arXiv:2607.16828cs.CV2026-07TPAMI

提出噪声驱动框架,精准识别并抑制文本生成中的隐性色情内容。

UniNDM: A Unified Noise-driven Detection and Mitigation Framework Against Sexual Content in Text-to-Image Generation

论文配图:UniNDM: A Unified Noise-driven Detection and Mitigation Framework Against Sexual Content in Text-to-Image Generation
图 1 · 摘自论文原文
  • 利用扩散过程早期噪声的可分性,实现无额外计算开销的高效检测。
  • 动态生成针对性负向提示,结合注意力抑制,全面应对多样隐性诱导。
  • 适用于U-Net与DiT架构,适合安全敏感的生成模型部署场景。

尽管文生图扩散模型生成能力强大,仍易受隐性色情提示影响:细微伪装的良性词或对抗性标记会因模型偏差或训练数据中的潜在关联,意外生成不当内容。现有安全机制存在根本局限:检测方法多针对显式内容,难以捕捉隐性恶意意图;缓解策略依赖静态负向提示,无法应对多样隐性场景。为此,我们提出UniNDM——一种统一的噪声驱动框架,从扩散过程的噪声动态视角重思安全机制。核心洞察是:早期预测噪声在正常与色情内容间具有固有可分性,理论上其语义集中度随时间步呈二次增长。基于此,我们设计轻量级噪声检测器,实现高精度且几乎无计算开销。缓解方面,引入噪声增强的自适应负向引导:通过大语言模型动态生成上下文相关负向提示,同时优化初始噪声以抑制对色情标记的关注集中,提供全面防护。该框架进一步扩展至新兴的扩散变换器(DiT)架构,采用区域约束语义引导适配其统一多模态注意力。在自然与对抗数据集上对U-Net与DiT模型的综合实验表明,相较SLD、UCE、Safree等先进方法均有显著提升。代码已开源:https://github.com/Aries-iai/UniNDM。

原文摘要 · Abstract (English)

Despite the impressive generative capabilities of text-to-image diffusion models, they remain vulnerable to implicit sexual prompts, where subtle cues disguised as benign terms or adversarial tokens unexpectedly generate the inappropriate content due to model biases or latent correlations in training data. Existing safety mechanisms face fundamental limitations: detection methods primarily identify explicit content and fail to capture implicit malicious intent, while mitigation approaches rely on static negative prompts inadequate for diverse implicit scenarios. To address these challenges, we propose UniNDM, a unified noise-driven framework that rethinks safety mechanisms through the lens of noise dynamics in diffusion processes. Our key insight is that early-stage predicted noise exhibits inherent separability between normal and sexually explicit content, which we theoretically demonstrates quadratically increasing semantic concentration with timestep. Leveraging this property, we develop a lightweight noise-based detector achieving superior accuracy with virtually no computational overhead. For mitigation, we introduce noise-enhanced adaptive negative guidance: dynamically generating context-specific negative prompts via large language models to handle diverse implicit content, while optimizing initial noise by suppressing attention concentration on explicit tokens to provide comprehensive protection. Besides the U-Net-based diffusion models, we further extend our framework to emerging Diffusion Transformer architectures through region-constrained semantic guidance tailored for their unified multimodal attention. Comprehensive experiments across U-Net models and DiT models on both natural and adversarial datasets demonstrate substantial improvements over state-of-the-art methods, including SLD, UCE, Safree, etc. Our code is publicly available at https://github.com/Aries-iai/UniNDM.

图像生成安全检测扩散模型隐性风险

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。