SafeDiffusion-R1: Online Reward Steering for Safe Diffusion Post-Training
On the map: Diffusion models → Robustness, privacy and adversarial aspects
also in 1 more
Abstract (arXiv)
Diffusion models have been widely studied for removing unsafe content learned during pre-training. Existing methods require expensive supervised data, either unsafe-text paired with safe-image groundtruth or negative/positive image pairs, making them impractical to scale. Furthermore, offline reinforcement learning and supervised fine-tuning approaches that generate synthetic data offline suffer from catastrophic forgetting, degrading generation quality. We propose a novel online reinforcement learning framework that addresses both data scarcity and model degradation through post-training with Group Relative Policy Optimization (GRPO) on both negative and positive text prompts. To eliminate the need for fine-tuning specialized safe/unsafe reward models, we introduce a textitsteering reward mechanism that exploits an inherent property of CLIP embeddings: steering text representations toward positive safety directions and away from negative ones in the embedding space. Our online-policy approach enables the model to learn from diverse prompts, including explicit unsafe content, without catastrophic forgetting. Extensive experiments demonstrate that our method reduces inappropriate content to 18.07% (vs. 48.9% for SD v1.4) and nudity detections to 15 (vs. 646 baseline) while improving compositional generation quality from 42.08% to 47.83% on GenEval. Remarkably, these safety gains generalize to out-of-domain unsafe prompts across seven harm categories, achieving state-of-the-art performance without supervised paired data or reward tuning. Github: https://github.com/MAXNORM8650/SafeDiffusion-R1.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 46 of its 52 references that are in the map. First posted on arXiv 18 May 2026.
Builds on
46 of 52 references.
Closest ancestors · 18
Same direction, newest first
- 2025Concept Pinpoint Eraser for Text-to-image Diffusion Models via Residual Attention Gate28 Jun
- 2025SAeUron: Interpretable Concept Unlearning in Diffusion Models with Sparse Autoencoders29 Jan
- 2024STEREO: A Two-Stage Framework for Adversarially Robust Concept Erasing from Text-to-Image Diffusion Models29 Aug
- 2024Reliable and Efficient Concept Erasure of Text-to-Image Diffusion Models17 Jul
- 2024Unlearning Concepts in Diffusion Model via Concept Domain Correction and Concept Preserving Gradient24 May
- 2024Defensive Unlearning with Adversarial Training for Robust Concept Erasure in Diffusion Models24 May
- 2024MACE: Mass Concept Erasure in Diffusion Models10 Mar
- 2024Erasing Undesirable Influence in Diffusion Models11 Jan
- 2023One-Dimensional Adapter to Rule Them All: Concepts, Diffusion Models and Erasing Applications26 Dec
- 2023Receler: Reliable Concept Erasing of Text-to-Image Diffusion Models via Lightweight Erasers29 Nov
- 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generation19 Oct
- 2023Unified Concept Editing in Diffusion Models25 Aug
6 more
- 2023Unsafe Diffusion: On the Generation of Unsafe Images and Hateful Memes From Text-To-Image Models23 May
- 2023Forget-Me-Not: Learning to Forget in Text-to-Image Diffusion Models30 Mar
- 2023Ablating Concepts in Text-to-Image Diffusion Models23 Mar
- 2023Erasing Concepts from Diffusion Models13 Mar
- 2022Safe Latent Diffusion: Mitigating Inappropriate Degeneration in Diffusion Models9 Nov
- 2022Red-Teaming the Stable Diffusion Safety Filter3 Oct
Other references · 28
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
- 2020Denoising Diffusion Probabilistic Modelscited by 21,076
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,863
- 2014Microsoft COCO: Common Objects in Contextcited by 17,608
- 2022Training language models to follow instructions with human feedbackcited by 15,971
- 2017Proximal Policy Optimization Algorithmscited by 15,215
- 2020Denoising Diffusion Implicit Modelscited by 9,781
- 2024DeepSeekMath: Pushing the Limits of Mathematical Reasoning in Open Language Modelscited by 9,379
- 2020Score-Based Generative Modeling through Stochastic Differential Equationscited by 9,122
- 2022Hierarchical Text-Conditional Image Generation with CLIP Latentscited by 6,585
- 2022Photorealistic Text-to-Image Diffusion Models with Deep Language Understandingcited by 6,355
- 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,720
16 more
- 2023Training Diffusion Models with Reinforcement Learningcited by 982
- 2023GenEval: An Object-Focused Framework for Evaluating Text-to-Image Alignmentcited by 972
- 2023Human Preference Score v2: A Solid Benchmark for Evaluating Human Preferences of Text-to-Image Synthesiscited by 890
- 2025Flow-GRPO: Training Flow Matching Models via Online RLcited by 661
- 2023DPOK: Reinforcement Learning for Fine-tuning Text-to-Image Diffusion Modelscited by 450
- 2023Directly Fine-Tuning Diffusion Models on Differentiable Rewardscited by 448
- 2023Scissorhands: Exploiting the Persistence of Importance Hypothesis for LLM KV Cache Compression at Test Timecited by 439
- 2023Aligning Text-to-Image Models using Human Feedbackcited by 422
- 2025DanceGRPO: Unleashing GRPO on Visual Generationcited by 413
- 2023Selective Amnesia: A Continual Learning Approach to Forgetting in Deep Generative Modelscited by 177
- 2022The Privacy Onion Effect: Memorization is Relativecited by 136
- 2025LLM Post-Training: A Deep Dive into Reasoning Large Language Modelscited by 135
- 2024Machine Unlearning in Generative AI: A Surveycited by 49
- 2025SafeDPO: A Simple Approach to Direct Preference Optimization with Enhanced Safetycited by 37
- 2024AlignGuard: Scalable Safety Alignment for Text-to-Image Generationcited by 20
- 2024Sparsity-based Safety Conservatism for Constrained Offline Reinforcement Learningcited by 1
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2025Alignment and Safety of Diffusion Models via Reinforcement Learning and Reward Modeling: A Survey
- 2025Training-Free Safe Text Embedding Guidance for Text-to-Image Diffusion Models
- 2024ShieldDiff: Suppressing Sexual Content Generation from Diffusion Models through Reinforcement Learning
- 2025Towards Resilient Safety-driven Unlearning for Diffusion Models against Downstream Fine-tuning
- 2026SafeCtrl: Region-Aware Safety Control for Text-to-Image Diffusion via Detect-Then-Suppress
- 2026Critic-Guided Reinforcement Unlearning in Text-to-Image Diffusion
- 2026DiffusionART: Efficient, Stable and Scalable Reinforcement of Diffusion Models
- 2026Safe Image Generation via Reinforcement Learning