mlsanityData to 14 Oct 2026

DTVI: Dual-Stage Textual and Visual Intervention for Safe Text-to-Image Generation

arXiv 2603.22041 ↗First posted 23 Mar 2026cs.CVcited by 1

On the map: Diffusion models → Robustness, privacy and adversarial aspects

also in 1 more
Abstract (arXiv)

Text-to-Image (T2I) diffusion models have demonstrated strong generation ability, but their potential to generate unsafe content raises significant safety concerns. Existing inference-time defense methods typically perform category-agnostic token-level intervention in the text embedding space, which fails to capture malicious semantics distributed across the full token sequence and remains vulnerable to adversarial prompts. In this paper, we propose DTVI, a dual-stage inference-time defense framework for safe T2I generation. Unlike existing methods that intervene on specific token embeddings, our method introduces category-aware sequence-level intervention on the full prompt embedding to better capture distributed malicious semantics, and further attenuates the remaining unsafe influences during the visual generation stage. Experimental results on real-world unsafe prompts, adversarial prompts, and multiple harmful categories show that our method achieves effective and robust defense while preserving reasonable generation quality on benign prompts, obtaining an average Defense Success Rate (DSR) of 94.43% across sexual-category benchmarks and 88.56 across seven unsafe categories, while maintaining generation quality on benign prompts.

Key facts. Cited by 1 paper in the map (data through 14 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 25 of its 39 references that are in the map. First posted on arXiv 23 Mar 2026.

Builds on

25 of 39 references.

Closest ancestors · 10

Same direction, newest first

  1. 2025Semantic Surgery: Zero-Shot Concept Erasure in Diffusion Models26 Oct
  2. 2025CASteer: Cross-Attention Steering for Controllable Concept Erasure11 Mar
  3. 2024SAFREE: Training-Free and Adaptive Guard for Safe Text-to-Image And Video Generation16 Oct
  4. 2024SafeGen: Mitigating Sexually Explicit Content Generation in Text-to-Image Models10 Apr
  5. 2023MMA-Diffusion: MultiModal Attack on Diffusion Models29 Nov
  6. 2023Prompting4Debugging: Red-Teaming Text-to-Image Diffusion Models by Finding Problematic Prompts12 Sep
  7. 2023SneakyPrompt: Jailbreaking Text-to-image Generative Models20 May
  8. 2023Erasing Concepts from Diffusion Models13 Mar
  9. 2022Safe Latent Diffusion: Mitigating Inappropriate Degeneration in Diffusion Models9 Nov
  10. 2022Red-Teaming the Stable Diffusion Safety Filter3 Oct

Other references · 15

  1. 2017Attention Is All You Needcited by 60,361
  2. 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
  3. 2014Microsoft COCO: Common Objects in Contextcited by 17,608
  4. 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,599
  5. 2018The Unreasonable Effectiveness of Deep Features as a Perceptual Metriccited by 11,177
  6. 2020Denoising Diffusion Implicit Modelscited by 9,781
  7. 2022Hierarchical Text-Conditional Image Generation with CLIP Latentscited by 6,585
  8. 2022Photorealistic Text-to-Image Diffusion Models with Deep Language Understandingcited by 6,355
  9. 2022Classifier-Free Diffusion Guidancecited by 5,847
  10. 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 3,104
  11. 2017GANs Trained by a Two Time-Scale Update Rule Converge to a Local Nash Equilibriumcited by 213
  12. 2023Understanding the Latent Space of Diffusion Models through the Lens of Riemannian Geometrycited by 125
3 more
  1. 2023GPT-4V(ision) as a Generalist Evaluator for Vision-Language Taskscited by 119
  2. 2024Preventing Catastrophic Overfitting in Fast Adversarial Training: A Bi-level Optimization Perspectivecited by 13
  3. 2026SafeRedir: Prompt Embedding Redirection for Robust Unlearning in Image Generation Modelscited by 3

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2026: 1.

1 paper.

Similar, not cited

Close in wording, no citation either way

  1. 2024Safe Text-to-Image Generation: Simply Sanitize the Prompt Embedding
  2. 2024Safeguarding Text-to-Image Generation via Inference-Time Prompt-Noise Optimization
  3. 2025Prompt-Based Safety Guidance Is Ineffective for Unlearned Text-to-Image Diffusion Models
  4. 2026Test-Time Scaling for Safe Text-Guided Image Generation via Intermediate Clean Estimates
  5. 2025PromptGuard: Soft Prompt-Guided Unsafe Content Moderation for Text-to-Image Models
  6. 2025GenBreak: Red Teaming Text-to-Image Generators Using Large Language Models
  7. 2026Disciplined Diffusion: Text-to-Image Diffusion Model against NSFW Generation
  8. 2025Mitigating Sexual Content Generation via Embedding Distortion in Text-conditioned Diffusion Models