mlsanityData to 7 Oct 2026

A Comprehensive Survey on Concept Erasure in Text-to-Image Diffusion Models

arXiv 2502.14896 ↗First posted 17 Feb 2025cs.CV cs.AIcited by 9

On the map: Diffusion models → Robustness, privacy and adversarial aspects

Abstract (arXiv)

Text-to-Image (T2I) models have made remarkable progress in generating high-quality, diverse visual content from natural language prompts. However, their ability to reproduce copyrighted styles, sensitive imagery, and harmful content raises significant ethical and legal concerns. Concept erasure offers a proactive alternative to external filtering by modifying T2I models to prevent the generation of undesired content. In this survey, we provide a structured overview of concept erasure, categorizing existing methods based on their optimization strategies and the architectural components they modify. We categorize concept erasure methods into fine-tuning for parameter updates, closed-form solutions for efficient edits, and inference-time interventions for content restriction without weight modification. Additionally, we explore adversarial attacks that bypass erasure techniques and discuss emerging defenses. To support further research, we consolidate key datasets, evaluation metrics, and benchmarks for assessing erasure effectiveness and model robustness. This survey serves as a comprehensive resource, offering insights into the evolving landscape of concept erasure, its challenges, and future directions.

Key facts. Cited by 9 papers in the map (data through 7 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 50 of its 53 references that are in the map. First posted on arXiv 17 Feb 2025.

Builds on

50 of 53 references.

Closest ancestors · 25

Same direction, newest first

  1. 2025Training-Free Safe Denoisers for Safe Use of Diffusion Models11 Feb
  2. 2024SAFREE: Training-Free and Adaptive Guard for Safe Text-to-Image And Video Generation16 Oct
  3. 2024Attacks and Defenses for Generative Diffusion Models: A Comprehensive Survey6 Aug
  4. 2024Reliable and Efficient Concept Erasure of Text-to-Image Diffusion Models17 Jul
  5. 2024Adversarial Attacks and Defenses on Text-to-Image Diffusion Models: A Survey10 Jul
  6. 2024R.A.C.E.: Robust Adversarial Concept Erasure for Secure Text-to-Image Diffusion Model25 May
  7. 2024Defensive Unlearning with Adversarial Training for Robust Concept Erasure in Diffusion Models24 May
  8. 2024Concept Arithmetics for Circumventing Concept Inhibition in Diffusion Models21 Apr
  9. 2024MACE: Mass Concept Erasure in Diffusion Models10 Mar
  10. 2023One-Dimensional Adapter to Rule Them All: Concepts, Diffusion Models and Erasing Applications26 Dec
  11. 2023Receler: Reliable Concept Erasing of Text-to-Image Diffusion Models via Lightweight Erasers29 Nov
  12. 2023MMA-Diffusion: MultiModal Attack on Diffusion Models29 Nov
13 more
  1. 2023To Generate or Not? Safety-Driven Unlearned Diffusion Models Are Still Easy To Generate Unsafe Images ... For Now18 Oct
  2. 2023Ring-A-Bell! How Reliable are Concept Removal Methods for Diffusion Models?16 Oct
  3. 2023Implicit Concept Removal of Diffusion Models9 Oct
  4. 2023Prompting4Debugging: Red-Teaming Text-to-Image Diffusion Models by Finding Problematic Prompts12 Sep
  5. 2023Unified Concept Editing in Diffusion Models25 Aug
  6. 2023Degeneration-Tuning: Using Scrambled Grid shield Unwanted Concepts from Stable Diffusion2 Aug
  7. 2023WOUAF: Weight Modulation for User Attribution and Fingerprinting in Text-to-Image Diffusion Models7 Jun
  8. 2023Tree-Ring Watermarks: Fingerprints for Diffusion Images that are Invisible and Robust31 May
  9. 2023Forget-Me-Not: Learning to Forget in Text-to-Image Diffusion Models30 Mar
  10. 2023The Stable Signature: Rooting Watermarks in Latent Diffusion Models27 Mar
  11. 2023Ablating Concepts in Text-to-Image Diffusion Models23 Mar
  12. 2023Erasing Concepts from Diffusion Models13 Mar
  13. 2022Safe Latent Diffusion: Mitigating Inappropriate Degeneration in Diffusion Models9 Nov

Other references · 25

  1. 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
  2. 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
  3. 2014Microsoft COCO: Common Objects in Contextcited by 17,498
  4. 2022Classifier-Free Diffusion Guidancecited by 5,717
  5. 2021CLIPScore: A Reference-free Evaluation Metric for Image Captioningcited by 2,388
  6. 2022Diffusion Art or Digital Forgery? Investigating Data Replication in Diffusion Modelscited by 418
  7. 2023Hard Prompts Made Easy: Gradient-Based Discrete Optimization for Prompt Tuning and Discoverycited by 329
  8. 2023Understanding and Mitigating Copying in Diffusion Modelscited by 205
  9. 2023Selective Amnesia: A Continual Learning Approach to Forgetting in Deep Generative Modelscited by 175
  10. 2023Editing Implicit Assumptions in Text-to-Image Diffusion Modelscited by 128
  11. 2023Circumventing Concept Erasure Methods For Text-to-Image Generative Modelscited by 81
  12. 2024Latent Guard: a Safety Framework for Text-to-image Generationcited by 68
13 more
  1. 2024Get What You Want, Not What You Don't: Image Content Suppression for Text-to-Image Diffusion Modelscited by 62
  2. 2024GuardT2I: Defending Text-to-Image Models from Adversarial Promptscited by 61
  3. 2024Towards Memorization-Free Diffusion Modelscited by 49
  4. 2023ReFACT: Updating Text-to-Image Models by Editing the Text Encodercited by 32
  5. 2024Dynamic Negative Guidance of Diffusion Modelscited by 28
  6. 2023Attributing Image Generative Models using Latent Fingerprintscited by 20
  7. 2023IMMA: Immunizing text-to-image Models against Malicious Adaptationcited by 17
  8. 2024MUNBa: Machine Unlearning via Nash Bargainingcited by 17
  9. 2020Decentralized Attribution of Generative Modelscited by 16
  10. 2024Editing Massive Concepts in Text-to-Image Diffusion Modelscited by 15
  11. 2023ORES: Open-vocabulary Responsible Visual Synthesiscited by 14
  12. 2023Safe-CLIP: Removing NSFW Concepts from Vision-and-Language Modelscited by 11
  13. 2024UPAM: Unified Prompt Attack in Text-to-Image Generation Models Against Both Textual Filters and Visual Checkerscited by 11

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2025: 5; 2026: 4.

9 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2025M-ErasureBench: A Comprehensive Multimodal Evaluation Benchmark for Concept Erasure in Diffusion Models
  2. 2026Erasing Thousands of Concepts: Towards Scalable and Practical Concept Erasure for Text-to-Image Diffusion Models
  3. 2026Localized Concept Erasure in Text-to-Image Diffusion Models via High-Level Representation Misdirection
  4. 2025Semantic Surgery: Zero-Shot Concept Erasure in Diffusion Models
  5. 2024Precise, Fast, and Low-cost Concept Erasure in Value Space: Orthogonal Complement Matters
  6. 2024Erasing Undesirable Concepts in Diffusion Models with Adversarial Preservation
  7. 2025Bi-Erasing: A Bidirectional Framework for Concept Removal in Diffusion Models
  8. 2025Concept Corrector: Erase concepts on the fly for text-to-image diffusion models