mlsanityData to 14 Oct 2026

AEIOU: A Unified Defense Framework against NSFW Prompts in Text-to-Image Models

arXiv 2412.18123 ↗First posted 24 Dec 2024cs.CR cs.CLcited by 7

Not on the map. Why?

Abstract (arXiv)

As text-to-image (T2I) models advance and gain widespread adoption, their associated safety concerns are becoming increasingly critical. Malicious users exploit these models to generate Not-Safe-for-Work (NSFW) images using harmful or adversarial prompts, underscoring the need for effective safeguards to ensure the integrity and compliance of model outputs. However, existing detection methods often exhibit low accuracy and inefficiency. In this paper, we propose AEIOU, a defense framework that is adaptable, efficient, interpretable, optimizable, and unified against NSFW prompts in T2I models. AEIOU extracts NSFW features from the hidden states of the model's text encoder, utilizing the separable nature of these features to detect NSFW prompts. The detection process is efficient, requiring minimal inference time. AEIOU also offers real-time interpretation of results and supports optimization through data augmentation techniques. The framework is versatile, accommodating various T2I architectures. Our extensive experiments show that AEIOU significantly outperforms both commercial and open-source moderation tools, achieving over 95% accuracy across all datasets and improving efficiency by at least tenfold. It effectively counters adaptive attacks and excels in few-shot and multi-label scenarios.

Key facts. Cited by 7 papers in the map (data through 14 Oct 2026). Builds on 36 of its 58 references that are in the map. First posted on arXiv 24 Dec 2024.

Builds on

36 of 58 references.

References · 36

  1. 2017Attention Is All You Needcited by 60,361
  2. 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
  3. 2020Denoising Diffusion Probabilistic Modelscited by 21,076
  4. 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,863
  5. 2014Microsoft COCO: Common Objects in Contextcited by 17,608
  6. 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,599
  7. 2023SDXL: Improving Latent Diffusion Models for High-Resolution Image Synthesiscited by 4,356
  8. 2024Scaling Rectified Flow Transformers for High-Resolution Image Synthesiscited by 4,181
  9. 2022LAION-5B: An open large-scale dataset for training next generation image-text modelscited by 4,152
  10. 2022DreamBooth: Fine Tuning Text-to-Image Diffusion Models for Subject-Driven Generationcited by 3,300
  11. 2021CLIPScore: A Reference-free Evaluation Metric for Image Captioningcited by 2,424
  12. 2023Erasing Concepts from Diffusion Modelscited by 539
24 more
  1. 2022Safe Latent Diffusion: Mitigating Inappropriate Degeneration in Diffusion Modelscited by 513
  2. 2020Evaluation: from precision, recall and F-measure to ROC, informedness, markedness and correlationcited by 425
  3. 2022A Holistic Approach to Undesired Content Detection in the Real Worldcited by 356
  4. 2023Ablating Concepts in Text-to-Image Diffusion Modelscited by 317
  5. 2022Red-Teaming the Stable Diffusion Safety Filtercited by 264
  6. 2023Ring-A-Bell! How Reliable are Concept Removal Methods for Diffusion Models?cited by 250
  7. 2023Interpreting CLIP's Image Representation via Text-Based Decompositioncited by 196
  8. 2023MMA-Diffusion: MultiModal Attack on Diffusion Modelscited by 194
  9. 2023SneakyPrompt: Jailbreaking Text-to-image Generative Modelscited by 189
  10. 2023Selective Amnesia: A Continual Learning Approach to Forgetting in Deep Generative Modelscited by 177
  11. 2023Unsafe Diffusion: On the Generation of Unsafe Images and Hateful Memes From Text-To-Image Modelscited by 175
  12. 2023Prompting4Debugging: Red-Teaming Text-to-Image Diffusion Models by Finding Problematic Promptscited by 171
  13. 2022Can Machines Help Us Answering Question 16 in Datasheets, and In Turn Reflecting on Inappropriate Content?cited by 155
  14. 2023Editing Implicit Assumptions in Text-to-Image Diffusion Modelscited by 130
  15. 2024Interpreting CLIP with Sparse Linear Concept Embeddings (SpLiCE)cited by 119
  16. 2024Latent Guard: a Safety Framework for Text-to-image Generationcited by 71
  17. 2023Self-Discovering Interpretable Diffusion Latent Directions for Responsible Text-to-Image Generationcited by 69
  18. 2024Unlearning Concepts in Diffusion Model via Concept Domain Correction and Concept Preserving Gradientcited by 69
  19. 2024GuardT2I: Defending Text-to-Image Models from Adversarial Promptscited by 62
  20. 2022VL-InterpreT: An Interactive Visualization Tool for Interpreting Vision-Language Transformerscited by 53
  21. 2024Adversarial Attacks and Defenses on Text-to-Image Diffusion Models: A Surveycited by 35
  22. 2023SurrogatePrompt: Bypassing the Safety Filter of Text-to-Image Models via Substitutioncited by 34
  23. 2024AI Risk Management Should Incorporate Both Safety and Securitycited by 17
  24. 2024Moderator: Moderating Text-to-Image Diffusion Models through Fine-grained Context-based Policiescited by 15

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 4; 2026: 3.

7 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2025TokenProber: Jailbreaking Text-to-image Models via Fine-grained Word Impact Analysis
  2. 2025Towards Safe Synthetic Image Generation On the Web: A Multimodal Robust NSFW Defense and Million Scale Dataset
  3. 2024Jailbreaking Prompt Attack: A Controllable Adversarial Attack against Diffusion Models
  4. 2025T2I-RiskyPrompt: A Benchmark for Safety Evaluation, Attack, and Defense on Text-to-Image Model
  5. 2025PromptGuard: Soft Prompt-Guided Unsafe Content Moderation for Text-to-Image Models
  6. 2026MacPrompt: Maraconic-guided Jailbreak against Text-to-Image Models
  7. 2026Disciplined Diffusion: Text-to-Image Diffusion Model against NSFW Generation
  8. 2025PLA: Prompt Learning Attack against Text-to-Image Generative Models