{"about":{"site":"https://codewithpapers.app","non_affiliation":"Code with Papers and Syntology are not affiliated with, endorsed by, or sponsored by Papers with Code, Meta, or the pwc-archive mirror.","licence":"CC BY-SA 4.0","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","attribution":"https://codewithpapers.app/attribution","modified":"archive material modified by Syntology; see the attribution page"},"url":"/paper/disguised-copyright-infringement-of-latent","title":"Disguised Copyright Infringement of Latent Diffusion Models","arxiv_id":"2404.06737","date":"2024-04-10","proceeding":null,"authors":["Yiwei Lu","Matthew Y. R. Yang","Zuoqiu Liu","Gautam Kamath","YaoLiang Yu"],"abstract":"Copyright infringement may occur when a generative model produces samples substantially similar to some copyrighted data that it had access to during the training phase. The notion of access usually refers to including copyrighted samples directly in the training dataset, which one may inspect to identify an infringement. We argue that such visual auditing largely overlooks a concealed copyright infringement, where one constructs a disguise that looks drastically different from the copyrighted sample yet still induces the effect of training Latent Diffusion Models on it. Such disguises only require indirect access to the copyrighted material and cannot be visually distinguished, thus easily circumventing the current auditing tools. In this paper, we provide a better understanding of such disguised copyright infringement by uncovering the disguises generation algorithm, the revelation of the disguises, and importantly, how to detect them to augment the existing toolbox. Additionally, we introduce a broader notion of acknowledgment for comprehending such indirect access. Our code is available at https://github.com/watml/disguised_copyright_infringement.","url_abs":"https://arxiv.org/abs/2404.06737v4","url_pdf":"https://arxiv.org/pdf/2404.06737v4.pdf","source":{"archive":"pwc-archive (Hugging Face), CC BY-SA 4.0","snapshot":"2025-07-28","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","row_kind":"abstracts"},"code_links":[{"paper_slug":"disguised-copyright-infringement-of-latent","repo_url":"https://github.com/watml/disguised_copyright_infringement","is_official":1,"mentioned_in_paper":1,"mentioned_in_github":1,"framework":"pytorch","reach":{"status":"ok","spdx":"MIT"}}],"tasks":[],"methods":[{"method_slug":"diffusion","method_name":"Diffusion"}],"datasets_introduced":[],"methods_introduced":[],"results":[],"syntology":{"syntology_url":"https://syntology.ai/paper/2404.06737","atlas_url":"https://app.syntology.ai/?focus=2404.06737","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2404.06737"}},"developers":"https://syntology.ai/developers","read_at":"2026-09-25T09:33:49+00:00","read_at_is":"when the build read Syntology's graph, not when any sample ran","claim":"Per-sample execution status on synthesized fixtures; not a correctness claim about the paper. Samples come from repositories linked to the paper, official or community; repo_kind says which.","repos":[{"provenance":"deterministic:regex_extraction","url":"https://github.com/watml/d","reach":{"status":"gone","observed_at":"2026-09-17","how":"tree_404+repo_404"}},{"provenance":"external:paperswithcode_snapshot_2025-07-28","url":"https://github.com/watml/disguised_copyright_infringement","reach":{"status":"ok","spdx":"MIT"}}],"summary":{"ran":5,"ran_violates":2,"ran_draft_wrong":2,"unverified":1},"by_repo_kind":{"official":{"samples":10,"ran":9,"repositories":1}},"repo_kind_vocabulary":{"official":"The archive marks this repository official for the paper","named_in_paper":"The archive records that the paper mentions this repository; it is not marked official","listed":"In the archive's code links for this paper, not marked official and not recorded as mentioned in the paper","found_in_text":"Syntology found this repository in the paper's own text; whether it is the authors' implementation is not asserted","community":"Not in the archive's code links for this paper; a community repository Syntology harvested"},"n_pointer_only_for_licence":0,"samples":[{"code_sha256_prefix":"82124ed781e43e8b","entry":"createEpochData","repo":"watml/disguised_copyright_infringement","repo_kind":"official","path":"FSSAAD/utils.py","file_url":"https://github.com/watml/disguised_copyright_infringement/blob/HEAD/FSSAAD/utils.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"82124ed781e43e8b"}},{"code_sha256_prefix":"424012cb37b31172","entry":"default","repo":"watml/disguised_copyright_infringement","repo_kind":"official","path":"ldm/modules/attention.py","file_url":"https://github.com/watml/disguised_copyright_infringement/blob/HEAD/ldm/modules/attention.py","link_basis":"harvester_set","language":"python","status":"ran_violates","verification_level":1,"contract_check":"VIOLATES","metamorphic_tier":"well_formed","behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"424012cb37b31172"}},{"code_sha256_prefix":"3e9ea4498e4b8a8d","entry":"double_conv","repo":"watml/disguised_copyright_infringement","repo_kind":"official","path":"FSSAAD/rGAN.py","file_url":"https://github.com/watml/disguised_copyright_infringement/blob/HEAD/FSSAAD/rGAN.py","link_basis":"plan_row","language":"python","status":"ran_draft_wrong","verification_level":1,"contract_check":"OUTPUT_MISDECLARED","metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"3e9ea4498e4b8a8d"}},{"code_sha256_prefix":"aa5486a3650902d8","entry":"exists","repo":"watml/disguised_copyright_infringement","repo_kind":"official","path":"ldm/modules/attention.py","file_url":"https://github.com/watml/disguised_copyright_infringement/blob/HEAD/ldm/modules/attention.py","link_basis":"harvester_set","language":"python","status":"ran_violates","verification_level":1,"contract_check":"VIOLATES","metamorphic_tier":"deterministic","behaviour_fingerprint":true,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"aa5486a3650902d8"}},{"code_sha256_prefix":"9d88c63e86f77b0b","entry":"generate_k_shot_frames","repo":"watml/disguised_copyright_infringement","repo_kind":"official","path":"FSSAAD/utils.py","file_url":"https://github.com/watml/disguised_copyright_infringement/blob/HEAD/FSSAAD/utils.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"9d88c63e86f77b0b"}},{"code_sha256_prefix":"e466f56ae7a8bea6","entry":"get_clip_token_for_string","repo":"watml/disguised_copyright_infringement","repo_kind":"official","path":"merge_embeddings.py","file_url":"https://github.com/watml/disguised_copyright_infringement/blob/HEAD/merge_embeddings.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"e466f56ae7a8bea6"}},{"code_sha256_prefix":"cb1a19e61d70046b","entry":"get_placeholder_loop","repo":"watml/disguised_copyright_infringement","repo_kind":"official","path":"merge_embeddings.py","file_url":"https://github.com/watml/disguised_copyright_infringement/blob/HEAD/merge_embeddings.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"cb1a19e61d70046b"}},{"code_sha256_prefix":"6cb663ec812f1740","entry":"load_image_toTensor","repo":"watml/disguised_copyright_infringement","repo_kind":"official","path":"create_poison.py","file_url":"https://github.com/watml/disguised_copyright_infringement/blob/HEAD/create_poison.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"6cb663ec812f1740"}},{"code_sha256_prefix":"9a299fe5ae09e407","entry":"uniq","repo":"watml/disguised_copyright_infringement","repo_kind":"official","path":"ldm/modules/attention.py","file_url":"https://github.com/watml/disguised_copyright_infringement/blob/HEAD/ldm/modules/attention.py","link_basis":"harvester_set","language":"python","status":"ran_draft_wrong","verification_level":1,"contract_check":"MISDECLARED","metamorphic_tier":"deterministic","behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"9a299fe5ae09e407"}},{"code_sha256_prefix":"91610d6e2f2a67b4","entry":"get_bert_token_for_string","repo":"watml/disguised_copyright_infringement","repo_kind":"official","path":"merge_embeddings.py","file_url":"https://github.com/watml/disguised_copyright_infringement/blob/HEAD/merge_embeddings.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"91610d6e2f2a67b4"}}]},"arxiv_metadata":null,"syntology_extracted_results":null}