The rise of deep learning models in the digital era has raised substantial concerns regarding the generation of Not-Safe-for-Work content (NSFW). Existing defense methods primarily involve model fine-tuning and post-hoc content moderation. Nevertheless, these approaches largely lack scalability in eliminating harmful content, degrade the quality of benign image generation, or incur high inference costs. To address these challenges, we propose an innovative framework named Buster, which injects a semantic backdoor into the text encoder to prevent NSFW content generation. Buster leverages deep semantic information rather than explicit prompts as triggers, redirecting NSFW prompts towards targeted benign prompts. Additionally, Buster employs energy-based training data generation through Langevin dynamics for adversarial knowledge augmentation, thereby ensuring robustness in harmful concept definition. This approach demonstrates exceptional resilience and scalability in mitigating NSFW content. Particularly, Buster fine-tunes the text encoder of Text-to-Image models within merely five minutes, showcasing its high efficiency. Our extensive experiments denote that Buster outperforms nine state-of-the-art baselines, achieving a superior NSFW content removal rate of at least 91.2% while preserving the quality of harmless images. Disclaimer: This paper includes unsafe language and imagery that some readers may find offensive. Any explicit content has been obscured.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Buster: Implanting Semantic Backdoor Into Text Encoder to Mitigate NSFW Content Generation

  • Xin Zhao,
  • Xiaojun Chen,
  • Yuexin Xuan,
  • Zhendong Zhao,
  • Xinfeng Li,
  • Xiaojun Jia,
  • Xiaofeng Wang

摘要

The rise of deep learning models in the digital era has raised substantial concerns regarding the generation of Not-Safe-for-Work content (NSFW). Existing defense methods primarily involve model fine-tuning and post-hoc content moderation. Nevertheless, these approaches largely lack scalability in eliminating harmful content, degrade the quality of benign image generation, or incur high inference costs. To address these challenges, we propose an innovative framework named Buster, which injects a semantic backdoor into the text encoder to prevent NSFW content generation. Buster leverages deep semantic information rather than explicit prompts as triggers, redirecting NSFW prompts towards targeted benign prompts. Additionally, Buster employs energy-based training data generation through Langevin dynamics for adversarial knowledge augmentation, thereby ensuring robustness in harmful concept definition. This approach demonstrates exceptional resilience and scalability in mitigating NSFW content. Particularly, Buster fine-tunes the text encoder of Text-to-Image models within merely five minutes, showcasing its high efficiency. Our extensive experiments denote that Buster outperforms nine state-of-the-art baselines, achieving a superior NSFW content removal rate of at least 91.2% while preserving the quality of harmless images. Disclaimer: This paper includes unsafe language and imagery that some readers may find offensive. Any explicit content has been obscured.