mlsanityData to 14 Oct 2026

Erased or Dormant? Rethinking Concept Erasure Through Reversibility

arXiv 2505.16174 ↗First posted 22 May 2025cs.CVcited by 9

On the map: Diffusion models → Robustness, privacy and adversarial aspects

Abstract (arXiv)

To what extent does concept erasure eliminate generative capacity in diffusion models? While prior evaluations have primarily focused on measuring concept suppression under specific textual prompts, we explore a complementary and fundamental question: do current concept erasure techniques genuinely remove the ability to generate targeted concepts, or do they merely achieve superficial, prompt-specific suppression? We systematically evaluate the robustness and reversibility of two representative concept erasure methods, Unified Concept Editing and Erased Stable Diffusion, by probing their ability to eliminate targeted generative behaviors in text-to-image models. These methods attempt to suppress undesired semantic concepts by modifying internal model parameters, either through targeted attention edits or model-level fine-tuning strategies. To rigorously assess whether these techniques truly erase generative capacity, we propose an instance-level evaluation strategy that employs lightweight fine-tuning to explicitly test the reactivation potential of erased concepts. Through quantitative metrics and qualitative analyses, we show that erased concepts often reemerge with substantial visual fidelity after minimal adaptation, indicating that current methods suppress latent generative representations without fully eliminating them. Our findings reveal critical limitations in existing concept erasure approaches and highlight the need for deeper, representation-level interventions and more rigorous evaluation standards to ensure genuine, irreversible removal of concepts from generative models.

Key facts. Cited by 9 papers in the map (data through 14 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 47 of its 60 references that are in the map. First posted on arXiv 22 May 2025.

Builds on

47 of 60 references.

Closest ancestors · 19

Same direction, newest first

  1. 2025Safe and Reliable Diffusion Models via Subspace Projection21 Mar
  2. 2025A Comprehensive Survey on Concept Erasure in Text-to-Image Diffusion Models17 Feb
  3. 2025Fantastic Targets for Concept Erasure in Diffusion Models and Where To Find Them31 Jan
  4. 2025CE-SDWV: Effective and Efficient Concept Erasure for Text-to-Image Diffusion Models via a Semantic-Driven Word Vocabulary26 Jan
  5. 2024EraseAnything: Enabling Concept Erasure in Rectified Flow Transformers29 Dec
  6. 2024Concept Replacer: Replacing Sensitive Concepts in Diffusion Models via Precision Localization2 Dec
  7. 2024Reliable and Efficient Concept Erasure of Text-to-Image Diffusion Models17 Jul
  8. 2024ConceptPrune: Concept Editing in Diffusion Models via Skilled Neuron Pruning29 May
  9. 2024Pruning for Robust Concept Erasing in Diffusion Models26 May
  10. 2024R.A.C.E.: Robust Adversarial Concept Erasure for Secure Text-to-Image Diffusion Model25 May
  11. 2024Defensive Unlearning with Adversarial Training for Robust Concept Erasure in Diffusion Models24 May
  12. 2024Espresso: Robust Concept Filtering in Text-to-Image Models30 Apr
7 more
  1. 2024MACE: Mass Concept Erasure in Diffusion Models10 Mar
  2. 2023Receler: Reliable Concept Erasing of Text-to-Image Diffusion Models via Lightweight Erasers29 Nov
  3. 2023On Copyright Risks of Text-to-Image Diffusion Models15 Sep
  4. 2023Unified Concept Editing in Diffusion Models25 Aug
  5. 2023Forget-Me-Not: Learning to Forget in Text-to-Image Diffusion Models30 Mar
  6. 2023Ablating Concepts in Text-to-Image Diffusion Models23 Mar
  7. 2023Erasing Concepts from Diffusion Models13 Mar

Other references · 28

  1. 2015Deep Residual Learning for Image Recognitioncited by 52,096
  2. 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
  3. 2020Denoising Diffusion Probabilistic Modelscited by 21,076
  4. 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,863
  5. 2018The Unreasonable Effectiveness of Deep Features as a Perceptual Metriccited by 11,177
  6. 2020Denoising Diffusion Implicit Modelscited by 9,781
  7. 2021Diffusion Models Beat GANs on Image Synthesiscited by 8,255
  8. 2022Hierarchical Text-Conditional Image Generation with CLIP Latentscited by 6,585
  9. 2022Photorealistic Text-to-Image Diffusion Models with Deep Language Understandingcited by 6,355
  10. 2022Classifier-Free Diffusion Guidancecited by 5,847
  11. 2023Adding Conditional Control to Text-to-Image Diffusion Modelscited by 5,503
  12. 2021GLIDE: Towards Photorealistic Image Generation and Editing with Text-Guided Diffusion Modelscited by 3,614
16 more
  1. 2022DreamBooth: Fine Tuning Text-to-Image Diffusion Models for Subject-Driven Generationcited by 3,300
  2. 2022An Image is Worth One Word: Personalizing Text-to-Image Generation using Textual Inversioncited by 2,245
  3. 2021SDEdit: Guided Image Synthesis and Editing with Stochastic Differential Equationscited by 1,937
  4. 2023IP-Adapter: Text Compatible Image Prompt Adapter for Text-to-Image Diffusion Modelscited by 1,464
  5. 2023AnimateDiff: Animate Your Personalized Text-to-Image Diffusion Models without Specific Tuningcited by 1,433
  6. 2022Multi-Concept Customization of Text-to-Image Diffusioncited by 1,106
  7. 2022Diffusion Models in Vision: A Surveycited by 1,015
  8. 2022MagicVideo: Efficient Video Generation With Latent Diffusion Modelscited by 465
  9. 2023VideoComposer: Compositional Video Synthesis with Motion Controllabilitycited by 464
  10. 2023InstantBooth: Personalized Text-to-Image Generation without Test-Time Finetuningcited by 345
  11. 2020A Review on Generative Adversarial Networks: Algorithms, Theory, and Applicationscited by 209
  12. 2023Circumventing Concept Erasure Methods For Text-to-Image Generative Modelscited by 85
  13. 2023Typology of Risks of Generative Text-to-Image Modelscited by 55
  14. 2024Machine Unlearning: A Comprehensive Surveycited by 35
  15. 2025SafeText: Safe Text-to-image Models via Aligning the Text Encodercited by 7
  16. 2024RESTOR: Knowledge Recovery in Machine Unlearningcited by 2

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 1; 2026: 8.

9 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2026Erasing Without Collateral Damage: Precise Concept Removal in Diffusion Models
  2. 2026Erasure or Erosion? Evaluating Compositional Degradation in Unlearned Text-To-Image Diffusion Models
  3. 2025When Are Concepts Erased From Diffusion Models?
  4. 2025Concept Corrector: Erase concepts on the fly for text-to-image diffusion models
  5. 2025Semantic Surgery: Zero-Shot Concept Erasure in Diffusion Models
  6. 2025M-ErasureBench: A Comprehensive Multimodal Evaluation Benchmark for Concept Erasure in Diffusion Models
  7. 2025Erasing Concepts, Steering Generations: A Comprehensive Survey of Concept Suppression
  8. 2025ACE: Attentional Concept Erasure in Diffusion Models