Rethinking Machine Unlearning in Image Generation Models
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
With the surge and widespread application of image generation models, data privacy and content safety have become major concerns and attracted great attention from users, service providers, and policymakers. Machine unlearning (MU) is recognized as a cost-effective and promising means to address these challenges. Despite some advancements, image generation model unlearning (IGMU) still faces remarkable gaps in practice, e.g., unclear task discrimination and unlearning guidelines, lack of an effective evaluation framework, and unreliable evaluation metrics. These can hinder the understanding of unlearning mechanisms and the design of practical unlearning algorithms. We perform exhaustive assessments over existing state-of-the-art unlearning algorithms and evaluation standards, and discover several critical flaws and challenges in IGMU tasks. Driven by these limitations, we make several core contributions, to facilitate the comprehensive understanding, standardized categorization, and reliable evaluation of IGMU. Specifically, (1) We design CatIGMU, a novel hierarchical task categorization framework. It provides detailed implementation guidance for IGMU, assisting in the design of unlearning algorithms and the construction of testbeds. (2) We introduce EvalIGMU, a comprehensive evaluation framework. It includes reliable quantitative metrics across five critical aspects. (3) We construct DataIGM, a high-quality unlearning dataset, which can be used for extensive evaluations of IGMU, training content detectors for judgment, and benchmarking the state-of-the-art unlearning algorithms. With EvalIGMU and DataIGM, we discover that most existing IGMU algorithms cannot handle the unlearning well across different evaluation dimensions, especially for preservation and robustness. Code and models are available at https://github.com/ryliu68/IGMU.
Key facts. Cited by 9 papers in the map (data through 14 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 35 of its 67 references that are in the map. First posted on arXiv 3 Jun 2025.
Builds on
35 of 67 references.
Closest ancestors · 3
Same direction, newest first
- 2024MUNBa: Machine Unlearning via Nash Bargaining23 Nov
- 2024Scissorhands: Scrub Data Influence via Connection Sensitivity in Networks11 Jan
- 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generation19 Oct
Other references · 32
- 2015Deep Residual Learning for Image Recognitioncited by 52,096
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
- 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 30,186
- 2018The Unreasonable Effectiveness of Deep Features as a Perceptual Metriccited by 11,177
- 2023SDXL: Improving Latent Diffusion Models for High-Resolution Image Synthesiscited by 4,356
- 2024Scaling Rectified Flow Transformers for High-Resolution Image Synthesiscited by 4,181
- 2022LAION-5B: An open large-scale dataset for training next generation image-text modelscited by 4,152
- 2021CLIPScore: A Reference-free Evaluation Metric for Image Captioningcited by 2,424
- 2021Image Super-Resolution via Iterative Refinementcited by 1,511
- 2019Machine Unlearningcited by 1,061
- 2023Erasing Concepts from Diffusion Modelscited by 539
- 2022Safe Latent Diffusion: Mitigating Inappropriate Degeneration in Diffusion Modelscited by 513
20 more
- 2019Making AI Forget You: Data Deletion in Machine Learningcited by 465
- 2023Unified Concept Editing in Diffusion Modelscited by 388
- 2023Ablating Concepts in Text-to-Image Diffusion Modelscited by 317
- 2024MACE: Mass Concept Erasure in Diffusion Modelscited by 307
- 2023Forget-Me-Not: Learning to Forget in Text-to-Image Diffusion Modelscited by 301
- 2023DragDiffusion: Harnessing Diffusion Models for Interactive Point-based Image Editingcited by 294
- 2023Text-to-image Diffusion Models in Generative AI: A Surveycited by 265
- 2023Ring-A-Bell! How Reliable are Concept Removal Methods for Diffusion Models?cited by 250
- 2023To Generate or Not? Safety-Driven Unlearned Diffusion Models Are Still Easy To Generate Unsafe Images ... For Nowcited by 210
- 2023MMA-Diffusion: MultiModal Attack on Diffusion Modelscited by 194
- 2023Unsafe Diffusion: On the Generation of Unsafe Images and Hateful Memes From Text-To-Image Modelscited by 175
- 2023One-Dimensional Adapter to Rule Them All: Concepts, Diffusion Models and Erasing Applicationscited by 169
- 2024Defensive Unlearning with Adversarial Training for Robust Concept Erasure in Diffusion Modelscited by 168
- 2022Can Machines Help Us Answering Question 16 in Datasheets, and In Turn Reflecting on Inappropriate Content?cited by 155
- 2023Receler: Reliable Concept Erasing of Text-to-Image Diffusion Models via Lightweight Eraserscited by 120
- 2023Circumventing Concept Erasure Methods For Text-to-Image Generative Modelscited by 85
- 2024Get What You Want, Not What You Don't: Image Content Suppression for Text-to-Image Diffusion Modelscited by 63
- 2023DiffUTE: Universal Text Editing Diffusion Modelcited by 45
- 2024Generative Unlearning for Any Identitycited by 19
- 2024Probing Unlearned Diffusion Models: A Transferable Adversarial Attack Perspectivecited by 13
Built on by
Citing papers per year: 2025: 1; 2026: 8.
9 papers.
- 2025Image Can Bring Your Memory Back: A Novel Multi-Modal Guided Attack against Image Generation Model Unlearningcited by 10
- 2026SafeRedir: Prompt Embedding Redirection for Robust Unlearning in Image Generation Modelscited by 3
- 2026Exposing and Defending the Achilles' Heel of Video Mixture-of-Expertscited by 3
- 2026Correct When Paired, Wrong When Split: Decoupling and Editing Modality-Specific Neurons in MLLMscited by 1
- 2026RASteer: Retain-Aware Activation Steering for Concept Erasure in Diffusion Modelscited by 1
- 2026FIT to Forget: Robust Continual Unlearning for Large Language Modelscited by 0
- 2026REFORGE: Multi-modal Attacks Reveal Vulnerable Concept Unlearning in Image Generation Modelscited by 0
- 2026Inference-Time Concept Suppression and Video-Centric Evaluation for Text-to-Video Modelscited by 0
- 2026Continual Concept Erasure in Diffusion Models by Suppressing Cross-Edit Interferencecited by 0
- 2026Continual Concept Erasure in Diffusion Models by Suppressing Cross-Edit Interference1 Oct 2026
- 2026RASteer: Retain-Aware Activation Steering for Concept Erasure in Diffusion Models1 Oct 2026
- 2026Inference-Time Concept Suppression and Video-Centric Evaluation for Text-to-Video Models15 Jul 2026
- 2026Correct When Paired, Wrong When Split: Decoupling and Editing Modality-Specific Neurons in MLLMs20 Apr 2026
- 2026REFORGE: Multi-modal Attacks Reveal Vulnerable Concept Unlearning in Image Generation Models17 Mar 2026
- 2026Exposing and Defending the Achilles' Heel of Video Mixture-of-Experts1 Feb 2026
- 2026FIT to Forget: Robust Continual Unlearning for Large Language Models29 Jan 2026
- 2026SafeRedir: Prompt Embedding Redirection for Robust Unlearning in Image Generation Models13 Jan 2026
- 2025Image Can Bring Your Memory Back: A Novel Multi-Modal Guided Attack against Image Generation Model Unlearning9 Jul 2025
Similar, not cited
Close in wording, no citation either way
- 2024Machine Unlearning for Image-to-Image Generative Models
- 2025Generative Model Unlearning: A Survey through Target Events, Unlearning Operators, and Evaluation Protocols
- 2025LoReUn: Data Itself Implicitly Provides Cues to Improve Machine Unlearning
- 2024On the Limitations and Prospects of Machine Unlearning for Generative AI
- 2026Forgetting Similar Samples: Can Machine Unlearning Do it Better?
- 2023Machine Unlearning: A Survey
- 2024Deep Unlearn: Benchmarking Machine Unlearning for Image Classification
- 2024Machine Unlearning in Generative AI: A Survey