ForceForget: Reinforcement Concept Removal for Enhancing Safety in Text-to-Image Models
On the map: LLM safety and security → Vision-language and text-to-image safety
Abstract (arXiv)
With the advance of generative AI, the text-to-image (T2I) model has the ability to generate various contents. However, T2I models still can generate unsafe contents. To alleviate this issue, various concept erasing methods are proposed. However, existing methods tend to excessively erase unsafe concepts and suppress benign concepts contained in harmful prompts, which can negatively affect model utility. In this paper, we focus on eliminating unsafe content while maintaining model capability in safe semantic meaning interpretation by optimizing the concept erasing reward (CER) with reinforcement learning. To avoid overly content erasure, we introduce the Safe Adapter to project partial text embedding for efficient concept regulation in cross-attention layers. Extensive experiments conducted on different datasets demonstrate the effectiveness of the proposed method in alleviating unsafe content generation while preserving the high fidelity of benign images compared with existing state-of-the-art (SOTA) concept erasing methods. In terms of robustness, our method outperforms counterparts against red-teaming tools. Moreover, we showcase the proposed approach is more effective in emerging image-to-image (I2I) scenarios compared with others. Lastly, we extend our method to erase general concepts, such as artistic styles and objects. Disclaimer: This paper includes discussions of sexually explicit content that may be offensive to certain readers. All images used in this work are synthesized or from public datasets.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Placed in Vision-language and text-to-image safety, one of 12 directions in LLM safety and security. Builds on 34 of its 43 references that are in the map. First posted on arXiv 12 Jun 2026.
Builds on
34 of 43 references.
Closest ancestors · 6
Same direction, newest first
- 2025One Image is Worth a Thousand Words: A Usability Preservable Text-Image Collaborative Erasing Framework16 May
- 2024SAFREE: Training-Free and Adaptive Guard for Safe Text-to-Image And Video Generation16 Oct
- 2024SafeGen: Mitigating Sexually Explicit Content Generation in Text-to-Image Models10 Apr
- 2023Ring-A-Bell! How Reliable are Concept Removal Methods for Diffusion Models?16 Oct
- 2023Prompting4Debugging: Red-Teaming Text-to-Image Diffusion Models by Finding Problematic Prompts12 Sep
- 2022Red-Teaming the Stable Diffusion Safety Filter3 Oct
Other references · 28
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
- 2014Microsoft COCO: Common Objects in Contextcited by 17,498
- 2017Proximal Policy Optimization Algorithmscited by 14,441
- 2023Segment Anythingcited by 8,158
- 2022BLIP: Bootstrapping Language-Image Pre-training for Unified Vision-Language Understanding and Generationcited by 4,310
- 2022LAION-5B: An open large-scale dataset for training next generation image-text modelscited by 4,131
- 2021GLIDE: Towards Photorealistic Image Generation and Editing with Text-Guided Diffusion Modelscited by 3,595
- 2015Trust Region Policy Optimizationcited by 2,503
- 2023Training Diffusion Models with Reinforcement Learningcited by 939
- 2023Erasing Concepts from Diffusion Modelscited by 530
- 2022Safe Latent Diffusion: Mitigating Inappropriate Degeneration in Diffusion Modelscited by 501
- 2024Evaluating Text-to-Visual Generation with Image-to-Text Generationcited by 465
16 more
- 2023DPOK: Reinforcement Learning for Fine-tuning Text-to-Image Diffusion Modelscited by 431
- 2023Unified Concept Editing in Diffusion Modelscited by 377
- 2022DiffusionDB: A Large-scale Prompt Gallery Dataset for Text-to-Image Generative Modelscited by 376
- 2023Ablating Concepts in Text-to-Image Diffusion Modelscited by 312
- 2024MACE: Mass Concept Erasure in Diffusion Modelscited by 298
- 2023Aligning Text-to-Image Diffusion Models with Reward Backpropagationcited by 284
- 2023MMA-Diffusion: MultiModal Attack on Diffusion Modelscited by 184
- 2020fastai: A Layered API for Deep Learningcited by 183
- 2023Selective Amnesia: A Continual Learning Approach to Forgetting in Deep Generative Modelscited by 175
- 2023Unsafe Diffusion: On the Generation of Unsafe Images and Hateful Memes From Text-To-Image Modelscited by 171
- 2022Can Machines Help Us Answering Question 16 in Datasheets, and In Turn Reflecting on Inappropriate Content?cited by 150
- 2024Reliable and Efficient Concept Erasure of Text-to-Image Diffusion Modelscited by 123
- 2023Optimizing DDPM Sampling with Shortcut Fine-Tuningcited by 81
- 2025DuMo: Dual Encoder Modulation Network for Precise Concept Erasurecited by 11
- 2024Image-Perfect Imperfections: Safety, Bias, and Authenticity in the Shadow of Text-To-Image Model Evolutioncited by 7
- 2025Do Concept Replacement Techniques Really Erase Unacceptable Concepts?cited by 1
Built on by
Not cited yet.