# Rethinking Security of Diffusion-based Generative Steganography

arXiv: https://arxiv.org/abs/2602.10219 · HTML: https://mlsanity.com/paper/2602.10219/

## Key facts

- No citing papers in the map yet (data through 14 Oct 2026).
- Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models.
- Builds on 17 of its 50 references that are in the map.
- First posted on arXiv 10 Feb 2026.

## Placed in

- Diffusion models / [Robustness, privacy and adversarial aspects](https://mlsanity.com/diffusion/robustness-privacy-and-adversarial-aspects/)

## Builds on (most cited first, 17 of 17)

- [Denoising Diffusion Probabilistic Models](https://mlsanity.com/paper/2006.11239/) (2020)
- [High-Resolution Image Synthesis with Latent Diffusion Models](https://mlsanity.com/paper/2112.10752/) (2021)
- [Denoising Diffusion Implicit Models](https://mlsanity.com/paper/2010.02502/) (2020)
- [Score-Based Generative Modeling through Stochastic Differential Equations](https://mlsanity.com/paper/2011.13456/) (2020)
- [EfficientNet: Rethinking Model Scaling for Convolutional Neural Networks](https://mlsanity.com/paper/1905.11946/) (2019)
- [Elucidating the Design Space of Diffusion-Based Generative Models](https://mlsanity.com/paper/2206.00364/) (2022)
- [DPM-Solver: A Fast ODE Solver for Diffusion Probabilistic Model Sampling in Around 10 Steps](https://mlsanity.com/paper/2206.00927/) (2022)
- [Gaussian Shading: Provable Performance-Lossless Image Watermarking for Diffusion Models](https://mlsanity.com/paper/2404.04956/) (2024)
- [CRoSS: Diffusion Model Makes Controllable, Robust and Secure Image Steganography](https://mlsanity.com/paper/2305.16936/) (2023)
- [Generative Steganography Network](https://mlsanity.com/paper/2207.13867/) (2022)
- [DiffStega: Towards Universal Training-Free Coverless Image Steganography with Diffusion Models](https://mlsanity.com/paper/2407.10459/) (2024)
- [Secret-to-Image Reversible Transformation for Generative Steganography](https://mlsanity.com/paper/2203.06598/) (2022)
- [Coverless Information Hiding Based on Generative adversarial networks](https://mlsanity.com/paper/1712.06951/) (2017)
- [WISERNet: Wider Separate-then-reunion Network for Steganalysis of Color Images](https://mlsanity.com/paper/1803.04805/) (2018)
- [Diffusion-Stego: Training-free Diffusion Generative Steganography via Message Projection](https://mlsanity.com/paper/2305.18726/) (2023)
- [Generative Steganographic Flow](https://mlsanity.com/paper/2305.05838/) (2023)
- [Universal Deep Network for Steganalysis of Color Image based on Channel Representation](https://mlsanity.com/paper/2111.12231/) (2021)

## Abstract (arXiv)

Generative image steganography is a technique that conceals secret messages within generated images, without relying on pre-existing cover images. Recently, a number of diffusion model-based generative image steganography (DM-GIS) methods have been introduced, which effectively combat traditional steganalysis techniques. In this paper, we identify the key factors that influence DM-GIS security and revisit the security of existing methods. Specifically, we first provide an overview of the general pipelines of current DM-GIS methods, finding that the noise space of diffusion models serves as the primary embedding domain. Further, we analyze the relationship between DM-GIS security and noise distribution of diffusion models, theoretically demonstrating that any steganographic operation that disrupts the noise distribution compromise DM-GIS security. Building on this insight, we propose a Noise Space-based Diffusion Steganalyzer (NS-DSer)-a simple yet effective steganalysis framework allowing for detecting DM-GIS generated images in the diffusion model noise space. We reevaluate the security of existing DM-GIS methods using NS-DSer across increasingly challenging detection scenarios. Experimental results validate our theoretical analysis of DM-GIS security and show the effectiveness of NS-DSer across diverse detection scenarios.