Erasing Concepts from Text-to-Image Diffusion Models with Few-shot Unlearning
On the map: Diffusion models → Robustness, privacy and adversarial aspects
also in 1 more
Abstract (arXiv)
Generating images from text has become easier because of the scaling of diffusion models and advancements in the field of vision and language. These models are trained using vast amounts of data from the Internet. Hence, they often contain undesirable content such as copyrighted material. As it is challenging to remove such data and retrain the models, methods for erasing specific concepts from pre-trained models have been investigated. We propose a novel concept-erasure method that updates the text encoder using few-shot unlearning in which a few real images are used. The discussion regarding the generated images after erasing a concept has been lacking. While there are methods for specifying the transition destination for concepts, the validity of the specified concepts is unclear. Our method implicitly achieves this by transitioning to the latent concepts inherent in the model or the images. Our method can erase a concept within 10 s, making concept erasure more accessible than ever before. Implicitly transitioning to related concepts leads to more natural concept erasure. We applied the proposed method to various concepts and confirmed that concept erasure can be achieved tens to hundreds of times faster than with current methods. By varying the parameters to be updated, we obtained results suggesting that, like previous research, knowledge is primarily accumulated in the feed-forward networks of the text encoder. Our code is available at urlhttps://github.com/fmp453/few-shot-erasing
Key facts. Cited by 29 papers in the map (data through 7 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 57 of its 72 references that are in the map. First posted on arXiv 12 May 2024.
Builds on
57 of 72 references.
Closest ancestors · 11
Same direction, newest first
- 2024MACE: Mass Concept Erasure in Diffusion Models10 Mar
- 2024Separable Multi-Concept Erasure from Diffusion Models3 Feb
- 2023One-Dimensional Adapter to Rule Them All: Concepts, Diffusion Models and Erasing Applications26 Dec
- 2023Receler: Reliable Concept Erasing of Text-to-Image Diffusion Models via Lightweight Erasers29 Nov
- 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generation19 Oct
- 2023Unified Concept Editing in Diffusion Models25 Aug
- 2023Towards Safe Self-Distillation of Internet-Scale Text-to-Image Diffusion Models12 Jul
- 2023Forget-Me-Not: Learning to Forget in Text-to-Image Diffusion Models30 Mar
- 2023Ablating Concepts in Text-to-Image Diffusion Models23 Mar
- 2023Erasing Concepts from Diffusion Models13 Mar
- 2022Safe Latent Diffusion: Mitigating Inappropriate Degeneration in Diffusion Models9 Nov
Other references · 46
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
- 2020Denoising Diffusion Probabilistic Modelscited by 20,851
- 2015U-Net: Convolutional Networks for Biomedical Image Segmentationcited by 19,604
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
- 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,491
- 2018The Unreasonable Effectiveness of Deep Features as a Perceptual Metriccited by 11,029
- 2020Denoising Diffusion Implicit Modelscited by 9,655
- 2021Diffusion Models Beat GANs on Image Synthesiscited by 8,185
- 2015Deep Unsupervised Learning using Nonequilibrium Thermodynamicscited by 7,005
- 2022Hierarchical Text-Conditional Image Generation with CLIP Latentscited by 6,539
- 2022Photorealistic Text-to-Image Diffusion Models with Deep Language Understandingcited by 6,322
- 2022Classifier-Free Diffusion Guidancecited by 5,717
34 more
- 2023SDXL: Improving Latent Diffusion Models for High-Resolution Image Synthesiscited by 4,290
- 2022LAION-5B: An open large-scale dataset for training next generation image-text modelscited by 4,131
- 2024Scaling Rectified Flow Transformers for High-Resolution Image Synthesiscited by 4,094
- 2019Analyzing and Improving the Image Quality of StyleGANcited by 3,580
- 2022DreamBooth: Fine Tuning Text-to-Image Diffusion Models for Subject-Driven Generationcited by 3,286
- 2018Large Scale GAN Training for High Fidelity Natural Image Synthesiscited by 2,609
- 2022Locating and Editing Factual Associations in GPTcited by 2,609
- 2021CLIPScore: A Reference-free Evaluation Metric for Image Captioningcited by 2,388
- 2022An Image is Worth One Word: Personalizing Text-to-Image Generation using Textual Inversioncited by 2,231
- 2020Transformer Feed-Forward Layers Are Key-Value Memoriescited by 1,307
- 2021Cascaded Diffusion Models for High Fidelity Image Generationcited by 1,155
- 2022Editing Models with Task Arithmeticcited by 1,076
- 2022Pseudo Numerical Methods for Diffusion Models on Manifoldscited by 695
- 2021Knowledge Neurons in Pretrained Transformerscited by 590
- 2022Fast Sampling of Diffusion Models with Exponential Integratorcited by 526
- 2022Knowledge Unlearning for Mitigating Privacy Risks in Language Modelscited by 424
- 2023ELITE: Encoding Visual Concepts into Textual Embeddings for Customized Text-to-Image Generationcited by 414
- 2023EVA-02: A Visual Representation for Neon Genesiscited by 377
- 2023Rethinking FID: Towards a Better Evaluation Metric for Image Generationcited by 303
- 2023Emu: Enhancing Image Generation Models Using Photogenic Needles in a Haystackcited by 278
- 2021Unrolling SGD: Understanding Factors Influencing Machine Unlearningcited by 274
- 2023Subject-driven Text-to-Image Generation via Apprenticeship Learningcited by 210
- 2023Model Sparsity Can Simplify Machine Unlearningcited by 206
- 2020fastai: A Layered API for Deep Learningcited by 183
- 2023Selective Amnesia: A Continual Learning Approach to Forgetting in Deep Generative Modelscited by 175
- 2023RAPHAEL: Text-to-Image Generation via Large Mixture of Diffusion Pathscited by 141
- 2022Calibrating Factual Knowledge in Pretrained Language Modelscited by 92
- 2023Toward Verifiable and Reproducible Human Evaluation for Text-to-Image Generationcited by 66
- 2023Localizing and Editing Knowledge in Text-to-Image Generative Modelscited by 52
- 2022Kformer: Knowledge Injection in Transformer Feed-Forward Layerscited by 37
- 2024A Survey on Personalized Content Synthesis with Diffusion Modelscited by 29
- 2023Gradient-Free Textual Inversioncited by 28
- 2024TextCraftor: Your Text Encoder Can be Image Quality Controllercited by 27
- 2022Neural Attentive Circuitscited by 6
Built on by
Citing papers per year: 2024: 11; 2025: 11; 2026: 7.
29 papers.
Sort:
By area:
- 2025Safety at Scale: A Comprehensive Survey of Large Model and Agent Safetycited by 63
- 2025Set You Straight: Auto-Steering Denoising Trajectories to Sidestep Unwanted Conceptscited by 61
- 2024Attacks and Defenses for Generative Diffusion Models: A Comprehensive Surveycited by 32
- 2024When Machine Unlearning Meets Retrieval-Augmented Generation (RAG): Keep Secret or Forget Knowledge?cited by 20
- 2024CLIPErase: Efficient Unlearning of Visual-Textual Associations in CLIPcited by 19
- 2024MU-Bench: A Multitask Multimodal Benchmark for Machine Unlearningcited by 16
- 2024Unstable Unlearning: The Hidden Risk of Concept Resurgence in Diffusion Modelscited by 14
- 2024Text Guided Image Editing with Automatic Concept Locating and Forgettingcited by 12
- 2024Unlearning or Concealment? A Critical Analysis and Evaluation Metrics for Unlearning in Diffusion Modelscited by 12
- 2025Erasing More Than Intended? How Concept Erasure Degrades the Generation of Non-Target Conceptscited by 12
- 2025VideoEraser: Concept Erasure in Text-to-Video Diffusion Modelscited by 12
- 2025Erasing Concepts, Steering Generations: A Comprehensive Survey of Concept Suppressioncited by 10
17 more
- 2025MLLMEraser: Achieving Test-Time Unlearning in Multimodal Large Language Models through Activation Steeringcited by 9
- 2024Unlearning Concepts from Text-to-Video Diffusion Modelscited by 6
- 2024How Data Inter-connectivity Shapes LLMs Unlearning: A Structural Unlearning Perspectivecited by 5
- 2026OrthoEraser: Coupled-Neuron Orthogonal Projection for Concept Erasurecited by 3
- 2024Red-Teaming Text-to-Image Models via In-Context Experience Replay and Semantic-Preserving Prompt Rewritingcited by 1
- 2025SecureT2I: No More Unauthorized Manipulation on AI Generated Images from Promptscited by 1
- 2025Beyond Fixed Anchors: Precisely Erasing Concepts with Sibling Exclusive Counterpartscited by 1
- 2025Rethinking Robust Adversarial Concept Erasure in Diffusion Modelscited by 1
- 2025Coffee: Controllable Diffusion Fine-tuningcited by 1
- 2026Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAMcited by 1
- 2026P2-DPO: Grounding Hallucination in Perceptual Processing via Calibration Direct Preference Optimizationcited by 1
- 2026Semantic Steering for Controllable Generation: Tuning-Free Concept Erasure in Multimodal Diffusion Transformerscited by 1
- 2024FameBias: Embedding Manipulation Bias Attack in Text-to-Image Modelscited by 0
- 2025Few-Shot Concept Unlearning with Low Rank Adaptationcited by 0
- 2026Why Instruction-Based Unlearning Fails in Diffusion Models?cited by 0
- 2026CoreUnlearn: Rethinking Concept Unlearning through Disentangled Component-Level Erasure in Text-guided Diffusion Modelscited by 0
- 2026A Survey on Adversarial Attacks and Defenses for Diffusion Models Across Multiple Modalitiescited by 0
- 2026A Survey on Adversarial Attacks and Defenses for Diffusion Models Across Multiple Modalities28 Aug 2026
- 2026Semantic Steering for Controllable Generation: Tuning-Free Concept Erasure in Multimodal Diffusion Transformers13 Aug 2026
- 2026P2-DPO: Grounding Hallucination in Perceptual Processing via Calibration Direct Preference Optimization2 Jun 2026
- 2026CoreUnlearn: Rethinking Concept Unlearning through Disentangled Component-Level Erasure in Text-guided Diffusion Models1 Jun 2026
- 2026Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM28 Apr 2026
- 2026Why Instruction-Based Unlearning Fails in Diffusion Models?2 Apr 2026
- 2026OrthoEraser: Coupled-Neuron Orthogonal Projection for Concept Erasure12 Mar 2026
- 2025Coffee: Controllable Diffusion Fine-tuning18 Nov 2025
- 2025Rethinking Robust Adversarial Concept Erasure in Diffusion Models31 Oct 2025
- 2025Beyond Fixed Anchors: Precisely Erasing Concepts with Sibling Exclusive Counterparts18 Oct 2025
- 2025MLLMEraser: Achieving Test-Time Unlearning in Multimodal Large Language Models through Activation Steering5 Oct 2025
- 2025VideoEraser: Concept Erasure in Text-to-Video Diffusion Models21 Aug 2025
17 more
- 2025SecureT2I: No More Unauthorized Manipulation on AI Generated Images from Prompts4 Jul 2025
- 2025Erasing Concepts, Steering Generations: A Comprehensive Survey of Concept Suppression26 May 2025
- 2025Few-Shot Concept Unlearning with Low Rank Adaptation18 May 2025
- 2025Set You Straight: Auto-Steering Denoising Trajectories to Sidestep Unwanted Concepts17 Apr 2025
- 2025Safety at Scale: A Comprehensive Survey of Large Model and Agent Safety2 Feb 2025
- 2025Erasing More Than Intended? How Concept Erasure Degrades the Generation of Non-Target Concepts16 Jan 2025
- 2024FameBias: Embedding Manipulation Bias Attack in Text-to-Image Models24 Dec 2024
- 2024Red-Teaming Text-to-Image Models via In-Context Experience Replay and Semantic-Preserving Prompt Rewriting25 Nov 2024
- 2024CLIPErase: Efficient Unlearning of Visual-Textual Associations in CLIP30 Oct 2024
- 2024When Machine Unlearning Meets Retrieval-Augmented Generation (RAG): Keep Secret or Forget Knowledge?20 Oct 2024
- 2024Unstable Unlearning: The Hidden Risk of Concept Resurgence in Diffusion Models10 Oct 2024
- 2024Unlearning or Concealment? A Critical Analysis and Evaluation Metrics for Unlearning in Diffusion Models9 Sep 2024
- 2024Attacks and Defenses for Generative Diffusion Models: A Comprehensive Survey6 Aug 2024
- 2024Unlearning Concepts from Text-to-Video Diffusion Models19 Jul 2024
- 2024How Data Inter-connectivity Shapes LLMs Unlearning: A Structural Unlearning Perspective24 Jun 2024
- 2024MU-Bench: A Multitask Multimodal Benchmark for Machine Unlearning21 Jun 2024
- 2024Text Guided Image Editing with Automatic Concept Locating and Forgetting30 May 2024
- 2024Attacks and Defenses for Generative Diffusion Models: A Comprehensive Surveycited by 32
- 2024Unstable Unlearning: The Hidden Risk of Concept Resurgence in Diffusion Modelscited by 14
- 2024Text Guided Image Editing with Automatic Concept Locating and Forgettingcited by 12
- 2024Unlearning or Concealment? A Critical Analysis and Evaluation Metrics for Unlearning in Diffusion Modelscited by 12
- 2025VideoEraser: Concept Erasure in Text-to-Video Diffusion Modelscited by 12
- 2024Unlearning Concepts from Text-to-Video Diffusion Modelscited by 6
- 2025SecureT2I: No More Unauthorized Manipulation on AI Generated Images from Promptscited by 1
- 2025Beyond Fixed Anchors: Precisely Erasing Concepts with Sibling Exclusive Counterpartscited by 1
- 2025Rethinking Robust Adversarial Concept Erasure in Diffusion Modelscited by 1
- 2025Coffee: Controllable Diffusion Fine-tuningcited by 1
- 2026Semantic Steering for Controllable Generation: Tuning-Free Concept Erasure in Multimodal Diffusion Transformerscited by 1
- 2024FameBias: Embedding Manipulation Bias Attack in Text-to-Image Modelscited by 0
12 most cited of 16 All 16 (JSON)
- 2026A Survey on Adversarial Attacks and Defenses for Diffusion Models Across Multiple Modalities28 Aug 2026
- 2026Semantic Steering for Controllable Generation: Tuning-Free Concept Erasure in Multimodal Diffusion Transformers13 Aug 2026
- 2026CoreUnlearn: Rethinking Concept Unlearning through Disentangled Component-Level Erasure in Text-guided Diffusion Models1 Jun 2026
- 2026Why Instruction-Based Unlearning Fails in Diffusion Models?2 Apr 2026
- 2025Coffee: Controllable Diffusion Fine-tuning18 Nov 2025
- 2025Rethinking Robust Adversarial Concept Erasure in Diffusion Models31 Oct 2025
- 2025Beyond Fixed Anchors: Precisely Erasing Concepts with Sibling Exclusive Counterparts18 Oct 2025
- 2025VideoEraser: Concept Erasure in Text-to-Video Diffusion Models21 Aug 2025
- 2025SecureT2I: No More Unauthorized Manipulation on AI Generated Images from Prompts4 Jul 2025
- 2025Few-Shot Concept Unlearning with Low Rank Adaptation18 May 2025
- 2024FameBias: Embedding Manipulation Bias Attack in Text-to-Image Models24 Dec 2024
- 2024Unstable Unlearning: The Hidden Risk of Concept Resurgence in Diffusion Models10 Oct 2024
12 newest of 16 All 16 (JSON)
- 2024CLIPErase: Efficient Unlearning of Visual-Textual Associations in CLIPcited by 19
- 2024MU-Bench: A Multitask Multimodal Benchmark for Machine Unlearningcited by 16
- 2024How Data Inter-connectivity Shapes LLMs Unlearning: A Structural Unlearning Perspectivecited by 5
- 2024Red-Teaming Text-to-Image Models via In-Context Experience Replay and Semantic-Preserving Prompt Rewritingcited by 1
- 2024Red-Teaming Text-to-Image Models via In-Context Experience Replay and Semantic-Preserving Prompt Rewriting25 Nov 2024
- 2024CLIPErase: Efficient Unlearning of Visual-Textual Associations in CLIP30 Oct 2024
- 2024How Data Inter-connectivity Shapes LLMs Unlearning: A Structural Unlearning Perspective24 Jun 2024
- 2024MU-Bench: A Multitask Multimodal Benchmark for Machine Unlearning21 Jun 2024
- 2025Safety at Scale: A Comprehensive Survey of Large Model and Agent Safetycited by 63
- 2025MLLMEraser: Achieving Test-Time Unlearning in Multimodal Large Language Models through Activation Steeringcited by 9
- 2026P2-DPO: Grounding Hallucination in Perceptual Processing via Calibration Direct Preference Optimizationcited by 1
- 2026P2-DPO: Grounding Hallucination in Perceptual Processing via Calibration Direct Preference Optimization2 Jun 2026
- 2025MLLMEraser: Achieving Test-Time Unlearning in Multimodal Large Language Models through Activation Steering5 Oct 2025
- 2025Safety at Scale: A Comprehensive Survey of Large Model and Agent Safety2 Feb 2025
- 2025Set You Straight: Auto-Steering Denoising Trajectories to Sidestep Unwanted Conceptscited by 61
- 2025Erasing More Than Intended? How Concept Erasure Degrades the Generation of Non-Target Conceptscited by 12
- 2025Erasing Concepts, Steering Generations: A Comprehensive Survey of Concept Suppressioncited by 10
- 2026OrthoEraser: Coupled-Neuron Orthogonal Projection for Concept Erasurecited by 3
- 2026Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAMcited by 1
- 2026Evaluation without Generation: Non-Generative Assessment of Harmful Model Specialization with Applications to CSAM28 Apr 2026
- 2026OrthoEraser: Coupled-Neuron Orthogonal Projection for Concept Erasure12 Mar 2026
- 2025Erasing Concepts, Steering Generations: A Comprehensive Survey of Concept Suppression26 May 2025
- 2025Set You Straight: Auto-Steering Denoising Trajectories to Sidestep Unwanted Concepts17 Apr 2025
- 2025Erasing More Than Intended? How Concept Erasure Degrades the Generation of Non-Target Concepts16 Jan 2025
Similar, not cited
Close in wording, no citation either way
- 2025Concept Corrector: Erase concepts on the fly for text-to-image diffusion models
- 2024Reliable and Efficient Concept Erasure of Text-to-Image Diffusion Models
- 2026Erasing Thousands of Concepts: Towards Scalable and Practical Concept Erasure for Text-to-Image Diffusion Models
- 2025Localized Concept Erasure for Text-to-Image Diffusion Models Using Training-Free Gated Low-Rank Adaptation
- 2023All but One: Surgical Concept Erasing with Model Preservation in Text-to-Image Diffusion Models
- 2025Semantic Surgery: Zero-Shot Concept Erasure in Diffusion Models
- 2026Compensation-free Machine Unlearning in Text-to-Image Diffusion Models by Eliminating the Mutual Information
- 2024Precise, Fast, and Low-cost Concept Erasure in Value Space: Orthogonal Complement Matters