Unlearning in Diffusion models under Data Constraints: A Variational Inference Approach
On the map: Diffusion models → Robustness, privacy and adversarial aspects
also in 1 more
Abstract (arXiv)
For a responsible and safe deployment of diffusion models in various domains, regulating the generated outputs from these models is desirable because such models could generate undesired, violent, and obscene outputs. To tackle this problem, recent works use machine unlearning methodology to forget training data points containing these undesired features from pre-trained generative models. However, these methods proved to be ineffective in data-constrained settings where the whole training dataset is inaccessible. Thus, the principal objective of this work is to propose a machine unlearning methodology that can prevent the generation of outputs containing undesired features from a pre-trained diffusion model in such a data-constrained setting. Our proposed method, termed as Variational Diffusion Unlearning (VDU), is a computationally efficient method that only requires access to a subset of training data containing undesired features. Our approach is inspired by the variational inference framework with the objective of minimizing a loss function consisting of two terms: plasticity inducer and stability regularizer. Plasticity inducer reduces the log-likelihood of the undesired training data points, while the stability regularizer, essential for preventing loss of image generation quality, regularizes the model in parameter space. We validate the effectiveness of our method through comprehensive experiments for both class unlearning and feature unlearning. For class unlearning, we unlearn some user-identified classes from MNIST, CIFAR-10, and tinyImageNet datasets from a pre-trained unconditional denoising diffusion probabilistic model (DDPM). Similarly, for feature unlearning, we unlearn the generation of certain high-level features from a pre-trained Stable Diffusion model trained on LAION-5B dataset.
Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 50 of its 65 references that are in the map. First posted on arXiv 5 Oct 2025.
Builds on
50 of 65 references.
Closest ancestors · 4
Same direction, newest first
- 2024UnlearnCanvas: Stylized Image Dataset for Enhanced Machine Unlearning Evaluation in Diffusion Models19 Feb
- 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generation19 Oct
- 2023Erasing Concepts from Diffusion Models13 Mar
- 2022Safe Latent Diffusion: Mitigating Inappropriate Degeneration in Diffusion Models9 Nov
Other references · 46
- 2020Denoising Diffusion Probabilistic Modelscited by 20,851
- 2015U-Net: Convolutional Networks for Biomedical Image Segmentationcited by 19,604
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
- 2020Score-Based Generative Modeling through Stochastic Differential Equationscited by 8,964
- 2015Deep Unsupervised Learning using Nonequilibrium Thermodynamicscited by 7,005
- 2022Hierarchical Text-Conditional Image Generation with CLIP Latentscited by 6,539
- 2022Photorealistic Text-to-Image Diffusion Models with Deep Language Understandingcited by 6,322
- 2022Generative Adversarial Networkscited by 5,603
- 2016Overcoming catastrophic forgetting in neural networkscited by 4,718
- 2021Zero-Shot Text-to-Image Generationcited by 4,276
- 2022LAION-5B: An open large-scale dataset for training next generation image-text modelscited by 4,131
- 2019Generative Modeling by Estimating Gradients of the Data Distributioncited by 4,067
34 more
- 2021Improved Denoising Diffusion Probabilistic Modelscited by 3,736
- 2014Deep Learning Face Attributes in the Wildcited by 3,679
- 2019Machine Unlearningcited by 1,020
- 2013An Empirical Investigation of Catastrophic Forgetting in Gradient-Based Neural Networkscited by 711
- 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 599
- 2019Certified Data Removal from Machine Learning Modelscited by 512
- 2019Making AI Forget You: Data Deletion in Machine Learningcited by 447
- 2021Remember What You Want to Forget: Algorithms for Machine Unlearningcited by 360
- 2022Understanding Diffusion Models: A Unified Perspectivecited by 337
- 2017Variational Continual Learningcited by 335
- 2023Pix2Video: Video Editing using Image Diffusioncited by 318
- 2020Amnesiac Machine Learningcited by 305
- 2022A Survey of Machine Unlearningcited by 298
- 2017Empirical Analysis of the Hessian of Over-Parametrized Neural Networkscited by 283
- 2022Can Bad Teaching Induce Forgetting? Unlearning in Deep Networks using an Incompetent Teachercited by 189
- 2023Selective Amnesia: A Continual Learning Approach to Forgetting in Deep Generative Modelscited by 175
- 2020Forgetting Outside the Box: Scrubbing Deep Networks of Information Accessible from Input-Output Observationscited by 171
- 2020DeltaGrad: Rapid retraining of machine learning modelscited by 143
- 2019Functional Variational Bayesian Neural Networkscited by 127
- 2020Machine Unlearning for Random Forestscited by 125
- 2022Zero-Shot Machine Unlearningcited by 125
- 2020Variational Bayesian Unlearningcited by 114
- 2023CCEdit: Creative and Controllable Video Editing via Diffusion Modelscited by 80
- 2020Generalized Variational Continual Learningcited by 56
- 2013Streaming Variational Bayescited by 46
- 2018Variational Implicit Processescited by 41
- 2016Deep Gaussian Processes for Regression using Approximate Expectation Propagationcited by 39
- 2022Generalized Variational Inference in Function Spaces: Gaussian Measures meet Bayesian Deep Learningcited by 20
- 2018Security and Privacy Issues in Deep Learningcited by 19
- 2023Feature Unlearning for Pre-trained GANs and VAEscited by 15
- 2023Adapt then Unlearn: Exploring Parameter Space Semantics for Unlearning in Generative Adversarial Networkscited by 11
- 2023Generative Adversarial Networks Unlearningcited by 10
- 2023FAST: Feature Aware Similarity Thresholding for Weak Unlearning in Black-Box Generative Modelscited by 5
- 2024Partially Blinded Unlearning: Class Unlearning for Deep Networks a Bayesian Perspectivecited by 3
Built on by
Citing papers per year: 2026: 1.
1 paper.
Similar, not cited
Close in wording, no citation either way
- 2026Unlearning in Diffusion Models: A Unified Framework with KL Divergence and Likelihood Constraints
- 2026Continual Data Unlearning in Diffusion Models via Transition-based Regularization
- 2024Constrained Diffusion Models via Dual Training
- 2026Enabling Preference-driven Unlearning in Few-step Distilled Text-to-Image Diffusion Models
- 2025Not Every Time and Frequency Need to Be Forgotten in Diffusion Unlearning
- 2025Towards Irreversible Machine Unlearning for Diffusion Models
- 2026Training data attribution in diffusion models via mirrored unlearning and noise-consistent skew
- 2025Generalization in VAE and Diffusion Models: A Unified Information-Theoretic Analysis