Across continual erasure of celebrities, artistic styles, and instances, CEASE achieves the most consistent erase-preserve trade-off, while existing methods either degrade general generation or insufficiently erase targets.
Abstract
Concept erasure removes copyright-protected, privacy-sensitive, or otherwise undesirable concepts from pretrained text-to-image diffusion models to support content governance and compliance. As erasure requests arrive over time, models must remove new targets without undoing prior erasures. Existing methods do not constrain interference across edits: residual perturbations outside the retain set interact and accumulate, degrading unrelated generations and sometimes collapsing previously erased targets into noise. We propose CEASE (Continual Erasure via Adaptive Subspace Editing), a training-free method that imposes two subspace constraints on a closed-form solver. CEASE adds the token representation of the shared replacement to the solver's invariance matrix and, when interference is detected, projects the current update onto the orthogonal complement of dominant output directions extracted from cumulative past updates. A closed-form decomposition attributes the accumulated interference to repeated activation of the shared replacement and overlap between successive update directions, showing that the two constraints suppress these respective sources. Across continual erasure of celebrities, artistic styles, and instances, CEASE achieves the most consistent erase-preserve trade-off, while existing methods either degrade general generation or insufficiently erase targets.
This work proposes GRACE, a structured concept erasure framework designed to enable localized and selective intervention, and introduces a semantically weighted sensitive subspace estimation to precisely lock intervention directions, and employs lightweight subspace-constrained adapters to prevent global semantic distu...
Qing Gong, Yi-Huai Liang, Yuan-Lun Xie et al.· 0 citations
Concept erasure aims to remove a target concept, such as a copyrighted style, a recognizable character, or unsafe content, from a pretrained text-to-image diffusion model while preserving its ability to generate other content. Existing activation steering methods build an erasure direction mainly from the target concep...
Yong-Liang Wu, Haori Lu, Yu-Lun Wu et al.· 1 citation
Existing attacks on unlearned diffusion models assume that the erased concepts are known in advance and focus on recovering them. In practice, however, model providers may not disclose which concepts have been removed, and even with access to the original base model, an adversary may still lack a clear target to attack...
Kai-Yuan Deng, Yu-Chen Li, Yang Xiao et al.· 1 citation
A continual data unlearning framework that uses completed deletion transitions as directional references to regularize future updates and achieves a better balance between deletion persistence and generative utility than existing unlearning baselines as requests accumulate.
Sunbeom Jeong, Sehwan Kim, Sang-Woo Hong et al.· 0 citations
Removing copyrighted, unsafe, or user-specified concepts from a deployed text-to-image diffusion model is now a practical requirement. Weight-editing methods can suppress fixed targets, but they require per-target retraining and modify the model checkpoint. Training-free methods, on the other hand, are deployment-frien...
Chen-Di Dai, Gan-Yu Zou, Nathan Self et al.· 0 citations
It is proved that the overlap between a target and other concepts lower-bounds the damage any robust erasure must inflict on them, with the trade-off scaling linearly in the degree of overlap.
Yian Wang, Ali Ebrahimpour-Boroojeny, Hari Sundaram et al.· 0 citations
We use cookies to run the site and, with your consent, for analytics and to show ads.
See our Cookie Policy.