mlsanityData to 7 Oct 2026

Iterative Ensemble Training with Anti-Gradient Control for Mitigating Memorization in Diffusion Models

arXiv 2407.15328 ↗First posted 22 Jul 2024cs.CVcited by 12

On the map: Diffusion models → Diffusion foundations and sampling

Abstract (arXiv)

Diffusion models, known for their tremendous ability to generate novel and high-quality samples, have recently raised concerns due to their data memorization behavior, which poses privacy risks. Recent approaches for memory mitigation either only focused on the text modality problem in cross-modal generation tasks or utilized data augmentation strategies. In this paper, we propose a novel training framework for diffusion models from the perspective of visual modality, which is more generic and fundamental for mitigating memorization. To facilitate forgetting of stored information in diffusion model parameters, we propose an iterative ensemble training strategy by splitting the data into multiple shards for training multiple models and intermittently aggregating these model parameters. Moreover, practical analysis of losses illustrates that the training loss for easily memorable images tends to be obviously lower. Thus, we propose an anti-gradient control method to exclude the sample with a lower loss value from the current mini-batch to avoid memorizing. Extensive experiments and analysis on four datasets are conducted to illustrate the effectiveness of our method, and results show that our method successfully reduces memory capacity while even improving the performance slightly. Moreover, to save the computing cost, we successfully apply our method to fine-tune the well-trained diffusion models by limited epochs, demonstrating the applicability of our method. Code is available in https://github.com/liuxiao-guan/IET_AGC.

Key facts. Cited by 12 papers in the map (data through 7 Oct 2026). Placed in Diffusion foundations and sampling, one of 14 directions in Diffusion models. Builds on 25 of its 30 references that are in the map. First posted on arXiv 22 Jul 2024.

Builds on

25 of 30 references.

Closest ancestors · 4

Same direction, newest first

  1. 2023On Memorization in Diffusion Models4 Oct
  2. 2023Understanding and Mitigating Copying in Diffusion Models31 May
  3. 2021High-Resolution Image Synthesis with Latent Diffusion Models20 Dec
  4. 2020Denoising Diffusion Probabilistic Models19 Jun

Other references · 21

  1. 2016Communication-Efficient Learning of Deep Networks from Decentralized Datacited by 7,592
  2. 2015Deep Unsupervised Learning using Nonequilibrium Thermodynamicscited by 7,005
  3. 2022Generative Adversarial Networkscited by 5,603
  4. 2016Deep Learning with Differential Privacycited by 2,682
  5. 2020Extracting Training Data from Large Language Modelscited by 2,144
  6. 2021LAION-400M: Open Dataset of CLIP-Filtered 400 Million Image-Text Pairscited by 1,544
  7. 2019StarGAN v2: Diverse Image Synthesis for Multiple Domainscited by 1,095
  8. 2019Measuring the Effects of Non-Identical Data Distribution for Federated Visual Classificationcited by 836
  9. 2023Extracting Training Data from Diffusion Modelscited by 723
  10. 2022Diffusion Art or Digital Forgery? Investigating Data Replication in Diffusion Modelscited by 418
  11. 2023Unified Concept Editing in Diffusion Modelscited by 377
  12. 2023Hard Prompts Made Easy: Gradient-Based Discrete Optimization for Prompt Tuning and Discoverycited by 329
9 more
  1. 2023Forget-Me-Not: Learning to Forget in Text-to-Image Diffusion Modelscited by 297
  2. 2022Red-Teaming the Stable Diffusion Safety Filtercited by 257
  3. 2022A Self-Supervised Descriptor for Image Copy Detectioncited by 175
  4. 2022Differentially Private Diffusion Modelscited by 118
  5. 2023Ambient Diffusion: Learning Clean Distributions from Corrupted Datacited by 108
  6. 2023Differentially Private Diffusion Models Generate Useful Synthetic Imagescited by 85
  7. 2023A Reproducible Extraction of Training Images from Diffusion Modelscited by 60
  8. 2023Degeneration-Tuning: Using Scrambled Grid shield Unwanted Concepts from Stable Diffusioncited by 27
  9. 2021This Person (Probably) Exists. Identity Membership Attacks Against GAN Generated Facescited by 25

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2024: 2; 2025: 8; 2026: 2.

12 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2024Detecting, Explaining, and Mitigating Memorization in Diffusion Models
  2. 2026Rethinking Memorization Mitigation in Diffusion Models: Reinforcing Text Conditioning
  3. 2026Memorization Control in Diffusion Models from Denoising-centric Perspective
  4. 2024Towards Memorization-Free Diffusion Models
  5. 2024Memorized Images in Diffusion Models share a Subspace that can be Located and Deleted
  6. 2025How Diffusion Models Memorize
  7. 2025On the Edge of Memorization in Diffusion Models
  8. 2026Filtering Memorization from Parameter-Space in Diffusion Models