mlsanityData to 7 Oct 2026

DNA: Dual-stage Native Attribution for Generated Image Source Tracing

arXiv 2607.13685 ↗First posted 15 Jul 2026cs.CVcited by 0

On the map: Diffusion models → Robustness, privacy and adversarial aspects

Abstract (arXiv)

The rapid evolution of image generation has produced numerous within-family variants, making source-model attribution of suspect images increasingly important for digital forensics. Existing proactive methods rely on watermark embedding or model modification, which may degrade visual quality and limit deployment flexibility. Passive methods often rely on large-scale supervised training or a single reconstruction signal, limiting their ability to handle unknown sources and distinguish highly similar within-family variants. We observe that attribution signals in latent generative models are naturally stratified across architectural levels: VAE-level cues reflect family-shared information, whereas backbone-level cues capture variant-specific behaviors. Motivated by this insight, we propose Dual-stage Native Attribution (DNA), a coarse-to-fine framework that follows this hierarchy without additional neural-network training. The coarse-grained stage uses Autoencoder Double-Reconstruction (AEDR) for efficient open-set family-level screening. The fine-grained stage performs closed-set model-level attribution with Native Prediction Consistency (NPC), which compares native prediction errors of within-family variants across multiple noise levels under semantic conditioning and attributes the source via normalized calibrated scores. To enable systematic evaluation, we construct DNA-30K, a benchmark for within-family variant attribution under open-set family-level evaluation. It comprises 30,000 images generated by 24 candidate models across six families spanning both denoising diffusion and flow matching, plus non-candidate generated and natural images as unknown sources. Experiments show that DNA achieves 89.11% end-to-end attribution accuracy on a task where random guessing accuracy is below 1% and outperforms the strongest baseline by 33.81% even when AEDR is used as the coarse-grained stage.

Key facts. No citing papers in the map yet (data through 7 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 50 of its 63 references that are in the map. First posted on arXiv 15 Jul 2026.

Builds on

50 of 63 references.

Closest ancestors · 6

Same direction, newest first

  1. 2025Gaussian Shading++: Rethinking the Realistic Deployment Challenge of Performance-Lossless Image Watermark for Diffusion Models21 Apr
  2. 2024How to Trace Latent Generative Model Generated Images without Artificial Watermark?22 May
  3. 2024Gaussian Shading: Provable Performance-Lossless Image Watermarking for Diffusion Models7 Apr
  4. 2023WOUAF: Weight Modulation for User Attribution and Fingerprinting in Text-to-Image Diffusion Models7 Jun
  5. 2023Tree-Ring Watermarks: Fingerprints for Diffusion Images that are Invisible and Robust31 May
  6. 2023The Stable Signature: Rooting Watermarks in Latent Diffusion Models27 Mar

Other references · 44

  1. 2014Adam: A Method for Stochastic Optimizationcited by 36,960
  2. 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
  3. 2020Denoising Diffusion Probabilistic Modelscited by 20,851
  4. 2015U-Net: Convolutional Networks for Biomedical Image Segmentationcited by 19,604
  5. 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
  6. 2014Microsoft COCO: Common Objects in Contextcited by 17,498
  7. 2014ImageNet Large Scale Visual Recognition Challengecited by 8,441
  8. 2021Diffusion Models Beat GANs on Image Synthesiscited by 8,185
  9. 2023BLIP-2: Bootstrapping Language-Image Pre-training with Frozen Image Encoders and Large Language Modelscited by 6,069
  10. 2022Scalable Diffusion Models with Transformerscited by 5,931
  11. 2022Flow Matching for Generative Modelingcited by 5,426
  12. 2023SDXL: Improving Latent Diffusion Models for High-Resolution Image Synthesiscited by 4,290
32 more
  1. 2022LAION-5B: An open large-scale dataset for training next generation image-text modelscited by 4,131
  2. 2024Scaling Rectified Flow Transformers for High-Resolution Image Synthesiscited by 4,094
  3. 2022Flow Straight and Fast: Learning to Generate and Transfer Data with Rectified Flowcited by 3,550
  4. 2022DreamBooth: Fine Tuning Text-to-Image Diffusion Models for Subject-Driven Generationcited by 3,286
  5. 2015Microsoft COCO Captions: Data Collection and Evaluation Servercited by 1,447
  6. 2022Diffusion Models in Vision: A Surveycited by 1,008
  7. 2019CNN-generated images are surprisingly easy to spot... for nowcited by 842
  8. 2018HiDDeN: Hiding Data With Deep Networkscited by 384
  9. 2021GAN Inversion: A Surveycited by 366
  10. 2023GenImage: A Million-Scale Benchmark for Detecting AI-Generated Imagecited by 318
  11. 2018Recent Advances in Open Set Recognition: A Surveycited by 309
  12. 2020Artificial Fingerprinting for Generative Models: Rooting Deepfake Attribution in Training Datacited by 200
  13. 2018Do GANs leave artificial fingerprints?cited by 188
  14. 2022DE-FAKE: Detection and Attribution of Fake Images Generated by Text-to-Image Generation Modelscited by 167
  15. 2023Hierarchical Fine-Grained Image Forgery Detection and Localizationcited by 134
  16. 2021MBRS : Enhancing Robustness of DNN-based Watermarking by Mini-Batch of Real and Simulated JPEG Compressioncited by 108
  17. 2020Responsible Disclosure of Generative Models Using Scalable Fingerprintingcited by 90
  18. 2021Reverse Engineering of Generative Models: Inferring Model Hyperparameters from Generated Imagescited by 58
  19. 2023Detecting and Grounding Multi-Modal Media Manipulation and Beyondcited by 55
  20. 2021Deep Model Intellectual Property Protection via Deep Watermarkingcited by 47
  21. 2022RepMix: Representation Mixing for Robust Attribution of Synthesized Imagescited by 39
  22. 2023Progressive Open Space Expansion for Open-Set Model Attributioncited by 32
  23. 2023Attributing Image Generative Models using Latent Fingerprintscited by 20
  24. 2024Which Model Generated This Image? A Model-Agnostic Approach for Origin Attributioncited by 15
  25. 2024Are CLIP features all you need for Universal Synthetic Image Origin Attribution?cited by 14
  26. 2025Forensic Self-Descriptions Are All You Need for Zero-Shot Detection, Open-Set Source Attribution, and Clustering of AI-generated Imagescited by 11
  27. 2025WILD: a new in-the-Wild Image Linkage Dataset for synthetic image attributioncited by 9
  28. 2024Detecting Origin Attribution for Text-to-Image Diffusion Modelscited by 7
  29. 2025Self-Supervised AI-Generated Image Detection: A Camera Metadata Perspectivecited by 6
  30. 2025Learning Counterfactually Decoupled Attention for Open-World Model Attributioncited by 5
  31. 2025AEDR: Training-Free AI-Generated Image Attribution via Autoencoder Double-Reconstructioncited by 5
  32. 2026Data Provenance for Image Auto-Regressive Generationcited by 1

Built on by

Not cited yet.

Similar, not cited

Close in wording, no citation either way

  1. 2025GenPTW: Latent Image Watermarking for Provenance Tracing and Tamper Localization
  2. 2026Forensic Twins: Self-Supervised Residual Learning for AI-Generated Image Forensics
  3. 2025Causal Fingerprints of AI Generative Models
  4. 2026Forensic Reserve: Eliciting Latent Knowledge for Image Forgery Detection
  5. 2024Community Forensics: Using Thousands of Generators to Train Fake Image Detectors
  6. 2026A Good Initialization is All You Need for Faithful Visual Attribution
  7. 2025CLUE: Leveraging Low-Rank Adaptation to Capture Latent Uncovered Evidence for Image Forgery Localization
  8. 2026FeatMark: Feature-level Watermark Protection against Mimicry Attacks with Diffusion Models