Holistic Unlearning Benchmark: A Multi-Faceted Evaluation for Text-to-Image Diffusion Model Unlearning
On the map: Diffusion models → Robustness, privacy and adversarial aspects
also in 1 more
Abstract (arXiv)
As text-to-image diffusion models gain widespread commercial applications, there are increasing concerns about unethical or harmful use, including the unauthorized generation of copyrighted or sensitive content. Concept unlearning has emerged as a promising solution to these challenges by removing undesired and harmful information from the pre-trained model. However, the previous evaluations primarily focus on whether target concepts are removed while preserving image quality, neglecting the broader impacts such as unintended side effects. In this work, we propose Holistic Unlearning Benchmark (HUB), a comprehensive framework for evaluating unlearning methods across six key dimensions: faithfulness, alignment, pinpoint-ness, multilingual robustness, attack robustness, and efficiency. Our benchmark covers 33 target concepts, including 16,000 prompts per concept, spanning four categories: Celebrity, Style, Intellectual Property, and NSFW. Our investigation reveals that no single method excels across all evaluation criteria. By releasing our evaluation code and dataset, we hope to inspire further research in this area, leading to more reliable and effective unlearning methods.
Key facts. Cited by 21 papers in the map (data through 14 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 50 of its 67 references that are in the map. First posted on arXiv 8 Oct 2024.
Builds on
50 of 67 references.
Closest ancestors · 16
Same direction, newest first
- 2024Unlearning or Concealment? A Critical Analysis and Evaluation Metrics for Unlearning in Diffusion Models9 Sep
- 2024Jailbreaking Prompt Attack: A Controllable Adversarial Attack against Diffusion Models2 Apr
- 2024MACE: Mass Concept Erasure in Diffusion Models10 Mar
- 2024UnlearnCanvas: Stylized Image Dataset for Enhanced Machine Unlearning Evaluation in Diffusion Models19 Feb
- 2023Receler: Reliable Concept Erasing of Text-to-Image Diffusion Models via Lightweight Erasers29 Nov
- 2023MMA-Diffusion: MultiModal Attack on Diffusion Models29 Nov
- 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generation19 Oct
- 2023To Generate or Not? Safety-Driven Unlearned Diffusion Models Are Still Easy To Generate Unsafe Images ... For Now18 Oct
- 2023Ring-A-Bell! How Reliable are Concept Removal Methods for Diffusion Models?16 Oct
- 2023Prompting4Debugging: Red-Teaming Text-to-Image Diffusion Models by Finding Problematic Prompts12 Sep
- 2023Unified Concept Editing in Diffusion Models25 Aug
- 2023SneakyPrompt: Jailbreaking Text-to-image Generative Models20 May
4 more
Other references · 34
- 2015Deep Residual Learning for Image Recognitioncited by 52,096
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
- 2020Language Models are Few-Shot Learnerscited by 32,419
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,863
- 2014Microsoft COCO: Common Objects in Contextcited by 17,608
- 2024The Llama 3 Herd of Modelscited by 14,715
- 2022Chain-of-Thought Prompting Elicits Reasoning in Large Language Modelscited by 12,459
- 2021Diffusion Models Beat GANs on Image Synthesiscited by 8,255
- 2022Hierarchical Text-Conditional Image Generation with CLIP Latentscited by 6,585
- 2022Photorealistic Text-to-Image Diffusion Models with Deep Language Understandingcited by 6,355
- 2022Classifier-Free Diffusion Guidancecited by 5,847
- 2023Adding Conditional Control to Text-to-Image Diffusion Modelscited by 5,503
22 more
- 2016Overcoming catastrophic forgetting in neural networkscited by 4,787
- 2023SDXL: Improving Latent Diffusion Models for High-Resolution Image Synthesiscited by 4,356
- 2022LAION-5B: An open large-scale dataset for training next generation image-text modelscited by 4,152
- 2021GLIDE: Towards Photorealistic Image Generation and Editing with Text-Guided Diffusion Modelscited by 3,614
- 2017Continual Learning with Deep Generative Replaycited by 1,158
- 2023ImageReward: Learning and Evaluating Human Preferences for Text-to-Image Generationcited by 1,045
- 2023Pick-a-Pic: An Open Dataset of User Preferences for Text-to-Image Generationcited by 977
- 2022Pseudo Numerical Methods for Diffusion Models on Manifoldscited by 700
- 2022Compositional Visual Generation with Composable Diffusion Modelscited by 624
- 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 618
- 2015Holistically-Nested Edge Detectioncited by 592
- 2023UniPC: A Unified Predictor-Corrector Framework for Fast Sampling of Diffusion Modelscited by 450
- 2023TIFA: Accurate and Interpretable Text-to-Image Faithfulness Evaluation with Question Answeringcited by 428
- 2022Perception Prioritized Training of Diffusion Modelscited by 303
- 2023Selective Amnesia: A Continual Learning Approach to Forgetting in Deep Generative Modelscited by 177
- 2023Davidsonian Scene Graph: Improving Reliability in Fine-grained Evaluation for Text-to-Image Generationcited by 171
- 2022Can Machines Help Us Answering Question 16 in Datasheets, and In Turn Reflecting on Inappropriate Content?cited by 155
- 2024GPT-4V(ision) is a Human-Aligned Evaluator for Text-to-3D Generationcited by 153
- 2023What You See is What You Read? Improving Text-Image Alignment Evaluationcited by 108
- 2023Circumventing Concept Erasure Methods For Text-to-Image Generative Modelscited by 85
- 2023GPT4Vis: What Can GPT-4 Do for Zero-shot Visual Recognition?cited by 35
- 2024Automatic Jailbreaking of the Text-to-Image Generative AI Systemscited by 23
Built on by
Citing papers per year: 2025: 10; 2026: 11.
21 papers.
Sort:
By area:
- 2025A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deploymentcited by 116
- 2025Erasing Concepts, Steering Generations: A Comprehensive Survey of Concept Suppressioncited by 10
- 2026Multimodal Unlearning Across Vision, Language, Video, and Audio: Survey of Methods, Datasets, and Benchmarkscited by 7
- 2025Reference-Specific Unlearning Metrics Can Hide the Truth: A Reality Checkcited by 5
- 2025Generative Model Unlearning: A Survey through Target Events, Unlearning Operators, and Evaluation Protocolscited by 4
- 2025EMMA: Concept Erasure Benchmark with Comprehensive Semantic Metrics and Diverse Categoriescited by 4
- 2025Comprehensive Evaluation and Analysis for NSFW Concept Erasure in Text-to-Image Diffusion Modelscited by 1
- 2025Automating Evaluation of Diffusion Model Unlearning with (Vision-) Language Model World Knowledgecited by 1
- 2025Coffee: Controllable Diffusion Fine-tuningcited by 1
- 2026Critic-Guided Reinforcement Unlearning in Text-to-Image Diffusioncited by 1
- 2026No Concept Escapes the Audit: Auditing-Aware Unlearning for Verifiable Concept Erasure in Diffusion Modelscited by 1
- 2025Comprehensive Assessment and Analysis for NSFW Content Erasure in Text-to-Image Diffusion Modelscited by 0
9 more
- 2025The Persistence of Cultural Memory: Investigating Multimodal Iconicity in Diffusion Modelscited by 0
- 2026Forgetting is Competition: Rethinking Unlearning as Representation Interference in Diffusion Modelscited by 0
- 2026EDGE-Shield: Efficient Denoising-staGE Shield for Violative Content Filtering via Scalable Reference-Based Matchingcited by 0
- 2026Mosaic: Compositional Multi-Concept Erasure via Vector Field Blendingcited by 0
- 2026Concept Unlearning via Cross-Attention Activation Projection for Diffusion Modelscited by 0
- 2026CoreUnlearn: Rethinking Concept Unlearning through Disentangled Component-Level Erasure in Text-guided Diffusion Modelscited by 0
- 2026I-CARE: Analysis of interference-related phenomena in a controllable, diverse and representative unlearning setting for text-to-image modelscited by 0
- 2026AcFlow: Controlling Text-to-Image Diffusion Transformers via Learned Conditional Activation Flowcited by 0
- 2026eval-unlearn: Benchmarking unlearning in Text-to-Image Diffusion Modelscited by 0
- 2026No Concept Escapes the Audit: Auditing-Aware Unlearning for Verifiable Concept Erasure in Diffusion Models4 Oct 2026
- 2026eval-unlearn: Benchmarking unlearning in Text-to-Image Diffusion Models28 Sep 2026
- 2026AcFlow: Controlling Text-to-Image Diffusion Transformers via Learned Conditional Activation Flow9 Sep 2026
- 2026Multimodal Unlearning Across Vision, Language, Video, and Audio: Survey of Methods, Datasets, and Benchmarks8 Jul 2026
- 2026I-CARE: Analysis of interference-related phenomena in a controllable, diverse and representative unlearning setting for text-to-image models24 Jun 2026
- 2026CoreUnlearn: Rethinking Concept Unlearning through Disentangled Component-Level Erasure in Text-guided Diffusion Models1 Jun 2026
- 2026Concept Unlearning via Cross-Attention Activation Projection for Diffusion Models25 May 2026
- 2026Mosaic: Compositional Multi-Concept Erasure via Vector Field Blending25 May 2026
- 2026EDGE-Shield: Efficient Denoising-staGE Shield for Violative Content Filtering via Scalable Reference-Based Matching4 Apr 2026
- 2026Forgetting is Competition: Rethinking Unlearning as Representation Interference in Diffusion Models1 Mar 2026
- 2026Critic-Guided Reinforcement Unlearning in Text-to-Image Diffusion6 Jan 2026
- 2025EMMA: Concept Erasure Benchmark with Comprehensive Semantic Metrics and Diverse Categories19 Dec 2025
9 more
- 2025Coffee: Controllable Diffusion Fine-tuning18 Nov 2025
- 2025The Persistence of Cultural Memory: Investigating Multimodal Iconicity in Diffusion Models14 Nov 2025
- 2025Reference-Specific Unlearning Metrics Can Hide the Truth: A Reality Check14 Oct 2025
- 2025Generative Model Unlearning: A Survey through Target Events, Unlearning Operators, and Evaluation Protocols26 Jul 2025
- 2025Automating Evaluation of Diffusion Model Unlearning with (Vision-) Language Model World Knowledge9 Jul 2025
- 2025Erasing Concepts, Steering Generations: A Comprehensive Survey of Concept Suppression26 May 2025
- 2025Comprehensive Evaluation and Analysis for NSFW Concept Erasure in Text-to-Image Diffusion Models21 May 2025
- 2025A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deployment22 Apr 2025
- 2025Comprehensive Assessment and Analysis for NSFW Content Erasure in Text-to-Image Diffusion Models18 Feb 2025
- 2025Comprehensive Evaluation and Analysis for NSFW Concept Erasure in Text-to-Image Diffusion Modelscited by 1
- 2025Automating Evaluation of Diffusion Model Unlearning with (Vision-) Language Model World Knowledgecited by 1
- 2025Coffee: Controllable Diffusion Fine-tuningcited by 1
- 2026Critic-Guided Reinforcement Unlearning in Text-to-Image Diffusioncited by 1
- 2026No Concept Escapes the Audit: Auditing-Aware Unlearning for Verifiable Concept Erasure in Diffusion Modelscited by 1
- 2025Comprehensive Assessment and Analysis for NSFW Content Erasure in Text-to-Image Diffusion Modelscited by 0
- 2025The Persistence of Cultural Memory: Investigating Multimodal Iconicity in Diffusion Modelscited by 0
- 2026Forgetting is Competition: Rethinking Unlearning as Representation Interference in Diffusion Modelscited by 0
- 2026Concept Unlearning via Cross-Attention Activation Projection for Diffusion Modelscited by 0
- 2026CoreUnlearn: Rethinking Concept Unlearning through Disentangled Component-Level Erasure in Text-guided Diffusion Modelscited by 0
- 2026AcFlow: Controlling Text-to-Image Diffusion Transformers via Learned Conditional Activation Flowcited by 0
- 2026eval-unlearn: Benchmarking unlearning in Text-to-Image Diffusion Modelscited by 0
- 2026No Concept Escapes the Audit: Auditing-Aware Unlearning for Verifiable Concept Erasure in Diffusion Models4 Oct 2026
- 2026eval-unlearn: Benchmarking unlearning in Text-to-Image Diffusion Models28 Sep 2026
- 2026AcFlow: Controlling Text-to-Image Diffusion Transformers via Learned Conditional Activation Flow9 Sep 2026
- 2026CoreUnlearn: Rethinking Concept Unlearning through Disentangled Component-Level Erasure in Text-guided Diffusion Models1 Jun 2026
- 2026Concept Unlearning via Cross-Attention Activation Projection for Diffusion Models25 May 2026
- 2026Forgetting is Competition: Rethinking Unlearning as Representation Interference in Diffusion Models1 Mar 2026
- 2026Critic-Guided Reinforcement Unlearning in Text-to-Image Diffusion6 Jan 2026
- 2025Coffee: Controllable Diffusion Fine-tuning18 Nov 2025
- 2025The Persistence of Cultural Memory: Investigating Multimodal Iconicity in Diffusion Models14 Nov 2025
- 2025Automating Evaluation of Diffusion Model Unlearning with (Vision-) Language Model World Knowledge9 Jul 2025
- 2025Comprehensive Evaluation and Analysis for NSFW Concept Erasure in Text-to-Image Diffusion Models21 May 2025
- 2025Comprehensive Assessment and Analysis for NSFW Content Erasure in Text-to-Image Diffusion Models18 Feb 2025
- 2026Multimodal Unlearning Across Vision, Language, Video, and Audio: Survey of Methods, Datasets, and Benchmarkscited by 7
- 2025Reference-Specific Unlearning Metrics Can Hide the Truth: A Reality Checkcited by 5
- 2025Generative Model Unlearning: A Survey through Target Events, Unlearning Operators, and Evaluation Protocolscited by 4
- 2026I-CARE: Analysis of interference-related phenomena in a controllable, diverse and representative unlearning setting for text-to-image modelscited by 0
- 2026Multimodal Unlearning Across Vision, Language, Video, and Audio: Survey of Methods, Datasets, and Benchmarks8 Jul 2026
- 2026I-CARE: Analysis of interference-related phenomena in a controllable, diverse and representative unlearning setting for text-to-image models24 Jun 2026
- 2025Reference-Specific Unlearning Metrics Can Hide the Truth: A Reality Check14 Oct 2025
- 2025Generative Model Unlearning: A Survey through Target Events, Unlearning Operators, and Evaluation Protocols26 Jul 2025
- 2025Erasing Concepts, Steering Generations: A Comprehensive Survey of Concept Suppressioncited by 10
- 2025EMMA: Concept Erasure Benchmark with Comprehensive Semantic Metrics and Diverse Categoriescited by 4
- 2026EDGE-Shield: Efficient Denoising-staGE Shield for Violative Content Filtering via Scalable Reference-Based Matchingcited by 0
- 2026Mosaic: Compositional Multi-Concept Erasure via Vector Field Blendingcited by 0
- 2026Mosaic: Compositional Multi-Concept Erasure via Vector Field Blending25 May 2026
- 2026EDGE-Shield: Efficient Denoising-staGE Shield for Violative Content Filtering via Scalable Reference-Based Matching4 Apr 2026
- 2025EMMA: Concept Erasure Benchmark with Comprehensive Semantic Metrics and Diverse Categories19 Dec 2025
- 2025Erasing Concepts, Steering Generations: A Comprehensive Survey of Concept Suppression26 May 2025
Similar, not cited
Close in wording, no citation either way
- 2026Certifying Concept Unlearning in Text-to-Image Diffusion Models
- 2024Probing Unlearned Diffusion Models: A Transferable Adversarial Attack Perspective
- 2026Unlearning the Unpromptable: Prompt-free Instance Unlearning in Diffusion Models
- 2024Unlearning Concepts from Text-to-Video Diffusion Models
- 2024Meta-Unlearning on Diffusion Models: Preventing Relearning Unlearned Concepts
- 2026Erasure or Erosion? Evaluating Compositional Degradation in Unlearned Text-To-Image Diffusion Models
- 2026A Concept is More Than a Word: Diversified Unlearning in Text-to-Image Diffusion Models
- 2024Unstable Unlearning: The Hidden Risk of Concept Resurgence in Diffusion Models