mlsanityData to 14 Oct 2026

Concept Pinpoint Eraser for Text-to-image Diffusion Models via Residual Attention Gate

arXiv 2506.22806 ↗First posted 28 Jun 2025cs.CV cs.LGcited by 16

On the map: Diffusion models → Robustness, privacy and adversarial aspects

Abstract (arXiv)

Remarkable progress in text-to-image diffusion models has brought a major concern about potentially generating images on inappropriate or trademarked concepts. Concept erasing has been investigated with the goals of deleting target concepts in diffusion models while preserving other concepts with minimal distortion. To achieve these goals, recent concept erasing methods usually fine-tune the cross-attention layers of diffusion models. In this work, we first show that merely updating the cross-attention layers in diffusion models, which is mathematically equivalent to adding linear modules to weights, may not be able to preserve diverse remaining concepts. Then, we propose a novel framework, dubbed Concept Pinpoint Eraser (CPE), by adding nonlinear Residual Attention Gates (ResAGs) that selectively erase (or cut) target concepts while safeguarding remaining concepts from broad distributions by employing an attention anchoring loss to prevent the forgetting. Moreover, we adversarially train CPE with ResAG and learnable text embeddings in an iterative manner to maximize erasing performance and enhance robustness against adversarial attacks. Extensive experiments on the erasure of celebrities, artistic styles, and explicit contents demonstrated that the proposed CPE outperforms prior arts by keeping diverse remaining concepts while deleting the target concepts with robustness against attack prompts. Code is available at https://github.com/Hyun1A/CPE

Key facts. Cited by 16 papers in the map (data through 14 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 56 of its 73 references that are in the map. First posted on arXiv 28 Jun 2025.

Builds on

56 of 73 references.

Closest ancestors · 14

Same direction, newest first

  1. 2024Reliable and Efficient Concept Erasure of Text-to-Image Diffusion Models17 Jul
  2. 2024Defensive Unlearning with Adversarial Training for Robust Concept Erasure in Diffusion Models24 May
  3. 2024MACE: Mass Concept Erasure in Diffusion Models10 Mar
  4. 2023One-Dimensional Adapter to Rule Them All: Concepts, Diffusion Models and Erasing Applications26 Dec
  5. 2023Receler: Reliable Concept Erasing of Text-to-Image Diffusion Models via Lightweight Erasers29 Nov
  6. 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generation19 Oct
  7. 2023To Generate or Not? Safety-Driven Unlearned Diffusion Models Are Still Easy To Generate Unsafe Images ... For Now18 Oct
  8. 2023Ring-A-Bell! How Reliable are Concept Removal Methods for Diffusion Models?16 Oct
  9. 2023Unified Concept Editing in Diffusion Models25 Aug
  10. 2023Forget-Me-Not: Learning to Forget in Text-to-Image Diffusion Models30 Mar
  11. 2023Ablating Concepts in Text-to-Image Diffusion Models23 Mar
  12. 2023Erasing Concepts from Diffusion Models13 Mar
2 more
  1. 2022Safe Latent Diffusion: Mitigating Inappropriate Degeneration in Diffusion Models9 Nov
  2. 2022Red-Teaming the Stable Diffusion Safety Filter3 Oct

Other references · 42

  1. 2017Attention Is All You Needcited by 60,361
  2. 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
  3. 2020Denoising Diffusion Probabilistic Modelscited by 21,076
  4. 2015U-Net: Convolutional Networks for Biomedical Image Segmentationcited by 19,713
  5. 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,863
  6. 2020Score-Based Generative Modeling through Stochastic Differential Equationscited by 9,122
  7. 2021Diffusion Models Beat GANs on Image Synthesiscited by 8,255
  8. 2023Segment Anythingcited by 8,234
  9. 2022Hierarchical Text-Conditional Image Generation with CLIP Latentscited by 6,585
  10. 2022Photorealistic Text-to-Image Diffusion Models with Deep Language Understandingcited by 6,355
  11. 2023Adding Conditional Control to Text-to-Image Diffusion Modelscited by 5,503
  12. 2017mixup: Beyond Empirical Risk Minimizationcited by 5,183
30 more
  1. 2016SGDR: Stochastic Gradient Descent with Warm Restartscited by 5,045
  2. 2016Overcoming catastrophic forgetting in neural networkscited by 4,787
  3. 2017Neural Discrete Representation Learningcited by 4,712
  4. 2014Neural Machine Translation by Jointly Learning to Align and Translatecited by 4,548
  5. 2022LAION-5B: An open large-scale dataset for training next generation image-text modelscited by 4,152
  6. 2021GLIDE: Towards Photorealistic Image Generation and Editing with Text-Guided Diffusion Modelscited by 3,614
  7. 2021CLIPScore: A Reference-free Evaluation Metric for Image Captioningcited by 2,424
  8. 2021Learning to Prompt for Vision-Language Modelscited by 2,281
  9. 2021LAION-400M: Open Dataset of CLIP-Filtered 400 Million Image-Text Pairscited by 1,555
  10. 2018Attention U-Net: Learning Where to Look for the Pancreascited by 1,435
  11. 2017Bottom-Up and Top-Down Attention for Image Captioning and Visual Question Answeringcited by 1,312
  12. 2018Demystifying MMD GANscited by 1,293
  13. 2021CrossViT: Cross-Attention Multi-Scale Vision Transformer for Image Classificationcited by 806
  14. 2021GPT Understands, Toocited by 716
  15. 2023Muse: Text-To-Image Generation via Masked Generative Transformerscited by 648
  16. 2022Diffusion Art or Digital Forgery? Investigating Data Replication in Diffusion Modelscited by 424
  17. 2021Persistent Anti-Muslim Bias in Large Language Modelscited by 377
  18. 2023Visual-Language Prompt Tuning with Knowledge-guided Context Optimizationcited by 308
  19. 2020Large image datasets: A pyrrhic win for computer vision?cited by 237
  20. 2023TF-ICON: Diffusion-Based Training-Free Cross-Domain Image Compositioncited by 182
  21. 2023Selective Amnesia: A Continual Learning Approach to Forgetting in Deep Generative Modelscited by 177
  22. 2023Editing Implicit Assumptions in Text-to-Image Diffusion Modelscited by 130
  23. 2021Unsupervised Learning of Compositional Energy Conceptscited by 71
  24. 2017Deep Gaussian Mixture Modelscited by 30
  25. 2023Universality and Limitations of Prompt Tuningcited by 30
  26. 2021Noisy Feature Mixupcited by 27
  27. 2019Self-Attention Enhanced Selective Gate with Entity-Aware Embedding for Distantly Supervised Relation Extractioncited by 18
  28. 2023RegaVAE: A Retrieval-Augmented Gaussian Mixture Variational Auto-Encoder for Language Modelingcited by 12
  29. 2023Online Continual Learning on Hierarchical Label Expansioncited by 11
  30. 2023Doubly Perturbed Task Free Continual Learningcited by 5

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 6; 2026: 10.

16 papers.

Sort:

By area:

Similar, not cited

Close in wording, no citation either way

  1. 2025ACE: Attentional Concept Erasure in Diffusion Models
  2. 2026Empty SPACE: Cross-Attention Sparsity for Concept Erasure in Diffusion Models
  3. 2025Sparse Autoencoder as a Zero-Shot Classifier for Concept Erasing in Text-to-Image Diffusion Models
  4. 2026Erasing Without Collateral Damage: Precise Concept Removal in Diffusion Models
  5. 2026Erasing Thousands of Concepts: Towards Scalable and Practical Concept Erasure for Text-to-Image Diffusion Models
  6. 2025A Comprehensive Survey on Concept Erasure in Text-to-Image Diffusion Models
  7. 2024Erasing Concepts from Text-to-Image Diffusion Models with Few-shot Unlearning
  8. 2026Localized Concept Erasure in Text-to-Image Diffusion Models via High-Level Representation Misdirection