Sparse Autoencoder as a Zero-Shot Classifier for Concept Erasing in Text-to-Image Diffusion Models
On the map: Diffusion models → Robustness, privacy and adversarial aspects
Abstract (arXiv)
Text-to-image (T2I) diffusion models have achieved remarkable progress in generating high-quality images but also raise people's concerns about generating harmful or misleading content. While extensive approaches have been proposed to erase unwanted concepts without requiring retraining from scratch, they inadvertently degrade performance on normal generation tasks. In this work, we propose Interpret then Deactivate (ItD), a novel framework to enable precise concept removal in T2I diffusion models while preserving overall performance. ItD first employs a sparse autoencoder (SAE) to interpret each concept as a combination of multiple features. By permanently deactivating the specific features associated with target concepts, we repurpose SAE as a zero-shot classifier that identifies whether the input prompt includes target concepts, allowing selective concept erasure in diffusion models. Moreover, we demonstrate that ItD can be easily extended to erase multiple concepts without requiring further training. Comprehensive experiments across celebrity identities, artistic styles, and explicit content demonstrate ItD's effectiveness in eliminating targeted concepts without interfering with normal concept generation. Additionally, ItD is also robust against adversarial prompts designed to circumvent content filters. Code is available at: https://github.com/NANSirun/Interpret-then-deactivate.
Key facts. Cited by 8 papers in the map (data through 7 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 33 of its 44 references that are in the map. First posted on arXiv 12 Mar 2025.
Builds on
33 of 44 references.
Closest ancestors · 18
Same direction, newest first
- 2025Fantastic Targets for Concept Erasure in Diffusion Models and Where To Find Them31 Jan
- 2024Boosting Alignment for Post-Unlearning Text-to-Image Generative Models9 Dec
- 2024Erasing Undesirable Concepts in Diffusion Models with Adversarial Preservation21 Oct
- 2024Defensive Unlearning with Adversarial Training for Robust Concept Erasure in Diffusion Models24 May
- 2024SafeGen: Mitigating Sexually Explicit Content Generation in Text-to-Image Models10 Apr
- 2024MACE: Mass Concept Erasure in Diffusion Models10 Mar
- 2024UnlearnCanvas: Stylized Image Dataset for Enhanced Machine Unlearning Evaluation in Diffusion Models19 Feb
- 2023One-Dimensional Adapter to Rule Them All: Concepts, Diffusion Models and Erasing Applications26 Dec
- 2023Receler: Reliable Concept Erasing of Text-to-Image Diffusion Models via Lightweight Erasers29 Nov
- 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generation19 Oct
- 2023To Generate or Not? Safety-Driven Unlearned Diffusion Models Are Still Easy To Generate Unsafe Images ... For Now18 Oct
- 2023Unified Concept Editing in Diffusion Models25 Aug
6 more
- 2023SneakyPrompt: Jailbreaking Text-to-image Generative Models20 May
- 2023Forget-Me-Not: Learning to Forget in Text-to-Image Diffusion Models30 Mar
- 2023Ablating Concepts in Text-to-Image Diffusion Models23 Mar
- 2023Erasing Concepts from Diffusion Models13 Mar
- 2022Safe Latent Diffusion: Mitigating Inappropriate Degeneration in Diffusion Models9 Nov
- 2022Red-Teaming the Stable Diffusion Safety Filter3 Oct
Other references · 15
- 2020Denoising Diffusion Probabilistic Modelscited by 20,851
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
- 2021Diffusion Models Beat GANs on Image Synthesiscited by 8,185
- 2022Photorealistic Text-to-Image Diffusion Models with Deep Language Understandingcited by 6,322
- 2022DreamBooth: Fine Tuning Text-to-Image Diffusion Models for Subject-Driven Generationcited by 3,286
- 2023Grounding DINO: Marrying DINO with Grounded Pre-Training for Open-Set Object Detectioncited by 3,274
- 2021CLIPScore: A Reference-free Evaluation Metric for Image Captioningcited by 2,388
- 2023Sparse Autoencoders Find Highly Interpretable Features in Language Modelscited by 1,359
- 2022DiffusionDB: A Large-scale Prompt Gallery Dataset for Text-to-Image Generative Modelscited by 376
- 2013k-Sparse Autoencoderscited by 209
- 2023Selective Amnesia: A Continual Learning Approach to Forgetting in Deep Generative Modelscited by 175
- 2023Editing Implicit Assumptions in Text-to-Image Diffusion Modelscited by 128
3 more
Built on by
Citing papers per year: 2025: 3; 2026: 5.
8 papers.
- 2025Set You Straight: Auto-Steering Denoising Trajectories to Sidestep Unwanted Conceptscited by 61
- 2025Erasing Concepts, Steering Generations: A Comprehensive Survey of Concept Suppressioncited by 10
- 2026Interpretable Debiasing of Vision-Language Models for Social Fairnesscited by 6
- 2025Responsible Diffusion: A Comprehensive Survey on Safety, Ethics, and Trust in Diffusion Modelscited by 3
- 2026Where Concept Erasure Should Occur: Concept-Layer Alignment in Text-to-Video Diffusion Modelscited by 1
- 2026Supervised sparse auto-encoders for interpretable and compositional representationscited by 0
- 2026Grokking of Diffusion Models: Case Study on Modular Additioncited by 0
- 2026InGuard: Towards Generalized Inner Guardrail for Safe Text-to-Image Generationcited by 0
- 2026InGuard: Towards Generalized Inner Guardrail for Safe Text-to-Image Generation23 Sep 2026
- 2026Where Concept Erasure Should Occur: Concept-Layer Alignment in Text-to-Video Diffusion Models25 May 2026
- 2026Grokking of Diffusion Models: Case Study on Modular Addition20 Apr 2026
- 2026Interpretable Debiasing of Vision-Language Models for Social Fairness27 Feb 2026
- 2026Supervised sparse auto-encoders for interpretable and compositional representations31 Jan 2026
- 2025Responsible Diffusion: A Comprehensive Survey on Safety, Ethics, and Trust in Diffusion Models25 Sep 2025
- 2025Erasing Concepts, Steering Generations: A Comprehensive Survey of Concept Suppression26 May 2025
- 2025Set You Straight: Auto-Steering Denoising Trajectories to Sidestep Unwanted Concepts17 Apr 2025
Similar, not cited
Close in wording, no citation either way
- 2025Concept Pinpoint Eraser for Text-to-image Diffusion Models via Residual Attention Gate
- 2025ACE: Attentional Concept Erasure in Diffusion Models
- 2025Semantic Surgery: Zero-Shot Concept Erasure in Diffusion Models
- 2025Concept Corrector: Erase concepts on the fly for text-to-image diffusion models
- 2026Localized Concept Erasure in Text-to-Image Diffusion Models via High-Level Representation Misdirection
- 2026Neighbor-Aware Localized Concept Erasure in Text-to-Image Diffusion Models
- 2025SAeUron: Interpretable Concept Unlearning in Diffusion Models with Sparse Autoencoders
- 2025A Comprehensive Survey on Concept Erasure in Text-to-Image Diffusion Models