mlsanityData to 7 Oct 2026

Detecting Dataset Abuse in Fine-Tuning Stable Diffusion Models for Text-to-Image Synthesis

arXiv 2409.18897 ↗First posted 27 Sep 2024cs.CVcited by 2

On the map: Diffusion models → Robustness, privacy and adversarial aspects

also in 1 more
Abstract (arXiv)

Text-to-image synthesis has become highly popular for generating realistic and stylized images, often requiring fine-tuning generative models with domain-specific datasets for specialized tasks. However, these valuable datasets face risks of unauthorized usage and unapproved sharing, compromising the rights of the owners. In this paper, we address the issue of dataset abuse during the fine-tuning of Stable Diffusion models for text-to-image synthesis. We present a dataset watermarking framework designed to detect unauthorized usage and trace data leaks. The framework employs two key strategies across multiple watermarking schemes and is effective for large-scale dataset authorization. Extensive experiments demonstrate the framework's effectiveness, minimal impact on the dataset (only 2% of the data required to be modified for high detection accuracy), and ability to trace data leaks. Our results also highlight the robustness and transferability of the framework, proving its practical applicability in detecting dataset abuse.

Key facts. Cited by 2 papers in the map (data through 7 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 29 of its 37 references that are in the map. First posted on arXiv 27 Sep 2024.

Builds on

29 of 37 references.

Closest ancestors · 5

Same direction, newest first

  1. 2023FT-Shield: A Watermark Against Unauthorized Fine-tuning in Text-to-Image Diffusion Models3 Oct
  2. 2023VillanDiffusion: A Unified Backdoor Attack Framework for Diffusion Models12 Jun
  3. 2023Anti-DreamBooth: Protecting users from personalized text-to-image synthesis27 Mar
  4. 2023Adversarial Example Does Good: Preventing Painting Imitation from Diffusion Models via Adversarial Examples9 Feb
  5. 2022How to Backdoor Diffusion Models?11 Dec

Other references · 24

  1. 2015Deep Residual Learning for Image Recognitioncited by 51,809
  2. 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,204
  3. 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
  4. 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
  5. 2014Microsoft COCO: Common Objects in Contextcited by 17,498
  6. 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,084
  7. 2014Explaining and Harnessing Adversarial Examplescited by 7,287
  8. 2022Hierarchical Text-Conditional Image Generation with CLIP Latentscited by 6,539
  9. 2022Generative Adversarial Networkscited by 5,603
  10. 2013Intriguing properties of neural networkscited by 5,114
  11. 2017BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chaincited by 1,052
  12. 2016Adversarial Machine Learning at Scalecited by 934
12 more
  1. 2021Vector Quantized Diffusion Model for Text-to-Image Synthesiscited by 773
  2. 2018How To Backdoor Federated Learningcited by 745
  3. 2018Fine-Pruning: Defending Against Backdooring Attacks on Deep Neural Networkscited by 550
  4. 2018Detecting Backdoor Attacks on Deep Neural Networks by Activation Clusteringcited by 429
  5. 2018HiDDeN: Hiding Data With Deep Networkscited by 384
  6. 2018TextBugger: Generating Adversarial Text Against Real-world Applicationscited by 376
  7. 2015Large-scale Classification of Fine-Art Paintings: Learning The Right Metric on The Right Featurecited by 181
  8. 2015Generating Images from Captions with Attentioncited by 135
  9. 2019Transferable Clean-Label Poisoning Attacks on Deep Neural Netscited by 129
  10. 2020Adversarial Watermarking Transformer: Towards Tracing Text Provenance with Data Hidingcited by 121
  11. 2022Rickrolling the Artist: Injecting Backdoors into Text Encoders for Text-to-Image Synthesiscited by 59
  12. 2023Generative Watermarking Against Unauthorized Subject-Driven Image Synthesiscited by 21

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2026: 2.

2 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2024Exploiting Watermark-Based Defense Mechanisms in Text-to-Image Diffusion Models for Unauthorized Data Usage
  2. 2025Evaluating Dataset Watermarking for Fine-tuning Traceability of Customized Diffusion Models: A Comprehensive Benchmark and Removal Approach
  3. 2025Towards Dataset Copyright Evasion Attack against Personalized Text-to-Image Diffusion Models
  4. 2024EnTruth: Enhancing the Traceability of Unauthorized Dataset Usage in Text-to-image Diffusion Models with Minimal and Robust Alterations
  5. 2025Harnessing Frequency Spectrum Insights for Image Copyright Protection Against Diffusion Models
  6. 2024SleeperMark: Towards Robust Watermark against Fine-Tuning Text-to-image Diffusion Models
  7. 2024CopyrightMeter: Revisiting Copyright Protection in Text-to-image Models
  8. 2023DIAGNOSIS: Detecting Unauthorized Data Usages in Text-to-image Diffusion Models