Forgetting is Competition: Rethinking Unlearning as Representation Interference in Diffusion Models
On the map: Diffusion models → Robustness, privacy and adversarial aspects
also in 1 more
Abstract (arXiv)
Deployed text-to-image diffusion models increasingly require post-hoc concept unlearning for copyright claims, artist opt-outs, safety updates, and protected-content mitigation without full retraining. A central challenge is erase-retain imbalance, aggressive updates suppress targets but damage shared capabilities, while conservative or anchor-based updates preserve quality yet leave concepts recoverable through related, compositional, paraphrased, or adversarial prompts. Inspired by retroactive interference, we propose SurgUn, which treats forgetting as controlled competition rather than direct deletion or one-to-one reassignment. SurgUn instantiates retroactive concept interference via distractor-conditioned gradient competition: target-gradient ascent weakens target-conditioned denoising or flow-matching behavior, while descent over a semantically diverse distractor set introduces competing non-target trajectories under the same prompt context. This redistributes outputs across multiple non-target modes instead of collapsing to a single proxy. To limit collateral forgetting through shared pathways, SurgUn adds pixel-grounded weight-space localization, a lightweight diagnostic that selects attention blocks by generated-image erase-retain behavior, exploiting the asymmetry that suppression is broadly achievable whereas retention is block-selective. Across UnlearnCanvas, IP-character erasure, Holistic Unlearning, EraseBench, and Ring-A-Bell on Stable Diffusion v1.5, SDXL, and SANA-1.5, SurgUn achieves a stronger erase-retain balance than baselines. Ablations show that diverse distractors, contrastive competition, and localization are all necessary for robust suppression while preserving related and unrelated concepts.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 56 of its 80 references that are in the map. First posted on arXiv 1 Mar 2026.
Builds on
56 of 80 references.
Closest ancestors · 21
Same direction, newest first
- 2025A Comprehensive Survey on Concept Erasure in Text-to-Image Diffusion Models17 Feb
- 2025SAeUron: Interpretable Concept Unlearning in Diffusion Models with Sparse Autoencoders29 Jan
- 2025ACE: Anti-Editing Concept Erasure in Text-to-Image Models3 Jan
- 2024Holistic Unlearning Benchmark: A Multi-Faceted Evaluation for Text-to-Image Diffusion Model Unlearning8 Oct
- 2024Unlearning or Concealment? A Critical Analysis and Evaluation Metrics for Unlearning in Diffusion Models9 Sep
- 2024Unlearning Concepts in Diffusion Model via Concept Domain Correction and Concept Preserving Gradient24 May
- 2024Defensive Unlearning with Adversarial Training for Robust Concept Erasure in Diffusion Models24 May
- 2024UnlearnCanvas: Stylized Image Dataset for Enhanced Machine Unlearning Evaluation in Diffusion Models19 Feb
- 2024A Dataset and Benchmark for Copyright Infringement Unlearning from Text-to-Image Diffusion Models4 Jan
- 2023All but One: Surgical Concept Erasing with Model Preservation in Text-to-Image Diffusion Models20 Dec
- 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generation19 Oct
- 2023To Generate or Not? Safety-Driven Unlearned Diffusion Models Are Still Easy To Generate Unsafe Images ... For Now18 Oct
9 more
- 2023Ring-A-Bell! How Reliable are Concept Removal Methods for Diffusion Models?16 Oct
- 2023On Copyright Risks of Text-to-Image Diffusion Models15 Sep
- 2023Unified Concept Editing in Diffusion Models25 Aug
- 2023Unsafe Diffusion: On the Generation of Unsafe Images and Hateful Memes From Text-To-Image Models23 May
- 2023Forget-Me-Not: Learning to Forget in Text-to-Image Diffusion Models30 Mar
- 2023Ablating Concepts in Text-to-Image Diffusion Models23 Mar
- 2023Erasing Concepts from Diffusion Models13 Mar
- 2023Extracting Training Data from Diffusion Models30 Jan
- 2022Safe Latent Diffusion: Mitigating Inappropriate Degeneration in Diffusion Models9 Nov
Other references · 35
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
- 2014Microsoft COCO: Common Objects in Contextcited by 17,498
- 2022Hierarchical Text-Conditional Image Generation with CLIP Latentscited by 6,539
- 2022Scalable Diffusion Models with Transformerscited by 5,931
- 2023SDXL: Improving Latent Diffusion Models for High-Resolution Image Synthesiscited by 4,290
- 2021Zero-Shot Text-to-Image Generationcited by 4,276
- 2024Scaling Rectified Flow Transformers for High-Resolution Image Synthesiscited by 4,094
- 2022DreamBooth: Fine Tuning Text-to-Image Diffusion Models for Subject-Driven Generationcited by 3,286
- 2022An Image is Worth One Word: Personalizing Text-to-Image Generation using Textual Inversioncited by 2,231
- 2022Imagic: Text-Based Real Image Editing with Diffusion Modelscited by 1,172
- 2019Machine Unlearningcited by 1,020
23 more
- 2022Paint by Example: Exemplar-based Image Editing with Diffusion Modelscited by 489
- 2024SANA: Efficient High-Resolution Image Synthesis with Linear Diffusion Transformerscited by 331
- 2022A Survey of Machine Unlearningcited by 298
- 2022Inversion-Based Style Transfer with Diffusion Modelscited by 290
- 2023P+: Extended Textual Conditioning in Text-to-Image Generationcited by 242
- 2021Fast Yet Effective Machine Unlearningcited by 209
- 2023Understanding and Mitigating Copying in Diffusion Modelscited by 205
- 2023FreeU: Free Lunch in Diffusion U-Netcited by 195
- 2023Selective Amnesia: A Continual Learning Approach to Forgetting in Deep Generative Modelscited by 175
- 2024Implicit Style-Content Separation using B-LoRAcited by 135
- 2023Understanding the Latent Space of Diffusion Models through the Lens of Riemannian Geometrycited by 121
- 2020Machine Unlearning: Linear Filtration for Logit-based Classifierscited by 89
- 2023ProSpect: Prompt Spectrum for Attribute-Aware Personalization of Diffusion Modelscited by 75
- 2022Federated Unlearning with Knowledge Distillationcited by 70
- 2024Scissorhands: Scrub Data Influence via Connection Sensitivity in Networkscited by 50
- 2025T2ISafety: Benchmark for Assessing Fairness, Toxicity, and Privacy in Image Generationcited by 47
- 2023An Image is Worth Multiple Words: Multi-attribute Inversion for Constrained Text-to-Image Synthesiscited by 31
- 2024Automatic Jailbreaking of the Text-to-Image Generative AI Systemscited by 22
- 2024Boosting Latent Diffusion with Perceptual Objectivescited by 19
- 2023On the Proactive Generation of Unsafe Images From Text-To-Image Models Using Benign Promptscited by 14
- 2024Harm Amplification in Text-to-Image Modelscited by 14
- 2024Unveiling Concept Attribution in Diffusion Modelscited by 11
- 2025Exploring the latent space of diffusion models directly through singular value decompositioncited by 3
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2025Sculpting Memory: Multi-Concept Forgetting in Diffusion Models via Dynamic Mask and Concept-Aware Optimization
- 2026The Illusion of Forgetting: Attack Unlearned Diffusion via Initial Latent Variable Optimization
- 2025Locality-Aware Continual Unlearning for Diffusion Models
- 2026Weeding Out Bad Seeds: Initial-Noise-Robust Unlearning for Text-to-Image Diffusion Models
- 2026Rethinking Memorization Mitigation in Diffusion Models: Reinforcing Text Conditioning
- 2026Erasing Without Collateral Damage: Precise Concept Removal in Diffusion Models
- 2026Concept Unlearning via Cross-Attention Activation Projection for Diffusion Models
- 2026Empty SPACE: Cross-Attention Sparsity for Concept Erasure in Diffusion Models