Orthogonal Concept Erasure for Diffusion Models
On the map: Diffusion models → Robustness, privacy and adversarial aspects
Abstract (arXiv)
Concept erasure has emerged as a promising approach to mitigate undesired or unsafe content in diffusion models, yet existing methods still face significant limitations. While training-based methods are effective, their high computational cost limits scalability. Editing-based methods are more efficient and deployment-friendly, yet they struggle to simultaneously achieve precise concept erasure and preserve overall generative capacity. We identify this core limitation of the editing-based methods as reliance on additive parameter updates. Our empirical analysis reveals that concept semantics primarily depend on neuron direction rather than neuron magnitude, while overall generative capacity relies on the angular geometry of neurons. As additive updates inherently entangle direction, magnitude, and angular geometry, they inevitably introduce unintended interference between concept erasure and overall generation performance. To address this, we propose Orthogonal Concept Erasure (OCE), which reformulates editing-based erasure as multiplicative parameter updates from a geometric perspective. Specifically, OCE applies layer-wise orthogonal transformations derived from a closed-form solution to the parameters, enabling precise concept erasure while preserving the neuron magnitude and angular geometry. Furthermore, to address conflicting constraints in multi-concept erasure, OCE introduces a subspace-level objective with structured subspace manipulation, yielding a more effective and scalable erasure. Extensive experiments on single- and multi-concept erasure demonstrate that OCE outperforms existing methods in concept erasure and non-target preservation, erasing up to 100 concepts in 4.3 s. Code: https://github.com/HansSunY/OCE.
Key facts. Cited by 2 papers in the map (data through 7 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 49 of its 56 references that are in the map. First posted on arXiv 27 May 2026.
Builds on
49 of 56 references.
Closest ancestors · 27
Same direction, newest first
- 2026Mass Concept Erasure in Diffusion Models with Concept Hierarchy6 Jan
- 2025SuMa: A Subspace Mapping Approach for Robust and Effective Concept Erasure in Text-to-Image Diffusion Models6 Sep
- 2025Concept Pinpoint Eraser for Text-to-image Diffusion Models via Residual Attention Gate28 Jun
- 2025CURE: Concept Unlearning via Orthogonal Representation Editing in Diffusion Models19 May
- 2025One Image is Worth a Thousand Words: A Usability Preservable Text-Image Collaborative Erasing Framework16 May
- 2025SPEED: Scalable, Precise, and Efficient Concept Erasure for Diffusion Models10 Mar
- 2025Fantastic Targets for Concept Erasure in Diffusion Models and Where To Find Them31 Jan
- 2024EraseAnything: Enabling Concept Erasure in Rectified Flow Transformers29 Dec
- 2024TraSCE: Trajectory Steering for Concept Erasure10 Dec
- 2024Precise, Fast, and Low-cost Concept Erasure in Value Space: Orthogonal Complement Matters9 Dec
- 2024SAFREE: Training-Free and Adaptive Guard for Safe Text-to-Image And Video Generation16 Oct
- 2024STEREO: A Two-Stage Framework for Adversarially Robust Concept Erasing from Text-to-Image Diffusion Models29 Aug
15 more
- 2024Reliable and Efficient Concept Erasure of Text-to-Image Diffusion Models17 Jul
- 2024R.A.C.E.: Robust Adversarial Concept Erasure for Secure Text-to-Image Diffusion Model25 May
- 2024Defensive Unlearning with Adversarial Training for Robust Concept Erasure in Diffusion Models24 May
- 2023One-Dimensional Adapter to Rule Them All: Concepts, Diffusion Models and Erasing Applications26 Dec
- 2023MMA-Diffusion: MultiModal Attack on Diffusion Models29 Nov
- 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generation19 Oct
- 2023To Generate or Not? Safety-Driven Unlearned Diffusion Models Are Still Easy To Generate Unsafe Images ... For Now18 Oct
- 2023Ring-A-Bell! How Reliable are Concept Removal Methods for Diffusion Models?16 Oct
- 2023Unified Concept Editing in Diffusion Models25 Aug
- 2023Forget-Me-Not: Learning to Forget in Text-to-Image Diffusion Models30 Mar
- 2023Ablating Concepts in Text-to-Image Diffusion Models23 Mar
- 2023Erasing Concepts from Diffusion Models13 Mar
- 2023Extracting Training Data from Diffusion Models30 Jan
- 2022Safe Latent Diffusion: Mitigating Inappropriate Degeneration in Diffusion Models9 Nov
- 2022Red-Teaming the Stable Diffusion Safety Filter3 Oct
Other references · 22
- 2020Denoising Diffusion Probabilistic Modelscited by 20,851
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
- 2020Denoising Diffusion Implicit Modelscited by 9,655
- 2020Score-Based Generative Modeling through Stochastic Differential Equationscited by 8,964
- 2022Hierarchical Text-Conditional Image Generation with CLIP Latentscited by 6,539
- 2022Classifier-Free Diffusion Guidancecited by 5,717
- 2021GLIDE: Towards Photorealistic Image Generation and Editing with Text-Guided Diffusion Modelscited by 3,595
- 2019Orthogonal Gradient Descent for Continual Learningcited by 361
- 2023Controlling Text-to-Image Diffusion by Orthogonal Finetuningcited by 207
- 2023Editing Implicit Assumptions in Text-to-Image Diffusion Modelscited by 128
- 2023Parameter-Efficient Orthogonal Finetuning via Butterfly Factorizationcited by 112
- 2020Generalisation Guarantees for Continual Learning with Orthogonal Gradient Descentcited by 68
10 more
- 2025Set You Straight: Auto-Steering Denoising Trajectories to Sidestep Unwanted Conceptscited by 61
- 2017Deep Hyperspherical Learningcited by 55
- 2018Decoupled Networkscited by 45
- 2019Angular Visual Hardnesscited by 29
- 2024Parameter Efficient Quasi-Orthogonal Fine-Tuning via Givens Rotationcited by 21
- 2024RealEra: Semantic-level Concept Erasure via Neighbor-Concept Miningcited by 15
- 2025Minimalist Concept Erasure in Generative Modelscited by 13
- 2025EraseFlow: Learning Concept Erasure Policies via GFlowNet-Driven Alignmentcited by 8
- 2025Orthogonal Finetuning Made Scalablecited by 7
- 2025Invisible Watermarks, Visible Gains: Steering Machine Unlearning with Bi-Level Watermarking Designcited by 1
Built on by
Citing papers per year: 2026: 2.
2 papers.
Similar, not cited
Close in wording, no citation either way
- 2026Erasing Without Collateral Damage: Precise Concept Removal in Diffusion Models
- 2026GRACE: Adaptive Concept Erasure with Geometry-Guided Retention in Diffusion Models
- 2025When Are Concepts Erased From Diffusion Models?
- 2025Erased or Dormant? Rethinking Concept Erasure Through Reversibility
- 2026CoreUnlearn: Rethinking Concept Unlearning through Disentangled Component-Level Erasure in Text-guided Diffusion Models
- 2025DyME: Dynamic Multi-Concept Erasure in Diffusion Models with Bi-Level Orthogonal LoRA Adaptation
- 2026Prototype-Guided Concept Erasure in Diffusion Models
- 2026LURE: Latent Space Unblocking for Multi-Concept Reawakening in Diffusion Models