mlsanityData to 7 Oct 2026

Your Image Generator Is Your New Private Dataset

arXiv 2504.04582 ↗First posted 6 Apr 2025cs.CV cs.AI cs.LGcited by 2

On the map: Diffusion models → Robustness, privacy and adversarial aspects

also in 1 more
Abstract (arXiv)

Generative diffusion models have emerged as powerful tools to synthetically produce training data, offering potential solutions to data scarcity and reducing labelling costs for downstream supervised deep learning applications. However, effectively leveraging text-conditioned image generation for building classifier training sets requires addressing key issues: constructing informative textual prompts, adapting generative models to specific domains, and ensuring robust performance. This paper proposes the Text-Conditioned Knowledge Recycling (TCKR) pipeline to tackle these challenges. TCKR combines dynamic image captioning, parameter-efficient diffusion model fine-tuning, and Generative Knowledge Distillation techniques to create synthetic datasets tailored for image classification. The pipeline is rigorously evaluated on ten diverse image classification benchmarks. The results demonstrate that models trained solely on TCKR-generated data achieve classification accuracies on par with (and in several cases exceeding) models trained on real images. Furthermore, the evaluation reveals that these synthetic-data-trained models exhibit substantially enhanced privacy characteristics: their vulnerability to Membership Inference Attacks is significantly reduced, with the membership inference AUC lowered by 5.49 points on average compared to using real training data, demonstrating a substantial improvement in the performance-privacy trade-off. These findings indicate that high-fidelity synthetic data can effectively replace real data for training classifiers, yielding strong performance whilst simultaneously providing improved privacy protection as a valuable emergent property. The code and trained models are available in the accompanying open-source repository.

Key facts. Cited by 2 papers in the map (data through 7 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 37 of its 65 references that are in the map. First posted on arXiv 6 Apr 2025.

Builds on

37 of 65 references.

References · 37

  1. 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
  2. 2020Denoising Diffusion Probabilistic Modelscited by 20,851
  3. 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
  4. 2022Photorealistic Text-to-Image Diffusion Models with Deep Language Understandingcited by 6,322
  5. 2023BLIP-2: Bootstrapping Language-Image Pre-training with Frozen Image Encoders and Large Language Modelscited by 6,069
  6. 2022Generative Adversarial Networkscited by 5,603
  7. 2015Rethinking the Inception Architecture for Computer Visioncited by 5,451
  8. 2017mixup: Beyond Empirical Risk Minimizationcited by 5,155
  9. 2022LAION-5B: An open large-scale dataset for training next generation image-text modelscited by 4,131
  10. 2021GLIDE: Towards Photorealistic Image Generation and Editing with Text-Guided Diffusion Modelscited by 3,595
  11. 2022OPT: Open Pre-trained Transformer Language Modelscited by 3,464
  12. 2022DreamBooth: Fine Tuning Text-to-Image Diffusion Models for Subject-Driven Generationcited by 3,286
25 more
  1. 2016Deep Learning with Differential Privacycited by 2,682
  2. 2018Large Scale GAN Training for High Fidelity Natural Image Synthesiscited by 2,609
  3. 2022An Image is Worth One Word: Personalizing Text-to-Image Generation using Textual Inversioncited by 2,231
  4. 2016Membership Inference Attacks against Machine Learning Modelscited by 2,221
  5. 2014Conditional Generative Adversarial Netscited by 2,152
  6. 2019Searching for MobileNetV3cited by 1,984
  7. 2017A Survey on Deep Learning in Medical Image Analysiscited by 1,182
  8. 2019AugMix: A Simple Data Processing Method to Improve Robustness and Uncertaintycited by 897
  9. 2021Membership Inference Attacks From First Principlescited by 839
  10. 2019Once-for-All: Train One Network and Specialize it for Efficient Deploymentcited by 778
  11. 2016Stealing Machine Learning Models via Prediction APIscited by 602
  12. 2024Mastering Text-to-Image Diffusion: Recaptioning, Planning, and Generating with Multimodal LLMscited by 224
  13. 2020fastai: A Layered API for Deep Learningcited by 183
  14. 2022Fake it till you make it: Learning transferable representations from synthetic ImageNet clonescited by 171
  15. 2019Classification Accuracy Score for Conditional Generative Modelscited by 134
  16. 2023GALIP: Generative Adversarial CLIPs for Text-to-Image Synthesiscited by 84
  17. 2023Diversity is Definitely Needed: Improving Model-Agnostic Zero-shot Classification via Stable Diffusioncited by 81
  18. 2023Semantic-Guided Generative Image Augmentation Method with Diffusion Models for Image Classificationcited by 16
  19. 2023Bridging the Gap: Enhancing the Utility of Synthetic Data via Post-Processing Techniquescited by 11
  20. 2022On the utility and protection of optimization with differential privacy and classic regularization techniquescited by 10
  21. 2024Stable Diffusion Dataset Generation for Downstream Classification Taskscited by 9
  22. 2024Federated Knowledge Recycling: Privacy-Preserving Synthetic Data Sharingcited by 7
  23. 2024Synthetic Image Learning: Preserving Performance and Preventing Membership Inference Attackscited by 5
  24. 2023Discriminative Adversarial Privacy: Balancing Accuracy and Membership Privacy in Neural Networkscited by 4
  25. 2024POMONAG: Pareto-Optimal Many-Objective Neural Architecture Generatorcited by 2

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2026: 2.

2 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2023Privacy Distillation: Reducing Re-identification Risk of Multimodal Diffusion Models
  2. 2023Differentially Private Diffusion Models Generate Useful Synthetic Images
  3. 2023Extracting Training Data from Diffusion Models
  4. 2024Leveraging Programmatically Generated Synthetic Data for Differentially Private Diffusion Training
  5. 2024Model Will Tell: Training Membership Inference for Diffusion Models
  6. 2025Augmented Conditioning Is Enough For Effective Training Image Generation
  7. 2023Diversify, Don't Fine-Tune: Scaling Up Visual Recognition Training with Synthetic Images
  8. 2023Synthetic Data from Diffusion Models Improves ImageNet Classification