mlsanityData to 14 Oct 2026

SuMa: A Subspace Mapping Approach for Robust and Effective Concept Erasure in Text-to-Image Diffusion Models

arXiv 2509.05625 ↗First posted 6 Sep 2025cs.CVcited by 8

On the map: Diffusion models → Robustness, privacy and adversarial aspects

Abstract (arXiv)

The rapid growth of text-to-image diffusion models has raised concerns about their potential misuse in generating harmful or unauthorized contents. To address these issues, several Concept Erasure methods have been proposed. However, most of them fail to achieve both robustness, i.e., the ability to robustly remove the target concept., and effectiveness, i.e., maintaining image quality. While few recent techniques successfully achieve these goals for NSFW concepts, none could handle narrow concepts such as copyrighted characters or celebrities. Erasing these narrow concepts is critical in addressing copyright and legal concerns. However, erasing them is challenging due to their close distances to non-target neighboring concepts, requiring finer-grained manipulation. In this paper, we introduce Subspace Mapping (SuMa), a novel method specifically designed to achieve both robustness and effectiveness in easing these narrow concepts. SuMa first derives a target subspace representing the concept to be erased and then neutralizes it by mapping it to a reference subspace that minimizes the distance between the two. This mapping ensures the target concept is robustly erased while preserving image quality. We conduct extensive experiments with SuMa across four tasks: subclass erasure, celebrity erasure, artistic style erasure, and instance erasure and compare the results with current state-of-the-art methods. Our method achieves image quality comparable to approaches focused on effectiveness, while also yielding results that are on par with methods targeting completeness.

Key facts. Cited by 8 papers in the map (data through 14 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 32 of its 37 references that are in the map. First posted on arXiv 6 Sep 2025.

Builds on

32 of 37 references.

Closest ancestors · 11

Same direction, newest first

  1. 2024Erasing Undesirable Concepts in Diffusion Models with Adversarial Preservation21 Oct
  2. 2024STEREO: A Two-Stage Framework for Adversarially Robust Concept Erasing from Text-to-Image Diffusion Models29 Aug
  3. 2024R.A.C.E.: Robust Adversarial Concept Erasure for Secure Text-to-Image Diffusion Model25 May
  4. 2024Defensive Unlearning with Adversarial Training for Robust Concept Erasure in Diffusion Models24 May
  5. 2024MACE: Mass Concept Erasure in Diffusion Models10 Mar
  6. 2023One-Dimensional Adapter to Rule Them All: Concepts, Diffusion Models and Erasing Applications26 Dec
  7. 2023Ring-A-Bell! How Reliable are Concept Removal Methods for Diffusion Models?16 Oct
  8. 2023Prompting4Debugging: Red-Teaming Text-to-Image Diffusion Models by Finding Problematic Prompts12 Sep
  9. 2023Unified Concept Editing in Diffusion Models25 Aug
  10. 2023Ablating Concepts in Text-to-Image Diffusion Models23 Mar
  11. 2023Erasing Concepts from Diffusion Models13 Mar

Other references · 21

  1. 2015Deep Residual Learning for Image Recognitioncited by 52,096
  2. 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 30,186
  3. 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,863
  4. 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,380
  5. 2014ImageNet Large Scale Visual Recognition Challengecited by 8,498
  6. 2023Visual Instruction Tuningcited by 7,869
  7. 2022Hierarchical Text-Conditional Image Generation with CLIP Latentscited by 6,585
  8. 2022Photorealistic Text-to-Image Diffusion Models with Deep Language Understandingcited by 6,355
  9. 2022Classifier-Free Diffusion Guidancecited by 5,847
  10. 2022LAION-5B: An open large-scale dataset for training next generation image-text modelscited by 4,152
  11. 2021GLIDE: Towards Photorealistic Image Generation and Editing with Text-Guided Diffusion Modelscited by 3,614
  12. 2022An Image is Worth One Word: Personalizing Text-to-Image Generation using Textual Inversioncited by 2,245
9 more
  1. 2022Scaling Autoregressive Models for Content-Rich Text-to-Image Generationcited by 1,295
  2. 2023Diffusion Model Alignment Using Direct Preference Optimizationcited by 790
  3. 2023Muse: Text-To-Image Generation via Masked Generative Transformerscited by 648
  4. 2022Diffusion Art or Digital Forgery? Investigating Data Replication in Diffusion Modelscited by 424
  5. 2023Glaze: Protecting Artists from Style Mimicry by Text-to-Image Modelscited by 205
  6. 2020fastai: A Layered API for Deep Learningcited by 183
  7. 2015Large-scale Classification of Fine-Art Paintings: Learning The Right Metric on The Right Featurecited by 182
  8. 2023Circumventing Concept Erasure Methods For Text-to-Image Generative Modelscited by 85
  9. 2024Direct Unlearning Optimization for Robust and Safe Text-to-Image Modelscited by 50

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2026: 8.

8 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2025Safe and Reliable Diffusion Models via Subspace Projection
  2. 2026To Erase, or Not to Erase: Robust Training-Free Concept Erasure with Preservation aware Adaptive Ranked Subspace Expansion
  3. 2025Comprehensive Assessment and Analysis for NSFW Content Erasure in Text-to-Image Diffusion Models
  4. 2025A Comprehensive Survey on Concept Erasure in Text-to-Image Diffusion Models
  5. 2025Comprehensive Evaluation and Analysis for NSFW Concept Erasure in Text-to-Image Diffusion Models
  6. 2024Reliable and Efficient Concept Erasure of Text-to-Image Diffusion Models
  7. 2024Precise, Fast, and Low-cost Concept Erasure in Value Space: Orthogonal Complement Matters
  8. 2026Erasing Without Collateral Damage: Precise Concept Removal in Diffusion Models