mlsanityData to 7 Oct 2026

Prototype-Guided Concept Erasure in Diffusion Models

arXiv 2603.08271 ↗First posted 9 Mar 2026cs.CVcited by 1

On the map: Diffusion models → Robustness, privacy and adversarial aspects

Abstract (arXiv)

Concept erasure is extensively utilized in image generation to prevent text-to-image models from generating undesired content. Existing methods can effectively erase narrow concepts that are specific and concrete, such as distinct intellectual properties (e.g. Pikachu) or recognizable characters (e.g. Elon Musk). However, their performance degrades on broad concepts such as ``sexual'' or ``violent'', whose wide scope and multi-faceted nature make them difficult to erase reliably. To overcome this limitation, we exploit the model's intrinsic embedding geometry to identify latent embeddings that encode a given concept. By clustering these embeddings, we derive a set of concept prototypes that summarize the model's internal representations of the concept, and employ them as negative conditioning signals during inference to achieve precise and reliable erasure. Extensive experiments across multiple benchmarks show that our approach achieves substantially more reliable removal of broad concepts while preserving overall image quality, marking a step towards safer and more controllable image generation.

Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 49 of its 56 references that are in the map. First posted on arXiv 9 Mar 2026.

Builds on

49 of 56 references.

Closest ancestors · 23

Same direction, newest first

  1. 2025One Image is Worth a Thousand Words: A Usability Preservable Text-Image Collaborative Erasing Framework16 May
  2. 2025Sculpting Memory: Multi-Concept Forgetting in Diffusion Models via Dynamic Mask and Concept-Aware Optimization12 Apr
  3. 2025TRCE: Towards Reliable Malicious Concept Erasure in Text-to-Image Diffusion Models10 Mar
  4. 2025Concept Corrector: Erase concepts on the fly for text-to-image diffusion models22 Feb
  5. 2025Training-Free Safe Denoisers for Safe Use of Diffusion Models11 Feb
  6. 2024Precise, Fast, and Low-cost Concept Erasure in Value Space: Orthogonal Complement Matters9 Dec
  7. 2024SAFREE: Training-Free and Adaptive Guard for Safe Text-to-Image And Video Generation16 Oct
  8. 2024Reliable and Efficient Concept Erasure of Text-to-Image Diffusion Models17 Jul
  9. 2024ConceptPrune: Concept Editing in Diffusion Models via Skilled Neuron Pruning29 May
  10. 2024R.A.C.E.: Robust Adversarial Concept Erasure for Secure Text-to-Image Diffusion Model25 May
  11. 2024Defensive Unlearning with Adversarial Training for Robust Concept Erasure in Diffusion Models24 May
  12. 2024MACE: Mass Concept Erasure in Diffusion Models10 Mar
11 more
  1. 2023One-Dimensional Adapter to Rule Them All: Concepts, Diffusion Models and Erasing Applications26 Dec
  2. 2023Receler: Reliable Concept Erasing of Text-to-Image Diffusion Models via Lightweight Erasers29 Nov
  3. 2023To Generate or Not? Safety-Driven Unlearned Diffusion Models Are Still Easy To Generate Unsafe Images ... For Now18 Oct
  4. 2023Ring-A-Bell! How Reliable are Concept Removal Methods for Diffusion Models?16 Oct
  5. 2023Prompting4Debugging: Red-Teaming Text-to-Image Diffusion Models by Finding Problematic Prompts12 Sep
  6. 2023Unified Concept Editing in Diffusion Models25 Aug
  7. 2023Forget-Me-Not: Learning to Forget in Text-to-Image Diffusion Models30 Mar
  8. 2023Ablating Concepts in Text-to-Image Diffusion Models23 Mar
  9. 2023Erasing Concepts from Diffusion Models13 Mar
  10. 2022Safe Latent Diffusion: Mitigating Inappropriate Degeneration in Diffusion Models9 Nov
  11. 2022Red-Teaming the Stable Diffusion Safety Filter3 Oct

Other references · 26

  1. 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
  2. 2020Denoising Diffusion Probabilistic Modelscited by 20,851
  3. 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
  4. 2018The Unreasonable Effectiveness of Deep Features as a Perceptual Metriccited by 11,029
  5. 2020Denoising Diffusion Implicit Modelscited by 9,655
  6. 2021Diffusion Models Beat GANs on Image Synthesiscited by 8,185
  7. 2015Deep Unsupervised Learning using Nonequilibrium Thermodynamicscited by 7,005
  8. 2022Hierarchical Text-Conditional Image Generation with CLIP Latentscited by 6,539
  9. 2022Photorealistic Text-to-Image Diffusion Models with Deep Language Understandingcited by 6,322
  10. 2022Classifier-Free Diffusion Guidancecited by 5,717
  11. 2023SDXL: Improving Latent Diffusion Models for High-Resolution Image Synthesiscited by 4,290
  12. 2024Scaling Rectified Flow Transformers for High-Resolution Image Synthesiscited by 4,094
14 more
  1. 2021CLIPScore: A Reference-free Evaluation Metric for Image Captioningcited by 2,388
  2. 2022An Image is Worth One Word: Personalizing Text-to-Image Generation using Textual Inversioncited by 2,231
  3. 2022Null-text Inversion for Editing Real Images using Guided Diffusion Modelscited by 1,168
  4. 2025Qwen-Image Technical Reportcited by 973
  5. 2022Plug-and-Play Diffusion Features for Text-Driven Image-to-Image Translationcited by 897
  6. 2020GANSpace: Discovering Interpretable GAN Controlscited by 612
  7. 2023TIFA: Accurate and Interpretable Text-to-Image Faithfulness Evaluation with Question Answeringcited by 416
  8. 2020Closed-Form Factorization of Latent Semantics in GANscited by 407
  9. 2023Training-Free Layout Control with Cross-Attention Guidancecited by 312
  10. 2022Can Machines Help Us Answering Question 16 in Datasheets, and In Turn Reflecting on Inappropriate Content?cited by 150
  11. 2023Editing Implicit Assumptions in Text-to-Image Diffusion Modelscited by 128
  12. 2024Get What You Want, Not What You Don't: Image Content Suppression for Text-to-Image Diffusion Modelscited by 62
  13. 2025Minimalist Concept Erasure in Generative Modelscited by 13
  14. 2025EMMA: Concept Erasure Benchmark with Comprehensive Semantic Metrics and Diverse Categoriescited by 4

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2026: 1.

1 paper.

Similar, not cited

Close in wording, no citation either way

  1. 2026Erasing Without Collateral Damage: Precise Concept Removal in Diffusion Models
  2. 2024Erasing Concepts from Text-to-Image Diffusion Models with Few-shot Unlearning
  3. 2025Semantic Surgery: Zero-Shot Concept Erasure in Diffusion Models
  4. 2026Erasing Thousands of Concepts: Towards Scalable and Practical Concept Erasure for Text-to-Image Diffusion Models
  5. 2023All but One: Surgical Concept Erasing with Model Preservation in Text-to-Image Diffusion Models
  6. 2025Robust Concept Erasure in Diffusion Models: A Theoretical Perspective on Security and Robustness
  7. 2026Localized Concept Erasure in Text-to-Image Diffusion Models via High-Level Representation Misdirection
  8. 2024Separable Multi-Concept Erasure from Diffusion Models