Trustworthy Text-to-Image Diffusion Models: A Timely and Focused Survey
On the map: Diffusion models → Robustness, privacy and adversarial aspects
Abstract (arXiv)
Text-to-Image (T2I) Diffusion Models (DMs) have garnered widespread attention for their impressive advancements in image generation. However, their growing popularity has raised ethical and social concerns related to key non-functional properties of trustworthiness, such as robustness, fairness, security, privacy, factuality, and explainability, similar to those in traditional deep learning (DL) tasks. Conventional approaches for studying trustworthiness in DL tasks often fall short due to the unique characteristics of T2I DMs, e.g., the multi-modal nature. Given the challenge, recent efforts have been made to develop new methods for investigating trustworthiness in T2I DMs via various means, including falsification, enhancement, verification & validation and assessment. However, there is a notable lack of in-depth analysis concerning those non-functional properties and means. In this survey, we provide a timely and focused review of the literature on trustworthy T2I DMs, covering a concise-structured taxonomy from the perspectives of property, means, benchmarks and applications. Our review begins with an introduction to essential preliminaries of T2I DMs, and then we summarise key definitions/metrics specific to T2I tasks and analyses the means proposed in recent literature based on these definitions/metrics. Additionally, we review benchmarks and domain applications of T2I DMs. Finally, we highlight the gaps in current research, discuss the limitations of existing methods, and propose future research directions to advance the development of trustworthy T2I DMs. Furthermore, we keep up-to-date updates in this field to track the latest developments and maintain our GitHub repository at: https://github.com/wellzline/TrustworthyT2IDMs
Key facts. Cited by 6 papers in the map (data through 7 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 149 of its 212 references that are in the map. First posted on arXiv 26 Sep 2024.
Builds on
149 of 212 references.
Closest ancestors · 18
Same direction, newest first
- 2024Defending Text-to-image Diffusion Models: Surprising Efficacy of Textual Perturbations Against Backdoor Attacks28 Aug
- 2024Attacks and Defenses for Generative Diffusion Models: A Comprehensive Survey6 Aug
- 2024Unveiling Structural Memorization: Structural Membership Inference Attack for Text-to-Image Diffusion Models18 Jul
- 2024T2IShield: Defending Against Backdoors on Text-to-Image Diffusion Models5 Jul
- 2024Backdooring Bias (B2) into Stable Diffusion Models21 Jun
- 2024Membership Inference on Text-to-Image Diffusion Models via Conditional Likelihood Discrepancy23 May
- 2024UFID: A Unified Framework for Input-level Backdoor Detection on Diffusion Models1 Apr
- 2024Shake to Leak: Fine-tuning Diffusion Models Can Amplify the Generative Privacy Risk14 Mar
- 2024ProTIP: Probabilistic Robustness Verification on Text-to-Image Diffusion Models against Stochastic Perturbation23 Feb
- 2023Towards More Realistic Membership Inference Attacks on Large Diffusion Models22 Jun
- 2023Evaluating the Robustness of Text-to-image Diffusion Models against Real-world Attacks16 Jun
- 2023Stable Diffusion is Unstable5 Jun
6 more
- 2023Personalization as a Shortcut for Few-Shot Backdoor Attack against Text-to-Image Diffusion Models18 May
- 2023Diffusion Models for Imperceptible and Transferable Adversarial Attack14 May
- 2023Text-to-Image Diffusion Models can be Easily Backdoored through Multimodal Data Poisoning7 May
- 2023A Pilot Study of Query-Free Adversarial Attack against Stable Diffusion29 Mar
- 2023Are Diffusion Models Vulnerable to Membership Inference Attacks?2 Feb
- 2023Extracting Training Data from Diffusion Models30 Jan
Other references · 131
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
- 2020Denoising Diffusion Probabilistic Modelscited by 20,851
- 2015U-Net: Convolutional Networks for Biomedical Image Segmentationcited by 19,604
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
- 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,491
- 2015Deep Unsupervised Learning using Nonequilibrium Thermodynamicscited by 7,005
- 2022Hierarchical Text-Conditional Image Generation with CLIP Latentscited by 6,539
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2022Photorealistic Text-to-Image Diffusion Models with Deep Language Understandingcited by 6,322
- 2023BLIP-2: Bootstrapping Language-Image Pre-training with Frozen Image Encoders and Large Language Modelscited by 6,069
- 2022Scalable Diffusion Models with Transformerscited by 5,931
- 2022Classifier-Free Diffusion Guidancecited by 5,717
38 more
- 2023Adding Conditional Control to Text-to-Image Diffusion Modelscited by 5,466
- 2021GLIDE: Towards Photorealistic Image Generation and Editing with Text-Guided Diffusion Modelscited by 3,595
- 2022DreamBooth: Fine Tuning Text-to-Image Diffusion Models for Subject-Driven Generationcited by 3,286
- 2022DreamFusion: Text-to-3D using 2D Diffusioncited by 3,006
- 2022Prompt-to-Prompt Image Editing with Cross Attention Controlcited by 2,409
- 2022Video Diffusion Modelscited by 2,280
- 2022An Image is Worth One Word: Personalizing Text-to-Image Generation using Textual Inversioncited by 2,231
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,221
- 2020Extracting Training Data from Large Language Modelscited by 2,144
- 2023A Survey on Hallucination in Large Language Models: Principles, Taxonomy, Challenges, and Open Questionscited by 1,582
- 2019Explainable Artificial Intelligence (XAI): Concepts, Taxonomies, Opportunities and Challenges toward Responsible AIcited by 1,543
- 2023Zero-1-to-3: Zero-shot One Image to 3D Objectcited by 1,483
- 2023T2I-Adapter: Learning Adapters to Dig out More Controllable Ability for Text-to-Image Diffusion Modelscited by 1,339
- 2022Scaling Autoregressive Models for Content-Rich Text-to-Image Generationcited by 1,287
- 2022LaMDA: Language Models for Dialog Applicationscited by 1,218
- 2022Diffusion Models: A Comprehensive Survey of Methods and Applicationscited by 1,107
- 2022Diffusion Models in Vision: A Surveycited by 1,008
- 2022CogVideo: Large-scale Pretraining for Text-to-Video Generation via Transformerscited by 973
- 2022Tune-A-Video: One-Shot Tuning of Image Diffusion Models for Text-to-Video Generationcited by 958
- 2023A Multitask, Multilingual, Multimodal Evaluation of ChatGPT on Reasoning, Hallucination, and Interactivitycited by 888
- 2018The Secret Sharer: Evaluating and Testing Unintended Memorization in Neural Networkscited by 847
- 2021Membership Inference Attacks From First Principlescited by 839
- 2016Universal adversarial perturbationscited by 774
- 2022Quantifying Memorization Across Neural Language Modelscited by 755
- 2017Reluplex: An Efficient SMT Solver for Verifying Deep Neural Networkscited by 739
- 2023Text2Video-Zero: Text-to-Image Diffusion Models are Zero-Shot Video Generatorscited by 666
- 2019Is BERT Really Robust? A Strong Baseline for Natural Language Attack on Text Classification and Entailmentcited by 663
- 2021DiffusionCLIP: Text-Guided Diffusion Models for Robust Image Manipulationcited by 640
- 2023Structure and Content-Guided Video Synthesis with Diffusion Modelscited by 589
- 2023HallusionBench: An Advanced Diagnostic Suite for Entangled Language Hallucination and Visual Illusion in Large Vision-Language Modelscited by 572
- 2023One-2-3-45: Any Single Image to 3D Mesh in 45 Seconds without Per-Shape Optimizationcited by 555
- 2022All are Worth Words: A ViT Backbone for Diffusion Modelscited by 498
- 2020BERT-ATTACK: Adversarial Attack Against BERT Using BERTcited by 488
- 2017Interpretation of Neural Networks is Fragilecited by 443
- 2022Diffusion Art or Digital Forgery? Investigating Data Replication in Diffusion Modelscited by 418
- 2020Backdoor Learning: A Surveycited by 412
- 2023Open-Vocabulary Panoptic Segmentation with Text-to-Image Diffusion Modelscited by 371
- 2019Hidden Trigger Backdoor Attackscited by 359
50 most cited of 131 All 131 (JSON)
Built on by
Citing papers per year: 2024: 1; 2025: 4; 2026: 1.
6 papers.
- 2025Probabilistic Robustness in Deep Learning: A Concise yet Comprehensive Guidecited by 6
- 2024Mapping the Mind of an Instruction-based Image Editing using SMILEcited by 3
- 2025X-Edit: Detecting and Localizing Edits in Images Altered by Text-Guided Diffusion Modelscited by 3
- 2025Responsible Diffusion: A Comprehensive Survey on Safety, Ethics, and Trust in Diffusion Modelscited by 3
- 2025Expert Validation of Synthetic Cervical Spine Radiographs Generated with a Denoising Diffusion Probabilistic Modelcited by 0
- 2026Probabilistic Robustness in Medical Image Classificationcited by 0
- 2026Probabilistic Robustness in Medical Image Classification4 Jul 2026
- 2025Expert Validation of Synthetic Cervical Spine Radiographs Generated with a Denoising Diffusion Probabilistic Model25 Oct 2025
- 2025Responsible Diffusion: A Comprehensive Survey on Safety, Ethics, and Trust in Diffusion Models25 Sep 2025
- 2025X-Edit: Detecting and Localizing Edits in Images Altered by Text-Guided Diffusion Models16 May 2025
- 2025Probabilistic Robustness in Deep Learning: A Concise yet Comprehensive Guide20 Feb 2025
- 2024Mapping the Mind of an Instruction-based Image Editing using SMILE20 Dec 2024
Similar, not cited
Close in wording, no citation either way
- 2025T2ISafety: Benchmark for Assessing Fairness, Toxicity, and Privacy in Image Generation
- 2026i1: A Simple and Fully Open Recipe for Strong Text-to-Image Models
- 2026Certifying Concept Unlearning in Text-to-Image Diffusion Models
- 2025Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models
- 2024Adversarial Attacks and Defenses on Text-to-Image Diffusion Models: A Survey
- 2024MultiTrust: A Comprehensive Benchmark Towards Trustworthy Multimodal Large Language Models
- 2025Towards Evaluating Robustness of Prompt Adherence in Text to Image Models
- 2024Model Will Tell: Training Membership Inference for Diffusion Models