about
Red-Teaming the Stable Diffusion Safety Filter (arxiv.org)
1 point by dayve on Jan 17, 2023 | hide | past | pdf | discuss on HN

In plain words: The team tested Stable Diffusion's hidden safety filter by trying to make disturbing images, then took the filter apart to see what it checks. It was easy to slip past: it blocks sexual content but ignores violence and gore.

Abstract

Stable Diffusion is a recent open-source image generation model comparable to proprietary models such as DALLE, Imagen, or Parti. Stable Diffusion comes with a safety filter that aims to prevent generating explicit images. Unfortunately, the filter is obfuscated and poorly documented. This makes it hard for users to prevent misuse in their applications, and to understand the filter's limitations and improve it. We first show that it is easy to generate disturbing content that bypasses the safety filter. We then reverse-engineer the filter and find that while it aims to prevent sexual content, it ignores violence, gore, and other similarly disturbing content. Based on our analysis, we argue safety measures in future model releases should strive to be fully open and properly documented to stimulate security contributions from the community.

Javier Rando, Daniel Paleka, David Lindner, Lennart Heim, Florian Tramèr
arXiv:2210.04610 · cs.AI, cs.CR, cs.CV, cs.CY, cs.LG · submitted Oct 3, 2022 · updated Nov 10, 2022
abstract · pdf · html · ML Safety Workshop NeurIPS 2022

add comment on HN