mlsanityData to 14 Oct 2026

Responsible Diffusion Models via Constraining Text Embeddings within Safe Regions

arXiv 2505.15427 ↗First posted 21 May 2025cs.CL cs.AIcited by 8

On the map: Diffusion models → Robustness, privacy and adversarial aspects

Abstract (arXiv)

The remarkable ability of diffusion models to generate high-fidelity images has led to their widespread adoption. However, concerns have also arisen regarding their potential to produce Not Safe for Work (NSFW) content and exhibit social biases, hindering their practical use in real-world applications. In response to this challenge, prior work has focused on employing security filters to identify and exclude toxic text, or alternatively, fine-tuning pre-trained diffusion models to erase sensitive concepts. Unfortunately, existing methods struggle to achieve satisfactory performance in the sense that they can have a significant impact on the normal model output while still failing to prevent the generation of harmful content in some cases. In this paper, we propose a novel self-discovery approach to identifying a semantic direction vector in the embedding space to restrict text embedding within a safe region. Our method circumvents the need for correcting individual words within the input text and steers the entire text prompt towards a safe region in the embedding space, thereby enhancing model robustness against all possibly unsafe prompts. In addition, we employ Low-Rank Adaptation (LoRA) for semantic direction vector initialization to reduce the impact on the model performance for other semantics. Furthermore, our method can also be integrated with existing methods to improve their social responsibility. Extensive experiments on benchmark datasets demonstrate that our method can effectively reduce NSFW content and mitigate social bias generated by diffusion models compared to several state-of-the-art baselines.

Key facts. Cited by 8 papers in the map (data through 14 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 8 of its 10 references that are in the map. First posted on arXiv 21 May 2025.

Builds on

8 of 10 references.

Closest ancestors · 1

Same direction, newest first

  1. 2023Degeneration-Tuning: Using Scrambled Grid shield Unwanted Concepts from Stable Diffusion2 Aug

Other references · 7

  1. 2021Diffusion Models Beat GANs on Image Synthesiscited by 8,255
  2. 2021CLIPScore: A Reference-free Evaluation Metric for Image Captioningcited by 2,424
  3. 2023Selective Amnesia: A Continual Learning Approach to Forgetting in Deep Generative Modelscited by 177
  4. 2022Can Machines Help Us Answering Question 16 in Datasheets, and In Turn Reflecting on Inappropriate Content?cited by 155
  5. 2023Understanding the Latent Space of Diffusion Models through the Lens of Riemannian Geometrycited by 125
  6. 2023Concept Algebra for (Score-Based) Text-Controlled Generative Modelscited by 59
  7. 2023ORES: Open-vocabulary Responsible Visual Synthesiscited by 14

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 2; 2026: 6.

8 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2025Training-Free Safe Text Embedding Guidance for Text-to-Image Diffusion Models
  2. 2026Disciplined Diffusion: Text-to-Image Diffusion Model against NSFW Generation
  3. 2025Detect-and-Guide: Self-regulation of Diffusion Models for Safe Text-to-Image Generation via Guideline Token Optimization
  4. 2025Beautiful Images, Toxic Words: Understanding and Addressing Offensive Text in Generated Images
  5. 2024Safety Alignment Backfires: Preventing the Re-emergence of Suppressed Concepts in Fine-tuned Text-to-Image Diffusion Models
  6. 2025PurifyGen: A Risk-Discrimination and Semantic-Purification Model for Safe Text-to-Image Generation
  7. 2024SAFREE: Training-Free and Adaptive Guard for Safe Text-to-Image And Video Generation
  8. 2025Prompt-Based Safety Guidance Is Ineffective for Unlearned Text-to-Image Diffusion Models