Growth Inhibitors for Suppressing Inappropriate Image Concepts in Diffusion Models
On the map: Diffusion models → Robustness, privacy and adversarial aspects
Abstract (arXiv)
Despite their remarkable image generation capabilities, text-to-image diffusion models inadvertently learn inappropriate concepts from vast and unfiltered training data, which leads to various ethical and business risks. Specifically, model-generated images may exhibit not safe for work (NSFW) content and style copyright infringements. The prompts that result in these problems often do not include explicit unsafe words; instead, they contain obscure and associative terms, which are referred to as implicit unsafe prompts. Existing approaches directly fine-tune models under textual guidance to alter the cognition of the diffusion model, thereby erasing inappropriate concepts. This not only requires concept-specific fine-tuning but may also incur catastrophic forgetting. To address these issues, we explore the representation of inappropriate concepts in the image space and guide them towards more suitable ones by injecting growth inhibitors, which are tailored based on the identified features related to inappropriate concepts during the diffusion process. Additionally, due to the varying degrees and scopes of inappropriate concepts, we train an adapter to infer the corresponding suppression scale during the injection process. Our method effectively captures the manifestation of subtle words at the image level, enabling direct and efficient erasure of target concepts without the need for fine-tuning. Through extensive experimentation, we demonstrate that our approach achieves superior erasure results with little effect on other concepts while preserving image quality and semantics.
Key facts. Cited by 10 papers in the map (data through 7 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 34 of its 39 references that are in the map. First posted on arXiv 2 Aug 2024.
Builds on
34 of 39 references.
Closest ancestors · 9
Same direction, newest first
- 2023One-Dimensional Adapter to Rule Them All: Concepts, Diffusion Models and Erasing Applications26 Dec
- 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generation19 Oct
- 2023Ring-A-Bell! How Reliable are Concept Removal Methods for Diffusion Models?16 Oct
- 2023Towards Safe Self-Distillation of Internet-Scale Text-to-Image Diffusion Models12 Jul
- 2023Ablating Concepts in Text-to-Image Diffusion Models23 Mar
- 2023Erasing Concepts from Diffusion Models13 Mar
- 2023Adversarial Example Does Good: Preventing Painting Imitation from Diffusion Models via Adversarial Examples9 Feb
- 2022Safe Latent Diffusion: Mitigating Inappropriate Degeneration in Diffusion Models9 Nov
- 2022Red-Teaming the Stable Diffusion Safety Filter3 Oct
Other references · 25
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
- 2020Denoising Diffusion Probabilistic Modelscited by 20,851
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
- 2014Microsoft COCO: Common Objects in Contextcited by 17,498
- 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,491
- 2015Deep Unsupervised Learning using Nonequilibrium Thermodynamicscited by 7,005
- 2022Photorealistic Text-to-Image Diffusion Models with Deep Language Understandingcited by 6,322
- 2023BLIP-2: Bootstrapping Language-Image Pre-training with Frozen Image Encoders and Large Language Modelscited by 6,069
- 2022Classifier-Free Diffusion Guidancecited by 5,717
- 2022LAION-5B: An open large-scale dataset for training next generation image-text modelscited by 4,131
- 2021GLIDE: Towards Photorealistic Image Generation and Editing with Text-Guided Diffusion Modelscited by 3,595
- 2022Prompt-to-Prompt Image Editing with Cross Attention Controlcited by 2,409
13 more
- 2022Reproducible scaling laws for contrastive language-image learningcited by 1,163
- 2019Machine Unlearningcited by 1,020
- 2022Diffusion Art or Digital Forgery? Investigating Data Replication in Diffusion Modelscited by 418
- 2023LLM-grounded Diffusion: Enhancing Prompt Understanding of Text-to-Image Diffusion Models with Large Language Modelscited by 242
- 2018DeepFakes: a New Threat to Face Recognition? Assessment and Detectioncited by 208
- 2023Glaze: Protecting Artists from Style Mimicry by Text-to-Image Modelscited by 200
- 2023Selective Amnesia: A Continual Learning Approach to Forgetting in Deep Generative Modelscited by 175
- 2022Improving Sample Quality of Diffusion Models Using Self-Attention Guidancecited by 151
- 2024Towards Understanding Cross and Self-Attention in Stable Diffusion for Text-Guided Image Editingcited by 134
- 2024Get What You Want, Not What You Don't: Image Content Suppression for Text-to-Image Diffusion Modelscited by 62
- 2023LLM Blueprint: Enabling Text-to-Image Generation with Complex and Detailed Promptscited by 53
- 2023SUR-adapter: Enhancing Text-to-Image Pre-trained Diffusion Models with Large Language Modelscited by 29
- 2023PromptCrafter: Crafting Text-to-Image Prompt through Mixed-Initiative Dialogue with LLMcited by 6
Built on by
Citing papers per year: 2024: 1; 2025: 7; 2026: 2.
10 papers.
- 2025Set You Straight: Auto-Steering Denoising Trajectories to Sidestep Unwanted Conceptscited by 61
- 2024Jailbreak Attacks and Defenses against Multimodal Generative Models: A Surveycited by 31
- 2025Erasing Concepts, Steering Generations: A Comprehensive Survey of Concept Suppressioncited by 10
- 2025CE-SDWV: Effective and Efficient Concept Erasure for Text-to-Image Diffusion Models via a Semantic-Driven Word Vocabularycited by 7
- 2025ACE: Attentional Concept Erasure in Diffusion Modelscited by 3
- 2025AblationBench: Evaluating Automated Planning of Ablations in Empirical AI Researchcited by 2
- 2025Comprehensive Evaluation and Analysis for NSFW Concept Erasure in Text-to-Image Diffusion Modelscited by 1
- 2026Unlearning the Unpromptable: Prompt-free Instance Unlearning in Diffusion Modelscited by 1
- 2025Comprehensive Assessment and Analysis for NSFW Content Erasure in Text-to-Image Diffusion Modelscited by 0
- 2026GGSS: Geodesic-Gated Spherical Steering for Inference-Time Debiasing of Generative Vision-Language Modelscited by 0
- 2026GGSS: Geodesic-Gated Spherical Steering for Inference-Time Debiasing of Generative Vision-Language Models26 Aug 2026
- 2026Unlearning the Unpromptable: Prompt-free Instance Unlearning in Diffusion Models11 Mar 2026
- 2025AblationBench: Evaluating Automated Planning of Ablations in Empirical AI Research9 Jul 2025
- 2025Erasing Concepts, Steering Generations: A Comprehensive Survey of Concept Suppression26 May 2025
- 2025Comprehensive Evaluation and Analysis for NSFW Concept Erasure in Text-to-Image Diffusion Models21 May 2025
- 2025Set You Straight: Auto-Steering Denoising Trajectories to Sidestep Unwanted Concepts17 Apr 2025
- 2025ACE: Attentional Concept Erasure in Diffusion Models16 Apr 2025
- 2025Comprehensive Assessment and Analysis for NSFW Content Erasure in Text-to-Image Diffusion Models18 Feb 2025
- 2025CE-SDWV: Effective and Efficient Concept Erasure for Text-to-Image Diffusion Models via a Semantic-Driven Word Vocabulary26 Jan 2025
- 2024Jailbreak Attacks and Defenses against Multimodal Generative Models: A Survey14 Nov 2024
Similar, not cited
Close in wording, no citation either way
- 2025Detect-and-Guide: Self-regulation of Diffusion Models for Safe Text-to-Image Generation via Guideline Token Optimization
- 2025Beautiful Images, Toxic Words: Understanding and Addressing Offensive Text in Generated Images
- 2024Concept Arithmetics for Circumventing Concept Inhibition in Diffusion Models
- 2025Concept Corrector: Erase concepts on the fly for text-to-image diffusion models
- 2026What Concepts Lie Within? Detecting and Suppressing Risky Content in Diffusion Transformers
- 2024Six-CD: Benchmarking Concept Removals for Benign Text-to-image Diffusion Models
- 2024Pruning for Robust Concept Erasing in Diffusion Models
- 2024MACE: Mass Concept Erasure in Diffusion Models