Localized Concept Erasure in Text-to-Image Diffusion Models via High-Level Representation Misdirection
On the map: Diffusion models → Robustness, privacy and adversarial aspects
Abstract (arXiv)
Recent advances in text-to-image (T2I) diffusion models have seen rapid and widespread adoption. However, their powerful generative capabilities raise concerns about potential misuse for synthesizing harmful, private, or copyrighted content. To mitigate such risks, concept erasure techniques have emerged as a promising solution. Prior works have primarily focused on fine-tuning the denoising component (e.g., the U-Net backbone). However, recent causal tracing studies suggest that visual attribute information is localized in the early self-attention layers of the text encoder, indicating a potential alternative for concept erasing. Building on this insight, we conduct preliminary experiments and find that directly fine-tuning early layers can suppress target concepts but often degrades the generation quality of non-target concepts. To overcome this limitation, we propose High-Level Representation Misdirection (HiRM), which misdirects high-level semantic representations of target concepts in the text encoder toward designated vectors such as random directions or semantically defined directions (e.g., supercategories), while updating only early layers that contain causal states of visual attributes. Our decoupling strategy enables precise concept removal with minimal impact on unrelated concepts, as demonstrated by strong results on UnlearnCanvas and NSFW benchmarks across diverse targets (e.g., objects, styles, nudity). HiRM also preserves generative utility at low training cost, transfers to state-of-the-art architectures such as Flux without additional training, and shows synergistic effects with denoiser-based concept erasing methods.
Key facts. Cited by 2 papers in the map (data through 7 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 44 of its 51 references that are in the map. First posted on arXiv 23 Feb 2026.
Builds on
44 of 51 references.
Closest ancestors · 20
Same direction, newest first
- 2025When Are Concepts Erased From Diffusion Models?22 May
- 2025SPEED: Scalable, Precise, and Efficient Concept Erasure for Diffusion Models10 Mar
- 2024EraseAnything: Enabling Concept Erasure in Rectified Flow Transformers29 Dec
- 2024TraSCE: Trajectory Steering for Concept Erasure10 Dec
- 2024SAFREE: Training-Free and Adaptive Guard for Safe Text-to-Image And Video Generation16 Oct
- 2024STEREO: A Two-Stage Framework for Adversarially Robust Concept Erasing from Text-to-Image Diffusion Models29 Aug
- 2024Reliable and Efficient Concept Erasure of Text-to-Image Diffusion Models17 Jul
- 2024Adversarial Attacks and Defenses on Text-to-Image Diffusion Models: A Survey10 Jul
- 2024MACE: Mass Concept Erasure in Diffusion Models10 Mar
- 2024UnlearnCanvas: Stylized Image Dataset for Enhanced Machine Unlearning Evaluation in Diffusion Models19 Feb
- 2023MMA-Diffusion: MultiModal Attack on Diffusion Models29 Nov
- 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generation19 Oct
8 more
- 2023To Generate or Not? Safety-Driven Unlearned Diffusion Models Are Still Easy To Generate Unsafe Images ... For Now18 Oct
- 2023Ring-A-Bell! How Reliable are Concept Removal Methods for Diffusion Models?16 Oct
- 2023On Copyright Risks of Text-to-Image Diffusion Models15 Sep
- 2023Unified Concept Editing in Diffusion Models25 Aug
- 2023Unsafe Diffusion: On the Generation of Unsafe Images and Hateful Memes From Text-To-Image Models23 May
- 2023Ablating Concepts in Text-to-Image Diffusion Models23 Mar
- 2023Erasing Concepts from Diffusion Models13 Mar
- 2022Safe Latent Diffusion: Mitigating Inappropriate Degeneration in Diffusion Models9 Nov
Other references · 24
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
- 2014Microsoft COCO: Common Objects in Contextcited by 17,498
- 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,491
- 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,084
- 2020Denoising Diffusion Implicit Modelscited by 9,655
- 2022Hierarchical Text-Conditional Image Generation with CLIP Latentscited by 6,539
- 2022Photorealistic Text-to-Image Diffusion Models with Deep Language Understandingcited by 6,322
- 2023SDXL: Improving Latent Diffusion Models for High-Resolution Image Synthesiscited by 4,290
- 2024Scaling Rectified Flow Transformers for High-Resolution Image Synthesiscited by 4,094
- 2024Expanding Performance Boundaries of Open-Source Multimodal Models with Model, Data, and Test-Time Scalingcited by 1,573
- 2022Imagic: Text-Based Real Image Editing with Diffusion Modelscited by 1,172
12 more
- 2025FLUX.1 Kontext: Flow Matching for In-Context Image Generation and Editing in Latent Spacecited by 960
- 2022MotionDiffuse: Text-Driven Human Motion Generation with Diffusion Modelcited by 768
- 2024The WMDP Benchmark: Measuring and Reducing Malicious Use With Unlearningcited by 488
- 2023Text-to-image Diffusion Models in Generative AI: A Surveycited by 264
- 2024Aesthetic Post-Training Diffusion Models from Generic Preferences with Step-by-step Preference Optimizationcited by 81
- 2023Localizing and Editing Knowledge in Text-to-Image Generative Modelscited by 52
- 2024Scissorhands: Scrub Data Influence via Connection Sensitivity in Networkscited by 50
- 2024Diffusion Lens: Interpreting Text Encoders in Text-to-Image Pipelinescited by 28
- 2024Robust Concept Erasure Using Task Vectorscited by 27
- 2024On Mechanistic Knowledge Localization in Text-to-Image Generative Modelscited by 27
- 2024A Cat Is A Cat (Not A Dog!): Unraveling Information Mix-ups in Text-to-Image Encoders through Causal Analysis and Embedding Optimizationcited by 19
- 2024Representation Shattering in Transformers: A Synthetic Study with Knowledge Editingcited by 18
Built on by
Citing papers per year: 2026: 2.
2 papers.
Similar, not cited
Close in wording, no citation either way
- 2026Erasing Thousands of Concepts: Towards Scalable and Practical Concept Erasure for Text-to-Image Diffusion Models
- 2025A Comprehensive Survey on Concept Erasure in Text-to-Image Diffusion Models
- 2026Neighbor-Aware Localized Concept Erasure in Text-to-Image Diffusion Models
- 2025Semantic Surgery: Zero-Shot Concept Erasure in Diffusion Models
- 2026Erasing Without Collateral Damage: Precise Concept Removal in Diffusion Models
- 2025Erased or Dormant? Rethinking Concept Erasure Through Reversibility
- 2025ACE: Attentional Concept Erasure in Diffusion Models
- 2026Prototype-Guided Concept Erasure in Diffusion Models