AIToday
Image GenerationAI Safety & AlignmentITmedia AI+Published: Nov 9, 2026, 13:00 JST

Sony AI: 14 image models leak recognizable IP at least 10% of the time

Send on LINE
Sony AI: 14 image models leak recognizable IP at least 10% of the time

3 Key Points

  1. What happened

    Sony AI and co-authors tested 14 image models, including Stable Diffusion 3 Medium and Amazon's Titan Image G2, with 1,809 prompts; all 14 produced recognizable IP at least 10% of the time, and nearly half exceeded 40%.

  2. Why it matters

    Guardrails on these models are inconsistent, so a prompt that is blocked on one service may still yield a recognizable character or logo on another, leaving rights holders with uneven protection.

Not sure about something? Ask the AI

Questions and answers are published on this page.

Summaries like this, every morning.

Context & Analysis

The study, titled "Evaluating Intellectual Property Guardrails of Generative Image Models: A Technical Report," was published in July by researchers affiliated with Sony AI and other organizations. It set out to measure not only how often image generators reproduce existing intellectual property but also how well the safety measures meant to prevent that actually work.

The test design separated named prompts from indirect ones that describe appearance without naming the character or brand. That distinction matters: top-refusing models such as Amazon's and Runway's blocked about 80% of direct prompts, but refusal rates fell when names were withheld. The results also varied by IP category — commercial logos were rarely blocked, while superhero and villain characters drew stricter filtering. Separately, although real famous people had the second-lowest refusal rate, images that were actually recognizable as the person were the least likely to appear across all categories.

The findings suggest that current guardrails are not a uniform shield. The body does not say how the researchers propose to close these gaps, so it remains an open question how providers might respond.

FAQ
Which models were tested?
The study covered 3 open-weight models (Stable Diffusion 3 Medium, FLUX.1-dev, PixArt-Sigma-XL-2-1024-MS) and 11 commercial models from Google, OpenAI, Amazon, Runway and Stability AI. Examples include Imagen 3, DALL·E 3 and Titan Image G2.
How did the open-weight models compare with commercial ones?
The three open-weight models showed a 0% refusal rate, suggesting they have no built-in IP blocking by default. All 11 commercial models refused some requests, but frequency ranged from about 1% to about 50%.
Did hiding the character name in a prompt help?
Yes, refusal rates dropped when prompts described appearance instead of naming the IP. Even so, indirect prompts still generated recognizable IP about 27–28% of the time on average.
Send on LINE

AI news that matters for your work, delivered every morning.

Pick your industry and the AI tools you use, and get news related to your work every day.

Free · 30 seconds with Google · unsubscribe anytimeWhat is AIToday? →

Ask AI

Ask AI anything about this article. The AI reads this article, earlier AIToday articles, and Wikipedia, and cites its sources. Q&As are published on this page for other readers too.

Questions and answers are published on this page.

Related Articles

Next articleJensen Huang: every nation must own its AI production