BadDiffusion: How to Backdoor Diffusion Models?
Date: 2022-12
Affected: DDPM diffusion models, Stable-Diffusion-style pipelines
Attack vector: backdoor
Category: research
Severity: High

Chou, Chen, and Ho engineer a compromised diffusion process during training so that the model emits an attacker-chosen image when a trigger appears in noise, while behaving normally otherwise. CVPR 2023.


Mitigations:

Architectural layers (MAESTRO):