mlsanityData to 7 Oct 2026

Disciplined Diffusion: Text-to-Image Diffusion Model against NSFW Generation

arXiv 2605.01113 ↗First posted 1 May 2026cs.CVcited by 0

On the map: Diffusion models → Robustness, privacy and adversarial aspects

Abstract (arXiv)

Text-to-image (T2I) diffusion models have the ability to build high-quality pictures from text prompts, but they pose safety concerns because they can generate offensive or disturbing imagery when provided with harmful inputs. Existing safety filters typically rely on text-based classifiers or image-based checkers that completely block the output upon detecting a threat, issuing an explicit allow/block feedback signal to the user. This binary strategy leaves models vulnerable to adversarial attacks that alter keywords to bypass detection, and it causes high false-alarm rates that degrade the experience for benign users. To address such vulnerabilities, we propose Disciplined Diffusion (DDiffusion), a novel robust text-to-image diffusion that counters Not Safe For Work (NSFW) generation by uncovering implicit malicious semantics in prompt embeddings. DDiffusion leverages a semantic retrieval mechanism to evaluate prompts against concept distributions rather than relying on brittle pairwise similarity. Furthermore, it employs a localization method during the diffusion process to selectively edit only the harmful regions of the generated image. By returning locally sanitized images instead of applying uniform blocking, DDiffusion suppresses malicious content while preserving generation fidelity for benign prompts and avoiding the binary allow-deny signal on which existing probing attacks rely.

Key facts. No citing papers in the map yet (data through 7 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 24 of its 30 references that are in the map. First posted on arXiv 1 May 2026.

Builds on

24 of 30 references.

Closest ancestors · 14

Same direction, newest first

  1. 2024Unlearning Concepts in Diffusion Model via Concept Domain Correction and Concept Preserving Gradient24 May
  2. 2024SafeGen: Mitigating Sexually Explicit Content Generation in Text-to-Image Models10 Apr
  3. 2024MACE: Mass Concept Erasure in Diffusion Models10 Mar
  4. 2023To Generate or Not? Safety-Driven Unlearned Diffusion Models Are Still Easy To Generate Unsafe Images ... For Now18 Oct
  5. 2023Ring-A-Bell! How Reliable are Concept Removal Methods for Diffusion Models?16 Oct
  6. 2023Prompting4Debugging: Red-Teaming Text-to-Image Diffusion Models by Finding Problematic Prompts12 Sep
  7. 2023Stable Diffusion is Unstable5 Jun
  8. 2023Unsafe Diffusion: On the Generation of Unsafe Images and Hateful Memes From Text-To-Image Models23 May
  9. 2023SneakyPrompt: Jailbreaking Text-to-image Generative Models20 May
  10. 2023Forget-Me-Not: Learning to Forget in Text-to-Image Diffusion Models30 Mar
  11. 2023A Pilot Study of Query-Free Adversarial Attack against Stable Diffusion29 Mar
  12. 2023Erasing Concepts from Diffusion Models13 Mar
2 more
  1. 2022Safe Latent Diffusion: Mitigating Inappropriate Degeneration in Diffusion Models9 Nov
  2. 2022Red-Teaming the Stable Diffusion Safety Filter3 Oct

Other references · 10

  1. 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
  2. 2020Denoising Diffusion Probabilistic Modelscited by 20,851
  3. 2015U-Net: Convolutional Networks for Biomedical Image Segmentationcited by 19,604
  4. 2018The Unreasonable Effectiveness of Deep Features as a Perceptual Metriccited by 11,029
  5. 2016Grad-CAM: Visual Explanations from Deep Networks via Gradient-based Localizationcited by 6,690
  6. 2022LAION-5B: An open large-scale dataset for training next generation image-text modelscited by 4,131
  7. 2015Learning Deep Features for Discriminative Localizationcited by 2,430
  8. 2021CLIPScore: A Reference-free Evaluation Metric for Image Captioningcited by 2,388
  9. 2024Get What You Want, Not What You Don't: Image Content Suppression for Text-to-Image Diffusion Modelscited by 62
  10. 2024GuardT2I: Defending Text-to-Image Models from Adversarial Promptscited by 61

Built on by

Not cited yet.

Similar, not cited

Close in wording, no citation either way

  1. 2025Seeing It Before It Happens: In-Generation NSFW Detection for Diffusion-Based Text-to-Image Models
  2. 2023MMA-Diffusion: MultiModal Attack on Diffusion Models
  3. 2025Beautiful Images, Toxic Words: Understanding and Addressing Offensive Text in Generated Images
  4. 2024AdvI2I: Adversarial Image Attack on Image-to-Image Diffusion models
  5. 2025Responsible Diffusion Models via Constraining Text Embeddings within Safe Regions
  6. 2025Training-Free Safe Text Embedding Guidance for Text-to-Image Diffusion Models
  7. 2026Test-Time Scaling for Safe Text-Guided Image Generation via Intermediate Clean Estimates
  8. 2026SafeCtrl: Region-Aware Safety Control for Text-to-Image Diffusion via Detect-Then-Suppress