Generative Model Unlearning: A Survey through Target Events, Unlearning Operators, and Evaluation Protocols
On the map: LLM safety and security → Vision-language and text-to-image safety
Abstract (arXiv)
With the rapid advancement of generative models, privacy, copyright, safety, and reliability risks have attracted growing attention. To mitigate these risks, machine unlearning has been increasingly adapted from traditional classification models to generative settings. Despite notable progress, existing studies remain fragmented in their target definitions, unlearning mechanisms, and evaluation protocols, making objective comparison difficult across models, modalities, and applications. Moreover, modality-specific surveys often overlook the shared structure of Generative Model Unlearning (GenMU). To address this gap, we provide a comprehensive review of GenMU and formulate it as target-constrained distributional projection: given a target event, an unlearning operator transforms the generative distribution to suppress target-related outputs while preserving useful behavior and controlling operator cost. Under this framework, an unlearning request is specified by a target event, implemented through an unlearning operator, and assessed by empirical evidence over target suppression, distribution preservation, and operator cost. We further reorganize existing GenMU studies under this view. From this perspective, we provide the first explicit and unified account of how GenMU connects to mainstream applications, including privacy protection, copyright and style protection, safety alignment, hallucination mitigation, and deployment defense. Finally, we identify key open problems and future directions toward reliable, scalable, robust, and auditable GenMU. We consistently maintain the related open-source materials at https://github.com/caxLee/GenMU-Survey.
Key facts. Cited by 4 papers in the map (data through 14 Oct 2026). Placed in Vision-language and text-to-image safety, one of 12 directions in LLM safety and security. Builds on 109 of its 147 references that are in the map. First posted on arXiv 26 Jul 2025.
Builds on
109 of 147 references.
Closest ancestors · 16
Same direction, newest first
- 2025Detect-and-Guide: Self-regulation of Diffusion Models for Safe Text-to-Image Generation via Guideline Token Optimization19 Mar
- 2025SAeUron: Interpretable Concept Unlearning in Diffusion Models with Sparse Autoencoders29 Jan
- 2024Efficient Fine-Tuning and Concept Suppression for Pruned Diffusion Models19 Dec
- 2024Boosting Alignment for Post-Unlearning Text-to-Image Generative Models9 Dec
- 2024Erasing Undesirable Concepts in Diffusion Models with Adversarial Preservation21 Oct
- 2024Holistic Unlearning Benchmark: A Multi-Faceted Evaluation for Text-to-Image Diffusion Model Unlearning8 Oct
- 2024Controllable Unlearning for Image-to-Image Generative Models via varepsilon-Constrained Optimization3 Aug
- 2024ConceptPrune: Concept Editing in Diffusion Models via Skilled Neuron Pruning29 May
- 2024Defensive Unlearning with Adversarial Training for Robust Concept Erasure in Diffusion Models24 May
- 2024SafeGen: Mitigating Sexually Explicit Content Generation in Text-to-Image Models10 Apr
- 2024UnlearnCanvas: Stylized Image Dataset for Enhanced Machine Unlearning Evaluation in Diffusion Models19 Feb
- 2024Machine Unlearning for Image-to-Image Generative Models1 Feb
4 more
- 2023FAST: Feature Aware Similarity Thresholding for Weak Unlearning in Black-Box Generative Models22 Dec
- 2023To Generate or Not? Safety-Driven Unlearned Diffusion Models Are Still Easy To Generate Unsafe Images ... For Now18 Oct
- 2023Gradient Surgery for One-shot Unlearning on Generative Model10 Jul
- 2023Feature Unlearning for Pre-trained GANs and VAEs10 Mar
Other references · 93
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
- 2020Denoising Diffusion Probabilistic Modelscited by 21,076
- 2018The Unreasonable Effectiveness of Deep Features as a Perceptual Metriccited by 11,177
- 2021Training Verifiers to Solve Math Word Problemscited by 10,109
- 2020Measuring Massive Multitask Language Understandingcited by 7,963
- 2019BERTScore: Evaluating Text Generation with BERTcited by 5,512
- 2021Measuring Mathematical Problem Solving With the MATH Datasetcited by 5,371
- 2022LAION-5B: An open large-scale dataset for training next generation image-text modelscited by 4,152
- 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,975
- 2021CLIPScore: A Reference-free Evaluation Metric for Image Captioningcited by 2,424
- 2020Extracting Training Data from Large Language Modelscited by 2,189
- 2023MMMU: A Massive Multi-discipline Multimodal Understanding and Reasoning Benchmark for Expert AGIcited by 2,080
38 more
- 2018Demystifying MMD GANscited by 1,293
- 2021ViLT: Vision-and-Language Transformer Without Convolution or Region Supervisioncited by 1,230
- 2019Machine Unlearningcited by 1,061
- 2023Extracting Training Data from Diffusion Modelscited by 732
- 2023Language Is Not All You Need: Aligning Perception with Language Modelscited by 543
- 2024TOFU: A Task of Fictitious Unlearning for LLMscited by 533
- 2022Safe Latent Diffusion: Mitigating Inappropriate Degeneration in Diffusion Modelscited by 513
- 2024Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearningcited by 504
- 2024Evaluating Text-to-Visual Generation with Image-to-Text Generationcited by 474
- 2021DExperts: Decoding-Time Controlled Text Generation with Experts and Anti-Expertscited by 441
- 2022Knowledge Unlearning for Mitigating Privacy Risks in Language Modelscited by 437
- 2023TIFA: Accurate and Interpretable Text-to-Image Faithfulness Evaluation with Question Answeringcited by 428
- 2023Unified Concept Editing in Diffusion Modelscited by 388
- 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generationcited by 386
- 2023Who's Harry Potter? Approximate Unlearning in LLMscited by 381
- 2023Editing Large Language Models: Problems, Methods, and Opportunitiescited by 372
- 2024MACE: Mass Concept Erasure in Diffusion Modelscited by 307
- 2024PKU-SafeRLHF: Towards Multi-Level Safety Alignment for LLMs with Human Preferencecited by 261
- 2024MUSE: Machine Unlearning Six-Way Evaluation for Language Modelscited by 261
- 2022Quark: Controllable Text Generation with Reinforced Unlearningcited by 237
- 2023In-Context Unlearning: Language Models as Few Shot Unlearnerscited by 224
- 2023Unlearn What You Want to Forget: Efficient Unlearning for LLMscited by 215
- 2024Diffusion Model-Based Image Editing: A Surveycited by 212
- 2023One-Dimensional Adapter to Rule Them All: Concepts, Diffusion Models and Erasing Applicationscited by 169
- 2022The Privacy Onion Effect: Memorization is Relativecited by 136
- 2023Receler: Reliable Concept Erasing of Text-to-Image Diffusion Models via Lightweight Eraserscited by 120
- 2024Machine Unlearning of Pre-trained Large Language Modelscited by 119
- 2024Large Language Model Unlearning via Embedding-Corrupted Promptscited by 116
- 2024SOUL: Unlocking the Power of Second-Order Optimization for LLM Unlearningcited by 104
- 2023KGA: A General Machine Unlearning Framework Based on Knowledge Gap Alignmentcited by 99
- 2024Guardrail Baselines for Unlearning in LLMscited by 96
- 2024Reversing the Forget-Retain Objectives: An Efficient LLM Unlearning Framework from Logit Differencecited by 88
- 2024Controllable Generation with Text-to-Image Diffusion Models: A Surveycited by 83
- 2024Protecting Privacy in Multimodal Large Language Models with MLLMU-Benchcited by 64
- 2023Right to be Forgotten in the Era of Large Language Models: Implications, Challenges, and Solutionscited by 60
- 2023Concept Algebra for (Score-Based) Text-Controlled Generative Modelscited by 59
- 2024Applying sparse autoencoders to unlearn knowledge in language modelscited by 59
- 2023Localizing and Editing Knowledge in Text-to-Image Generative Modelscited by 54
50 most cited of 93 All 93 (JSON)
Built on by
Citing papers per year: 2025: 1; 2026: 3.
4 papers.
- 2025SAEmnesia: Erasing Concepts in Diffusion Models with Supervised Sparse Autoencoderscited by 10
- 2026MLUBench: A Benchmark for Lifelong Unlearning Evaluation in MLLMscited by 1
- 2026Look But Don't Touch with Sparse Autoencoders for Unlearning in Diffusion Modelscited by 1
- 2026Efficient Unlearning through Maximizing Relearning Convergence Delaycited by 0
- 2026Look But Don't Touch with Sparse Autoencoders for Unlearning in Diffusion Models30 Jun 2026
- 2026MLUBench: A Benchmark for Lifelong Unlearning Evaluation in MLLMs11 Jun 2026
- 2026Efficient Unlearning through Maximizing Relearning Convergence Delay10 Apr 2026
- 2025SAEmnesia: Erasing Concepts in Diffusion Models with Supervised Sparse Autoencoders23 Sep 2025
Similar, not cited
Close in wording, no citation either way
- 2024On the Limitations and Prospects of Machine Unlearning for Generative AI
- 2024Unlearning in- vs. out-of-distribution data in LLMs under gradient-based method
- 2026Temper-Then-Tilt: Principled Unlearning for Generative Models through Tempering and Classifier Guidance
- 2024Machine Unlearning Doesn't Do What You Think: Lessons for Generative AI Policy and Research
- 2025Reference-Specific Unlearning Metrics Can Hide the Truth: A Reality Check
- 2024Rethinking Machine Unlearning for Large Language Models
- 2024Learn while Unlearn: An Iterative Unlearning Framework for Generative Language Models
- 2025UNO: Unlearning via Orthogonalization in Generative models