Iterative Ensemble Training with Anti-Gradient Control for Mitigating Memorization in Diffusion Models
On the map: Diffusion models → Diffusion foundations and sampling
Abstract (arXiv)
Diffusion models, known for their tremendous ability to generate novel and high-quality samples, have recently raised concerns due to their data memorization behavior, which poses privacy risks. Recent approaches for memory mitigation either only focused on the text modality problem in cross-modal generation tasks or utilized data augmentation strategies. In this paper, we propose a novel training framework for diffusion models from the perspective of visual modality, which is more generic and fundamental for mitigating memorization. To facilitate forgetting of stored information in diffusion model parameters, we propose an iterative ensemble training strategy by splitting the data into multiple shards for training multiple models and intermittently aggregating these model parameters. Moreover, practical analysis of losses illustrates that the training loss for easily memorable images tends to be obviously lower. Thus, we propose an anti-gradient control method to exclude the sample with a lower loss value from the current mini-batch to avoid memorizing. Extensive experiments and analysis on four datasets are conducted to illustrate the effectiveness of our method, and results show that our method successfully reduces memory capacity while even improving the performance slightly. Moreover, to save the computing cost, we successfully apply our method to fine-tune the well-trained diffusion models by limited epochs, demonstrating the applicability of our method. Code is available in https://github.com/liuxiao-guan/IET_AGC.
Key facts. Cited by 12 papers in the map (data through 7 Oct 2026). Placed in Diffusion foundations and sampling, one of 14 directions in Diffusion models. Builds on 25 of its 30 references that are in the map. First posted on arXiv 22 Jul 2024.
Builds on
25 of 30 references.
Closest ancestors · 4
Same direction, newest first
- 2023On Memorization in Diffusion Models4 Oct
- 2023Understanding and Mitigating Copying in Diffusion Models31 May
- 2021High-Resolution Image Synthesis with Latent Diffusion Models20 Dec
- 2020Denoising Diffusion Probabilistic Models19 Jun
Other references · 21
- 2016Communication-Efficient Learning of Deep Networks from Decentralized Datacited by 7,592
- 2015Deep Unsupervised Learning using Nonequilibrium Thermodynamicscited by 7,005
- 2022Generative Adversarial Networkscited by 5,603
- 2016Deep Learning with Differential Privacycited by 2,682
- 2020Extracting Training Data from Large Language Modelscited by 2,144
- 2021LAION-400M: Open Dataset of CLIP-Filtered 400 Million Image-Text Pairscited by 1,544
- 2019StarGAN v2: Diverse Image Synthesis for Multiple Domainscited by 1,095
- 2019Measuring the Effects of Non-Identical Data Distribution for Federated Visual Classificationcited by 836
- 2023Extracting Training Data from Diffusion Modelscited by 723
- 2022Diffusion Art or Digital Forgery? Investigating Data Replication in Diffusion Modelscited by 418
- 2023Unified Concept Editing in Diffusion Modelscited by 377
- 2023Hard Prompts Made Easy: Gradient-Based Discrete Optimization for Prompt Tuning and Discoverycited by 329
9 more
- 2023Forget-Me-Not: Learning to Forget in Text-to-Image Diffusion Modelscited by 297
- 2022Red-Teaming the Stable Diffusion Safety Filtercited by 257
- 2022A Self-Supervised Descriptor for Image Copy Detectioncited by 175
- 2022Differentially Private Diffusion Modelscited by 118
- 2023Ambient Diffusion: Learning Clean Distributions from Corrupted Datacited by 108
- 2023Differentially Private Diffusion Models Generate Useful Synthetic Imagescited by 85
- 2023A Reproducible Extraction of Training Images from Diffusion Modelscited by 60
- 2023Degeneration-Tuning: Using Scrambled Grid shield Unwanted Concepts from Stable Diffusioncited by 27
- 2021This Person (Probably) Exists. Identity Membership Attacks Against GAN Generated Facescited by 25
Built on by
Citing papers per year: 2024: 2; 2025: 8; 2026: 2.
12 papers.
- 2024ROBIN: Robust and Invisible Watermarks for Diffusion Models with Adversarial Optimizationcited by 45
- 2025Re-HOLD: Video Hand Object Interaction Reenactment via adaptive Layout-instructed Diffusion Modelcited by 19
- 2025Does Generation Require Memorization? Creative Diffusion Models using Ambient Diffusioncited by 17
- 2025Forecasting When to Forecast: Accelerating Diffusion Models with Confidence-Gated Taylorcited by 6
- 2024MemBench: Memorized Image Trigger Prompt Dataset for Diffusion Modelscited by 5
- 2025Implicit Bias Injection Attacks against Text-to-Image Diffusion Modelscited by 4
- 2025iDiT-HOI: Inpainting-based Hand Object Interaction Reenactment via Video Diffusion Transformercited by 3
- 2025Redistribute Ensemble Training for Mitigating Memorization in Diffusion Modelscited by 0
- 2025Learning an Ensemble Token from Task-driven Priors in Facial Analysiscited by 0
- 2025Beyond Memorization: Selective Learning for Copyright-Safe Diffusion Model Trainingcited by 0
- 2026FedOT: Ownership Verification and Leakage Tracing via Watermarks for Federated LDMscited by 0
- 2026Background Gradients Shape Memorization in Flow Matchingcited by 0
- 2026Background Gradients Shape Memorization in Flow Matching27 Sep 2026
- 2026FedOT: Ownership Verification and Leakage Tracing via Watermarks for Federated LDMs22 Jun 2026
- 2025Beyond Memorization: Selective Learning for Copyright-Safe Diffusion Model Training12 Dec 2025
- 2025Forecasting When to Forecast: Accelerating Diffusion Models with Confidence-Gated Taylor4 Aug 2025
- 2025Learning an Ensemble Token from Task-driven Priors in Facial Analysis2 Jul 2025
- 2025iDiT-HOI: Inpainting-based Hand Object Interaction Reenactment via Video Diffusion Transformer15 Jun 2025
- 2025Implicit Bias Injection Attacks against Text-to-Image Diffusion Models2 Apr 2025
- 2025Re-HOLD: Video Hand Object Interaction Reenactment via adaptive Layout-instructed Diffusion Model21 Mar 2025
- 2025Does Generation Require Memorization? Creative Diffusion Models using Ambient Diffusion28 Feb 2025
- 2025Redistribute Ensemble Training for Mitigating Memorization in Diffusion Models13 Feb 2025
- 2024ROBIN: Robust and Invisible Watermarks for Diffusion Models with Adversarial Optimization6 Nov 2024
- 2024MemBench: Memorized Image Trigger Prompt Dataset for Diffusion Models24 Jul 2024
Similar, not cited
Close in wording, no citation either way
- 2024Detecting, Explaining, and Mitigating Memorization in Diffusion Models
- 2026Rethinking Memorization Mitigation in Diffusion Models: Reinforcing Text Conditioning
- 2026Memorization Control in Diffusion Models from Denoising-centric Perspective
- 2024Towards Memorization-Free Diffusion Models
- 2024Memorized Images in Diffusion Models share a Subspace that can be Located and Deleted
- 2025How Diffusion Models Memorize
- 2025On the Edge of Memorization in Diffusion Models
- 2026Filtering Memorization from Parameter-Space in Diffusion Models