Training-Free Safe Text Embedding Guidance for Text-to-Image Diffusion Models
On the map: Diffusion models → Robustness, privacy and adversarial aspects
Abstract (arXiv)
Text-to-image models have recently made significant advances in generating realistic and semantically coherent images, driven by advanced diffusion models and large-scale web-crawled datasets. However, these datasets often contain inappropriate or biased content, raising concerns about the generation of harmful outputs when provided with malicious text prompts. We propose Safe Text embedding Guidance (STG), a training-free approach to improve the safety of diffusion models by guiding the text embeddings during sampling. STG adjusts the text embeddings based on a safety function evaluated on the expected final denoised image, allowing the model to generate safer outputs without additional training. Theoretically, we show that STG aligns the underlying model distribution with safety constraints, thereby achieving safer outputs while minimally affecting generation quality. Experiments on various safety scenarios, including nudity, violence, and artist-style removal, show that STG consistently outperforms both training-based and training-free baselines in removing unsafe content while preserving the core semantic intent of input prompts. Our code is available at https://github.com/aailab-kaist/STG.
Key facts. Cited by 6 papers in the map (data through 7 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 42 of its 51 references that are in the map. First posted on arXiv 28 Oct 2025.
Builds on
42 of 51 references.
Closest ancestors · 9
Same direction, newest first
- 2024SAFREE: Training-Free and Adaptive Guard for Safe Text-to-Image And Video Generation16 Oct
- 2024Reliable and Efficient Concept Erasure of Text-to-Image Diffusion Models17 Jul
- 2023One-Dimensional Adapter to Rule Them All: Concepts, Diffusion Models and Erasing Applications26 Dec
- 2023Ring-A-Bell! How Reliable are Concept Removal Methods for Diffusion Models?16 Oct
- 2023Unified Concept Editing in Diffusion Models25 Aug
- 2023SneakyPrompt: Jailbreaking Text-to-image Generative Models20 May
- 2023Forget-Me-Not: Learning to Forget in Text-to-Image Diffusion Models30 Mar
- 2023Erasing Concepts from Diffusion Models13 Mar
- 2022Safe Latent Diffusion: Mitigating Inappropriate Degeneration in Diffusion Models9 Nov
Other references · 33
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
- 2020Denoising Diffusion Probabilistic Modelscited by 20,851
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
- 2018The Unreasonable Effectiveness of Deep Features as a Perceptual Metriccited by 11,029
- 2020Denoising Diffusion Implicit Modelscited by 9,655
- 2020Score-Based Generative Modeling through Stochastic Differential Equationscited by 8,964
- 2021Diffusion Models Beat GANs on Image Synthesiscited by 8,185
- 2022Photorealistic Text-to-Image Diffusion Models with Deep Language Understandingcited by 6,322
- 2022Classifier-Free Diffusion Guidancecited by 5,717
- 2024GPT-4o System Cardcited by 4,467
- 2023SDXL: Improving Latent Diffusion Models for High-Resolution Image Synthesiscited by 4,290
- 2021Zero-Shot Text-to-Image Generationcited by 4,276
21 more
- 2022LAION-5B: An open large-scale dataset for training next generation image-text modelscited by 4,131
- 2024Scaling Rectified Flow Transformers for High-Resolution Image Synthesiscited by 4,094
- 2019Generative Modeling by Estimating Gradients of the Data Distributioncited by 4,067
- 2022Scaling Instruction-Finetuned Language Modelscited by 2,997
- 2021CLIPScore: A Reference-free Evaluation Metric for Image Captioningcited by 2,388
- 2022DPM-Solver: A Fast ODE Solver for Diffusion Probabilistic Model Sampling in Around 10 Stepscited by 1,961
- 2023Consistency Modelscited by 1,778
- 2021Conceptual 12M: Pushing Web-Scale Image-Text Pre-Training To Recognize Long-Tail Visual Conceptscited by 1,209
- 2023Latent Consistency Models: Synthesizing High-Resolution Images with Few-Step Inferencecited by 826
- 2023Universal Guidance for Diffusion Modelscited by 426
- 2018GAIN: Missing Data Imputation using Generative Adversarial Netscited by 349
- 2021Multimodal datasets: misogyny, pornography, and malignant stereotypescited by 326
- 2023Having Beer after Prayer? Measuring Cultural Bias in Large Language Modelscited by 153
- 2022Can Machines Help Us Answering Question 16 in Datasheets, and In Turn Reflecting on Inappropriate Content?cited by 150
- 2023Cultural Bias and Cultural Alignment of Large Language Modelscited by 149
- 2023Circumventing Concept Erasure Methods For Text-to-Image Generative Modelscited by 81
- 2023Prompt-tuning latent diffusion models for inverse problemscited by 70
- 2024Latent Guard: a Safety Framework for Text-to-image Generationcited by 68
- 2024GuardT2I: Defending Text-to-Image Models from Adversarial Promptscited by 61
- 2023Into the LAIONs Den: Investigating Hate in Multimodal Datasetscited by 54
- 2024Direct Unlearning Optimization for Robust and Safe Text-to-Image Modelscited by 50
Built on by
Citing papers per year: 2026: 6.
6 papers.
- 2026SafeRedir: Prompt Embedding Redirection for Robust Unlearning in Image Generation Modelscited by 3
- 2026SafeRoPE: Risk-specific Head-wise Embedding Rotation for Safe Generation in Rectified Flow Transformerscited by 2
- 2026Safe Few-Step Generation via Velocity Editingcited by 0
- 2026From Celebrities to Anyone: Characterizing AI Nudification Content, Technology, and Community Dynamics on 4chancited by 0
- 2026Concept Removal Guidance: Evidence-Calibrated Negative Guidance for Safe Diffusion Samplingcited by 0
- 2026InGuard: Towards Generalized Inner Guardrail for Safe Text-to-Image Generationcited by 0
- 2026InGuard: Towards Generalized Inner Guardrail for Safe Text-to-Image Generation23 Sep 2026
- 2026Concept Removal Guidance: Evidence-Calibrated Negative Guidance for Safe Diffusion Sampling29 Jun 2026
- 2026From Celebrities to Anyone: Characterizing AI Nudification Content, Technology, and Community Dynamics on 4chan25 Jun 2026
- 2026Safe Few-Step Generation via Velocity Editing22 Jun 2026
- 2026SafeRoPE: Risk-specific Head-wise Embedding Rotation for Safe Generation in Rectified Flow Transformers2 Apr 2026
- 2026SafeRedir: Prompt Embedding Redirection for Robust Unlearning in Image Generation Models13 Jan 2026
Similar, not cited
Close in wording, no citation either way
- 2025Responsible Diffusion Models via Constraining Text Embeddings within Safe Regions
- 2025SafeGuider: Robust and Practical Content Safety Control for Text-to-Image Models
- 2025Detect-and-Guide: Self-regulation of Diffusion Models for Safe Text-to-Image Generation via Guideline Token Optimization
- 2025SafeCtrl: Region-Based Safety Control for Text-to-Image Diffusion via Detect-Then-Suppress
- 2026Disciplined Diffusion: Text-to-Image Diffusion Model against NSFW Generation
- 2026Test-Time Scaling for Safe Text-Guided Image Generation via Intermediate Clean Estimates
- 2025Prompt-Based Safety Guidance Is Ineffective for Unlearned Text-to-Image Diffusion Models
- 2025Beautiful Images, Toxic Words: Understanding and Addressing Offensive Text in Generated Images