A Single Neuron Works: Precise Concept Erasure in Text-to-Image Diffusion Models
On the map: Diffusion models → Robustness, privacy and adversarial aspects
also in 2 more
Abstract (arXiv)
Text-to-image models exhibit remarkable capabilities in image generation. However, they also pose safety risks of generating harmful content. A key challenge of existing concept erasure methods is the precise removal of target concepts while minimizing degradation of image quality. In this paper, we propose Single Neuron-based Concept Erasure (SNCE), a novel approach that can precisely prevent harmful content generation by manipulating only a single neuron. Specifically, we train a Sparse Autoencoder (SAE) to map text embeddings into a sparse, disentangled latent space, where individual neurons align tightly with atomic semantic concepts. To accurately locate neurons responsible for harmful concepts, we design a novel neuron identification method based on the modulated frequency scoring of activation patterns. By suppressing activations of the harmful concept-specific neuron, SNCE achieves surgical precision in concept erasure with minimal disruption to image quality. Experiments on various benchmarks demonstrate that SNCE achieves state-of-the-art results in target concept erasure, while preserving the model's generation capabilities for non-target concepts. Additionally, our method exhibits strong robustness against adversarial attacks, significantly outperforming existing methods.
Key facts. Cited by 8 papers in the map (data through 14 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 15 of its 25 references that are in the map. First posted on arXiv 25 Sep 2025.
Builds on
15 of 25 references.
Closest ancestors · 7
Same direction, newest first
- 2024SAFREE: Training-Free and Adaptive Guard for Safe Text-to-Image And Video Generation16 Oct
- 2024MACE: Mass Concept Erasure in Diffusion Models10 Mar
- 2023One-Dimensional Adapter to Rule Them All: Concepts, Diffusion Models and Erasing Applications26 Dec
- 2023Ring-A-Bell! How Reliable are Concept Removal Methods for Diffusion Models?16 Oct
- 2023Prompting4Debugging: Red-Teaming Text-to-Image Diffusion Models by Finding Problematic Prompts12 Sep
- 2023Unified Concept Editing in Diffusion Models25 Aug
- 2022Safe Latent Diffusion: Mitigating Inappropriate Degeneration in Diffusion Models9 Nov
Other references · 8
- 2014Microsoft COCO: Common Objects in Contextcited by 17,608
- 2022Photorealistic Text-to-Image Diffusion Models with Deep Language Understandingcited by 6,355
- 2021CLIPScore: A Reference-free Evaluation Metric for Image Captioningcited by 2,424
- 2023Sparse Autoencoders Find Highly Interpretable Features in Language Modelscited by 1,420
- 2024Sparse Feature Circuits: Discovering and Editing Interpretable Causal Graphs in Language Modelscited by 435
- 2022DiffusionDB: A Large-scale Prompt Gallery Dataset for Text-to-Image Generative Modelscited by 379
- 2022Can Machines Help Us Answering Question 16 in Datasheets, and In Turn Reflecting on Inappropriate Content?cited by 155
- 2025DuMo: Dual Encoder Modulation Network for Precise Concept Erasurecited by 11
Built on by
Citing papers per year: 2025: 1; 2026: 7.
8 papers.
- 2025Where Culture Fades: Revealing the Cultural Gap in Text-to-Image Generationcited by 11
- 2026TraceRouter: Robust Safety for Large Foundation Models via Path-Level Interventioncited by 11
- 2026DLM-Scope: Mechanistic Interpretability of Diffusion Language Models via Sparse Autoencoderscited by 7
- 2026OrthoEraser: Coupled-Neuron Orthogonal Projection for Concept Erasurecited by 7
- 2026Closed-Form Concept Erasure via Double Projectionscited by 3
- 2026Empty SPACE: Cross-Attention Sparsity for Concept Erasure in Diffusion Modelscited by 1
- 2026Where Concept Erasure Should Occur: Concept-Layer Alignment in Text-to-Video Diffusion Modelscited by 1
- 2026Robust and Generalizable Safety Steering for Text-to-Image Diffusion Transformerscited by 0
- 2026Robust and Generalizable Safety Steering for Text-to-Image Diffusion Transformers28 May 2026
- 2026Where Concept Erasure Should Occur: Concept-Layer Alignment in Text-to-Video Diffusion Models25 May 2026
- 2026Empty SPACE: Cross-Attention Sparsity for Concept Erasure in Diffusion Models11 May 2026
- 2026Closed-Form Concept Erasure via Double Projections11 Apr 2026
- 2026OrthoEraser: Coupled-Neuron Orthogonal Projection for Concept Erasure12 Mar 2026
- 2026DLM-Scope: Mechanistic Interpretability of Diffusion Language Models via Sparse Autoencoders5 Feb 2026
- 2026TraceRouter: Robust Safety for Large Foundation Models via Path-Level Intervention29 Jan 2026
- 2025Where Culture Fades: Revealing the Cultural Gap in Text-to-Image Generation21 Nov 2025
Similar, not cited
Close in wording, no citation either way
- 2026Prototype-Guided Concept Erasure in Diffusion Models
- 2024Pruning for Robust Concept Erasing in Diffusion Models
- 2026Erasing Without Collateral Damage: Precise Concept Removal in Diffusion Models
- 2025Semantic Surgery: Zero-Shot Concept Erasure in Diffusion Models
- 2026Forget-It-All: Multi-Concept Machine Unlearning via Concept-Aware Neuron Masking
- 2025Sparse Autoencoder as a Zero-Shot Classifier for Concept Erasing in Text-to-Image Diffusion Models
- 2026EraseSAE: Surgical Concept Erasure in Text-to-Video Diffusion Models via Sparse Autoencoders
- 2026To Erase, or Not to Erase: Robust Training-Free Concept Erasure with Preservation aware Adaptive Ranked Subspace Expansion