mlsanityData to 14 Oct 2026

Disguised Copyright Infringement of Latent Diffusion Models

arXiv 2404.06737 ↗First posted 10 Apr 2024cs.LG cs.CRcited by 10

On the map: Diffusion models → Robustness, privacy and adversarial aspects

Abstract (arXiv)

Copyright infringement may occur when a generative model produces samples substantially similar to some copyrighted data that it had access to during the training phase. The notion of access usually refers to including copyrighted samples directly in the training dataset, which one may inspect to identify an infringement. We argue that such visual auditing largely overlooks a concealed copyright infringement, where one constructs a disguise that looks drastically different from the copyrighted sample yet still induces the effect of training Latent Diffusion Models on it. Such disguises only require indirect access to the copyrighted material and cannot be visually distinguished, thus easily circumventing the current auditing tools. In this paper, we provide a better understanding of such disguised copyright infringement by uncovering the disguises generation algorithm, the revelation of the disguises, and importantly, how to detect them to augment the existing toolbox. Additionally, we introduce a broader notion of acknowledgment for comprehending such indirect access. Our code is available at https://github.com/watml/disguised_copyright_infringement.

Key facts. Cited by 10 papers in the map (data through 14 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 40 of its 52 references that are in the map. First posted on arXiv 10 Apr 2024.

Builds on

40 of 52 references.

Closest ancestors · 1

Same direction, newest first

  1. 2023Extracting Training Data from Diffusion Models30 Jan

Other references · 39

  1. 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,399
  2. 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
  3. 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,863
  4. 2015Deep Unsupervised Learning using Nonequilibrium Thermodynamicscited by 7,058
  5. 2022LAION-5B: An open large-scale dataset for training next generation image-text modelscited by 4,152
  6. 2022DreamBooth: Fine Tuning Text-to-Image Diffusion Models for Subject-Driven Generationcited by 3,300
  7. 2022An Image is Worth One Word: Personalizing Text-to-Image Generation using Textual Inversioncited by 2,245
  8. 2017Arbitrary Style Transfer in Real-time with Adaptive Instance Normalizationcited by 2,010
  9. 2017Understanding Black-box Predictions via Influence Functionscited by 1,741
  10. 2021LAION-400M: Open Dataset of CLIP-Filtered 400 Million Image-Text Pairscited by 1,555
  11. 2017BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chaincited by 1,106
  12. 2017Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoningcited by 1,055
27 more
  1. 2022Quantifying Memorization Across Neural Language Modelscited by 763
  2. 2018Poison Frogs! Targeted Clean-Label Poisoning Attacks on Neural Networkscited by 519
  3. 2018Spectral Signatures in Backdoor Attackscited by 484
  4. 2015A Neural Algorithm of Artistic Stylecited by 483
  5. 2022Diffusion Art or Digital Forgery? Investigating Data Replication in Diffusion Modelscited by 424
  6. 2019Hidden Trigger Backdoor Attackscited by 371
  7. 2023Poisoning Language Models During Instruction Tuningcited by 269
  8. 2023Understanding and Mitigating Copying in Diffusion Modelscited by 209
  9. 2017Towards Poisoning of Deep Learning Algorithms with Back-gradient Optimizationcited by 197
  10. 2021Unlearnable Examples: Making Personal Data Unexploitablecited by 193
  11. 2021Counterfactual Memorization in Neural Language Modelscited by 156
  12. 2018Stronger Data Poisoning Attacks Break Data Sanitization Defensescited by 135
  13. 2019Transferable Clean-Label Poisoning Attacks on Deep Neural Netscited by 131
  14. 2024Black-Box Access is Insufficient for Rigorous AI Auditscited by 126
  15. 2021Adversarial Examples Make Strong Poisonscited by 119
  16. 2022Preventing Verbatim Memorization in Language Models Gives a False Sense of Privacycited by 100
  17. 2023On Provable Copyright Protection for Generative Modelscited by 98
  18. 2023Nightshade: Prompt-Specific Poisoning Attacks on Text-to-Image Generative Modelscited by 75
  19. 2020Bullseye Polytope: A Scalable Clean-Label Poisoning Attack with Improved Transferabilitycited by 66
  20. 2021Availability Attacks Create Shortcutscited by 62
  21. 2022Autoregressive Perturbations for Data Poisoningcited by 46
  22. 2024Consistent Diffusion Meets Tweedie: Training Exact Ambient Diffusion Models with Noisy Datacited by 44
  23. 2021Preventing Unauthorized Use of Proprietary Data: Poisoning for Secure Dataset Releasecited by 35
  24. 2022Indiscriminate Data Poisoning Attacks on Neural Networkscited by 25
  25. 2023Exploring the Limits of Model-Targeted Indiscriminate Data Poisoning Attackscited by 23
  26. 2023Forcing Generative Models to Degenerate Ones: The Power of Data Poisoning Attackscited by 9
  27. 2024Indiscriminate Data Poisoning Attacks on Pre-trained Feature Extractorscited by 8

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2024: 4; 2025: 5; 2026: 1.

10 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2023On Copyright Risks of Text-to-Image Diffusion Models
  2. 2024The Stronger the Diffusion Model, the Easier the Backdoor: Data Poisoning to Induce Copyright Breaches Without Adjusting Finetuning Pipeline
  3. 2024CopyrightShield: Enhancing Diffusion Model Security against Copyright Infringement Attacks
  4. 2025Copyright Infringement Detection in Text-to-Image Diffusion Models via Differential Privacy
  5. 2023Measuring the Success of Diffusion Models at Imitating Human Artists
  6. 2024CGI-DM: Digital Copyright Authentication for Diffusion Models via Contrasting Gradient Inversion
  7. 2026Attention to Neural Plagiarism: Diffusion Models Can Plagiarize Your Copyrighted Images!
  8. 2024A Dataset and Benchmark for Copyright Infringement Unlearning from Text-to-Image Diffusion Models