mlsanityData to 14 Oct 2026

VCE: Safe Autoregressive Image Generation via Visual Contrast Exploitation

arXiv 2509.16986 ↗First posted 21 Sep 2025cs.CVcited by 2

Not on the map. Why?

Abstract (arXiv)

Recently, autoregressive image generation models have wowed audiences with their remarkable capability in creating surprisingly realistic images. Models such as GPT-4o and LlamaGen can not only produce images that faithfully mimic renowned artistic styles like Ghibli, Van Gogh, or Picasso, but also potentially generate Not-Safe-For-Work (NSFW) content, raising significant concerns regarding copyright infringement and ethical use. Despite these concerns, methods to safeguard autoregressive text-to-image models remain underexplored. Previous concept erasure methods, primarily designed for diffusion models that operate in denoising latent space, are not directly applicable to autoregressive models that generate images token by token. To address this critical gap, we propose Visual Contrast Exploitation (VCE), a novel framework comprising: (1) an innovative contrastive image pair construction paradigm that precisely decouples unsafe concepts from their associated content semantics, and (2) a sophisticated DPO-based training approach that enhances the model's ability to identify and leverage visual contrastive features from image pairs, enabling precise concept erasure. Our comprehensive experiments across three challenging tasks-artist style erasure, explicit content erasure, and object removal-demonstrate that our method effectively secures the model, achieving state-of-the-art results while erasing unsafe concepts and maintaining the integrity of unrelated safe concepts. The code and models are available at https://github.com/Maplebb/VCE.

Key facts. Cited by 2 papers in the map (data through 14 Oct 2026). Builds on 46 of its 58 references that are in the map. First posted on arXiv 21 Sep 2025.

Builds on

46 of 58 references.

References · 46

  1. 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,863
  2. 2024The Llama 3 Herd of Modelscited by 14,715
  3. 2023LLaMA: Open and Efficient Foundation Language Modelscited by 14,132
  4. 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 8,065
  5. 2022Hierarchical Text-Conditional Image Generation with CLIP Latentscited by 6,585
  6. 2022Scalable Diffusion Models with Transformerscited by 6,054
  7. 2024Qwen2.5 Technical Reportcited by 4,942
  8. 2017Neural Discrete Representation Learningcited by 4,712
  9. 2024GPT-4o System Cardcited by 4,588
  10. 2021Zero-Shot Text-to-Image Generationcited by 4,288
  11. 2024Scaling Rectified Flow Transformers for High-Resolution Image Synthesiscited by 4,181
  12. 2022LAION-5B: An open large-scale dataset for training next generation image-text modelscited by 4,152
34 more
  1. 2020Taming Transformers for High-Resolution Image Synthesiscited by 3,253
  2. 2021CLIPScore: A Reference-free Evaluation Metric for Image Captioningcited by 2,424
  3. 2024Mixtral of Expertscited by 1,823
  4. 2024Visual Autoregressive Modeling: Scalable Image Generation via Next-Scale Predictioncited by 1,023
  5. 2025Janus-Pro: Unified Multimodal Understanding and Generation with Data and Model Scalingcited by 812
  6. 2023Diffusion Model Alignment Using Direct Preference Optimizationcited by 790
  7. 2024Autoregressive Model Beats Diffusion: Llama for Scalable Image Generationcited by 777
  8. 2024Autoregressive Image Generation without Vector Quantizationcited by 651
  9. 2023Erasing Concepts from Diffusion Modelscited by 539
  10. 2022Safe Latent Diffusion: Mitigating Inappropriate Degeneration in Diffusion Modelscited by 513
  11. 2023Unified Concept Editing in Diffusion Modelscited by 388
  12. 2023Ablating Concepts in Text-to-Image Diffusion Modelscited by 317
  13. 2024MACE: Mass Concept Erasure in Diffusion Modelscited by 307
  14. 2022Red-Teaming the Stable Diffusion Safety Filtercited by 264
  15. 2023Glaze: Protecting Artists from Style Mimicry by Text-to-Image Modelscited by 205
  16. 2023Selective Amnesia: A Continual Learning Approach to Forgetting in Deep Generative Modelscited by 177
  17. 2023Unsafe Diffusion: On the Generation of Unsafe Images and Hateful Memes From Text-To-Image Modelscited by 175
  18. 2023One-Dimensional Adapter to Rule Them All: Concepts, Diffusion Models and Erasing Applicationscited by 169
  19. 2024Defensive Unlearning with Adversarial Training for Robust Concept Erasure in Diffusion Modelscited by 168
  20. 2023Raising the Cost of Malicious AI-Powered Image Editingcited by 163
  21. 2024Fluid: Scaling Autoregressive Text-to-image Generative Models with Continuous Tokenscited by 147
  22. 2024Reliable and Efficient Concept Erasure of Text-to-Image Diffusion Modelscited by 133
  23. 2024SAFREE: Training-Free and Adaptive Guard for Safe Text-to-Image And Video Generationcited by 133
  24. 2023Receler: Reliable Concept Erasing of Text-to-Image Diffusion Models via Lightweight Eraserscited by 120
  25. 2024EraseAnything: Enabling Concept Erasure in Rectified Flow Transformerscited by 95
  26. 2024RandAR: Decoder-only Autoregressive Visual Generation in Random Orderscited by 83
  27. 2024ConceptPrune: Concept Editing in Diffusion Models via Skilled Neuron Pruningcited by 55
  28. 2024Direct Unlearning Optimization for Robust and Safe Text-to-Image Modelscited by 50
  29. 2024Erasing Undesirable Concepts in Diffusion Models with Adversarial Preservationcited by 50
  30. 2024Precise, Fast, and Low-cost Concept Erasure in Value Space: Orthogonal Complement Matterscited by 40
  31. 2025Fantastic Targets for Concept Erasure in Diffusion Models and Where To Find Themcited by 37
  32. 2025SPEED: Scalable, Precise, and Efficient Concept Erasure for Diffusion Modelscited by 36
  33. 2025Concept Pinpoint Eraser for Text-to-image Diffusion Models via Residual Attention Gatecited by 16
  34. 2025DuMo: Dual Encoder Modulation Network for Precise Concept Erasurecited by 11

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2026: 2.

2 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2025Closing the Safety Gap: Surgical Concept Erasure in Visual Autoregressive Models
  2. 2026Safe Autoregressive Image Generation with Iterative Self-Improving Codebooks
  3. 2026SACE: Concept Erasure at the Semantic Singularity in Visual Autoregressive Models
  4. 2026Obliviate: Erasing Concepts from Autoregressive Image Generation Models
  5. 2025Safe and Reliable Diffusion Models via Subspace Projection
  6. 2026VisualErase: Dual-Branch Visual Trajectory Redirection for Robust Concept Erasure in Text-to-Image Diffusion Models
  7. 2025Safe-VAR: Safe Visual Autoregressive Model for Text-to-Image Generative Watermarking
  8. 2025Visual Autoregressive Modeling for Instruction-Guided Image Editing