AutoAnchor: Stable Diffusion Unlearning Using Cross-Attention as a Manifold Surrogate
On the map: Diffusion models → Robustness, privacy and adversarial aspects
also in 1 more
Abstract (arXiv)
Diffusion unlearning is essential for mitigating the generation of harmful or copyrighted content in text-to-image models. Current diffusion unlearning techniques determine the model update direction by either using alternatives of the target concept as an anchor or using empty prompts. The anchor-based method relies on manually and semantically-chosen anchors that risk biased unlearning, while the anchor-free method inherently suffers from unrobust unlearning due to unconstrained latent updates. In this work, we theoretically formalize such unstable diffusion unlearning issues under the manifold hypothesis and prove that lacking a manifold-proximal anchor inevitably induces significant normal-space drift that degrades unlearning performance. To achieve stable unlearning, we propose mysysn, a two-stage framework that automatically synthesizes manifold-proximal anchors. However, direct geometric manifold optimization is computationally intractable. To address this challenge, mysys introduces a novel cross-attention consistency loss which serves as a highly efficient surrogate of manifold proximity. Experimental results demonstrate that mysys effectively achieves robust and unbiased unlearning across various state-of-the-art baselines, significantly improving targeted concept removal (by up to 31.04% in CLIP score) and non-target utility (by up to 4.18% in CLIP score). Moreover, mysys can also be easily integrated into existing diffusion unlearning methods to enhance their unlearning performance (by 6.30% for concept removal and 6.65% for utility on average).
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 40 of its 54 references that are in the map. First posted on arXiv 9 Jul 2026.
Builds on
40 of 54 references.
Closest ancestors · 22
Same direction, newest first
- 2026Co-occurring Associated REtained concepts in Diffusion Unlearning23 Jun
- 2026Localized Concept Erasure in Text-to-Image Diffusion Models via High-Level Representation Misdirection23 Feb
- 2026Mass Concept Erasure in Diffusion Models with Concept Hierarchy6 Jan
- 2025Semantic Surgery: Zero-Shot Concept Erasure in Diffusion Models26 Oct
- 2025Towards Resilient Safety-driven Unlearning for Diffusion Models against Downstream Fine-tuning22 Jul
- 2025CURE: Concept Unlearning via Orthogonal Representation Editing in Diffusion Models19 May
- 2025Fine-Grained Erasure in Text-to-Image Diffusion-based Foundation Models25 Mar
- 2025Localized Concept Erasure for Text-to-Image Diffusion Models Using Training-Free Gated Low-Rank Adaptation16 Mar
- 2024Boosting Alignment for Post-Unlearning Text-to-Image Generative Models9 Dec
- 2024Concept Replacer: Replacing Sensitive Concepts in Diffusion Models via Precision Localization2 Dec
- 2024Continuous Concepts Removal in Text-to-image Diffusion Models30 Nov
- 2024Erasing Undesirable Concepts in Diffusion Models with Adversarial Preservation21 Oct
10 more
- 2024Unlearning Concepts in Diffusion Model via Concept Domain Correction and Concept Preserving Gradient24 May
- 2024Defensive Unlearning with Adversarial Training for Robust Concept Erasure in Diffusion Models24 May
- 2024MACE: Mass Concept Erasure in Diffusion Models10 Mar
- 2024Erasing Undesirable Influence in Diffusion Models11 Jan
- 2023One-Dimensional Adapter to Rule Them All: Concepts, Diffusion Models and Erasing Applications26 Dec
- 2023All but One: Surgical Concept Erasing with Model Preservation in Text-to-Image Diffusion Models20 Dec
- 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generation19 Oct
- 2023Forget-Me-Not: Learning to Forget in Text-to-Image Diffusion Models30 Mar
- 2023Ablating Concepts in Text-to-Image Diffusion Models23 Mar
- 2023Erasing Concepts from Diffusion Models13 Mar
Other references · 18
- 2020Denoising Diffusion Probabilistic Modelscited by 21,076
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,863
- 2020Score-Based Generative Modeling through Stochastic Differential Equationscited by 9,122
- 2022Prompt-to-Prompt Image Editing with Cross Attention Controlcited by 2,431
- 2022Improving Diffusion Models for Inverse Problems using Manifold Constraintscited by 508
- 2022Diffusion Models already have a Semantic Latent Spacecited by 328
- 2021The Intrinsic Dimension of Images and Its Impact on Learningcited by 315
- 2019Intrinsic dimension of data representations in deep neural networkscited by 282
- 2022What the DAAM: Interpreting Stable Diffusion Using Cross Attentioncited by 236
- 2023Selective Amnesia: A Continual Learning Approach to Forgetting in Deep Generative Modelscited by 177
- 2023Score Approximation, Estimation and Distribution Recovery of Diffusion Models on Low-Dimensional Datacited by 174
- 2023Diffusion Models are Minimax Optimal Distribution Estimatorscited by 165
6 more
- 2023Understanding the Latent Space of Diffusion Models through the Lens of Riemannian Geometrycited by 125
- 2022Score-Based Generative Models Detect Manifoldscited by 122
- 2022Manifold Interpolating Optimal-Transport Flows for Trajectory Inferencecited by 64
- 2024Direct Unlearning Optimization for Robust and Safe Text-to-Image Modelscited by 50
- 2024Efficient Fine-Tuning and Concept Suppression for Pruned Diffusion Modelscited by 16
- 2025Erasing More Than Intended? How Concept Erasure Degrades the Generation of Non-Target Conceptscited by 12
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2025Continual Unlearning for Text-to-Image Diffusion Models: A Regularization Perspective
- 2026Forget Many, Forget Right: Scalable and Precise Concept Unlearning in Diffusion Models
- 2026Projected Gradient Unlearning for Text-to-Image Diffusion Models: Defending Against Concept Revival Attacks
- 2024Unstable Unlearning: The Hidden Risk of Concept Resurgence in Diffusion Models
- 2026SPARE: Self-distillation for PARameter-Efficient Removal
- 2026Compositional Concepts Erasing: Disentangling Object-Style via Domain Manifold Unlearning
- 2025Locality-Aware Continual Unlearning for Diffusion Models
- 2026eval-unlearn: Benchmarking unlearning in Text-to-Image Diffusion Models