Anonymization Prompt Learning for Facial Privacy-Preserving Text-to-Image Generation
On the map: Diffusion models → Robustness, privacy and adversarial aspects
Abstract (arXiv)
Text-to-image diffusion models, such as Stable Diffusion, generate highly realistic images from text descriptions. However, the generation of certain content at such high quality raises concerns. A prominent issue is the accurate depiction of identifiable facial images, which could lead to malicious deepfake generation and privacy violations. In this paper, we propose Anonymization Prompt Learning (APL) to address this problem. Specifically, we train a learnable prompt prefix for text-to-image diffusion models, which forces the model to generate anonymized facial identities, even when prompted to produce images of specific individuals. Extensive quantitative and qualitative experiments demonstrate the successful anonymization performance of APL, which anonymizes any specific individuals without compromising the quality of non-identity-specific image generation. Furthermore, we reveal the plug-and-play property of the learned prompt prefix, enabling its effective application across different pretrained text-to-image models for transferrable privacy and security protection against the risks of deepfakes.
Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 28 of its 39 references that are in the map. First posted on arXiv 27 May 2024.
Builds on
28 of 39 references.
Closest ancestors · 7
Same direction, newest first
- 2023Ring-A-Bell! How Reliable are Concept Removal Methods for Diffusion Models?16 Oct
- 2023Unified Concept Editing in Diffusion Models25 Aug
- 2023Forget-Me-Not: Learning to Forget in Text-to-Image Diffusion Models30 Mar
- 2023Anti-DreamBooth: Protecting users from personalized text-to-image synthesis27 Mar
- 2023Ablating Concepts in Text-to-Image Diffusion Models23 Mar
- 2023Erasing Concepts from Diffusion Models13 Mar
- 2023LDFA: Latent Diffusion Face Anonymization for Self-driving Applications17 Feb
Other references · 21
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
- 2020Denoising Diffusion Probabilistic Modelscited by 20,851
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
- 2014Microsoft COCO: Common Objects in Contextcited by 17,498
- 2020Denoising Diffusion Implicit Modelscited by 9,655
- 2021Diffusion Models Beat GANs on Image Synthesiscited by 8,185
- 2022Photorealistic Text-to-Image Diffusion Models with Deep Language Understandingcited by 6,322
- 2023SDXL: Improving Latent Diffusion Models for High-Resolution Image Synthesiscited by 4,290
- 2022LAION-5B: An open large-scale dataset for training next generation image-text modelscited by 4,131
- 2022DreamBooth: Fine Tuning Text-to-Image Diffusion Models for Subject-Driven Generationcited by 3,286
- 2022An Image is Worth One Word: Personalizing Text-to-Image Generation using Textual Inversioncited by 2,231
- 2017VGGFace2: A dataset for recognising faces across pose and agecited by 911
9 more
- 2022Compositional Visual Generation with Composable Diffusion Modelscited by 619
- 2023HyperDreamBooth: HyperNetworks for Fast Personalization of Text-to-Image Modelscited by 224
- 2021General Facial Representation Learning in a Visual-Linguistic Mannercited by 193
- 2019DeepPrivacy: A Generative Adversarial Network for Face Anonymizationcited by 108
- 2020CIAGAN: Conditional Identity Anonymization Generative Adversarial Networkscited by 88
- 2023Attribute-preserving Face Dataset Anonymization via Latent Code Optimizationcited by 43
- 2022DreamArtist++: Controllable One-Shot Text-to-Image Generation via Positive-Negative Adaptercited by 24
- 2023IMMA: Immunizing text-to-image Models against Malicious Adaptationcited by 17
- 2023Zero-Shot Continuous Prompt Transfer: Generalizing Task Semantics Across Language Modelscited by 7
Built on by
Citing papers per year: 2025: 1.
1 paper.
Similar, not cited
Close in wording, no citation either way
- 2025Reverse Personalization
- 2026Unsafe2Safe: Controllable Image Anonymization for Downstream Utility
- 2025NullFace: Training-Free Localized Face Anonymization
- 2023DiffProtect: Generate Adversarial Examples with Diffusion Models for Facial Privacy Protection
- 2025Facial Attribute Based Text Guided Face Anonymization
- 2023Towards Prompt-robust Face Privacy Protection via Adversarial Decoupling Augmentation Framework
- 2025Secure and reversible face anonymization with diffusion models
- 2024Context-Aware Full Body Anonymization using Text-to-Image Diffusion Models