Erasing Undesirable Concepts in Diffusion Models with Adversarial Preservation
About
Diffusion models excel at generating visually striking content from text but can inadvertently produce undesirable or harmful content when trained on unfiltered internet data. A practical solution is to selectively removing target concepts from the model, but this may impact the remaining concepts. Prior approaches have tried to balance this by introducing a loss term to preserve neutral content or a regularization term to minimize changes in the model parameters, yet resolving this trade-off remains challenging. In this work, we propose to identify and preserving concepts most affected by parameter changes, termed as \textit{adversarial concepts}. This approach ensures stable erasure with minimal impact on the other concepts. We demonstrate the effectiveness of our method using the Stable Diffusion model, showing that it outperforms state-of-the-art erasure methods in eliminating unwanted content while maintaining the integrity of other unrelated elements. Our code is available at https://github.com/tuananhbui89/Erasing-Adversarial-Preservation.
Related benchmarks
| Task | Dataset | Result | Rank | |
|---|---|---|---|---|
| NSFW Concept Erasure | I2P 4,703 potentially unsafe prompts | Total Success Count386 | 10 | |
| Concept Erasure | Artist Style Erasure (test) | -- | 7 | |
| Object Concept Erasure | Imagenette | ESR (k=1)98.6 | 5 | |
| Nudity Erasure | COCO 30K (val) | NER (Threshold 0.3)3.64 | 4 | |
| Concept Erasure | Artistic style concepts To Retain (test) | CLIP Similarity30.13 | 4 |