Concept Pinpoint Eraser for Text-to-image Diffusion Models via Residual Attention Gate
On the map: Diffusion models → Robustness, privacy and adversarial aspects
Abstract (arXiv)
Remarkable progress in text-to-image diffusion models has brought a major concern about potentially generating images on inappropriate or trademarked concepts. Concept erasing has been investigated with the goals of deleting target concepts in diffusion models while preserving other concepts with minimal distortion. To achieve these goals, recent concept erasing methods usually fine-tune the cross-attention layers of diffusion models. In this work, we first show that merely updating the cross-attention layers in diffusion models, which is mathematically equivalent to adding linear modules to weights, may not be able to preserve diverse remaining concepts. Then, we propose a novel framework, dubbed Concept Pinpoint Eraser (CPE), by adding nonlinear Residual Attention Gates (ResAGs) that selectively erase (or cut) target concepts while safeguarding remaining concepts from broad distributions by employing an attention anchoring loss to prevent the forgetting. Moreover, we adversarially train CPE with ResAG and learnable text embeddings in an iterative manner to maximize erasing performance and enhance robustness against adversarial attacks. Extensive experiments on the erasure of celebrities, artistic styles, and explicit contents demonstrated that the proposed CPE outperforms prior arts by keeping diverse remaining concepts while deleting the target concepts with robustness against attack prompts. Code is available at https://github.com/Hyun1A/CPE
Key facts. Cited by 16 papers in the map (data through 14 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 56 of its 73 references that are in the map. First posted on arXiv 28 Jun 2025.
Builds on
56 of 73 references.
Closest ancestors · 14
Same direction, newest first
- 2024Reliable and Efficient Concept Erasure of Text-to-Image Diffusion Models17 Jul
- 2024Defensive Unlearning with Adversarial Training for Robust Concept Erasure in Diffusion Models24 May
- 2024MACE: Mass Concept Erasure in Diffusion Models10 Mar
- 2023One-Dimensional Adapter to Rule Them All: Concepts, Diffusion Models and Erasing Applications26 Dec
- 2023Receler: Reliable Concept Erasing of Text-to-Image Diffusion Models via Lightweight Erasers29 Nov
- 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generation19 Oct
- 2023To Generate or Not? Safety-Driven Unlearned Diffusion Models Are Still Easy To Generate Unsafe Images ... For Now18 Oct
- 2023Ring-A-Bell! How Reliable are Concept Removal Methods for Diffusion Models?16 Oct
- 2023Unified Concept Editing in Diffusion Models25 Aug
- 2023Forget-Me-Not: Learning to Forget in Text-to-Image Diffusion Models30 Mar
- 2023Ablating Concepts in Text-to-Image Diffusion Models23 Mar
- 2023Erasing Concepts from Diffusion Models13 Mar
2 more
Other references · 42
- 2017Attention Is All You Needcited by 60,361
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
- 2020Denoising Diffusion Probabilistic Modelscited by 21,076
- 2015U-Net: Convolutional Networks for Biomedical Image Segmentationcited by 19,713
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,863
- 2020Score-Based Generative Modeling through Stochastic Differential Equationscited by 9,122
- 2021Diffusion Models Beat GANs on Image Synthesiscited by 8,255
- 2023Segment Anythingcited by 8,234
- 2022Hierarchical Text-Conditional Image Generation with CLIP Latentscited by 6,585
- 2022Photorealistic Text-to-Image Diffusion Models with Deep Language Understandingcited by 6,355
- 2023Adding Conditional Control to Text-to-Image Diffusion Modelscited by 5,503
- 2017mixup: Beyond Empirical Risk Minimizationcited by 5,183
30 more
- 2016SGDR: Stochastic Gradient Descent with Warm Restartscited by 5,045
- 2016Overcoming catastrophic forgetting in neural networkscited by 4,787
- 2017Neural Discrete Representation Learningcited by 4,712
- 2014Neural Machine Translation by Jointly Learning to Align and Translatecited by 4,548
- 2022LAION-5B: An open large-scale dataset for training next generation image-text modelscited by 4,152
- 2021GLIDE: Towards Photorealistic Image Generation and Editing with Text-Guided Diffusion Modelscited by 3,614
- 2021CLIPScore: A Reference-free Evaluation Metric for Image Captioningcited by 2,424
- 2021Learning to Prompt for Vision-Language Modelscited by 2,281
- 2021LAION-400M: Open Dataset of CLIP-Filtered 400 Million Image-Text Pairscited by 1,555
- 2018Attention U-Net: Learning Where to Look for the Pancreascited by 1,435
- 2017Bottom-Up and Top-Down Attention for Image Captioning and Visual Question Answeringcited by 1,312
- 2018Demystifying MMD GANscited by 1,293
- 2021CrossViT: Cross-Attention Multi-Scale Vision Transformer for Image Classificationcited by 806
- 2021GPT Understands, Toocited by 716
- 2023Muse: Text-To-Image Generation via Masked Generative Transformerscited by 648
- 2022Diffusion Art or Digital Forgery? Investigating Data Replication in Diffusion Modelscited by 424
- 2021Persistent Anti-Muslim Bias in Large Language Modelscited by 377
- 2023Visual-Language Prompt Tuning with Knowledge-guided Context Optimizationcited by 308
- 2020Large image datasets: A pyrrhic win for computer vision?cited by 237
- 2023TF-ICON: Diffusion-Based Training-Free Cross-Domain Image Compositioncited by 182
- 2023Selective Amnesia: A Continual Learning Approach to Forgetting in Deep Generative Modelscited by 177
- 2023Editing Implicit Assumptions in Text-to-Image Diffusion Modelscited by 130
- 2021Unsupervised Learning of Compositional Energy Conceptscited by 71
- 2017Deep Gaussian Mixture Modelscited by 30
- 2023Universality and Limitations of Prompt Tuningcited by 30
- 2021Noisy Feature Mixupcited by 27
- 2019Self-Attention Enhanced Selective Gate with Entity-Aware Embedding for Distantly Supervised Relation Extractioncited by 18
- 2023RegaVAE: A Retrieval-Augmented Gaussian Mixture Variational Auto-Encoder for Language Modelingcited by 12
- 2023Online Continual Learning on Hierarchical Label Expansioncited by 11
- 2023Doubly Perturbed Task Free Continual Learningcited by 5
Built on by
Citing papers per year: 2025: 6; 2026: 10.
16 papers.
Sort:
By area:
- 2026Mass Concept Erasure in Diffusion Models with Concept Hierarchycited by 14
- 2025SAEmnesia: Erasing Concepts in Diffusion Models with Supervised Sparse Autoencoderscited by 10
- 2025Now You See It, Now You Don't - Instant Concept Erasure for Safe Text-to-Image and Video Generationcited by 4
- 2026SafeRedir: Prompt Embedding Redirection for Robust Unlearning in Image Generation Modelscited by 3
- 2025VCE: Safe Autoregressive Image Generation via Visual Contrast Exploitationcited by 2
- 2025GrOCE:Graph-Guided Online Concept Erasure for Text-to-Image Diffusion Modelscited by 2
- 2025M-ErasureBench: A Comprehensive Multimodal Evaluation Benchmark for Concept Erasure in Diffusion Modelscited by 2
- 2026Orthogonal Concept Erasure for Diffusion Modelscited by 2
- 2025Rethinking Robust Adversarial Concept Erasure in Diffusion Modelscited by 1
- 2026Critic-Guided Reinforcement Unlearning in Text-to-Image Diffusioncited by 1
- 2026Unlearning the Unpromptable: Prompt-free Instance Unlearning in Diffusion Modelscited by 1
- 2026RASteer: Retain-Aware Activation Steering for Concept Erasure in Diffusion Modelscited by 1
4 more
- 2026BARRIER: Bounded Activation Regions for Robust Information Erasurecited by 0
- 2026SafeDiffusion-R1: Online Reward Steering for Safe Diffusion Post-Trainingcited by 0
- 2026SACE: Concept Erasure at the Semantic Singularity in Visual Autoregressive Modelscited by 0
- 2026You Can't Have It Both Ways: Concept Entanglement Limits Diffusion Model Unlearningcited by 0
- 2026RASteer: Retain-Aware Activation Steering for Concept Erasure in Diffusion Models1 Oct 2026
- 2026You Can't Have It Both Ways: Concept Entanglement Limits Diffusion Model Unlearning28 Sep 2026
- 2026SACE: Concept Erasure at the Semantic Singularity in Visual Autoregressive Models14 Jun 2026
- 2026Orthogonal Concept Erasure for Diffusion Models27 May 2026
- 2026SafeDiffusion-R1: Online Reward Steering for Safe Diffusion Post-Training18 May 2026
- 2026BARRIER: Bounded Activation Regions for Robust Information Erasure15 May 2026
- 2026Unlearning the Unpromptable: Prompt-free Instance Unlearning in Diffusion Models11 Mar 2026
- 2026SafeRedir: Prompt Embedding Redirection for Robust Unlearning in Image Generation Models13 Jan 2026
- 2026Mass Concept Erasure in Diffusion Models with Concept Hierarchy6 Jan 2026
- 2026Critic-Guided Reinforcement Unlearning in Text-to-Image Diffusion6 Jan 2026
- 2025M-ErasureBench: A Comprehensive Multimodal Evaluation Benchmark for Concept Erasure in Diffusion Models28 Dec 2025
- 2025Now You See It, Now You Don't - Instant Concept Erasure for Safe Text-to-Image and Video Generation24 Nov 2025
4 more
- 2025GrOCE:Graph-Guided Online Concept Erasure for Text-to-Image Diffusion Models17 Nov 2025
- 2025Rethinking Robust Adversarial Concept Erasure in Diffusion Models31 Oct 2025
- 2025SAEmnesia: Erasing Concepts in Diffusion Models with Supervised Sparse Autoencoders23 Sep 2025
- 2025VCE: Safe Autoregressive Image Generation via Visual Contrast Exploitation21 Sep 2025
- 2026Mass Concept Erasure in Diffusion Models with Concept Hierarchycited by 14
- 2025SAEmnesia: Erasing Concepts in Diffusion Models with Supervised Sparse Autoencoderscited by 10
- 2025GrOCE:Graph-Guided Online Concept Erasure for Text-to-Image Diffusion Modelscited by 2
- 2025M-ErasureBench: A Comprehensive Multimodal Evaluation Benchmark for Concept Erasure in Diffusion Modelscited by 2
- 2026Orthogonal Concept Erasure for Diffusion Modelscited by 2
- 2025Rethinking Robust Adversarial Concept Erasure in Diffusion Modelscited by 1
- 2026Critic-Guided Reinforcement Unlearning in Text-to-Image Diffusioncited by 1
- 2026Unlearning the Unpromptable: Prompt-free Instance Unlearning in Diffusion Modelscited by 1
- 2026RASteer: Retain-Aware Activation Steering for Concept Erasure in Diffusion Modelscited by 1
- 2026SafeDiffusion-R1: Online Reward Steering for Safe Diffusion Post-Trainingcited by 0
- 2026You Can't Have It Both Ways: Concept Entanglement Limits Diffusion Model Unlearningcited by 0
- 2026RASteer: Retain-Aware Activation Steering for Concept Erasure in Diffusion Models1 Oct 2026
- 2026You Can't Have It Both Ways: Concept Entanglement Limits Diffusion Model Unlearning28 Sep 2026
- 2026Orthogonal Concept Erasure for Diffusion Models27 May 2026
- 2026SafeDiffusion-R1: Online Reward Steering for Safe Diffusion Post-Training18 May 2026
- 2026Unlearning the Unpromptable: Prompt-free Instance Unlearning in Diffusion Models11 Mar 2026
- 2026Mass Concept Erasure in Diffusion Models with Concept Hierarchy6 Jan 2026
- 2026Critic-Guided Reinforcement Unlearning in Text-to-Image Diffusion6 Jan 2026
- 2025M-ErasureBench: A Comprehensive Multimodal Evaluation Benchmark for Concept Erasure in Diffusion Models28 Dec 2025
- 2025GrOCE:Graph-Guided Online Concept Erasure for Text-to-Image Diffusion Models17 Nov 2025
- 2025Rethinking Robust Adversarial Concept Erasure in Diffusion Models31 Oct 2025
- 2025SAEmnesia: Erasing Concepts in Diffusion Models with Supervised Sparse Autoencoders23 Sep 2025
Similar, not cited
Close in wording, no citation either way
- 2025ACE: Attentional Concept Erasure in Diffusion Models
- 2026Empty SPACE: Cross-Attention Sparsity for Concept Erasure in Diffusion Models
- 2025Sparse Autoencoder as a Zero-Shot Classifier for Concept Erasing in Text-to-Image Diffusion Models
- 2026Erasing Without Collateral Damage: Precise Concept Removal in Diffusion Models
- 2026Erasing Thousands of Concepts: Towards Scalable and Practical Concept Erasure for Text-to-Image Diffusion Models
- 2025A Comprehensive Survey on Concept Erasure in Text-to-Image Diffusion Models
- 2024Erasing Concepts from Text-to-Image Diffusion Models with Few-shot Unlearning
- 2026Localized Concept Erasure in Text-to-Image Diffusion Models via High-Level Representation Misdirection