Safe Text-to-Image Generation on MMA-Diffusion
96.2Automatic Safety RateSD-v1.4
Evaluation results
| Method | Links | |||
|---|---|---|---|---|
| SD-v1.42025.02 | 96.2 | — | 95.6 | |
| SD-v1.42025.12 | 95.7 | — | — | |
| SLD-MediumNo Weights Modification=true, Training-Free=true, Risk-D Ability=false2025.12 | 94.2 | — | — | |
| SLD-StrongNo Weights Modification=true, Training-Free=true, Risk-D Ability=false2025.12 | 92 | — | — | |
| SDIDNo Weights Modification=false, Training-Free=false, Risk-D Ability=false2025.12 | 90.7 | — | — | |
| SLDFine Tuning=false, Negative Prompt=true, Safe Denoiser=false2025.02 | 88.1 | — | 88.2 | |
| ESDNo Weights Modification=false, Training-Free=false, Risk-D Ability=false2025.12 | 87.3 | — | — | |
| UCENo Weights Modification=false, Training-Free=true, Risk-D Ability=false2025.12 | 86.7 | — | — | |
| CANo Weights Modification=false, Training-Free=false, Risk-D Ability=false2025.12 | 85.5 | — | — | |
| SLD-MaxNo Weights Modification=true, Training-Free=true, Risk-D Ability=false2025.12 | 83.7 | — | — | |
| RECENo Weights Modification=false, Training-Free=true, Risk-D Ability=false2025.12 | 67.5 | — | — | |
| RECEFine Tuning=true, Negative Prompt=false, Safe Denoiser=false2025.02 | 65.1 | — | 66.4 | |
| ESDFine Tuning=true, Negative Prompt=false, Safe Denoiser=false2025.02 | 62.8 | — | 64 | |
| SAFREEFine Tuning=false, Negative Prompt=true, Safe Denoiser=false2025.02 | 60.1 | — | 61.8 | |
| SAFREENo Weights Modification=true, Training-Free=true, Risk-D Ability=false2025.12 | 58.5 | — | — | |
| PurifyGenNo Weights Modification=true, Training-Free=true, Risk-D Ability=true2025.12 | 55.3 | — | — | |
| SLD + Safe DenoiserFine Tuning=false, Negative Prompt=true, Safe Denoiser=true2025.02 | 48.1 | — | 54.9 | |
| SAFREE + Safe DenoiserFine Tuning=false, Negative Prompt=true, Safe Denoiser=true2025.02 | 46.9 | — | 50.1 | |
| Random Vector2026.06 | 21.8 | — | — | |
| OriginalAlpha=02026.06 | 21.1 | — | — | |
| SANo Weights Modification=false, Training-Free=false, Risk-D Ability=false2025.12 | 20.5 | — | — | |
| MACENo Weights Modification=false, Training-Free=false, Risk-D Ability=false2025.12 | 18.3 | — | — | |
| RidgeSource LLM=Qwen3.5-9B2026.06 | 9 | — | — | |
| MLPSource LLM=Qwen3.5-9B2026.06 | 7.3 | — | — | |
| String-based Steering2026.06 | 6.2 | — | — | |
| MLPSource LLM=Llama3.1-8B2026.06 | 5 | — | — | |
| MLPSource LLM=Mistral-7B2026.06 | 4.8 | — | — | |
| RidgeSource LLM=Llama3.1-8B2026.06 | 4.5 | — | — | |
| RidgeSource LLM=Mistral-7B2026.06 | 3.7 | — | — | |
| SVDSource LLM=Qwen3.5-9B2026.06 | 3.5 | — | — | |
| Native (Target)2026.06 | 2.7 | — | — | |
| SVDSource LLM=Llama3.1-8B2026.06 | 2 | — | — | |
| SVDSource LLM=Mistral-7B2026.06 | 0.9 | — | — | |
| POSIDefense Type=Content Moderation2025.01 | — | 29.15 | — | |
| PromptGuardDefense Type=Content Moderation2025.01 | — | 5.53 | — | |
| SafeGenDefense Type=Model Alignment2025.01 | — | 6.53 | — | |
| SafetyFilterDefense Type=Content Moderation2025.01 | — | 24.12 | — | |
| SDv1.4Defense Type=None2025.01 | — | 82.91 | — | |
| SDv2.1Defense Type=None2025.01 | — | 33.67 | — | |
| SLDMaxDefense Type=Content Moderation2025.01 | — | 55.78 | — | |
| SLDStrongDefense Type=Content Moderation2025.01 | — | 68.34 | — | |
| UCEDefense Type=Model Alignment2025.01 | — | 11.06 | — |