VCE: Safe Autoregressive Image Generation via Visual Contrast Exploitation
Not on the map. Why?
Abstract (arXiv)
Recently, autoregressive image generation models have wowed audiences with their remarkable capability in creating surprisingly realistic images. Models such as GPT-4o and LlamaGen can not only produce images that faithfully mimic renowned artistic styles like Ghibli, Van Gogh, or Picasso, but also potentially generate Not-Safe-For-Work (NSFW) content, raising significant concerns regarding copyright infringement and ethical use. Despite these concerns, methods to safeguard autoregressive text-to-image models remain underexplored. Previous concept erasure methods, primarily designed for diffusion models that operate in denoising latent space, are not directly applicable to autoregressive models that generate images token by token. To address this critical gap, we propose Visual Contrast Exploitation (VCE), a novel framework comprising: (1) an innovative contrastive image pair construction paradigm that precisely decouples unsafe concepts from their associated content semantics, and (2) a sophisticated DPO-based training approach that enhances the model's ability to identify and leverage visual contrastive features from image pairs, enabling precise concept erasure. Our comprehensive experiments across three challenging tasks-artist style erasure, explicit content erasure, and object removal-demonstrate that our method effectively secures the model, achieving state-of-the-art results while erasing unsafe concepts and maintaining the integrity of unrelated safe concepts. The code and models are available at https://github.com/Maplebb/VCE.
Key facts. Cited by 2 papers in the map (data through 14 Oct 2026). Builds on 46 of its 58 references that are in the map. First posted on arXiv 21 Sep 2025.
Builds on
46 of 58 references.
References · 46
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,863
- 2024The Llama 3 Herd of Modelscited by 14,715
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 14,132
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 8,065
- 2022Hierarchical Text-Conditional Image Generation with CLIP Latentscited by 6,585
- 2022Scalable Diffusion Models with Transformerscited by 6,054
- 2024Qwen2.5 Technical Reportcited by 4,942
- 2017Neural Discrete Representation Learningcited by 4,712
- 2024GPT-4o System Cardcited by 4,588
- 2021Zero-Shot Text-to-Image Generationcited by 4,288
- 2024Scaling Rectified Flow Transformers for High-Resolution Image Synthesiscited by 4,181
- 2022LAION-5B: An open large-scale dataset for training next generation image-text modelscited by 4,152
34 more
- 2020Taming Transformers for High-Resolution Image Synthesiscited by 3,253
- 2021CLIPScore: A Reference-free Evaluation Metric for Image Captioningcited by 2,424
- 2024Mixtral of Expertscited by 1,823
- 2024Visual Autoregressive Modeling: Scalable Image Generation via Next-Scale Predictioncited by 1,023
- 2025Janus-Pro: Unified Multimodal Understanding and Generation with Data and Model Scalingcited by 812
- 2023Diffusion Model Alignment Using Direct Preference Optimizationcited by 790
- 2024Autoregressive Model Beats Diffusion: Llama for Scalable Image Generationcited by 777
- 2024Autoregressive Image Generation without Vector Quantizationcited by 651
- 2023Erasing Concepts from Diffusion Modelscited by 539
- 2022Safe Latent Diffusion: Mitigating Inappropriate Degeneration in Diffusion Modelscited by 513
- 2023Unified Concept Editing in Diffusion Modelscited by 388
- 2023Ablating Concepts in Text-to-Image Diffusion Modelscited by 317
- 2024MACE: Mass Concept Erasure in Diffusion Modelscited by 307
- 2022Red-Teaming the Stable Diffusion Safety Filtercited by 264
- 2023Glaze: Protecting Artists from Style Mimicry by Text-to-Image Modelscited by 205
- 2023Selective Amnesia: A Continual Learning Approach to Forgetting in Deep Generative Modelscited by 177
- 2023Unsafe Diffusion: On the Generation of Unsafe Images and Hateful Memes From Text-To-Image Modelscited by 175
- 2023One-Dimensional Adapter to Rule Them All: Concepts, Diffusion Models and Erasing Applicationscited by 169
- 2024Defensive Unlearning with Adversarial Training for Robust Concept Erasure in Diffusion Modelscited by 168
- 2023Raising the Cost of Malicious AI-Powered Image Editingcited by 163
- 2024Fluid: Scaling Autoregressive Text-to-image Generative Models with Continuous Tokenscited by 147
- 2024Reliable and Efficient Concept Erasure of Text-to-Image Diffusion Modelscited by 133
- 2024SAFREE: Training-Free and Adaptive Guard for Safe Text-to-Image And Video Generationcited by 133
- 2023Receler: Reliable Concept Erasing of Text-to-Image Diffusion Models via Lightweight Eraserscited by 120
- 2024EraseAnything: Enabling Concept Erasure in Rectified Flow Transformerscited by 95
- 2024RandAR: Decoder-only Autoregressive Visual Generation in Random Orderscited by 83
- 2024ConceptPrune: Concept Editing in Diffusion Models via Skilled Neuron Pruningcited by 55
- 2024Direct Unlearning Optimization for Robust and Safe Text-to-Image Modelscited by 50
- 2024Erasing Undesirable Concepts in Diffusion Models with Adversarial Preservationcited by 50
- 2024Precise, Fast, and Low-cost Concept Erasure in Value Space: Orthogonal Complement Matterscited by 40
- 2025Fantastic Targets for Concept Erasure in Diffusion Models and Where To Find Themcited by 37
- 2025SPEED: Scalable, Precise, and Efficient Concept Erasure for Diffusion Modelscited by 36
- 2025Concept Pinpoint Eraser for Text-to-image Diffusion Models via Residual Attention Gatecited by 16
- 2025DuMo: Dual Encoder Modulation Network for Precise Concept Erasurecited by 11
Built on by
Citing papers per year: 2026: 2.
2 papers.
Similar, not cited
Close in wording, no citation either way
- 2025Closing the Safety Gap: Surgical Concept Erasure in Visual Autoregressive Models
- 2026Safe Autoregressive Image Generation with Iterative Self-Improving Codebooks
- 2026SACE: Concept Erasure at the Semantic Singularity in Visual Autoregressive Models
- 2026Obliviate: Erasing Concepts from Autoregressive Image Generation Models
- 2025Safe and Reliable Diffusion Models via Subspace Projection
- 2026VisualErase: Dual-Branch Visual Trajectory Redirection for Robust Concept Erasure in Text-to-Image Diffusion Models
- 2025Safe-VAR: Safe Visual Autoregressive Model for Text-to-Image Generative Watermarking
- 2025Visual Autoregressive Modeling for Instruction-Guided Image Editing