When Safety Collides: Resolving Multi-Category Harmful Conflicts in Text-to-Image Diffusion via Adaptive Safety Guidance
On the map: Diffusion models → Robustness, privacy and adversarial aspects
also in 1 more
Abstract (arXiv)
Text-to-Image (T2I) diffusion models have demonstrated significant advancements in generating high-quality images, while raising potential safety concerns regarding harmful content generation. Safety-guidance-based methods have been proposed to mitigate harmful outputs by steering generation away from harmful zones, where the zones are averaged across multiple harmful categories based on predefined keywords. However, these approaches fail to capture the complex interplay among different harm categories, leading to "harmful conflicts" where mitigating one type of harm may inadvertently amplify another, thus increasing overall harmful rate. To address this issue, we propose Conflict-aware Adaptive Safety Guidance (CASG), a training-free framework that dynamically identifies and applies the category-aligned safety direction during generation. CASG is composed of two components: (i) Conflict-aware Category Identification (CaCI), which identifies the harmful category most aligned with the model's evolving generative state, and (ii) Conflict-resolving Guidance Application (CrGA), which applies safety steering solely along the identified category to avoid multi-category interference. CASG can be applied to both latent-space and text-space safeguards. Experiments on T2I safety benchmarks demonstrate CASG's state-of-the-art performance, reducing the harmful rate by up to 15.4% compared to existing methods.
Key facts. Cited by 9 papers in the map (data through 7 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 44 of its 57 references that are in the map. First posted on arXiv 24 Feb 2026.
Builds on
44 of 57 references.
Closest ancestors · 12
Same direction, newest first
- 2024SAFREE: Training-Free and Adaptive Guard for Safe Text-to-Image And Video Generation16 Oct
- 2024Attacks and Defenses for Generative Diffusion Models: A Comprehensive Survey6 Aug
- 2024Reliable and Efficient Concept Erasure of Text-to-Image Diffusion Models17 Jul
- 2023MMA-Diffusion: MultiModal Attack on Diffusion Models29 Nov
- 2023To Generate or Not? Safety-Driven Unlearned Diffusion Models Are Still Easy To Generate Unsafe Images ... For Now18 Oct
- 2023Ring-A-Bell! How Reliable are Concept Removal Methods for Diffusion Models?16 Oct
- 2023Prompting4Debugging: Red-Teaming Text-to-Image Diffusion Models by Finding Problematic Prompts12 Sep
- 2023Unified Concept Editing in Diffusion Models25 Aug
- 2023Unsafe Diffusion: On the Generation of Unsafe Images and Hateful Memes From Text-To-Image Models23 May
- 2023Erasing Concepts from Diffusion Models13 Mar
- 2022Safe Latent Diffusion: Mitigating Inappropriate Degeneration in Diffusion Models9 Nov
- 2022Red-Teaming the Stable Diffusion Safety Filter3 Oct
Other references · 32
- 2020Denoising Diffusion Probabilistic Modelscited by 20,851
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
- 2023GPT-4 Technical Reportcited by 18,132
- 2014Microsoft COCO: Common Objects in Contextcited by 17,498
- 2015Deep Unsupervised Learning using Nonequilibrium Thermodynamicscited by 7,005
- 2022Hierarchical Text-Conditional Image Generation with CLIP Latentscited by 6,539
- 2022Classifier-Free Diffusion Guidancecited by 5,717
- 2022LAION-5B: An open large-scale dataset for training next generation image-text modelscited by 4,131
- 2024Scaling Rectified Flow Transformers for High-Resolution Image Synthesiscited by 4,094
- 2021CLIPScore: A Reference-free Evaluation Metric for Image Captioningcited by 2,388
- 2019Machine Unlearningcited by 1,020
- 2021Multimodal datasets: misogyny, pornography, and malignant stereotypescited by 326
20 more
- 2024Hunyuan-DiT: A Powerful Multi-Resolution Diffusion Transformer with Fine-Grained Chinese Understandingcited by 294
- 2020Large image datasets: A pyrrhic win for computer vision?cited by 237
- 2017GANs Trained by a Two Time-Scale Update Rule Converge to a Local Nash Equilibriumcited by 208
- 2022Can Machines Help Us Answering Question 16 in Datasheets, and In Turn Reflecting on Inappropriate Content?cited by 150
- 2025Qwen3Guard Technical Reportcited by 125
- 2024T2VSafetyBench: Evaluating the Safety of Text-to-Video Generative Modelscited by 66
- 2024Dynamic Negative Guidance of Diffusion Modelscited by 28
- 2023Machine Vision Therapy: Multimodal Large Language Models Can Enhance Visual Robustness via Denoising In-Context Learningcited by 27
- 2024Automatic Jailbreaking of the Text-to-Image Generative AI Systemscited by 22
- 2024LaVin-DiT: Large Vision Diffusion Transformercited by 21
- 2023Using Text-to-Image Generation for Architectural Design Ideationcited by 16
- 2024Near to Mid-term Risks and Opportunities of Open-Source Generative AIcited by 13
- 2025Beyond Optimal Transport: Model-Aligned Coupling for Flow Matchingcited by 13
- 2025FORCE: Transferable Visual Jailbreaking Attacks via Feature Over-Reliance CorrEctioncited by 11
- 2025MMGen: Unified Multi-modal Image Generation and Understanding in One Gocited by 10
- 2024TED-VITON: Transformer-Empowered Diffusion Models for Virtual Try-Oncited by 8
- 2025Jailbreaking the Non-Transferable Barrier via Test-Time Data Disguisingcited by 8
- 2025DAMR: Efficient and Adaptive Context-Aware Knowledge Graph Question Answering with LLM-Guided MCTScited by 6
- 2024Discriminative Image Generation with Diffusion Models for Zero-Shot Learningcited by 5
- 2026Is Gradient Ascent Really Necessary? Memorize to Forget for Machine Unlearningcited by 5
Built on by
Citing papers per year: 2026: 9.
9 papers.
- 2026Mobile-VTON: High-Fidelity On-Device Virtual Try-Oncited by 2
- 2026When Agents Learn to Be You: Benchmarking Privacy Leakage, Impersonation Risk, and Defenses in Persona Skillscited by 2
- 2026The Illusion of High Utility in Safety Alignment of Text-to-Image Diffusion Modelscited by 1
- 2026Delving into the Temporal Challenges of Unified Video Protection Against Image-to-Video and Fine-Tuning-based Customizationcited by 1
- 2026Cross-Resolution Semantic Learning for Graph Domain Adaptationcited by 1
- 2026Incentivizing Generative Zero-Shot Learning via Outcome-Reward Reinforcement Learning with Visual Cuescited by 0
- 2026Robust and Generalizable Safety Steering for Text-to-Image Diffusion Transformerscited by 0
- 2026InGuard: Towards Generalized Inner Guardrail for Safe Text-to-Image Generationcited by 0
- 2026Beyond Site Agreement: Re-estimation for Brain Network Generalizationcited by 0
- 2026Beyond Site Agreement: Re-estimation for Brain Network Generalization28 Sep 2026
- 2026InGuard: Towards Generalized Inner Guardrail for Safe Text-to-Image Generation23 Sep 2026
- 2026When Agents Learn to Be You: Benchmarking Privacy Leakage, Impersonation Risk, and Defenses in Persona Skills4 Aug 2026
- 2026Cross-Resolution Semantic Learning for Graph Domain Adaptation31 Jul 2026
- 2026Delving into the Temporal Challenges of Unified Video Protection Against Image-to-Video and Fine-Tuning-based Customization14 Jul 2026
- 2026The Illusion of High Utility in Safety Alignment of Text-to-Image Diffusion Models1 Jul 2026
- 2026Robust and Generalizable Safety Steering for Text-to-Image Diffusion Transformers28 May 2026
- 2026Incentivizing Generative Zero-Shot Learning via Outcome-Reward Reinforcement Learning with Visual Cues22 Mar 2026
- 2026Mobile-VTON: High-Fidelity On-Device Virtual Try-On1 Mar 2026
Similar, not cited
Close in wording, no citation either way
- 2025Detect-and-Guide: Self-regulation of Diffusion Models for Safe Text-to-Image Generation via Guideline Token Optimization
- 2026SafeCtrl: Region-Aware Safety Control for Text-to-Image Diffusion via Detect-Then-Suppress
- 2024SafeCFG: Controlling Harmful Features with Dynamic Safe Guidance for Safe Generation
- 2024Safety Alignment Backfires: Preventing the Re-emergence of Suppressed Concepts in Fine-tuned Text-to-Image Diffusion Models
- 2025SPQR: A Multi-Dimensional Benchmark for Safety Alignment under Benign Model Adaptation
- 2025Personalized Safety Alignment for Text-to-Image Diffusion Models
- 2025SafeCtrl: Region-Based Safety Control for Text-to-Image Diffusion via Detect-Then-Suppress
- 2025T2ISafety: Benchmark for Assessing Fairness, Toxicity, and Privacy in Image Generation