One-Prompt Censorship Evasion via Generative Diffusion Models
On the map: Diffusion models → Robustness, privacy and adversarial aspects
Abstract (arXiv)
The escalating arms race between Internet censorship and evasion has driven censors to evolve from static rule-based filtering to sophisticated deep learning-based traffic analysis. While recent automated evasion tools have attempted to counter this by leveraging stochastic search and programmable heuristics, they continue to suffer from insufficient evasion robustness across diverse censorship modalities and poor usability due to complex, mechanism-specific configurations that require manual fitness tuning or domain-specific languages. In this paper, we propose a paradigm shift that reframes censorship evasion as a semantic image-to-image editing task, allowing users to execute it with a single prompt. We introduce FlowPaint, a novel generative framework that leverages the "world knowledge" of large diffusion models to automatically reshape censored traffic into benign patterns. FlowPaint utilizes an instruction-tuned diffusion architecture to perform semantic editing on network flows. Evaluations against both industrial-grade rule-based middleboxes and learning-based classifiers demonstrate that FlowPaint outperforms existing censorship evasion baselines, enabling users to counter diverse censorship paradigms solely by varying natural language instructions
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 9 of its 50 references that are in the map. First posted on arXiv 21 Jun 2026.
Builds on
9 of 50 references.
References · 9
- 2020Denoising Diffusion Probabilistic Modelscited by 21,076
- 2022InstructPix2Pix: Learning to Follow Image Editing Instructionscited by 2,611
- 2022ET-BERT: A Contextualized Datagram Representation with Pre-training Transformers for Encrypted Traffic Classificationcited by 66
- 2018Deep Fingerprinting: Undermining Website Fingerprinting Defenses with Deep Learningcited by 43
- 2023NetDiffusion: Network Data Augmentation Through Protocol-Constrained Traffic Generationcited by 27
- 2020New Directions in Automated Traffic Analysiscited by 26
- 2013ScrambleSuit: A Polymorph Network Protocol to Circumvent Censorshipcited by 2
- 2016Network Traffic Obfuscation and Automated Internet Censorshipcited by 1
- 2023Measuring and Evading Turkmenistan's Internet Censorship: A Case Study in Large-Scale Measurements of a Low-Penetration Countrycited by 1
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2025Anti-Diffusion: Preventing Abuse of Modifications of Diffusion-Based Models
- 2025GuardDoor: Safeguarding Against Malicious Diffusion Editing via Protective Backdoors
- 2026Disciplined Diffusion: Text-to-Image Diffusion Model against NSFW Generation
- 2025Backdoors in Conditional Diffusion: Threats to Responsible Synthetic Data Pipelines
- 2023SneakyPrompt: Jailbreaking Text-to-image Generative Models
- 2025DeContext as Defense: Safe Image Editing in Diffusion Transformers
- 2025Structure Disruption: Subverting Malicious Diffusion-Based Inpainting via Self-Attention Query Perturbation
- 2023EditShield: Protecting Unauthorized Image Editing by Instruction-guided Diffusion Models