Skip to content
RESEARCH INDEX BREACHROAD / INTELLIGENCE NOTE

GANs, Transformers and Diffusion: Generative AI Evolves

Follow generative AI from language models and VAEs through GANs, Transformers and diffusion. Learn how each architecture works and where its risks begin.

PUBLIC RESEARCH
AUTHOR
/ Pentester (OSCP, PNPT)
PUBLISHED
11 March 2026
READING TIME
16 min read
TOPIC
History
GANs, Transformers and Diffusion: Generative AI Evolves

Generative AI did not begin with public chatbots. Computers generated text, music and images decades earlier, but deep networks, huge datasets, accelerators and new architectures finally made quality and interfaces suitable for mass adoption. The current wave combines several different families: autoregressive models, variational autoencoders, GANs, Transformers and diffusion models.

Each optimises a different problem. Understanding those differences separates fact from myth. A model is not a simple archive of copied files, but that does not mean it cannot memorise. A new statistical combination does not settle questions of dataset provenance. Fluent text is not proof of truth.

What “generative model” means

A discriminative model learns a boundary or conditional relationship, such as P(class | image). A generative model attempts to describe the data distribution or a mechanism from which new samples can be drawn. It may predict the next token, decode a latent representation, play a generator–discriminator game or reverse a noising process.

A “new sample” is not automatically legally original or factually correct. It is the result of a statistical process. A system may create a combination absent from training while also being capable, under some conditions, of reproducing fragments, amplifying stereotypes or manufacturing convincing falsehoods.

Generative AI timeline

YearTechnologyContribution
1950–1980Markov models, grammars and procedural systemsGeneration through explicit probabilities and rules
1986Multilayer networks and backpropagationLearned internal representations
2013Variational AutoencoderA structured probabilistic latent space
2014Generative Adversarial NetworksA generator learns against a discriminator
2017TransformerAttention scales sequence modelling
2020GPT-3 and DDPMScaled language and high-quality diffusion generation
2021–2022CLIP, latent diffusion and text-to-image systemsLanguage controls synthesis in compressed space

Before deep learning: rules and sequence statistics

Early generators used grammars, Markov chains, compositional procedures and hand-authored rules. A Markov chain chooses the next state from limited context. It can imitate local style but quickly loses long-range structure. Rule systems preserve form but are bounded by what their authors anticipate.

Early AI systems generated responses and decisions through explicit patterns and rules. They were not modern generative models, but demonstrated an enduring effect: people attribute understanding to a system that produces appropriately shaped language.

Statistical n-gram models predicted a word from several preceding words. They handled common local sequences while suffering from sparse data and exploding combinations. Recurrent neural networks and LSTMs replaced explicit tables with learned state, improving longer context at the cost of sequential training.

VAE: generation from a structured latent space

An autoencoder compresses input into a latent representation and reconstructs it through a decoder. A normal autoencoder does not guarantee that arbitrary points between codes produce valid samples. The Variational Autoencoder, described by Diederik Kingma and Max Welling in 2013, learns a probability distribution over the latent space.

The encoder predicts distribution parameters from which a representation is sampled. The reparameterisation trick allows gradients to pass through sampling. The objective balances reconstruction with similarity between the latent distribution and a chosen prior. New latent points can therefore be sampled and attributes can be interpolated smoothly.

VAEs trained stably and learned useful representations, although their images often appeared softer than later GAN output. They remained important, including as a component in latent-diffusion systems.

GAN: generator and discriminator in one game

In 2014 Ian Goodfellow and colleagues introduced Generative Adversarial Nets. A generator maps noise to a sample. A discriminator receives real and generated samples and tries to tell them apart. The generator improves by learning to fool the discriminator. In theory, the game approaches a point where the generated and real distributions match.

GANs produced sharp, realistic imagery and led to DCGAN, conditional GANs and StyleGAN. Their recurring difficulties included:

  • instability because two networks change against each other;
  • mode collapse, where output lacks diversity;
  • difficult evaluation because realism and coverage are different qualities;
  • reproduction of dataset bias and missing representation.

Synthetic faces brought deepfakes into public view. The security risk is not image quality alone. An attack combines synthetic media with context, urgency and a compromised channel. Defending against deepfake-enabled fraud therefore requires verification procedures, not a detector as the only control.

Transformer: generation as next-token prediction

An autoregressive model expresses sequence probability as a product of successive predictions. It receives context, predicts a distribution for the next token, selects one and repeats. A simple objective, large corpus and scalable architecture produced systems that perform many tasks through text.

The 2017 Transformer replaced recurrence with self-attention. Parallel training and accelerator efficiency enabled larger models and datasets. GPT-3, published in 2020 with 175 billion parameters, demonstrated task adaptation from examples placed in context without updating weights for every task.

The objective is still token prediction. A model may learn facts and procedures without having a built-in guarantee of true sourcing. Plausible invented details are a natural failure for a system required to continue. Production retrieval therefore needs source controls, and LLM evaluation must separate correctness, grounding and completeness.

Diffusion: turning noise into an image

A diffusion model defines a forward process that adds noise to data until little signal remains. A network learns to reverse that process by predicting noise or clean signal. Generation starts with random noise and repeatedly denoises it.

The 2020 DDPM paper by Jonathan Ho, Ajay Jain and Pieter Abbeel demonstrated high-quality synthesis. Diffusion was often more stable to train than GANs and worked well with conditioning, but generation required many network evaluations.

Latent Diffusion Models moved the process from pixels into the compressed space of an autoencoder, cutting computation while retaining detail. Cross-attention connects text representations to generation, enabling prompt conditioning. This became a direct technical foundation of the 2022 text-to-image wave.

How text controls image generation

A text-to-image system is usually a pipeline. A text encoder creates prompt representations, a generative network synthesises or denoises an image representation, and a decoder maps the latent into pixels. Guidance increases alignment with the text condition, although excessive guidance can reduce diversity and create artefacts.

A prompt is not a deterministic program. Seed, sampler, model version, step count and other settings change the result. Reproducibility requires the entire configuration, not just the sentence. An enterprise workflow should also retain model provenance, input ownership and an audit record of who generated an asset.

Memorisation, privacy and data rights

Parameters are not an ordinary file database, yet models can memorise unusual or heavily repeated examples. Risk depends on the data, model size, training method and query strategy. “Training anonymises everything” is therefore an unsafe assumption. Personal data and secrets should not enter a corpus without authority, controls and removal processes.

The opposite claim—that every output is a copy of one file—is also inaccurate. Responsible analysis examines similarity, memorisation and dataset provenance. Enterprises need an AI model registry, dataset documentation and a process for data-subject requests.

From generator to agent: a change in risk class

A chatbot’s false answer creates information risk. An agent with email, code, payment or cloud access can turn the same model error into an action. Prompt injection in a retrieved document may manipulate a tool call. Content generated by one model can poison memory or downstream automation.

Non-human AI-agent identities therefore require least privilege, explicit approval for high-impact operations, cost limits and complete tool-call logging. A text filter is not a substitute for architecture.

Frequently asked questions

Do GANs and diffusion models work the same way?

No. A GAN trains a generator against a discriminator and normally produces a sample in one pass. A diffusion model learns to reverse noising and generates through multiple steps. Their cost and failure modes differ.

Does an LLM store complete documents?

It is not a traditional document store, but it can memorise and reproduce some fragments, especially rare or repeated ones. Training-data controls and extraction tests remain necessary.

Why do language models hallucinate?

They generate statistically likely continuations rather than inherently performing truth lookup. When evidence is missing or context is misleading, the model can construct a coherent false answer.

Which mattered more: GANs, Transformers or diffusion?

They solved different needs. GANs accelerated realistic image synthesis, Transformers dominated scalable language and multimodal modelling, and diffusion delivered high-quality controllable image generation.

Sources

Adding generative AI to a business process? Book a secure AI implementation review before the model receives production data and privileges.

SHARE / COPY