CURE: Concept Unlearning via Orthogonal Representation Editing in Diffusion Models
On the map: Diffusion models → Robustness, privacy and adversarial aspects
also in 1 more
Abstract (arXiv)
As Text-to-Image models continue to evolve, so does the risk of generating unsafe, copyrighted, or privacy-violating content. Existing safety interventions - ranging from training data curation and model fine-tuning to inference-time filtering and guidance - often suffer from incomplete concept removal, susceptibility to jail-breaking, computational inefficiency, or collateral damage to unrelated capabilities. In this paper, we introduce CURE, a training-free concept unlearning framework that operates directly in the weight space of pre-trained diffusion models, enabling fast, interpretable, and highly specific suppression of undesired concepts. At the core of our method is the Spectral Eraser, a closed-form, orthogonal projection module that identifies discriminative subspaces using Singular Value Decomposition over token embeddings associated with the concepts to forget and retain. Intuitively, the Spectral Eraser identifies and isolates features unique to the undesired concept while preserving safe attributes. This operator is then applied in a single step update to yield an edited model in which the target concept is effectively unlearned - without retraining, supervision, or iterative optimization. To balance the trade-off between filtering toxicity and preserving unrelated concepts, we further introduce an Expansion Mechanism for spectral regularization which selectively modulates singular vectors based on their relative significance to control the strength of forgetting. All the processes above are in closed-form, guaranteeing extremely efficient erasure in only 2 seconds. Benchmarking against prior approaches, CURE achieves a more efficient and thorough removal for targeted artistic styles, objects, identities, or explicit content, with minor damage to original generation ability and demonstrates enhanced robustness against red-teaming.
Key facts. Cited by 27 papers in the map (data through 14 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 55 of its 74 references that are in the map. First posted on arXiv 19 May 2025.
Builds on
55 of 74 references.
Closest ancestors · 21
Same direction, newest first
- 2024SAFREE: Training-Free and Adaptive Guard for Safe Text-to-Image And Video Generation16 Oct
- 2024SteerDiff: Steering towards Safe Text-to-Image Diffusion Models3 Oct
- 2024Reliable and Efficient Concept Erasure of Text-to-Image Diffusion Models17 Jul
- 2024Understanding the Impact of Negative Prompts: When and How Do They Take Effect?5 Jun
- 2024R.A.C.E.: Robust Adversarial Concept Erasure for Secure Text-to-Image Diffusion Model25 May
- 2024Unlearning Concepts in Diffusion Model via Concept Domain Correction and Concept Preserving Gradient24 May
- 2024Espresso: Robust Concept Filtering in Text-to-Image Models30 Apr
- 2024MACE: Mass Concept Erasure in Diffusion Models10 Mar
- 2023One-Dimensional Adapter to Rule Them All: Concepts, Diffusion Models and Erasing Applications26 Dec
- 2023Receler: Reliable Concept Erasing of Text-to-Image Diffusion Models via Lightweight Erasers29 Nov
- 2023MMA-Diffusion: MultiModal Attack on Diffusion Models29 Nov
- 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generation19 Oct
9 more
- 2023To Generate or Not? Safety-Driven Unlearned Diffusion Models Are Still Easy To Generate Unsafe Images ... For Now18 Oct
- 2023Ring-A-Bell! How Reliable are Concept Removal Methods for Diffusion Models?16 Oct
- 2023Prompting4Debugging: Red-Teaming Text-to-Image Diffusion Models by Finding Problematic Prompts12 Sep
- 2023Unified Concept Editing in Diffusion Models25 Aug
- 2023Forget-Me-Not: Learning to Forget in Text-to-Image Diffusion Models30 Mar
- 2023Ablating Concepts in Text-to-Image Diffusion Models23 Mar
- 2023Erasing Concepts from Diffusion Models13 Mar
- 2022Safe Latent Diffusion: Mitigating Inappropriate Degeneration in Diffusion Models9 Nov
- 2022Red-Teaming the Stable Diffusion Safety Filter3 Oct
Other references · 34
- 2017Attention Is All You Needcited by 60,361
- 2015Deep Residual Learning for Image Recognitioncited by 52,096
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
- 2020Denoising Diffusion Probabilistic Modelscited by 21,076
- 2015U-Net: Convolutional Networks for Biomedical Image Segmentationcited by 19,713
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,863
- 2014Microsoft COCO: Common Objects in Contextcited by 17,608
- 2018The Unreasonable Effectiveness of Deep Features as a Perceptual Metriccited by 11,177
- 2020Denoising Diffusion Implicit Modelscited by 9,781
- 2022Hierarchical Text-Conditional Image Generation with CLIP Latentscited by 6,585
- 2022Photorealistic Text-to-Image Diffusion Models with Deep Language Understandingcited by 6,355
- 2022LAION-5B: An open large-scale dataset for training next generation image-text modelscited by 4,152
22 more
- 2021GLIDE: Towards Photorealistic Image Generation and Editing with Text-Guided Diffusion Modelscited by 3,614
- 2022Diffusion Models: A Comprehensive Survey of Methods and Applicationscited by 1,114
- 2018The Secret Sharer: Evaluating and Testing Unintended Memorization in Neural Networkscited by 864
- 2016Tutorial on Variational Autoencoderscited by 409
- 2021Gradient Projection Memory for Continual Learningcited by 348
- 2020The Creation and Detection of Deepfakes: A Surveycited by 247
- 2020Media Forensics and DeepFakes: an overviewcited by 209
- 2020fastai: A Layered API for Deep Learningcited by 183
- 2023Selective Amnesia: A Continual Learning Approach to Forgetting in Deep Generative Modelscited by 177
- 2022Can Machines Help Us Answering Question 16 in Datasheets, and In Turn Reflecting on Inappropriate Content?cited by 155
- 2022The Privacy Onion Effect: Memorization is Relativecited by 136
- 2023Editing Implicit Assumptions in Text-to-Image Diffusion Modelscited by 130
- 2023Circumventing Concept Erasure Methods For Text-to-Image Generative Modelscited by 85
- 2024Latent Guard: a Safety Framework for Text-to-image Generationcited by 71
- 2023Self-Discovering Interpretable Diffusion Latent Directions for Responsible Text-to-Image Generationcited by 69
- 2024Direct Unlearning Optimization for Robust and Safe Text-to-Image Modelscited by 50
- 2024ART: Automatic Red-teaming for Text-to-Image Models to Protect Benign Userscited by 35
- 2024Robust Concept Erasure Using Task Vectorscited by 27
- 2024Automatic Jailbreaking of the Text-to-Image Generative AI Systemscited by 23
- 2024Editing Massive Concepts in Text-to-Image Diffusion Modelscited by 15
- 2024SAP: Corrective Machine Unlearning with Scaled Activation Projection for Label Noise Robustnesscited by 10
- 2024Ethical-Lens: Curbing Malicious Usages of Open-Source Text-to-Image Modelscited by 4
Built on by
Citing papers per year: 2025: 2; 2026: 25.
27 papers.
Sort:
By area:
- 2026OrthoEraser: Coupled-Neuron Orthogonal Projection for Concept Erasurecited by 7
- 2026Multimodal Unlearning Across Vision, Language, Video, and Audio: Survey of Methods, Datasets, and Benchmarkscited by 7
- 2025Now You See It, Now You Don't - Instant Concept Erasure for Safe Text-to-Image and Video Generationcited by 4
- 2026Neighbor-Aware Localized Concept Erasure in Text-to-Image Diffusion Modelscited by 4
- 2026Class Unlearning via Depth-Aware Removal of Forget-Specific Directionscited by 4
- 2026Models Designed to Forget: Machine Unlearning via Key Deletioncited by 3
- 2026To Erase, or Not to Erase: Robust Training-Free Concept Erasure with Preservation aware Adaptive Ranked Subspace Expansioncited by 3
- 2025GrOCE:Graph-Guided Online Concept Erasure for Text-to-Image Diffusion Modelscited by 2
- 2026Orthogonal Concept Erasure for Diffusion Modelscited by 2
- 2026Reference-Guided Machine Unlearningcited by 1
- 2026Subspace Control: Turning Constrained Model Steering into Controllable Spectral Optimizationcited by 1
- 2026Empty SPACE: Cross-Attention Sparsity for Concept Erasure in Diffusion Modelscited by 1
15 more
- 2026RASteer: Retain-Aware Activation Steering for Concept Erasure in Diffusion Modelscited by 1
- 2026Your Unlearning Gives You Away: Identifying Erased Concepts in Diffusion Modelscited by 1
- 2026Modular Energy Steering for Safe Text-to-Image Generation with Foundation Modelscited by 0
- 2026EDGE-Shield: Efficient Denoising-staGE Shield for Violative Content Filtering via Scalable Reference-Based Matchingcited by 0
- 2026HEART: Hyperspherical Embedding Alignment via Kent-Representation Traversal in Diffusion Modelscited by 0
- 2026SoK: Unlearnability and Unlearning for Model Dememorizationcited by 0
- 2026Mosaic: Compositional Multi-Concept Erasure via Vector Field Blendingcited by 0
- 2026Concept Unlearning via Cross-Attention Activation Projection for Diffusion Modelscited by 0
- 2026AutoAnchor: Stable Diffusion Unlearning Using Cross-Attention as a Manifold Surrogatecited by 0
- 2026Uni-AdaVD: Universal Concept Erasure for Visual Generation via Orthogonal Value Decompositioncited by 0
- 2026TEA: Text Encoder Alignment for Robust Concept Erasure in Text-to-Image Modelscited by 0
- 2026Spectral Saliency for Machine Unlearningcited by 0
- 2026Weeding Out Bad Seeds: Initial-Noise-Robust Unlearning for Text-to-Image Diffusion Modelscited by 0
- 2026Keep It CALM: Analyzing the Limits of Global Unsafety in Text-to-Image Generationcited by 0
- 2026Do More Modalities Always Help? A Geometric Perspective on Missing-Modality Robustnesscited by 0
- 2026Your Unlearning Gives You Away: Identifying Erased Concepts in Diffusion Models4 Oct 2026
- 2026Do More Modalities Always Help? A Geometric Perspective on Missing-Modality Robustness3 Oct 2026
- 2026Keep It CALM: Analyzing the Limits of Global Unsafety in Text-to-Image Generation1 Oct 2026
- 2026RASteer: Retain-Aware Activation Steering for Concept Erasure in Diffusion Models1 Oct 2026
- 2026Weeding Out Bad Seeds: Initial-Noise-Robust Unlearning for Text-to-Image Diffusion Models29 Sep 2026
- 2026Spectral Saliency for Machine Unlearning16 Aug 2026
- 2026TEA: Text Encoder Alignment for Robust Concept Erasure in Text-to-Image Models15 Aug 2026
- 2026To Erase, or Not to Erase: Robust Training-Free Concept Erasure with Preservation aware Adaptive Ranked Subspace Expansion26 Jul 2026
- 2026Uni-AdaVD: Universal Concept Erasure for Visual Generation via Orthogonal Value Decomposition16 Jul 2026
- 2026AutoAnchor: Stable Diffusion Unlearning Using Cross-Attention as a Manifold Surrogate9 Jul 2026
- 2026Multimodal Unlearning Across Vision, Language, Video, and Audio: Survey of Methods, Datasets, and Benchmarks8 Jul 2026
- 2026Orthogonal Concept Erasure for Diffusion Models27 May 2026
15 more
- 2026Concept Unlearning via Cross-Attention Activation Projection for Diffusion Models25 May 2026
- 2026Mosaic: Compositional Multi-Concept Erasure via Vector Field Blending25 May 2026
- 2026SoK: Unlearnability and Unlearning for Model Dememorization12 May 2026
- 2026Empty SPACE: Cross-Attention Sparsity for Concept Erasure in Diffusion Models11 May 2026
- 2026HEART: Hyperspherical Embedding Alignment via Kent-Representation Traversal in Diffusion Models8 May 2026
- 2026Class Unlearning via Depth-Aware Removal of Forget-Specific Directions16 Apr 2026
- 2026Subspace Control: Turning Constrained Model Steering into Controllable Spectral Optimization5 Apr 2026
- 2026EDGE-Shield: Efficient Denoising-staGE Shield for Violative Content Filtering via Scalable Reference-Based Matching4 Apr 2026
- 2026Modular Energy Steering for Safe Text-to-Image Generation with Foundation Models2 Apr 2026
- 2026Neighbor-Aware Localized Concept Erasure in Text-to-Image Diffusion Models27 Mar 2026
- 2026Models Designed to Forget: Machine Unlearning via Key Deletion16 Mar 2026
- 2026OrthoEraser: Coupled-Neuron Orthogonal Projection for Concept Erasure12 Mar 2026
- 2026Reference-Guided Machine Unlearning11 Mar 2026
- 2025Now You See It, Now You Don't - Instant Concept Erasure for Safe Text-to-Image and Video Generation24 Nov 2025
- 2025GrOCE:Graph-Guided Online Concept Erasure for Text-to-Image Diffusion Models17 Nov 2025
- 2026Neighbor-Aware Localized Concept Erasure in Text-to-Image Diffusion Modelscited by 4
- 2026To Erase, or Not to Erase: Robust Training-Free Concept Erasure with Preservation aware Adaptive Ranked Subspace Expansioncited by 3
- 2025GrOCE:Graph-Guided Online Concept Erasure for Text-to-Image Diffusion Modelscited by 2
- 2026Orthogonal Concept Erasure for Diffusion Modelscited by 2
- 2026Empty SPACE: Cross-Attention Sparsity for Concept Erasure in Diffusion Modelscited by 1
- 2026RASteer: Retain-Aware Activation Steering for Concept Erasure in Diffusion Modelscited by 1
- 2026Your Unlearning Gives You Away: Identifying Erased Concepts in Diffusion Modelscited by 1
- 2026HEART: Hyperspherical Embedding Alignment via Kent-Representation Traversal in Diffusion Modelscited by 0
- 2026Concept Unlearning via Cross-Attention Activation Projection for Diffusion Modelscited by 0
- 2026AutoAnchor: Stable Diffusion Unlearning Using Cross-Attention as a Manifold Surrogatecited by 0
- 2026TEA: Text Encoder Alignment for Robust Concept Erasure in Text-to-Image Modelscited by 0
- 2026Weeding Out Bad Seeds: Initial-Noise-Robust Unlearning for Text-to-Image Diffusion Modelscited by 0
- 2026Your Unlearning Gives You Away: Identifying Erased Concepts in Diffusion Models4 Oct 2026
- 2026RASteer: Retain-Aware Activation Steering for Concept Erasure in Diffusion Models1 Oct 2026
- 2026Weeding Out Bad Seeds: Initial-Noise-Robust Unlearning for Text-to-Image Diffusion Models29 Sep 2026
- 2026TEA: Text Encoder Alignment for Robust Concept Erasure in Text-to-Image Models15 Aug 2026
- 2026To Erase, or Not to Erase: Robust Training-Free Concept Erasure with Preservation aware Adaptive Ranked Subspace Expansion26 Jul 2026
- 2026AutoAnchor: Stable Diffusion Unlearning Using Cross-Attention as a Manifold Surrogate9 Jul 2026
- 2026Orthogonal Concept Erasure for Diffusion Models27 May 2026
- 2026Concept Unlearning via Cross-Attention Activation Projection for Diffusion Models25 May 2026
- 2026Empty SPACE: Cross-Attention Sparsity for Concept Erasure in Diffusion Models11 May 2026
- 2026HEART: Hyperspherical Embedding Alignment via Kent-Representation Traversal in Diffusion Models8 May 2026
- 2026Neighbor-Aware Localized Concept Erasure in Text-to-Image Diffusion Models27 Mar 2026
- 2025GrOCE:Graph-Guided Online Concept Erasure for Text-to-Image Diffusion Models17 Nov 2025
- 2026Multimodal Unlearning Across Vision, Language, Video, and Audio: Survey of Methods, Datasets, and Benchmarkscited by 7
- 2025Now You See It, Now You Don't - Instant Concept Erasure for Safe Text-to-Image and Video Generationcited by 4
- 2026Class Unlearning via Depth-Aware Removal of Forget-Specific Directionscited by 4
- 2026Models Designed to Forget: Machine Unlearning via Key Deletioncited by 3
- 2026Reference-Guided Machine Unlearningcited by 1
- 2026Subspace Control: Turning Constrained Model Steering into Controllable Spectral Optimizationcited by 1
- 2026SoK: Unlearnability and Unlearning for Model Dememorizationcited by 0
- 2026Spectral Saliency for Machine Unlearningcited by 0
- 2026Spectral Saliency for Machine Unlearning16 Aug 2026
- 2026Multimodal Unlearning Across Vision, Language, Video, and Audio: Survey of Methods, Datasets, and Benchmarks8 Jul 2026
- 2026SoK: Unlearnability and Unlearning for Model Dememorization12 May 2026
- 2026Class Unlearning via Depth-Aware Removal of Forget-Specific Directions16 Apr 2026
- 2026Subspace Control: Turning Constrained Model Steering into Controllable Spectral Optimization5 Apr 2026
- 2026Models Designed to Forget: Machine Unlearning via Key Deletion16 Mar 2026
- 2026Reference-Guided Machine Unlearning11 Mar 2026
- 2025Now You See It, Now You Don't - Instant Concept Erasure for Safe Text-to-Image and Video Generation24 Nov 2025
- 2026Modular Energy Steering for Safe Text-to-Image Generation with Foundation Modelscited by 0
- 2026EDGE-Shield: Efficient Denoising-staGE Shield for Violative Content Filtering via Scalable Reference-Based Matchingcited by 0
- 2026Mosaic: Compositional Multi-Concept Erasure via Vector Field Blendingcited by 0
- 2026Uni-AdaVD: Universal Concept Erasure for Visual Generation via Orthogonal Value Decompositioncited by 0
- 2026Keep It CALM: Analyzing the Limits of Global Unsafety in Text-to-Image Generationcited by 0
- 2026Do More Modalities Always Help? A Geometric Perspective on Missing-Modality Robustnesscited by 0
- 2026Do More Modalities Always Help? A Geometric Perspective on Missing-Modality Robustness3 Oct 2026
- 2026Keep It CALM: Analyzing the Limits of Global Unsafety in Text-to-Image Generation1 Oct 2026
- 2026Uni-AdaVD: Universal Concept Erasure for Visual Generation via Orthogonal Value Decomposition16 Jul 2026
- 2026Mosaic: Compositional Multi-Concept Erasure via Vector Field Blending25 May 2026
- 2026EDGE-Shield: Efficient Denoising-staGE Shield for Violative Content Filtering via Scalable Reference-Based Matching4 Apr 2026
- 2026Modular Energy Steering for Safe Text-to-Image Generation with Foundation Models2 Apr 2026
Similar, not cited
Close in wording, no citation either way
- 2026Forget Many, Forget Right: Scalable and Precise Concept Unlearning in Diffusion Models
- 2026CoreUnlearn: Rethinking Concept Unlearning through Disentangled Component-Level Erasure in Text-guided Diffusion Models
- 2026Compensation-free Machine Unlearning in Text-to-Image Diffusion Models by Eliminating the Mutual Information
- 2026Projected Gradient Unlearning for Text-to-Image Diffusion Models: Defending Against Concept Revival Attacks
- 2025DyME: Dynamic Multi-Concept Erasure in Diffusion Models with Bi-Level Orthogonal LoRA Adaptation
- 2026Erasing Without Collateral Damage: Precise Concept Removal in Diffusion Models
- 2026TILDE: TILt-based Distributional Erasure for Concept Unlearning
- 2026Roots Beneath the Cut: Uncovering the Risk of Concept Revival in Pruning-Based Unlearning for Diffusion Models