ArtistAuditor: Auditing Artist Style Pirate in Text-to-Image Generation Models
On the map: Diffusion models → Image generation, text-to-image and editing
Abstract (arXiv)
Text-to-image models based on diffusion processes, such as DALL-E, Stable Diffusion, and Midjourney, are capable of transforming texts into detailed images and have widespread applications in art and design. As such, amateur users can easily imitate professional-level paintings by collecting an artist's work and fine-tuning the model, leading to concerns about artworks' copyright infringement. To tackle these issues, previous studies either add visually imperceptible perturbation to the artwork to change its underlying styles (perturbation-based methods) or embed post-training detectable watermarks in the artwork (watermark-based methods). However, when the artwork or the model has been published online, i.e., modification to the original artwork or model retraining is not feasible, these strategies might not be viable. To this end, we propose a novel method for data-use auditing in the text-to-image generation model. The general idea of ArtistAuditor is to identify if a suspicious model has been finetuned using the artworks of specific artists by analyzing the features related to the style. Concretely, ArtistAuditor employs a style extractor to obtain the multi-granularity style representations and treats artworks as samplings of an artist's style. Then, ArtistAuditor queries a trained discriminator to gain the auditing decisions. The experimental results on six combinations of models and datasets show that ArtistAuditor can achieve high AUC values (> 0.937). By studying ArtistAuditor's transferability and core modules, we provide valuable insights into the practical implementation. Finally, we demonstrate the effectiveness of ArtistAuditor in real-world cases by an online platform Scenario. ArtistAuditor is open-sourced at https://github.com/Jozenn/ArtistAuditor.
Key facts. Cited by 5 papers in the map (data through 14 Oct 2026). Placed in Image generation, text-to-image and editing, one of 14 directions in Diffusion models. Builds on 41 of its 75 references that are in the map. First posted on arXiv 17 Apr 2025.
Builds on
41 of 75 references.
Closest ancestors · 4
Same direction, newest first
- 2023Glaze: Protecting Artists from Style Mimicry by Text-to-Image Models8 Feb
- 2022Multi-Concept Customization of Text-to-Image Diffusion8 Dec
- 2022Diffusion Art or Digital Forgery? Investigating Data Replication in Diffusion Models7 Dec
- 2022DreamBooth: Fine Tuning Text-to-Image Diffusion Models for Subject-Driven Generation25 Aug
Other references · 37
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,863
- 2022Generative Adversarial Networkscited by 5,627
- 2023SDXL: Improving Latent Diffusion Models for High-Resolution Image Synthesiscited by 4,356
- 2022BLIP: Bootstrapping Language-Image Pre-training for Unified Vision-Language Understanding and Generationcited by 4,322
- 2021Zero-Shot Text-to-Image Generationcited by 4,288
- 2022LAION-5B: An open large-scale dataset for training next generation image-text modelscited by 4,152
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,281
- 2022An Image is Worth One Word: Personalizing Text-to-Image Generation using Textual Inversioncited by 2,245
- 2019Certified Adversarial Robustness via Randomized Smoothingcited by 1,340
- 2021Alias-Free Generative Adversarial Networkscited by 1,184
- 2017Generative Adversarial Networks: An Overviewcited by 590
25 more
- 2015A Neural Algorithm of Artistic Stylecited by 483
- 2021SRDiff: Single Image Super-Resolution with Diffusion Probabilistic Modelscited by 415
- 2016A study of the effect of JPG compression on adversarial imagescited by 197
- 2023Are Diffusion Models Vulnerable to Membership Inference Attacks?cited by 136
- 2023Anti-DreamBooth: Protecting users from personalized text-to-image synthesiscited by 120
- 2022Domain Enhanced Arbitrary Image Style Transfer via Contrastive Learningcited by 93
- 2023Membership Inference Attacks against Diffusion Modelscited by 86
- 2022The ArtBench Dataset: Benchmarking Generative Models with Artworkscited by 64
- 2023An Efficient Membership Inference Attack for the Diffusion Model by Proximal Initializationcited by 54
- 2023White-box Membership Inference Attacks against Diffusion Modelscited by 42
- 2023Can Protective Perturbation Safeguard Personal Data from Being Exploited by Stable Diffusion?cited by 38
- 2023User Inference Attacks on Large Language Modelscited by 36
- 2023The Janus Interface: How Fine-Tuning in Large Language Models Amplifies the Privacy Riskscited by 36
- 2023IMPRESS: Evaluating the Resilience of Imperceptible Perturbations Against Unauthorized Data Usage in Diffusion-Based Generative AIcited by 35
- 2023Black-box Membership Inference Attacks against Fine-tuned Diffusion Modelscited by 35
- 2023EditShield: Protecting Unauthorized Image Editing by Instruction-guided Diffusion Modelscited by 27
- 2023Generative Watermarking Against Unauthorized Subject-Driven Image Synthesiscited by 23
- 2023Generated Distributions Are All You Need for Membership Inference Attacks Against Generative Modelscited by 22
- 2023A Probabilistic Fluctuation based Membership Inference Attack for Diffusion Modelscited by 18
- 2023FACE-AUDITOR: Data Auditing in Facial Recognition Systemscited by 16
- 2024SoK: Dataset Copyright Auditing in Machine Learning Systemscited by 15
- 2023DPMLBench: Holistic Evaluation of Differentially Private Machine Learningcited by 13
- 2023ORL-AUDITOR: Dataset Auditing in Offline Deep Reinforcement Learningcited by 11
- 2023Steal My Artworks for Fine-tuning? A Watermarking Framework for Detecting Art Theft Mimicry in Text-to-Image Modelscited by 8
- 2024TabularMark: Watermarking Tabular Datasets for Machine Learningcited by 8
Built on by
Citing papers per year: 2025: 2; 2026: 3.
5 papers.
- 2025StyleSentinel: Reliable Artistic Copyright Verification via Stylistic Fingerprintscited by 1
- 2025VICTOR: Dataset Copyright Auditing in Video Recognition Systemscited by 1
- 2026Measuring Similarity between Artistic and AI Generated Images using Siamese Neural Networkscited by 0
- 2026Hearing the Whispers: Black-Box Membership Inference Attacks on Finetuned TTS Modelscited by 0
- 2026InceptionRAG: Stealthy Poisoning Attack Against Retrieval-Augmented Generationcited by 0
- 2026InceptionRAG: Stealthy Poisoning Attack Against Retrieval-Augmented Generation15 Sep 2026
- 2026Hearing the Whispers: Black-Box Membership Inference Attacks on Finetuned TTS Models1 Sep 2026
- 2026Measuring Similarity between Artistic and AI Generated Images using Siamese Neural Networks24 Aug 2026
- 2025VICTOR: Dataset Copyright Auditing in Video Recognition Systems16 Dec 2025
- 2025StyleSentinel: Reliable Artistic Copyright Verification via Stylistic Fingerprints2 Aug 2025
Similar, not cited
Close in wording, no citation either way
- 2024Rethinking Artistic Copyright Infringements in the Era of Text-to-Image Generative Models
- 2023Measuring the Success of Diffusion Models at Imitating Human Artists
- 2026The Silent Brush: Evaluating Artistic Style Leakage in AI Art Generation
- 2025StyleProtect: Safeguarding Artistic Identity in Fine-tuned Diffusion Models
- 2024Disguised Copyright Infringement of Latent Diffusion Models
- 2023FT-Shield: A Watermark Against Unauthorized Fine-tuning in Text-to-Image Diffusion Models
- 2024Imperceptible Protection against Style Imitation from Diffusion Models
- 2026Enhancing Authorship Attribution with Synthetic Paintings