A Comprehensive Survey on Concept Erasure in Text-to-Image Diffusion Models
On the map: Diffusion models → Robustness, privacy and adversarial aspects
Abstract (arXiv)
Text-to-Image (T2I) models have made remarkable progress in generating high-quality, diverse visual content from natural language prompts. However, their ability to reproduce copyrighted styles, sensitive imagery, and harmful content raises significant ethical and legal concerns. Concept erasure offers a proactive alternative to external filtering by modifying T2I models to prevent the generation of undesired content. In this survey, we provide a structured overview of concept erasure, categorizing existing methods based on their optimization strategies and the architectural components they modify. We categorize concept erasure methods into fine-tuning for parameter updates, closed-form solutions for efficient edits, and inference-time interventions for content restriction without weight modification. Additionally, we explore adversarial attacks that bypass erasure techniques and discuss emerging defenses. To support further research, we consolidate key datasets, evaluation metrics, and benchmarks for assessing erasure effectiveness and model robustness. This survey serves as a comprehensive resource, offering insights into the evolving landscape of concept erasure, its challenges, and future directions.
Key facts. Cited by 9 papers in the map (data through 7 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 50 of its 53 references that are in the map. First posted on arXiv 17 Feb 2025.
Builds on
50 of 53 references.
Closest ancestors · 25
Same direction, newest first
- 2025Training-Free Safe Denoisers for Safe Use of Diffusion Models11 Feb
- 2024SAFREE: Training-Free and Adaptive Guard for Safe Text-to-Image And Video Generation16 Oct
- 2024Attacks and Defenses for Generative Diffusion Models: A Comprehensive Survey6 Aug
- 2024Reliable and Efficient Concept Erasure of Text-to-Image Diffusion Models17 Jul
- 2024Adversarial Attacks and Defenses on Text-to-Image Diffusion Models: A Survey10 Jul
- 2024R.A.C.E.: Robust Adversarial Concept Erasure for Secure Text-to-Image Diffusion Model25 May
- 2024Defensive Unlearning with Adversarial Training for Robust Concept Erasure in Diffusion Models24 May
- 2024Concept Arithmetics for Circumventing Concept Inhibition in Diffusion Models21 Apr
- 2024MACE: Mass Concept Erasure in Diffusion Models10 Mar
- 2023One-Dimensional Adapter to Rule Them All: Concepts, Diffusion Models and Erasing Applications26 Dec
- 2023Receler: Reliable Concept Erasing of Text-to-Image Diffusion Models via Lightweight Erasers29 Nov
- 2023MMA-Diffusion: MultiModal Attack on Diffusion Models29 Nov
13 more
- 2023To Generate or Not? Safety-Driven Unlearned Diffusion Models Are Still Easy To Generate Unsafe Images ... For Now18 Oct
- 2023Ring-A-Bell! How Reliable are Concept Removal Methods for Diffusion Models?16 Oct
- 2023Implicit Concept Removal of Diffusion Models9 Oct
- 2023Prompting4Debugging: Red-Teaming Text-to-Image Diffusion Models by Finding Problematic Prompts12 Sep
- 2023Unified Concept Editing in Diffusion Models25 Aug
- 2023Degeneration-Tuning: Using Scrambled Grid shield Unwanted Concepts from Stable Diffusion2 Aug
- 2023WOUAF: Weight Modulation for User Attribution and Fingerprinting in Text-to-Image Diffusion Models7 Jun
- 2023Tree-Ring Watermarks: Fingerprints for Diffusion Images that are Invisible and Robust31 May
- 2023Forget-Me-Not: Learning to Forget in Text-to-Image Diffusion Models30 Mar
- 2023The Stable Signature: Rooting Watermarks in Latent Diffusion Models27 Mar
- 2023Ablating Concepts in Text-to-Image Diffusion Models23 Mar
- 2023Erasing Concepts from Diffusion Models13 Mar
- 2022Safe Latent Diffusion: Mitigating Inappropriate Degeneration in Diffusion Models9 Nov
Other references · 25
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
- 2014Microsoft COCO: Common Objects in Contextcited by 17,498
- 2022Classifier-Free Diffusion Guidancecited by 5,717
- 2021CLIPScore: A Reference-free Evaluation Metric for Image Captioningcited by 2,388
- 2022Diffusion Art or Digital Forgery? Investigating Data Replication in Diffusion Modelscited by 418
- 2023Hard Prompts Made Easy: Gradient-Based Discrete Optimization for Prompt Tuning and Discoverycited by 329
- 2023Understanding and Mitigating Copying in Diffusion Modelscited by 205
- 2023Selective Amnesia: A Continual Learning Approach to Forgetting in Deep Generative Modelscited by 175
- 2023Editing Implicit Assumptions in Text-to-Image Diffusion Modelscited by 128
- 2023Circumventing Concept Erasure Methods For Text-to-Image Generative Modelscited by 81
- 2024Latent Guard: a Safety Framework for Text-to-image Generationcited by 68
13 more
- 2024Get What You Want, Not What You Don't: Image Content Suppression for Text-to-Image Diffusion Modelscited by 62
- 2024GuardT2I: Defending Text-to-Image Models from Adversarial Promptscited by 61
- 2024Towards Memorization-Free Diffusion Modelscited by 49
- 2023ReFACT: Updating Text-to-Image Models by Editing the Text Encodercited by 32
- 2024Dynamic Negative Guidance of Diffusion Modelscited by 28
- 2023Attributing Image Generative Models using Latent Fingerprintscited by 20
- 2023IMMA: Immunizing text-to-image Models against Malicious Adaptationcited by 17
- 2024MUNBa: Machine Unlearning via Nash Bargainingcited by 17
- 2020Decentralized Attribution of Generative Modelscited by 16
- 2024Editing Massive Concepts in Text-to-Image Diffusion Modelscited by 15
- 2023ORES: Open-vocabulary Responsible Visual Synthesiscited by 14
- 2023Safe-CLIP: Removing NSFW Concepts from Vision-and-Language Modelscited by 11
- 2024UPAM: Unified Prompt Attack in Text-to-Image Generation Models Against Both Textual Filters and Visual Checkerscited by 11
Built on by
Citing papers per year: 2025: 5; 2026: 4.
9 papers.
- 2025Erasing Concepts, Steering Generations: A Comprehensive Survey of Concept Suppressioncited by 10
- 2025Erased or Dormant? Rethinking Concept Erasure Through Reversibilitycited by 9
- 2025CRCE: Coreference-Retention Concept Erasure in Text-to-Image Diffusion Modelscited by 6
- 2025Rethinking the Vulnerability of Concept Erasure and a New Methodcited by 2
- 2025SafeEditor: Unified MLLM for Efficient Post-hoc T2I Safety Editingcited by 2
- 2026Forgetting is Competition: Rethinking Unlearning as Representation Interference in Diffusion Modelscited by 0
- 2026Whispers in the Noise: Surrogate-Guided Concept Awakening via a Multi-Agent Frameworkcited by 0
- 2026ShieldCLIP: Selective Safety Alignment for Harmful Content Mitigation in Multimodal Foundation Modelscited by 0
- 2026Specificity-Aware Diffusion Steering via Variance-Reduced Sequential Monte Carlocited by 0
- 2026Specificity-Aware Diffusion Steering via Variance-Reduced Sequential Monte Carlo30 Sep 2026
- 2026ShieldCLIP: Selective Safety Alignment for Harmful Content Mitigation in Multimodal Foundation Models30 Sep 2026
- 2026Whispers in the Noise: Surrogate-Guided Concept Awakening via a Multi-Agent Framework18 May 2026
- 2026Forgetting is Competition: Rethinking Unlearning as Representation Interference in Diffusion Models1 Mar 2026
- 2025SafeEditor: Unified MLLM for Efficient Post-hoc T2I Safety Editing28 Oct 2025
- 2025Erasing Concepts, Steering Generations: A Comprehensive Survey of Concept Suppression26 May 2025
- 2025Erased or Dormant? Rethinking Concept Erasure Through Reversibility22 May 2025
- 2025CRCE: Coreference-Retention Concept Erasure in Text-to-Image Diffusion Models18 Mar 2025
- 2025Rethinking the Vulnerability of Concept Erasure and a New Method24 Feb 2025
Similar, not cited
Close in wording, no citation either way
- 2025M-ErasureBench: A Comprehensive Multimodal Evaluation Benchmark for Concept Erasure in Diffusion Models
- 2026Erasing Thousands of Concepts: Towards Scalable and Practical Concept Erasure for Text-to-Image Diffusion Models
- 2026Localized Concept Erasure in Text-to-Image Diffusion Models via High-Level Representation Misdirection
- 2025Semantic Surgery: Zero-Shot Concept Erasure in Diffusion Models
- 2024Precise, Fast, and Low-cost Concept Erasure in Value Space: Orthogonal Complement Matters
- 2024Erasing Undesirable Concepts in Diffusion Models with Adversarial Preservation
- 2025Bi-Erasing: A Bidirectional Framework for Concept Removal in Diffusion Models
- 2025Concept Corrector: Erase concepts on the fly for text-to-image diffusion models