Responsible Diffusion Models via Constraining Text Embeddings within Safe Regions
On the map: Diffusion models → Robustness, privacy and adversarial aspects
Abstract (arXiv)
The remarkable ability of diffusion models to generate high-fidelity images has led to their widespread adoption. However, concerns have also arisen regarding their potential to produce Not Safe for Work (NSFW) content and exhibit social biases, hindering their practical use in real-world applications. In response to this challenge, prior work has focused on employing security filters to identify and exclude toxic text, or alternatively, fine-tuning pre-trained diffusion models to erase sensitive concepts. Unfortunately, existing methods struggle to achieve satisfactory performance in the sense that they can have a significant impact on the normal model output while still failing to prevent the generation of harmful content in some cases. In this paper, we propose a novel self-discovery approach to identifying a semantic direction vector in the embedding space to restrict text embedding within a safe region. Our method circumvents the need for correcting individual words within the input text and steers the entire text prompt towards a safe region in the embedding space, thereby enhancing model robustness against all possibly unsafe prompts. In addition, we employ Low-Rank Adaptation (LoRA) for semantic direction vector initialization to reduce the impact on the model performance for other semantics. Furthermore, our method can also be integrated with existing methods to improve their social responsibility. Extensive experiments on benchmark datasets demonstrate that our method can effectively reduce NSFW content and mitigate social bias generated by diffusion models compared to several state-of-the-art baselines.
Key facts. Cited by 8 papers in the map (data through 14 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 8 of its 10 references that are in the map. First posted on arXiv 21 May 2025.
Builds on
8 of 10 references.
Closest ancestors · 1
Same direction, newest first
Other references · 7
- 2021Diffusion Models Beat GANs on Image Synthesiscited by 8,255
- 2021CLIPScore: A Reference-free Evaluation Metric for Image Captioningcited by 2,424
- 2023Selective Amnesia: A Continual Learning Approach to Forgetting in Deep Generative Modelscited by 177
- 2022Can Machines Help Us Answering Question 16 in Datasheets, and In Turn Reflecting on Inappropriate Content?cited by 155
- 2023Understanding the Latent Space of Diffusion Models through the Lens of Riemannian Geometrycited by 125
- 2023Concept Algebra for (Score-Based) Text-Controlled Generative Modelscited by 59
- 2023ORES: Open-vocabulary Responsible Visual Synthesiscited by 14
Built on by
Citing papers per year: 2025: 2; 2026: 6.
8 papers.
- 2025Erasing Concepts, Steering Generations: A Comprehensive Survey of Concept Suppressioncited by 10
- 2025How I Met Your Bias: Investigating Bias Amplification in Diffusion Modelscited by 4
- 2026Provably Safe Generative Sampling with Constricting Barrier Functionscited by 2
- 2026SafeRoPE: Risk-specific Head-wise Embedding Rotation for Safe Generation in Rectified Flow Transformerscited by 2
- 2026Roots Beneath the Cut: Uncovering the Risk of Concept Revival in Pruning-Based Unlearning for Diffusion Modelscited by 1
- 2026SafeCtrl: Region-Aware Safety Control for Text-to-Image Diffusion via Detect-Then-Suppresscited by 0
- 2026GGSS: Geodesic-Gated Spherical Steering for Inference-Time Debiasing of Generative Vision-Language Modelscited by 0
- 2026InGuard: Towards Generalized Inner Guardrail for Safe Text-to-Image Generationcited by 0
- 2026InGuard: Towards Generalized Inner Guardrail for Safe Text-to-Image Generation23 Sep 2026
- 2026GGSS: Geodesic-Gated Spherical Steering for Inference-Time Debiasing of Generative Vision-Language Models26 Aug 2026
- 2026SafeCtrl: Region-Aware Safety Control for Text-to-Image Diffusion via Detect-Then-Suppress5 Apr 2026
- 2026SafeRoPE: Risk-specific Head-wise Embedding Rotation for Safe Generation in Rectified Flow Transformers2 Apr 2026
- 2026Roots Beneath the Cut: Uncovering the Risk of Concept Revival in Pruning-Based Unlearning for Diffusion Models28 Feb 2026
- 2026Provably Safe Generative Sampling with Constricting Barrier Functions24 Feb 2026
- 2025How I Met Your Bias: Investigating Bias Amplification in Diffusion Models23 Dec 2025
- 2025Erasing Concepts, Steering Generations: A Comprehensive Survey of Concept Suppression26 May 2025
Similar, not cited
Close in wording, no citation either way
- 2025Training-Free Safe Text Embedding Guidance for Text-to-Image Diffusion Models
- 2026Disciplined Diffusion: Text-to-Image Diffusion Model against NSFW Generation
- 2025Detect-and-Guide: Self-regulation of Diffusion Models for Safe Text-to-Image Generation via Guideline Token Optimization
- 2025Beautiful Images, Toxic Words: Understanding and Addressing Offensive Text in Generated Images
- 2024Safety Alignment Backfires: Preventing the Re-emergence of Suppressed Concepts in Fine-tuned Text-to-Image Diffusion Models
- 2025PurifyGen: A Risk-Discrimination and Semantic-Purification Model for Safe Text-to-Image Generation
- 2024SAFREE: Training-Free and Adaptive Guard for Safe Text-to-Image And Video Generation
- 2025Prompt-Based Safety Guidance Is Ineffective for Unlearned Text-to-Image Diffusion Models