ACE: Attentional Concept Erasure in Diffusion Models
On the map: Diffusion models → Robustness, privacy and adversarial aspects
Abstract (arXiv)
Large text-to-image diffusion models have demonstrated remarkable image synthesis capabilities, but their indiscriminate training on Internet-scale data has led to learned concepts that enable harmful, copyrighted, or otherwise undesirable content generation. We address the task of concept erasure in diffusion models, i.e., removing a specified concept from a pre-trained model such that prompting the concept (or related synonyms) no longer yields its depiction, while preserving the model's ability to generate other content. We propose a novel method, Attentional Concept Erasure (ACE), that integrates a closed-form attention manipulation with lightweight fine-tuning. Theoretically, we formulate concept erasure as aligning the model's conditional distribution on the target concept with a neutral distribution. Our approach identifies and nullifies concept-specific latent directions in the cross-attention modules via a gated low-rank adaptation, followed by adversarially augmented fine-tuning to ensure thorough erasure of the concept and its synonyms. Empirically, we demonstrate on multiple benchmarks, including object classes, celebrity faces, explicit content, and artistic styles, that ACE achieves state-of-the-art concept removal efficacy and robustness. Compared to prior methods, ACE better balances generality (erasing concept and related terms) and specificity (preserving unrelated content), scales to dozens of concepts, and is efficient, requiring only a few seconds of adaptation per concept. We will release our code to facilitate safer deployment of diffusion models.
Key facts. Cited by 3 papers in the map (data through 14 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 37 of its 39 references that are in the map. First posted on arXiv 16 Apr 2025.
Builds on
37 of 39 references.
Closest ancestors · 27
Same direction, newest first
- 2025Fine-Grained Erasure in Text-to-Image Diffusion-based Foundation Models25 Mar
- 2025Safe and Reliable Diffusion Models via Subspace Projection21 Mar
- 2025ACE: Concept Editing in Diffusion Models without Performance Degradation11 Mar
- 2025Rethinking the Vulnerability of Concept Erasure and a New Method24 Feb
- 2025Concept Corrector: Erase concepts on the fly for text-to-image diffusion models22 Feb
- 2025SAeUron: Interpretable Concept Unlearning in Diffusion Models with Sparse Autoencoders29 Jan
- 2025CE-SDWV: Effective and Efficient Concept Erasure for Text-to-Image Diffusion Models via a Semantic-Driven Word Vocabulary26 Jan
- 2025ACE: Anti-Editing Concept Erasure in Text-to-Image Models3 Jan
- 2024EraseAnything: Enabling Concept Erasure in Rectified Flow Transformers29 Dec
- 2024TraSCE: Trajectory Steering for Concept Erasure10 Dec
- 2024Model Integrity when Unlearning with T2I Diffusion Models4 Nov
- 2024Erasing Undesirable Concepts in Diffusion Models with Adversarial Preservation21 Oct
15 more
- 2024Growth Inhibitors for Suppressing Inappropriate Image Concepts in Diffusion Models2 Aug
- 2024Safeguard Text-to-Image Diffusion Models with Human Feedback Inversion17 Jul
- 2024Pruning for Robust Concept Erasing in Diffusion Models26 May
- 2024R.A.C.E.: Robust Adversarial Concept Erasure for Secure Text-to-Image Diffusion Model25 May
- 2024Defensive Unlearning with Adversarial Training for Robust Concept Erasure in Diffusion Models24 May
- 2024MACE: Mass Concept Erasure in Diffusion Models10 Mar
- 2023One-Dimensional Adapter to Rule Them All: Concepts, Diffusion Models and Erasing Applications26 Dec
- 2023All but One: Surgical Concept Erasing with Model Preservation in Text-to-Image Diffusion Models20 Dec
- 2023Receler: Reliable Concept Erasing of Text-to-Image Diffusion Models via Lightweight Erasers29 Nov
- 2023Implicit Concept Removal of Diffusion Models9 Oct
- 2023Unified Concept Editing in Diffusion Models25 Aug
- 2023Towards Safe Self-Distillation of Internet-Scale Text-to-Image Diffusion Models12 Jul
- 2023Forget-Me-Not: Learning to Forget in Text-to-Image Diffusion Models30 Mar
- 2023Erasing Concepts from Diffusion Models13 Mar
- 2022Safe Latent Diffusion: Mitigating Inappropriate Degeneration in Diffusion Models9 Nov
Other references · 10
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,863
- 2021Diffusion Models Beat GANs on Image Synthesiscited by 8,255
- 2022InstructPix2Pix: Learning to Follow Image Editing Instructionscited by 2,611
- 2022Prompt-to-Prompt Image Editing with Cross Attention Controlcited by 2,431
- 2023TF-ICON: Diffusion-Based Training-Free Cross-Domain Image Compositioncited by 182
- 2023Selective Amnesia: A Continual Learning Approach to Forgetting in Deep Generative Modelscited by 177
- 2024MUNBa: Machine Unlearning via Nash Bargainingcited by 17
- 2025Continual Unlearning for Foundational Text-to-Image Models without Generalization Erosioncited by 12
- 2024Unveiling Concept Attribution in Diffusion Modelscited by 11
- 2025DuMo: Dual Encoder Modulation Network for Precise Concept Erasurecited by 11
Built on by
Citing papers per year: 2025: 3.
3 papers.
- 2025Revoking Amnesia: RL-based Trajectory Optimization to Resurrect Erased Concepts in Diffusion Modelscited by 11
- 2025Erasing Concepts, Steering Generations: A Comprehensive Survey of Concept Suppressioncited by 10
- 2025GrOCE:Graph-Guided Online Concept Erasure for Text-to-Image Diffusion Modelscited by 2
- 2025GrOCE:Graph-Guided Online Concept Erasure for Text-to-Image Diffusion Models17 Nov 2025
- 2025Revoking Amnesia: RL-based Trajectory Optimization to Resurrect Erased Concepts in Diffusion Models30 Sep 2025
- 2025Erasing Concepts, Steering Generations: A Comprehensive Survey of Concept Suppression26 May 2025
Similar, not cited
Close in wording, no citation either way
- 2026Erasing Without Collateral Damage: Precise Concept Removal in Diffusion Models
- 2025Concept Pinpoint Eraser for Text-to-image Diffusion Models via Residual Attention Gate
- 2026Empty SPACE: Cross-Attention Sparsity for Concept Erasure in Diffusion Models
- 2025Semantic Surgery: Zero-Shot Concept Erasure in Diffusion Models
- 2025A Comprehensive Survey on Concept Erasure in Text-to-Image Diffusion Models
- 2025TRACE: Trajectory-Constrained Concept Erasure in Diffusion Models
- 2026Neighbor-Aware Localized Concept Erasure in Text-to-Image Diffusion Models
- 2026EGLOCE: Training-Free Energy-Guided Latent Optimization for Concept Erasure