提出LoyalDiffusion框架,降低扩散模型复制训练数据的风险。
LoyalDiffusion: A Diffusion Model Guarding Against Data Replication
- 在跳跃连接中引入信息传递模块,抑制数据记忆
- 仅在关键时间步应用改进,减少对生成质量影响
- 相比顶尖方法降低48.63%数据复现率,适合隐私敏感场景
扩散模型在图像生成方面展现出巨大潜力,但其复制训练数据的能力带来隐私风险,尤其当训练数据包含敏感信息时。现有缓解策略多聚焦于扩充训练集,忽视了扩散模型架构的影响。本文研究并缓解了扩散模型中U-Net的跳跃连接对数据记忆的增强作用。我们观察到:虽然跳跃连接提升生成质量,但也加剧了训练数据的复现风险。为此,提出复制感知的U-Net(RAU-Net),将信息传递模块嵌入对生成质量影响较小的跳跃连接中。进一步分析发现,某些时间步对记忆影响最显著,因此仅在这些关键时间步应用RAU-Net,结合针对性训练与推理策略,形成名为LoyalDiffusion的框架。大量实验表明,该方法在保持相近图像质量的同时,相较于当前最优方法,实现48.63%的数据复现率降低。
原文摘要 · Abstract (English)
Diffusion models have demonstrated significant potential in image generation. However, their ability to replicate training data presents a privacy risk, particularly when the training data includes confidential information. Existing mitigation strategies primarily focus on augmenting the training dataset, leaving the impact of diffusion model architecture under explored. In this paper, we address this gap by examining and mitigating the impact of the model structure, specifically the skip connections in the diffusion model's U-Net model. We first present our observation on a trade-off in the skip connections. While they enhance image generation quality, they also reinforce the memorization of training data, increasing the risk of replication. To address this, we propose a replication-aware U-Net (RAU-Net) architecture that incorporates information transfer blocks into skip connections that are less essential for image quality. Recognizing the potential impact of RAU-Net on generation quality, we further investigate and identify specific timesteps during which the impact on memorization is most pronounced. By applying RAU-Net selectively at these critical timesteps, we couple our novel diffusion model with a targeted training and inference strategy, forming a framework we refer to as LoyalDiffusion. Extensive experiments demonstrate that LoyalDiffusion outperforms the state-of-the-art replication mitigation method achieving a 48.63% reduction in replication while maintaining comparable image quality.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。