 references.
Closest ancestors · 1
Same direction, newest first
Other references · 39
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,399
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,863
- 2015Deep Unsupervised Learning using Nonequilibrium Thermodynamicscited by 7,058
- 2022LAION-5B: An open large-scale dataset for training next generation image-text modelscited by 4,152
- 2022DreamBooth: Fine Tuning Text-to-Image Diffusion Models for Subject-Driven Generationcited by 3,300
- 2022An Image is Worth One Word: Personalizing Text-to-Image Generation using Textual Inversioncited by 2,245
- 2017Arbitrary Style Transfer in Real-time with Adaptive Instance Normalizationcited by 2,010
- 2017Understanding Black-box Predictions via Influence Functionscited by 1,741
- 2021LAION-400M: Open Dataset of CLIP-Filtered 400 Million Image-Text Pairscited by 1,555
- 2017BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chaincited by 1,106
- 2017Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoningcited by 1,055
27 more
- 2022Quantifying Memorization Across Neural Language Modelscited by 763
- 2018Poison Frogs! Targeted Clean-Label Poisoning Attacks on Neural Networkscited by 519
- 2018Spectral Signatures in Backdoor Attackscited by 484
- 2015A Neural Algorithm of Artistic Stylecited by 483
- 2022Diffusion Art or Digital Forgery? Investigating Data Replication in Diffusion Modelscited by 424
- 2019Hidden Trigger Backdoor Attackscited by 371
- 2023Poisoning Language Models During Instruction Tuningcited by 269
- 2023Understanding and Mitigating Copying in Diffusion Modelscited by 209
- 2017Towards Poisoning of Deep Learning Algorithms with Back-gradient Optimizationcited by 197
- 2021Unlearnable Examples: Making Personal Data Unexploitablecited by 193
- 2021Counterfactual Memorization in Neural Language Modelscited by 156
- 2018Stronger Data Poisoning Attacks Break Data Sanitization Defensescited by 135
- 2019Transferable Clean-Label Poisoning Attacks on Deep Neural Netscited by 131
- 2024Black-Box Access is Insufficient for Rigorous AI Auditscited by 126
- 2021Adversarial Examples Make Strong Poisonscited by 119
- 2022Preventing Verbatim Memorization in Language Models Gives a False Sense of Privacycited by 100
- 2023On Provable Copyright Protection for Generative Modelscited by 98
- 2023Nightshade: Prompt-Specific Poisoning Attacks on Text-to-Image Generative Modelscited by 75
- 2020Bullseye Polytope: A Scalable Clean-Label Poisoning Attack with Improved Transferabilitycited by 66
- 2021Availability Attacks Create Shortcutscited by 62
- 2022Autoregressive Perturbations for Data Poisoningcited by 46
- 2024Consistent Diffusion Meets Tweedie: Training Exact Ambient Diffusion Models with Noisy Datacited by 44
- 2021Preventing Unauthorized Use of Proprietary Data: Poisoning for Secure Dataset Releasecited by 35
- 2022Indiscriminate Data Poisoning Attacks on Neural Networkscited by 25
- 2023Exploring the Limits of Model-Targeted Indiscriminate Data Poisoning Attackscited by 23
- 2023Forcing Generative Models to Degenerate Ones: The Power of Data Poisoning Attackscited by 9
- 2024Indiscriminate Data Poisoning Attacks on Pre-trained Feature Extractorscited by 8
Built on by
Citing papers per year: 2024: 4; 2025: 5; 2026: 1.
10 papers.
- 2024CopyBench: Measuring Literal and Non-Literal Reproduction of Copyright-Protected Text in Language Model Generationcited by 35
- 2025Silent Branding Attack: Trigger-free Data Poisoning Attack on Text-to-Image Diffusion Modelscited by 11
- 2025Enhancing Variational Autoencoders with Smooth Robust Latent Encodingcited by 6
- 2024The Cat and Mouse Game: The Ongoing Arms Race Between Diffusion Models and Detection Methodscited by 4
- 2025Mirage: Unveiling Hidden Artifacts in Synthetic Images with Large Vision-Language Modelscited by 1
- 2024Exploiting Watermark-Based Defense Mechanisms in Text-to-Image Diffusion Models for Unauthorized Data Usagecited by 0
- 2024Opt-In Art: Learning Art Styles Only from Few Examplescited by 0
- 2025TWIG: Two-Step Image Generation using Segmentation Masks in Diffusion Modelscited by 0
- 2025Are Targeted Data Poisoning Attacks as Effective as We Think?cited by 0
- 2026Erase but Preserve: Controllable Removal of Copyrighted Animation Characters via Optimized Semantic Anchorscited by 0
- 2026Erase but Preserve: Controllable Removal of Copyrighted Animation Characters via Optimized Semantic Anchors13 Aug 2026
- 2025Mirage: Unveiling Hidden Artifacts in Synthetic Images with Large Vision-Language Models4 Oct 2025
- 2025Are Targeted Data Poisoning Attacks as Effective as We Think?8 Sep 2025
- 2025Enhancing Variational Autoencoders with Smooth Robust Latent Encoding24 Apr 2025
- 2025TWIG: Two-Step Image Generation using Segmentation Masks in Diffusion Models21 Apr 2025
- 2025Silent Branding Attack: Trigger-free Data Poisoning Attack on Text-to-Image Diffusion Models12 Mar 2025
- 2024Opt-In Art: Learning Art Styles Only from Few Examples29 Nov 2024
- 2024Exploiting Watermark-Based Defense Mechanisms in Text-to-Image Diffusion Models for Unauthorized Data Usage22 Nov 2024
- 2024The Cat and Mouse Game: The Ongoing Arms Race Between Diffusion Models and Detection Methods24 Oct 2024
- 2024CopyBench: Measuring Literal and Non-Literal Reproduction of Copyright-Protected Text in Language Model Generation9 Jul 2024
Similar, not cited
Close in wording, no citation either way
- 2023On Copyright Risks of Text-to-Image Diffusion Models
- 2024The Stronger the Diffusion Model, the Easier the Backdoor: Data Poisoning to Induce Copyright Breaches Without Adjusting Finetuning Pipeline
- 2024CopyrightShield: Enhancing Diffusion Model Security against Copyright Infringement Attacks
- 2025Copyright Infringement Detection in Text-to-Image Diffusion Models via Differential Privacy
- 2023Measuring the Success of Diffusion Models at Imitating Human Artists
- 2024CGI-DM: Digital Copyright Authentication for Diffusion Models via Contrasting Gradient Inversion
- 2026Attention to Neural Plagiarism: Diffusion Models Can Plagiarize Your Copyrighted Images!
- 2024A Dataset and Benchmark for Copyright Infringement Unlearning from Text-to-Image Diffusion Models