mlsanityData to 7 Oct 2026

All but One: Surgical Concept Erasing with Model Preservation in Text-to-Image Diffusion Models

arXiv 2312.12807 ↗First posted 20 Dec 2023cs.CV cs.AIcited by 33

On the map: Diffusion models → Robustness, privacy and adversarial aspects

Abstract (arXiv)

Text-to-Image models such as Stable Diffusion have shown impressive image generation synthesis, thanks to the utilization of large-scale datasets. However, these datasets may contain sexually explicit, copyrighted, or undesirable content, which allows the model to directly generate them. Given that retraining these large models on individual concept deletion requests is infeasible, fine-tuning algorithms have been developed to tackle concept erasing in diffusion models. While these algorithms yield good concept erasure, they all present one of the following issues: 1) the corrupted feature space yields synthesis of disintegrated objects, 2) the initially synthesized content undergoes a divergence in both spatial structure and semantics in the generated images, and 3) sub-optimal training updates heighten the model's susceptibility to utility harm. These issues severely degrade the original utility of generative models. In this work, we present a new approach that solves all of these challenges. We take inspiration from the concept of classifier guidance and propose a surgical update on the classifier guidance term while constraining the drift of the unconditional score term. Furthermore, our algorithm empowers the user to select an alternative to the erasing concept, allowing for more controllability. Our experimental results show that our algorithm not only erases the target concept effectively but also preserves the model's generation capability.

Key facts. Cited by 33 papers in the map (data through 7 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 27 of its 33 references that are in the map. First posted on arXiv 20 Dec 2023.

Builds on

27 of 33 references.

Closest ancestors · 4

Same direction, newest first

  1. 2023Towards Safe Self-Distillation of Internet-Scale Text-to-Image Diffusion Models12 Jul
  2. 2023Forget-Me-Not: Learning to Forget in Text-to-Image Diffusion Models30 Mar
  3. 2023Ablating Concepts in Text-to-Image Diffusion Models23 Mar
  4. 2022Red-Teaming the Stable Diffusion Safety Filter3 Oct

Other references · 23

  1. 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
  2. 2020Language Models are Few-Shot Learnerscited by 32,199
  3. 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 29,915
  4. 2020Denoising Diffusion Probabilistic Modelscited by 20,851
  5. 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
  6. 2020Denoising Diffusion Implicit Modelscited by 9,655
  7. 2020Score-Based Generative Modeling through Stochastic Differential Equationscited by 8,964
  8. 2015Deep Unsupervised Learning using Nonequilibrium Thermodynamicscited by 7,005
  9. 2022Photorealistic Text-to-Image Diffusion Models with Deep Language Understandingcited by 6,322
  10. 2017Neural Discrete Representation Learningcited by 4,650
  11. 2021Zero-Shot Text-to-Image Generationcited by 4,276
  12. 2022LAION-5B: An open large-scale dataset for training next generation image-text modelscited by 4,131
11 more
  1. 2022DreamBooth: Fine Tuning Text-to-Image Diffusion Models for Subject-Driven Generationcited by 3,286
  2. 2022Prompt-to-Prompt Image Editing with Cross Attention Controlcited by 2,409
  3. 2021CLIPScore: A Reference-free Evaluation Metric for Image Captioningcited by 2,388
  4. 2019A Survey on Bias and Fairness in Machine Learningcited by 1,911
  5. 2019Generating Diverse High-Fidelity Images with VQ-VAE-2cited by 1,376
  6. 2019Be Your Own Teacher: Improve the Performance of Convolutional Neural Networks via Self Distillationcited by 491
  7. 2022Diffusion Models already have a Semantic Latent Spacecited by 324
  8. 2023Generative Language Models and Automated Influence Operations: Emerging Threats and Potential Mitigationscited by 157
  9. 2020Countering Language Drift with Seeded Iterated Learningcited by 57
  10. 2019Countering Language Drift via Visual Groundingcited by 55
  11. 2020Compositional Visual Generation and Inference with Energy Based Modelscited by 25

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2024: 13; 2025: 13; 2026: 7.

33 papers.

Sort:

By area:

  1. 2025Set You Straight: Auto-Steering Denoising Trajectories to Sidestep Unwanted Conceptscited by 61
  2. 2024R.A.C.E.: Robust Adversarial Concept Erasure for Secure Text-to-Image Diffusion Modelcited by 56
  3. 2024UnlearnCanvas: Stylized Image Dataset for Enhanced Machine Unlearning Evaluation in Diffusion Modelscited by 47
  4. 2024Adversarial Attacks and Defenses on Text-to-Image Diffusion Models: A Surveycited by 34
  5. 2024Attacks and Defenses for Generative Diffusion Models: A Comprehensive Surveycited by 32
  6. 2024Separable Multi-Concept Erasure from Diffusion Modelscited by 25
  7. 2024SoK: Systematization and Benchmarking of Deepfake Detectors in a Unified Frameworkcited by 14
  8. 2024Espresso: Robust Concept Filtering in Text-to-Image Modelscited by 14
  9. 2024Replication in Visual Diffusion Models: A Survey and Outlookcited by 11
  10. 2025Erasing Concepts, Steering Generations: A Comprehensive Survey of Concept Suppressioncited by 10
  11. 2025Continual Unlearning for Text-to-Image Diffusion Models: A Regularization Perspectivecited by 9
  12. 2024Disrupting Diffusion-based Inpainters with Semantic Digressioncited by 8
21 more
  1. 2024Not Just Text: Uncovering Vision Modality Typographic Threats in Image Generation Modelscited by 7
  2. 2024AdvAnchor: Enhancing Diffusion Model Unlearning with Adversarial Anchorscited by 7
  3. 2025CE-SDWV: Effective and Efficient Concept Erasure for Text-to-Image Diffusion Models via a Semantic-Driven Word Vocabularycited by 7
  4. 2025Concept Steerers: Leveraging K-Sparse Autoencoders for Test-Time Controllable Generationscited by 6
  5. 2024UGAD: Universal Generative AI Detector utilizing Frequency Fingerprintscited by 5
  6. 2025SpecXNet: A Dual-Domain Convolutional Network for Robust Deepfake Detectioncited by 5
  7. 2025Fairness and Robustness in Machine Unlearningcited by 4
  8. 2025ACE: Attentional Concept Erasure in Diffusion Modelscited by 3
  9. 2026OrthoEraser: Coupled-Neuron Orthogonal Projection for Concept Erasurecited by 3
  10. 2025Seeing Through the Blur: Unlocking Defocus Maps for Deepfake Detectioncited by 2
  11. 2026Selective Fine-Tuning for Targeted and Robust Concept Unlearningcited by 2
  12. 2025Beyond Fixed Anchors: Precisely Erasing Concepts with Sibling Exclusive Counterpartscited by 1
  13. 2025Rethinking Robust Adversarial Concept Erasure in Diffusion Modelscited by 1
  14. 2024Opt-In Art: Learning Art Styles Only from Few Examplescited by 0
  15. 2025Towards SFW sampling for diffusion models via external conditioningcited by 0
  16. 2025Fitting Image Diffusion Models on Video Datasetscited by 0
  17. 2026Forgetting is Competition: Rethinking Unlearning as Representation Interference in Diffusion Modelscited by 0
  18. 2026Efficient Unlearning through Maximizing Relearning Convergence Delaycited by 0
  19. 2026CoreUnlearn: Rethinking Concept Unlearning through Disentangled Component-Level Erasure in Text-guided Diffusion Modelscited by 0
  20. 2026SACE: Concept Erasure at the Semantic Singularity in Visual Autoregressive Modelscited by 0
  21. 2026AutoAnchor: Stable Diffusion Unlearning Using Cross-Attention as a Manifold Surrogatecited by 0

Similar, not cited

Close in wording, no citation either way

  1. 2025Semantic Surgery: Zero-Shot Concept Erasure in Diffusion Models
  2. 2025Concept Corrector: Erase concepts on the fly for text-to-image diffusion models
  3. 2025Localized Concept Erasure for Text-to-Image Diffusion Models Using Training-Free Gated Low-Rank Adaptation
  4. 2026Erasing Without Collateral Damage: Precise Concept Removal in Diffusion Models
  5. 2026EraseSAE: Surgical Concept Erasure in Text-to-Video Diffusion Models via Sparse Autoencoders
  6. 2024Erasing Concepts from Text-to-Image Diffusion Models with Few-shot Unlearning
  7. 2026To Erase, or Not to Erase: Robust Training-Free Concept Erasure with Preservation aware Adaptive Ranked Subspace Expansion
  8. 2024Reliable and Efficient Concept Erasure of Text-to-Image Diffusion Models