mlsanityData to 7 Oct 2026

Trustworthy Text-to-Image Diffusion Models: A Timely and Focused Survey

arXiv 2409.18214 ↗First posted 26 Sep 2024cs.LGcited by 6

On the map: Diffusion models → Robustness, privacy and adversarial aspects

Abstract (arXiv)

Text-to-Image (T2I) Diffusion Models (DMs) have garnered widespread attention for their impressive advancements in image generation. However, their growing popularity has raised ethical and social concerns related to key non-functional properties of trustworthiness, such as robustness, fairness, security, privacy, factuality, and explainability, similar to those in traditional deep learning (DL) tasks. Conventional approaches for studying trustworthiness in DL tasks often fall short due to the unique characteristics of T2I DMs, e.g., the multi-modal nature. Given the challenge, recent efforts have been made to develop new methods for investigating trustworthiness in T2I DMs via various means, including falsification, enhancement, verification & validation and assessment. However, there is a notable lack of in-depth analysis concerning those non-functional properties and means. In this survey, we provide a timely and focused review of the literature on trustworthy T2I DMs, covering a concise-structured taxonomy from the perspectives of property, means, benchmarks and applications. Our review begins with an introduction to essential preliminaries of T2I DMs, and then we summarise key definitions/metrics specific to T2I tasks and analyses the means proposed in recent literature based on these definitions/metrics. Additionally, we review benchmarks and domain applications of T2I DMs. Finally, we highlight the gaps in current research, discuss the limitations of existing methods, and propose future research directions to advance the development of trustworthy T2I DMs. Furthermore, we keep up-to-date updates in this field to track the latest developments and maintain our GitHub repository at: https://github.com/wellzline/TrustworthyT2IDMs

Key facts. Cited by 6 papers in the map (data through 7 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 149 of its 212 references that are in the map. First posted on arXiv 26 Sep 2024.

Builds on

149 of 212 references.

Closest ancestors · 18

Same direction, newest first

  1. 2024Defending Text-to-image Diffusion Models: Surprising Efficacy of Textual Perturbations Against Backdoor Attacks28 Aug
  2. 2024Attacks and Defenses for Generative Diffusion Models: A Comprehensive Survey6 Aug
  3. 2024Unveiling Structural Memorization: Structural Membership Inference Attack for Text-to-Image Diffusion Models18 Jul
  4. 2024T2IShield: Defending Against Backdoors on Text-to-Image Diffusion Models5 Jul
  5. 2024Backdooring Bias (B2) into Stable Diffusion Models21 Jun
  6. 2024Membership Inference on Text-to-Image Diffusion Models via Conditional Likelihood Discrepancy23 May
  7. 2024UFID: A Unified Framework for Input-level Backdoor Detection on Diffusion Models1 Apr
  8. 2024Shake to Leak: Fine-tuning Diffusion Models Can Amplify the Generative Privacy Risk14 Mar
  9. 2024ProTIP: Probabilistic Robustness Verification on Text-to-Image Diffusion Models against Stochastic Perturbation23 Feb
  10. 2023Towards More Realistic Membership Inference Attacks on Large Diffusion Models22 Jun
  11. 2023Evaluating the Robustness of Text-to-image Diffusion Models against Real-world Attacks16 Jun
  12. 2023Stable Diffusion is Unstable5 Jun
6 more
  1. 2023Personalization as a Shortcut for Few-Shot Backdoor Attack against Text-to-Image Diffusion Models18 May
  2. 2023Diffusion Models for Imperceptible and Transferable Adversarial Attack14 May
  3. 2023Text-to-Image Diffusion Models can be Easily Backdoored through Multimodal Data Poisoning7 May
  4. 2023A Pilot Study of Query-Free Adversarial Attack against Stable Diffusion29 Mar
  5. 2023Are Diffusion Models Vulnerable to Membership Inference Attacks?2 Feb
  6. 2023Extracting Training Data from Diffusion Models30 Jan

Other references · 131

  1. 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
  2. 2020Denoising Diffusion Probabilistic Modelscited by 20,851
  3. 2015U-Net: Convolutional Networks for Biomedical Image Segmentationcited by 19,604
  4. 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
  5. 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,491
  6. 2015Deep Unsupervised Learning using Nonequilibrium Thermodynamicscited by 7,005
  7. 2022Hierarchical Text-Conditional Image Generation with CLIP Latentscited by 6,539
  8. 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
  9. 2022Photorealistic Text-to-Image Diffusion Models with Deep Language Understandingcited by 6,322
  10. 2023BLIP-2: Bootstrapping Language-Image Pre-training with Frozen Image Encoders and Large Language Modelscited by 6,069
  11. 2022Scalable Diffusion Models with Transformerscited by 5,931
  12. 2022Classifier-Free Diffusion Guidancecited by 5,717
38 more
  1. 2023Adding Conditional Control to Text-to-Image Diffusion Modelscited by 5,466
  2. 2021GLIDE: Towards Photorealistic Image Generation and Editing with Text-Guided Diffusion Modelscited by 3,595
  3. 2022DreamBooth: Fine Tuning Text-to-Image Diffusion Models for Subject-Driven Generationcited by 3,286
  4. 2022DreamFusion: Text-to-3D using 2D Diffusioncited by 3,006
  5. 2022Prompt-to-Prompt Image Editing with Cross Attention Controlcited by 2,409
  6. 2022Video Diffusion Modelscited by 2,280
  7. 2022An Image is Worth One Word: Personalizing Text-to-Image Generation using Textual Inversioncited by 2,231
  8. 2016Membership Inference Attacks against Machine Learning Modelscited by 2,221
  9. 2020Extracting Training Data from Large Language Modelscited by 2,144
  10. 2023A Survey on Hallucination in Large Language Models: Principles, Taxonomy, Challenges, and Open Questionscited by 1,582
  11. 2019Explainable Artificial Intelligence (XAI): Concepts, Taxonomies, Opportunities and Challenges toward Responsible AIcited by 1,543
  12. 2023Zero-1-to-3: Zero-shot One Image to 3D Objectcited by 1,483
  13. 2023T2I-Adapter: Learning Adapters to Dig out More Controllable Ability for Text-to-Image Diffusion Modelscited by 1,339
  14. 2022Scaling Autoregressive Models for Content-Rich Text-to-Image Generationcited by 1,287
  15. 2022LaMDA: Language Models for Dialog Applicationscited by 1,218
  16. 2022Diffusion Models: A Comprehensive Survey of Methods and Applicationscited by 1,107
  17. 2022Diffusion Models in Vision: A Surveycited by 1,008
  18. 2022CogVideo: Large-scale Pretraining for Text-to-Video Generation via Transformerscited by 973
  19. 2022Tune-A-Video: One-Shot Tuning of Image Diffusion Models for Text-to-Video Generationcited by 958
  20. 2023A Multitask, Multilingual, Multimodal Evaluation of ChatGPT on Reasoning, Hallucination, and Interactivitycited by 888
  21. 2018The Secret Sharer: Evaluating and Testing Unintended Memorization in Neural Networkscited by 847
  22. 2021Membership Inference Attacks From First Principlescited by 839
  23. 2016Universal adversarial perturbationscited by 774
  24. 2022Quantifying Memorization Across Neural Language Modelscited by 755
  25. 2017Reluplex: An Efficient SMT Solver for Verifying Deep Neural Networkscited by 739
  26. 2023Text2Video-Zero: Text-to-Image Diffusion Models are Zero-Shot Video Generatorscited by 666
  27. 2019Is BERT Really Robust? A Strong Baseline for Natural Language Attack on Text Classification and Entailmentcited by 663
  28. 2021DiffusionCLIP: Text-Guided Diffusion Models for Robust Image Manipulationcited by 640
  29. 2023Structure and Content-Guided Video Synthesis with Diffusion Modelscited by 589
  30. 2023HallusionBench: An Advanced Diagnostic Suite for Entangled Language Hallucination and Visual Illusion in Large Vision-Language Modelscited by 572
  31. 2023One-2-3-45: Any Single Image to 3D Mesh in 45 Seconds without Per-Shape Optimizationcited by 555
  32. 2022All are Worth Words: A ViT Backbone for Diffusion Modelscited by 498
  33. 2020BERT-ATTACK: Adversarial Attack Against BERT Using BERTcited by 488
  34. 2017Interpretation of Neural Networks is Fragilecited by 443
  35. 2022Diffusion Art or Digital Forgery? Investigating Data Replication in Diffusion Modelscited by 418
  36. 2020Backdoor Learning: A Surveycited by 412
  37. 2023Open-Vocabulary Panoptic Segmentation with Text-to-Image Diffusion Modelscited by 371
  38. 2019Hidden Trigger Backdoor Attackscited by 359

50 most cited of 131 All 131 (JSON)

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2024: 1; 2025: 4; 2026: 1.

6 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2025T2ISafety: Benchmark for Assessing Fairness, Toxicity, and Privacy in Image Generation
  2. 2026i1: A Simple and Fully Open Recipe for Strong Text-to-Image Models
  3. 2026Certifying Concept Unlearning in Text-to-Image Diffusion Models
  4. 2025Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models
  5. 2024Adversarial Attacks and Defenses on Text-to-Image Diffusion Models: A Survey
  6. 2024MultiTrust: A Comprehensive Benchmark Towards Trustworthy Multimodal Large Language Models
  7. 2025Towards Evaluating Robustness of Prompt Adherence in Text to Image Models
  8. 2024Model Will Tell: Training Membership Inference for Diffusion Models