SafeCtrl: Region-Aware Safety Control for Text-to-Image Diffusion via Detect-Then-Suppress

arXiv cs.CV / 4/7/2026

💬 OpinionSignals & Early TrendsIdeas & Deep AnalysisModels & Research

Key Points

  • The paper proposes SafeCtrl, a region-aware safety control framework for text-to-image diffusion models that targets visually harmful outputs (e.g., sexual content, violence, and horror).
  • SafeCtrl uses a Detect-Then-Suppress pipeline: an attention-guided Detect module localizes risk regions, followed by a Suppress module that neutralizes harmful semantics only inside those regions.
  • The Suppress module is optimized with image-level Direct Preference Optimization (DPO) to better preserve context and fidelity compared with global safety interventions like input filtering or concept erasure.
  • Experiments across multiple risk categories show improved safety–fidelity trade-offs relative to prior state-of-the-art methods.
  • The approach is reported to be more robust to adversarial prompt attacks, suggesting stronger resilience for responsible deployment.

Abstract

The widespread deployment of text-to-image diffusion models is significantly challenged by the generation of visually harmful content, such as sexually explicit content, violence, and horror imagery. Common safety interventions, ranging from input filtering to model concept erasure, often suffer from two critical limitations: (1) a severe trade-off between safety and context preservation, where removing unsafe concepts degrades the fidelity of the safe content, and (2) vulnerability to adversarial attacks, where safety mechanisms are easily bypassed. To address these challenges, we propose SafeCtrl, a Region-Aware safety control framework operating on a Detect-Then-Suppress paradigm. Unlike global safety interventions, SafeCtrl first employs an attention-guided Detect module to precisely localize specific risk regions. Subsequently, a localized Suppress module, optimized via image-level Direct Preference Optimization (DPO), neutralizes harmful semantics only within the detected areas, effectively transforming unsafe objects into safe alternatives while leaving the surrounding context intact. Extensive experiments across multiple risk categories demonstrate that SafeCtrl achieves a superior trade-off between safety and fidelity compared to state-of-the-art methods. Crucially, our approach exhibits improved resilience against adversarial prompt attacks, offering a precise and robust solution for responsible generation.