Invisible Backdoor Attacks on Diffusion Models
Date: 2024-06
Affected: DDPM, Stable Diffusion, inpainting/editing pipelines
Attack vector: backdoor
Category: research
Severity: High

Optimization framework for invisible trigger backdoors in unconditional and text-conditional diffusion models, plus extensions to image editing and inpainting pipelines.


Mitigations:

Architectural layers (MAESTRO):