Hugging Face Trending Papers

Valid Early Detection of Memorization in Diffusion Models

arXiv Machine Learning
Oct 9

Early Signatures of Memorization in Diffusion Models via Basin Geometry and Cyclic Denoising

The paper demonstrates that diffusion models encode memorization in the geometry of their learned energy landscape before it becomes visible in generated samples. By analyzing score divergence and basin volume, the authors show that localized basins form around training images early in training, and that cyclic denoising can recover these images even when one‑shot generation shows no copies. Experiments on Gaussian mixtures, CelebA, CIFAR‑10, and Stable Diffusion v1.4 confirm that basin geometry reveals memorization across various settings.

By Nikhil Verma, Siddharthan Dileep, Anoop Singh, Srikanth Sastry, Ramya Hebbalaguppe, Sayan Ranu, N. M. Anoop Krishnan
arXiv Machine Learning
Oct 9

Beyond Sample Copying: Structural Memorization in Diffusion Models

The paper investigates why diffusion models, despite their practical success, can fully memorize training data when optimal. It shows that as training proceeds, the denoising objective causes overfitting at intermediate noise levels, creating a gap between validation and training performance. In a 2D toy model, this gap arises from the interplay between model error and the data distribution’s support density, leading to a smooth, generalizing flow field rather than exact recall of training points. The study also reveals that predictions from intermediate inference states become increasingly similar to training data in feature space, even as overall similarity to validation data remains unchanged.

By Tim Kaiser, Markus Kollmann
Hugging Face Trending Papers
1d ago

Difficulty Calibration Across Time for Membership Inference in Diffusion Models

The paper introduces techniques to improve membership inference attacks on diffusion models by accounting for image reconstruction difficulty. It proposes Reference-Model Calibration (RMC), which compares a fine‑tuned model’s loss to an earlier checkpoint to isolate newly memorized data, and Temporal Self‑Calibration (TSC), which uses a single model’s loss across diffusion timesteps to adjust for inherent image difficulty. Both methods outperform existing attacks and generalize across various model parameterizations.