All but One: Surgical Concept Erasing with Model Preservation in Text-to-Image Diffusion Models
On the map: Diffusion models → Robustness, privacy and adversarial aspects
Abstract (arXiv)
Text-to-Image models such as Stable Diffusion have shown impressive image generation synthesis, thanks to the utilization of large-scale datasets. However, these datasets may contain sexually explicit, copyrighted, or undesirable content, which allows the model to directly generate them. Given that retraining these large models on individual concept deletion requests is infeasible, fine-tuning algorithms have been developed to tackle concept erasing in diffusion models. While these algorithms yield good concept erasure, they all present one of the following issues: 1) the corrupted feature space yields synthesis of disintegrated objects, 2) the initially synthesized content undergoes a divergence in both spatial structure and semantics in the generated images, and 3) sub-optimal training updates heighten the model's susceptibility to utility harm. These issues severely degrade the original utility of generative models. In this work, we present a new approach that solves all of these challenges. We take inspiration from the concept of classifier guidance and propose a surgical update on the classifier guidance term while constraining the drift of the unconditional score term. Furthermore, our algorithm empowers the user to select an alternative to the erasing concept, allowing for more controllability. Our experimental results show that our algorithm not only erases the target concept effectively but also preserves the model's generation capability.
Key facts. Cited by 33 papers in the map (data through 7 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 27 of its 33 references that are in the map. First posted on arXiv 20 Dec 2023.
Builds on
27 of 33 references.
Closest ancestors · 4
Same direction, newest first
- 2023Towards Safe Self-Distillation of Internet-Scale Text-to-Image Diffusion Models12 Jul
- 2023Forget-Me-Not: Learning to Forget in Text-to-Image Diffusion Models30 Mar
- 2023Ablating Concepts in Text-to-Image Diffusion Models23 Mar
- 2022Red-Teaming the Stable Diffusion Safety Filter3 Oct
Other references · 23
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
- 2020Language Models are Few-Shot Learnerscited by 32,199
- 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 29,915
- 2020Denoising Diffusion Probabilistic Modelscited by 20,851
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
- 2020Denoising Diffusion Implicit Modelscited by 9,655
- 2020Score-Based Generative Modeling through Stochastic Differential Equationscited by 8,964
- 2015Deep Unsupervised Learning using Nonequilibrium Thermodynamicscited by 7,005
- 2022Photorealistic Text-to-Image Diffusion Models with Deep Language Understandingcited by 6,322
- 2017Neural Discrete Representation Learningcited by 4,650
- 2021Zero-Shot Text-to-Image Generationcited by 4,276
- 2022LAION-5B: An open large-scale dataset for training next generation image-text modelscited by 4,131
11 more
- 2022DreamBooth: Fine Tuning Text-to-Image Diffusion Models for Subject-Driven Generationcited by 3,286
- 2022Prompt-to-Prompt Image Editing with Cross Attention Controlcited by 2,409
- 2021CLIPScore: A Reference-free Evaluation Metric for Image Captioningcited by 2,388
- 2019A Survey on Bias and Fairness in Machine Learningcited by 1,911
- 2019Generating Diverse High-Fidelity Images with VQ-VAE-2cited by 1,376
- 2019Be Your Own Teacher: Improve the Performance of Convolutional Neural Networks via Self Distillationcited by 491
- 2022Diffusion Models already have a Semantic Latent Spacecited by 324
- 2023Generative Language Models and Automated Influence Operations: Emerging Threats and Potential Mitigationscited by 157
- 2020Countering Language Drift with Seeded Iterated Learningcited by 57
- 2019Countering Language Drift via Visual Groundingcited by 55
- 2020Compositional Visual Generation and Inference with Energy Based Modelscited by 25
Built on by
Citing papers per year: 2024: 13; 2025: 13; 2026: 7.
33 papers.
Sort:
By area:
- 2025Set You Straight: Auto-Steering Denoising Trajectories to Sidestep Unwanted Conceptscited by 61
- 2024R.A.C.E.: Robust Adversarial Concept Erasure for Secure Text-to-Image Diffusion Modelcited by 56
- 2024UnlearnCanvas: Stylized Image Dataset for Enhanced Machine Unlearning Evaluation in Diffusion Modelscited by 47
- 2024Adversarial Attacks and Defenses on Text-to-Image Diffusion Models: A Surveycited by 34
- 2024Attacks and Defenses for Generative Diffusion Models: A Comprehensive Surveycited by 32
- 2024Separable Multi-Concept Erasure from Diffusion Modelscited by 25
- 2024SoK: Systematization and Benchmarking of Deepfake Detectors in a Unified Frameworkcited by 14
- 2024Espresso: Robust Concept Filtering in Text-to-Image Modelscited by 14
- 2024Replication in Visual Diffusion Models: A Survey and Outlookcited by 11
- 2025Erasing Concepts, Steering Generations: A Comprehensive Survey of Concept Suppressioncited by 10
- 2025Continual Unlearning for Text-to-Image Diffusion Models: A Regularization Perspectivecited by 9
- 2024Disrupting Diffusion-based Inpainters with Semantic Digressioncited by 8
21 more
- 2024Not Just Text: Uncovering Vision Modality Typographic Threats in Image Generation Modelscited by 7
- 2024AdvAnchor: Enhancing Diffusion Model Unlearning with Adversarial Anchorscited by 7
- 2025CE-SDWV: Effective and Efficient Concept Erasure for Text-to-Image Diffusion Models via a Semantic-Driven Word Vocabularycited by 7
- 2025Concept Steerers: Leveraging K-Sparse Autoencoders for Test-Time Controllable Generationscited by 6
- 2024UGAD: Universal Generative AI Detector utilizing Frequency Fingerprintscited by 5
- 2025SpecXNet: A Dual-Domain Convolutional Network for Robust Deepfake Detectioncited by 5
- 2025Fairness and Robustness in Machine Unlearningcited by 4
- 2025ACE: Attentional Concept Erasure in Diffusion Modelscited by 3
- 2026OrthoEraser: Coupled-Neuron Orthogonal Projection for Concept Erasurecited by 3
- 2025Seeing Through the Blur: Unlocking Defocus Maps for Deepfake Detectioncited by 2
- 2026Selective Fine-Tuning for Targeted and Robust Concept Unlearningcited by 2
- 2025Beyond Fixed Anchors: Precisely Erasing Concepts with Sibling Exclusive Counterpartscited by 1
- 2025Rethinking Robust Adversarial Concept Erasure in Diffusion Modelscited by 1
- 2024Opt-In Art: Learning Art Styles Only from Few Examplescited by 0
- 2025Towards SFW sampling for diffusion models via external conditioningcited by 0
- 2025Fitting Image Diffusion Models on Video Datasetscited by 0
- 2026Forgetting is Competition: Rethinking Unlearning as Representation Interference in Diffusion Modelscited by 0
- 2026Efficient Unlearning through Maximizing Relearning Convergence Delaycited by 0
- 2026CoreUnlearn: Rethinking Concept Unlearning through Disentangled Component-Level Erasure in Text-guided Diffusion Modelscited by 0
- 2026SACE: Concept Erasure at the Semantic Singularity in Visual Autoregressive Modelscited by 0
- 2026AutoAnchor: Stable Diffusion Unlearning Using Cross-Attention as a Manifold Surrogatecited by 0
- 2026AutoAnchor: Stable Diffusion Unlearning Using Cross-Attention as a Manifold Surrogate9 Jul 2026
- 2026SACE: Concept Erasure at the Semantic Singularity in Visual Autoregressive Models14 Jun 2026
- 2026CoreUnlearn: Rethinking Concept Unlearning through Disentangled Component-Level Erasure in Text-guided Diffusion Models1 Jun 2026
- 2026Efficient Unlearning through Maximizing Relearning Convergence Delay10 Apr 2026
- 2026OrthoEraser: Coupled-Neuron Orthogonal Projection for Concept Erasure12 Mar 2026
- 2026Forgetting is Competition: Rethinking Unlearning as Representation Interference in Diffusion Models1 Mar 2026
- 2026Selective Fine-Tuning for Targeted and Robust Concept Unlearning8 Feb 2026
- 2025Continual Unlearning for Text-to-Image Diffusion Models: A Regularization Perspective11 Nov 2025
- 2025Rethinking Robust Adversarial Concept Erasure in Diffusion Models31 Oct 2025
- 2025Beyond Fixed Anchors: Precisely Erasing Concepts with Sibling Exclusive Counterparts18 Oct 2025
- 2025Seeing Through the Blur: Unlocking Defocus Maps for Deepfake Detection27 Sep 2025
- 2025SpecXNet: A Dual-Domain Convolutional Network for Robust Deepfake Detection26 Sep 2025
21 more
- 2025Fitting Image Diffusion Models on Video Datasets4 Sep 2025
- 2025Erasing Concepts, Steering Generations: A Comprehensive Survey of Concept Suppression26 May 2025
- 2025Towards SFW sampling for diffusion models via external conditioning12 May 2025
- 2025Fairness and Robustness in Machine Unlearning18 Apr 2025
- 2025Set You Straight: Auto-Steering Denoising Trajectories to Sidestep Unwanted Concepts17 Apr 2025
- 2025ACE: Attentional Concept Erasure in Diffusion Models16 Apr 2025
- 2025Concept Steerers: Leveraging K-Sparse Autoencoders for Test-Time Controllable Generations31 Jan 2025
- 2025CE-SDWV: Effective and Efficient Concept Erasure for Text-to-Image Diffusion Models via a Semantic-Driven Word Vocabulary26 Jan 2025
- 2024AdvAnchor: Enhancing Diffusion Model Unlearning with Adversarial Anchors28 Dec 2024
- 2024Not Just Text: Uncovering Vision Modality Typographic Threats in Image Generation Models7 Dec 2024
- 2024Opt-In Art: Learning Art Styles Only from Few Examples29 Nov 2024
- 2024UGAD: Universal Generative AI Detector utilizing Frequency Fingerprints12 Sep 2024
- 2024Attacks and Defenses for Generative Diffusion Models: A Comprehensive Survey6 Aug 2024
- 2024Disrupting Diffusion-based Inpainters with Semantic Digression14 Jul 2024
- 2024Adversarial Attacks and Defenses on Text-to-Image Diffusion Models: A Survey10 Jul 2024
- 2024Replication in Visual Diffusion Models: A Survey and Outlook7 Jul 2024
- 2024R.A.C.E.: Robust Adversarial Concept Erasure for Secure Text-to-Image Diffusion Model25 May 2024
- 2024Espresso: Robust Concept Filtering in Text-to-Image Models30 Apr 2024
- 2024UnlearnCanvas: Stylized Image Dataset for Enhanced Machine Unlearning Evaluation in Diffusion Models19 Feb 2024
- 2024Separable Multi-Concept Erasure from Diffusion Models3 Feb 2024
- 2024SoK: Systematization and Benchmarking of Deepfake Detectors in a Unified Framework9 Jan 2024
- 2024R.A.C.E.: Robust Adversarial Concept Erasure for Secure Text-to-Image Diffusion Modelcited by 56
- 2024UnlearnCanvas: Stylized Image Dataset for Enhanced Machine Unlearning Evaluation in Diffusion Modelscited by 47
- 2024Adversarial Attacks and Defenses on Text-to-Image Diffusion Models: A Surveycited by 34
- 2024Attacks and Defenses for Generative Diffusion Models: A Comprehensive Surveycited by 32
- 2024Separable Multi-Concept Erasure from Diffusion Modelscited by 25
- 2024Espresso: Robust Concept Filtering in Text-to-Image Modelscited by 14
- 2024Replication in Visual Diffusion Models: A Survey and Outlookcited by 11
- 2025Continual Unlearning for Text-to-Image Diffusion Models: A Regularization Perspectivecited by 9
- 2024Disrupting Diffusion-based Inpainters with Semantic Digressioncited by 8
- 2024AdvAnchor: Enhancing Diffusion Model Unlearning with Adversarial Anchorscited by 7
- 2025CE-SDWV: Effective and Efficient Concept Erasure for Text-to-Image Diffusion Models via a Semantic-Driven Word Vocabularycited by 7
- 2025SpecXNet: A Dual-Domain Convolutional Network for Robust Deepfake Detectioncited by 5
12 most cited of 21 All 21 (JSON)
- 2026AutoAnchor: Stable Diffusion Unlearning Using Cross-Attention as a Manifold Surrogate9 Jul 2026
- 2026CoreUnlearn: Rethinking Concept Unlearning through Disentangled Component-Level Erasure in Text-guided Diffusion Models1 Jun 2026
- 2026Forgetting is Competition: Rethinking Unlearning as Representation Interference in Diffusion Models1 Mar 2026
- 2026Selective Fine-Tuning for Targeted and Robust Concept Unlearning8 Feb 2026
- 2025Continual Unlearning for Text-to-Image Diffusion Models: A Regularization Perspective11 Nov 2025
- 2025Rethinking Robust Adversarial Concept Erasure in Diffusion Models31 Oct 2025
- 2025Beyond Fixed Anchors: Precisely Erasing Concepts with Sibling Exclusive Counterparts18 Oct 2025
- 2025SpecXNet: A Dual-Domain Convolutional Network for Robust Deepfake Detection26 Sep 2025
- 2025Fitting Image Diffusion Models on Video Datasets4 Sep 2025
- 2025Towards SFW sampling for diffusion models via external conditioning12 May 2025
- 2025ACE: Attentional Concept Erasure in Diffusion Models16 Apr 2025
- 2025CE-SDWV: Effective and Efficient Concept Erasure for Text-to-Image Diffusion Models via a Semantic-Driven Word Vocabulary26 Jan 2025
12 newest of 21 All 21 (JSON)
- 2026Efficient Unlearning through Maximizing Relearning Convergence Delay10 Apr 2026
- 2025Fairness and Robustness in Machine Unlearning18 Apr 2025
- 2025Set You Straight: Auto-Steering Denoising Trajectories to Sidestep Unwanted Conceptscited by 61
- 2024SoK: Systematization and Benchmarking of Deepfake Detectors in a Unified Frameworkcited by 14
- 2025Erasing Concepts, Steering Generations: A Comprehensive Survey of Concept Suppressioncited by 10
- 2024Not Just Text: Uncovering Vision Modality Typographic Threats in Image Generation Modelscited by 7
- 2025Concept Steerers: Leveraging K-Sparse Autoencoders for Test-Time Controllable Generationscited by 6
- 2024UGAD: Universal Generative AI Detector utilizing Frequency Fingerprintscited by 5
- 2026OrthoEraser: Coupled-Neuron Orthogonal Projection for Concept Erasurecited by 3
- 2025Seeing Through the Blur: Unlocking Defocus Maps for Deepfake Detectioncited by 2
- 2024Opt-In Art: Learning Art Styles Only from Few Examplescited by 0
- 2026OrthoEraser: Coupled-Neuron Orthogonal Projection for Concept Erasure12 Mar 2026
- 2025Seeing Through the Blur: Unlocking Defocus Maps for Deepfake Detection27 Sep 2025
- 2025Erasing Concepts, Steering Generations: A Comprehensive Survey of Concept Suppression26 May 2025
- 2025Set You Straight: Auto-Steering Denoising Trajectories to Sidestep Unwanted Concepts17 Apr 2025
- 2025Concept Steerers: Leveraging K-Sparse Autoencoders for Test-Time Controllable Generations31 Jan 2025
- 2024Not Just Text: Uncovering Vision Modality Typographic Threats in Image Generation Models7 Dec 2024
- 2024Opt-In Art: Learning Art Styles Only from Few Examples29 Nov 2024
- 2024UGAD: Universal Generative AI Detector utilizing Frequency Fingerprints12 Sep 2024
- 2024SoK: Systematization and Benchmarking of Deepfake Detectors in a Unified Framework9 Jan 2024
Similar, not cited
Close in wording, no citation either way
- 2025Semantic Surgery: Zero-Shot Concept Erasure in Diffusion Models
- 2025Concept Corrector: Erase concepts on the fly for text-to-image diffusion models
- 2025Localized Concept Erasure for Text-to-Image Diffusion Models Using Training-Free Gated Low-Rank Adaptation
- 2026Erasing Without Collateral Damage: Precise Concept Removal in Diffusion Models
- 2026EraseSAE: Surgical Concept Erasure in Text-to-Video Diffusion Models via Sparse Autoencoders
- 2024Erasing Concepts from Text-to-Image Diffusion Models with Few-shot Unlearning
- 2026To Erase, or Not to Erase: Robust Training-Free Concept Erasure with Preservation aware Adaptive Ranked Subspace Expansion
- 2024Reliable and Efficient Concept Erasure of Text-to-Image Diffusion Models