Selective Fine-Tuning for Targeted and Robust Concept Unlearning
On the map: Diffusion models → Robustness, privacy and adversarial aspects
also in 1 more
Abstract (arXiv)
Text guided diffusion models are used by millions of users, but can be easily exploited to produce harmful content. Concept unlearning methods aim at reducing the models' likelihood of generating harmful content. Traditionally, this has been tackled at an individual concept level, with only a handful of recent works considering more realistic concept combinations. However, state of the art methods depend on full finetuning, which is computationally expensive. Concept localisation methods can facilitate selective finetuning, but existing techniques are static, resulting in suboptimal utility. In order to tackle these challenges, we propose TRUST (Targeted Robust Selective fine Tuning), a novel approach for dynamically estimating target concept neurons and unlearning them through selective finetuning, empowered by a Hessian based regularization. We show experimentally, against a number of SOTA baselines, that TRUST is robust against adversarial prompts, preserves generation quality to a significant degree, and is also significantly faster than the SOTA. Our method achieves unlearning of not only individual concepts but also combinations of concepts and conditional concepts, without any specific regularization.
Key facts. Cited by 2 papers in the map (data through 7 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 50 of its 69 references that are in the map. First posted on arXiv 8 Feb 2026.
Builds on
50 of 69 references.
Closest ancestors · 19
Same direction, newest first
- 2025Concept Corrector: Erase concepts on the fly for text-to-image diffusion models22 Feb
- 2025SAeUron: Interpretable Concept Unlearning in Diffusion Models with Sparse Autoencoders29 Jan
- 2024Model Integrity when Unlearning with T2I Diffusion Models4 Nov
- 2024SAFREE: Training-Free and Adaptive Guard for Safe Text-to-Image And Video Generation16 Oct
- 2024Reliable and Efficient Concept Erasure of Text-to-Image Diffusion Models17 Jul
- 2024Defensive Unlearning with Adversarial Training for Robust Concept Erasure in Diffusion Models24 May
- 2024Espresso: Robust Concept Filtering in Text-to-Image Models30 Apr
- 2024MACE: Mass Concept Erasure in Diffusion Models10 Mar
- 2024UnlearnCanvas: Stylized Image Dataset for Enhanced Machine Unlearning Evaluation in Diffusion Models19 Feb
- 2023All but One: Surgical Concept Erasing with Model Preservation in Text-to-Image Diffusion Models20 Dec
- 2023MMA-Diffusion: MultiModal Attack on Diffusion Models29 Nov
- 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generation19 Oct
7 more
- 2023To Generate or Not? Safety-Driven Unlearned Diffusion Models Are Still Easy To Generate Unsafe Images ... For Now18 Oct
- 2023Ring-A-Bell! How Reliable are Concept Removal Methods for Diffusion Models?16 Oct
- 2023Prompting4Debugging: Red-Teaming Text-to-Image Diffusion Models by Finding Problematic Prompts12 Sep
- 2023Unified Concept Editing in Diffusion Models25 Aug
- 2023Ablating Concepts in Text-to-Image Diffusion Models23 Mar
- 2023Erasing Concepts from Diffusion Models13 Mar
- 2022Safe Latent Diffusion: Mitigating Inappropriate Degeneration in Diffusion Models9 Nov
Other references · 31
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
- 2020Denoising Diffusion Probabilistic Modelscited by 20,851
- 2015U-Net: Convolutional Networks for Biomedical Image Segmentationcited by 19,604
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
- 2014Microsoft COCO: Common Objects in Contextcited by 17,498
- 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,491
- 2022Photorealistic Text-to-Image Diffusion Models with Deep Language Understandingcited by 6,322
- 2022Classifier-Free Diffusion Guidancecited by 5,717
- 2022LAION-5B: An open large-scale dataset for training next generation image-text modelscited by 4,131
- 2022Multi-Concept Customization of Text-to-Image Diffusioncited by 1,099
- 2023Adversarial Diffusion Distillationcited by 741
- 2021DiffusionCLIP: Text-Guided Diffusion Models for Robust Image Manipulationcited by 640
19 more
- 2019Certified Data Removal from Machine Learning Modelscited by 512
- 2023TIFA: Accurate and Interpretable Text-to-Image Faithfulness Evaluation with Question Answeringcited by 416
- 2024mPLUG-Owl3: Towards Long Image-Sequence Understanding in Multi-Modal Large Language Modelscited by 285
- 2023Fast Machine Unlearning Without Retraining Through Selective Synaptic Dampeningcited by 177
- 2023Selective Amnesia: A Continual Learning Approach to Forgetting in Deep Generative Modelscited by 175
- 2021On the Necessity of Auditable Algorithmic Definitions for Machine Unlearningcited by 164
- 2023Cones: Concept Neurons in Diffusion Models for Customized Generationcited by 150
- 2023Compositional Abilities Emerge Multiplicatively: Exploring Diffusion Models on a Synthetic Taskcited by 91
- 2023Self-Discovering Interpretable Diffusion Latent Directions for Responsible Text-to-Image Generationcited by 69
- 2024GuardT2I: Defending Text-to-Image Models from Adversarial Promptscited by 61
- 2025Set You Straight: Auto-Steering Denoising Trajectories to Sidestep Unwanted Conceptscited by 61
- 2024CoMat: Aligning Text-to-Image Diffusion Model with Image-to-Text Concept Matchingcited by 60
- 2023Typology of Risks of Generative Text-to-Image Modelscited by 55
- 2024UnsafeBench: Benchmarking Image Safety Classifiers on Real-World and AI-Generated Imagescited by 52
- 2024Universal Prompt Optimizer for Safe Text-to-Image Generationcited by 27
- 2024On Mechanistic Knowledge Localization in Text-to-Image Generative Modelscited by 27
- 2024Targeted Unlearning with Single Layer Unlearning Gradientcited by 16
- 2024Moderator: Moderating Text-to-Image Diffusion Models through Fine-grained Context-based Policiescited by 15
- 2024Image-Perfect Imperfections: Safety, Bias, and Authenticity in the Shadow of Text-To-Image Model Evolutioncited by 7
Built on by
Citing papers per year: 2026: 2.
2 papers.
Similar, not cited
Close in wording, no citation either way
- 2024Unstable Unlearning: The Hidden Risk of Concept Resurgence in Diffusion Models
- 2026Roots Beneath the Cut: Uncovering the Risk of Concept Revival in Pruning-Based Unlearning for Diffusion Models
- 2026Certifying Concept Unlearning in Text-to-Image Diffusion Models
- 2025Concept Unlearning by Modeling Key Steps of Diffusion Process
- 2024ConceptPrune: Concept Editing in Diffusion Models via Skilled Neuron Pruning
- 2024Safety Alignment Backfires: Preventing the Re-emergence of Suppressed Concepts in Fine-tuned Text-to-Image Diffusion Models
- 2025CURE: Concept Unlearning via Orthogonal Representation Editing in Diffusion Models
- 2026No Concept Escapes the Audit: Auditing-Aware Unlearning for Verifiable Concept Erasure in Diffusion Models