Skip to content
InfoResearchPreprint

Learning Normal Diffusion Dynamics for Backdoor Defense in Text-to-Image Models

Published
Record updated
View JSON

Summary

This paper proposes Normal Diffusion Dynamics Learning (NDDL), a backdoor defense for text-to-image diffusion models. NDDL trains a timestep-conditioned dynamics model on benign samples only, using cross-attention, latent and noise space trajectories. At inference, deviations between observed and predicted transitions flag backdoors and enable trigger localization by substituting low-semantic words; the authors report effectiveness and generalizability across diverse attacks.