SafeCtrl: Region-Based Safety Control for Text-to-Image Diffusion via Detect-Then-Suppress
On the map: Diffusion models → Robustness, privacy and adversarial aspects
also in 1 more
Abstract (arXiv)
The widespread deployment of text-to-image models is challenged by their potential to generate harmful content. While existing safety methods, such as prompt rewriting or model fine-tuning, provide valuable interventions, they often introduce a trade-off between safety and fidelity. Recent localization-based approaches have shown promise, yet their reliance on explicit ``concept replacement" can sometimes lead to semantic incongruity. To address these limitations, we explore a more flexible detect-then-suppress paradigm. We introduce SafeCtrl, a lightweight, non-intrusive plugin that first precisely localizes unsafe content. Instead of performing a hard A-to-B substitution, SafeCtrl then suppresses the harmful semantics, allowing the generative process to naturally and coherently resolve into a safe, context-aware alternative. A key aspect of our work is a novel training strategy using Direct Preference Optimization (DPO). We leverage readily available, image-level preference data to train our module, enabling it to learn nuanced suppression behaviors and perform region-guided interventions at inference without requiring costly, pixel-level annotations. Extensive experiments show that SafeCtrl significantly outperforms state-of-the-art methods in both safety efficacy and fidelity preservation. Our findings suggest that decoupled, suppression-based control is a highly effective and scalable direction for building more responsible generative models.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 28 of its 35 references that are in the map. First posted on arXiv 16 Aug 2025.
Builds on
28 of 35 references.
Closest ancestors · 6
Same direction, newest first
- 2024Concept Replacer: Replacing Sensitive Concepts in Diffusion Models via Precision Localization2 Dec
- 2024Pruning for Robust Concept Erasing in Diffusion Models26 May
- 2024Unlearning Concepts in Diffusion Model via Concept Domain Correction and Concept Preserving Gradient24 May
- 2023Unified Concept Editing in Diffusion Models25 Aug
- 2022Safe Latent Diffusion: Mitigating Inappropriate Degeneration in Diffusion Models9 Nov
- 2022Red-Teaming the Stable Diffusion Safety Filter3 Oct
Other references · 22
- 2017Attention Is All You Needcited by 60,361
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
- 2020Denoising Diffusion Probabilistic Modelscited by 21,076
- 2015U-Net: Convolutional Networks for Biomedical Image Segmentationcited by 19,713
- 2014Microsoft COCO: Common Objects in Contextcited by 17,608
- 2022Training language models to follow instructions with human feedbackcited by 15,971
- 2020Denoising Diffusion Implicit Modelscited by 9,781
- 2021Diffusion Models Beat GANs on Image Synthesiscited by 8,255
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 8,065
- 2015Deep Unsupervised Learning using Nonequilibrium Thermodynamicscited by 7,058
- 2022Photorealistic Text-to-Image Diffusion Models with Deep Language Understandingcited by 6,355
- 2021Zero-Shot Text-to-Image Generationcited by 4,288
10 more
- 2022LAION-5B: An open large-scale dataset for training next generation image-text modelscited by 4,152
- 2021LAION-400M: Open Dataset of CLIP-Filtered 400 Million Image-Text Pairscited by 1,555
- 2022DiffEdit: Diffusion-based semantic image editing with mask guidancecited by 647
- 2022Diffusion Art or Digital Forgery? Investigating Data Replication in Diffusion Modelscited by 424
- 2023In-Context Learning Unlocked for Diffusion Modelscited by 104
- 2021Repurposing GANs for One-shot Semantic Part Segmentationcited by 88
- 2024GuardT2I: Defending Text-to-Image Models from Adversarial Promptscited by 62
- 2023ArtAdapter: Text-to-Image Style Transfer using Multi-Level Style Encoder and Explicit Adaptationcited by 40
- 2023Paragraph-to-Image Generation with Information-Enriched Diffusion Modelcited by 39
- 2023LIME: Localized Image Editing via Attention Regularization in Diffusion Modelscited by 27
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2026SafeCtrl: Region-Aware Safety Control for Text-to-Image Diffusion via Detect-Then-Suppress
- 2025Training-Free Safe Text Embedding Guidance for Text-to-Image Diffusion Models
- 2025Detect-and-Guide: Self-regulation of Diffusion Models for Safe Text-to-Image Generation via Guideline Token Optimization
- 2024Safety Alignment Backfires: Preventing the Re-emergence of Suppressed Concepts in Fine-tuned Text-to-Image Diffusion Models
- 2024SAFREE: Training-Free and Adaptive Guard for Safe Text-to-Image And Video Generation
- 2026Test-Time Scaling for Safe Text-Guided Image Generation via Intermediate Clean Estimates
- 2025SafeGuider: Robust and Practical Content Safety Control for Text-to-Image Models
- 2026Robust and Generalizable Safety Steering for Text-to-Image Diffusion Transformers