mlsanityData to 14 Oct 2026

TRACE: Trajectory-Constrained Concept Erasure in Diffusion Models

arXiv 2505.23312 ↗First posted 29 May 2025cs.CVcited by 2

On the map: Diffusion models → Robustness, privacy and adversarial aspects

Abstract (arXiv)

Text-to-image diffusion models have shown unprecedented generative capability, but their ability to produce undesirable concepts (e.g.~pornographic content, sensitive identities, copyrighted styles) poses serious concerns for privacy, fairness, and safety. Concept erasure aims to remove or suppress specific concept information in a generative model. In this paper, we introduce TRACE (Trajectory-Constrained Attentional Concept Erasure), a novel method to erase targeted concepts from diffusion models while preserving overall generative quality. Our approach combines a rigorous theoretical framework, establishing formal conditions under which a concept can be provably suppressed in the diffusion process, with an effective fine-tuning procedure compatible with both conventional latent diffusion (Stable Diffusion) and emerging rectified flow models (e.g.~FLUX). We first derive a closed-form update to the model's cross-attention layers that removes hidden representations of the target concept. We then introduce a trajectory-aware finetuning objective that steers the denoising process away from the concept only in the late sampling stages, thus maintaining the model's fidelity on unrelated content. Empirically, we evaluate TRACE on multiple benchmarks used in prior concept erasure studies (object classes, celebrity faces, artistic styles, and explicit content from the I2P dataset). TRACE achieves state-of-the-art performance, outperforming recent methods such as ANT, EraseAnything, and MACE in terms of removal efficacy and output quality.

Key facts. Cited by 2 papers in the map (data through 14 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 24 of its 35 references that are in the map. First posted on arXiv 29 May 2025.

Builds on

24 of 35 references.

Closest ancestors · 8

Same direction, newest first

  1. 2024EraseAnything: Enabling Concept Erasure in Rectified Flow Transformers29 Dec
  2. 2024ROBIN: Robust and Invisible Watermarks for Diffusion Models with Adversarial Optimization6 Nov
  3. 2024Erasing Undesirable Concepts in Diffusion Models with Adversarial Preservation21 Oct
  4. 2024MACE: Mass Concept Erasure in Diffusion Models10 Mar
  5. 2023Unified Concept Editing in Diffusion Models25 Aug
  6. 2023Tree-Ring Watermarks: Fingerprints for Diffusion Images that are Invisible and Robust31 May
  7. 2023Erasing Concepts from Diffusion Models13 Mar
  8. 2022Safe Latent Diffusion: Mitigating Inappropriate Degeneration in Diffusion Models9 Nov

Other references · 16

  1. 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
  2. 2014Microsoft COCO: Common Objects in Contextcited by 17,608
  3. 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,599
  4. 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,380
  5. 2022Prompt-to-Prompt Image Editing with Cross Attention Controlcited by 2,431
  6. 2023TF-ICON: Diffusion-Based Training-Free Cross-Domain Image Compositioncited by 182
  7. 2024Robust Watermarking Using Generative Priors Against Image Editing: From Benchmarking to Advancescited by 110
  8. 2023Spontaneous Symmetry Breaking in Generative Diffusion Modelscited by 80
  9. 2025Set You Straight: Auto-Steering Denoising Trajectories to Sidestep Unwanted Conceptscited by 62
  10. 2025PRISM: Self-Pruning Intrinsic Selection Method for Training-Free Multimodal Data Selectioncited by 61
  11. 2025CoT-Kinetics: A Theoretical Modeling Assessing LRM Reasoning Processcited by 51
  12. 2022Towards Visual-Prompt Temporal Answering Grounding in Medical Instructional Videocited by 43
4 more
  1. 2021More but Correct: Generating Diversified and Entity-revised Medical Responsecited by 31
  2. 2024ICH-SCNet: Intracerebral Hemorrhage Segmentation and Prognosis Classification Network Using CLIP-guided SAM mechanismcited by 16
  3. 2024ICHPro: Intracerebral Hemorrhage Prognosis Classification Via Joint-attention Fusion-based 3d Cross-modal Networkcited by 10
  4. 2021Bilateral Personalized Dialogue Generation with Contrastive Learningcited by 8

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2026: 2.

2 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2025ACE: Attentional Concept Erasure in Diffusion Models
  2. 2025Robust Concept Erasure in Diffusion Models: A Theoretical Perspective on Security and Robustness
  3. 2025FADE: Adversarial Concept Erasure in Flow Models
  4. 2026Erasing Without Collateral Damage: Precise Concept Removal in Diffusion Models
  5. 2025SPEED: Scalable, Precise, and Efficient Concept Erasure for Diffusion Models
  6. 2026Empty SPACE: Cross-Attention Sparsity for Concept Erasure in Diffusion Models
  7. 2026Localized Concept Erasure in Text-to-Image Diffusion Models via High-Level Representation Misdirection
  8. 2026Erasing Thousands of Concepts: Towards Scalable and Practical Concept Erasure for Text-to-Image Diffusion Models