mlsanityData to 14 Oct 2026

Enhancing Privacy-Utility Trade-offs to Mitigate Memorization in Diffusion Models

arXiv 2504.18032 ↗First posted 25 Apr 2025cs.CVcited by 5

On the map: Diffusion models → Robustness, privacy and adversarial aspects

Abstract (arXiv)

Text-to-image diffusion models have demonstrated remarkable capabilities in creating images highly aligned with user prompts, yet their proclivity for memorizing training set images has sparked concerns about the originality of the generated images and privacy issues, potentially leading to legal complications for both model owners and users, particularly when the memorized images contain proprietary content. Although methods to mitigate these issues have been suggested, enhancing privacy often results in a significant decrease in the utility of the outputs, as indicated by text-alignment scores. To bridge the research gap, we introduce a novel method, PRSS, which refines the classifier-free guidance approach in diffusion models by integrating prompt re-anchoring (PR) to improve privacy and incorporating semantic prompt search (SS) to enhance utility. Extensive experiments across various privacy levels demonstrate that our approach consistently improves the privacy-utility trade-off, establishing a new state-of-the-art.

Key facts. Cited by 5 papers in the map (data through 14 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 28 of its 37 references that are in the map. First posted on arXiv 25 Apr 2025.

Builds on

28 of 37 references.

Closest ancestors · 2

Same direction, newest first

  1. 2023A Reproducible Extraction of Training Images from Diffusion Models15 May
  2. 2023Extracting Training Data from Diffusion Models30 Jan

Other references · 26

  1. 2020Denoising Diffusion Probabilistic Modelscited by 21,076
  2. 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,863
  3. 2022Classifier-Free Diffusion Guidancecited by 5,847
  4. 2022LAION-5B: An open large-scale dataset for training next generation image-text modelscited by 4,152
  5. 2021Improved Denoising Diffusion Probabilistic Modelscited by 3,761
  6. 2014Deep Learning Face Attributes in the Wildcited by 3,693
  7. 2020Extracting Training Data from Large Language Modelscited by 2,189
  8. 2022Quantifying Memorization Across Neural Language Modelscited by 763
  9. 2021Deduplicating Training Data Makes Language Models Bettercited by 714
  10. 2022Large Language Models Struggle to Learn Long-Tail Knowledgecited by 458
  11. 2022Diffusion Art or Digital Forgery? Investigating Data Replication in Diffusion Modelscited by 424
  12. 2023Hard Prompts Made Easy: Gradient-Based Discrete Optimization for Prompt Tuning and Discoverycited by 336
14 more
  1. 2022Deduplicating Training Data Mitigates Privacy Risks in Language Modelscited by 314
  2. 2023Understanding and Mitigating Copying in Diffusion Modelscited by 209
  3. 2022A Self-Supervised Descriptor for Image Copy Detectioncited by 176
  4. 2022The Privacy Onion Effect: Memorization is Relativecited by 136
  5. 2024Detecting, Explaining, and Mitigating Memorization in Diffusion Modelscited by 95
  6. 2024Unveiling and Mitigating Memorization in Text-to-image Diffusion Models through Cross Attentioncited by 58
  7. 2024Towards Memorization-Free Diffusion Modelscited by 50
  8. 2022Memorization in NLP Fine-tuning Methodscited by 45
  9. 2020This Face Does Not Exist ... But It Might Be Yours! Identity Leakage in Generative Modelscited by 33
  10. 2024Exploring Local Memorization in Diffusion Models via Bright Ending Attentioncited by 19
  11. 2024Frame by Familiar Frame: Understanding Replication in Video Diffusion Modelscited by 11
  12. 2023Memory Triggers: Unveiling Memorization in Text-To-Image Generative Models through Word-Level Duplicationcited by 5
  13. 2023Understanding (Un)Intended Memorization in Text-to-Image Generative Modelscited by 5
  14. 2024Investigating Memorization in Video Diffusion Modelscited by 5

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 2; 2026: 3.

5 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2025Anti-Diffusion: Preventing Abuse of Modifications of Diffusion-Based Models
  2. 2025RAPID: Retrieval Augmented Training of Differentially Private Diffusion Models
  3. 2024Shake to Leak: Fine-tuning Diffusion Models Can Amplify the Generative Privacy Risk
  4. 2024PID: Prompt-Independent Data Protection Against Latent Diffusion Models
  5. 2024Hiding and Recovering Knowledge in Text-to-Image Diffusion Models via Learnable Prompts
  6. 2025Finding DoRI: Discovery of Retained Images in Diffusion Models
  7. 2024Unveiling Structural Memorization: Structural Membership Inference Attack for Text-to-Image Diffusion Models
  8. 2024DP-RDM: Adapting Diffusion Models to Private Domains Without Fine-Tuning