Push-Pull Attentional Anchoring for Diffusion Concept Erasure
Organizations: VISTEC, Thailand · Chulalongkorn University, Thailand
Abstract
Rapid advances in diffusion models have raised concerns about privacy, harmful content, and copyright violations. Concept erasure methods aim to address these risks by removing undesirable concepts from pretrained models without full retraining. However, existing approaches often degrade non-target generation quality through heuristic strength scaling (e.g., classifier-free guidance or negative prompt scaling), leading to uncontrolled and excessive semantic drift. To address this, we propose Push-Pull Attentional Anchoring (PPAA), a mechanism in the cross-attention space that displaces target representations while anchoring the scale of erasure via bounded cosine-similarity constraints. By using a relative similarity ratio instead of an absolute difference, our adaptive threshold represents a meaningful percentage of semantic retention, facilitating a single value to be applied uniformly across layers. We conduct extensive experiments across multiple concept categories, including celebrities, artistic styles, nudity, and intellectual property. Our method achieves favorable trade-offs against prior approaches on Stable Diffusion v1.4 and demonstrates its applicability to modern architectures such as FLUX.
Figures & tables
| Method | Pre-ASR | ASR | Avg Time (mins) |
|---|---|---|---|
| ESD | 0.26 | 0.92 | 9.89 |
| UCE | 0.41 | 0.92 | 8.35 |
| MACE | 0.55 | 0.92 | 7.11 |
| AC | 0.20 | 0.88 | 9.98 |
| DUO | 0.02 | 0.47 | 13.45 |
| SUMA | 0.16 | 0.83 | 11.80 |
| Method | ASR | CMMD |
|---|---|---|
| ESD | 0.69 | 13.94 |
| UCE | 0.79 | 4.05 |
| DUO | 0.01 | 6.44 |
| STEREO | 0.04 | 139.47 |
| Ours | 0.20 | 1.43 |
Appendix figures & tables13 assets
Supplementary material from the paper’s appendix.
Appendix
| Generic / Related anchor | Random anchor | |||||||
|---|---|---|---|---|---|---|---|---|
| Setting | Avg. | Std. | Min. | Max. | Avg. | Std. | Min. | Max. |
| Main experiments (13 concepts) | 0.659 | 0.166 | 0.247 | 0.942 | 0.390 | 0.186 | 0.050 | 0.834 |
| 50 celebrities | 0.482 | 0.161 | 0.126 | 0.881 | 0.367 | 0.184 | 0.055 | 0.817 |
| 50 artistic styles | 0.651 | 0.124 | 0.337 | 0.942 | 0.344 | 0.195 | 0.030 | 0.848 |
| 80 COCO classes | 0.606 | 0.142 | 0.182 | 0.927 | 0.511 | 0.174 | 0.130 | 0.926 |
| 600 OpenImage classes | 0.574 | 0.150 | 0.133 | 0.927 | 0.489 | 0.181 | 0.047 | 0.991 |
| Category | Same-Domain Preservation Concepts |
|---|---|
| Celebrity | Maya Angelou, Gillian Anderson, Jim Morrison, Jennifer Connelly, Benicio Del Toro, Avril Lavigne, Aaron Paul, Bill Murray, Kim Jong Un, Justin Bieber, David Bowie, Barry Manilow, Judy Garland, Betty White, Denise Richards, Gal Gadot, Pierce Brosnan, Julianne Moore, David Tennant, Jackie Chan, Natalie Portman, Rachel Dratch, Liv Tyler, Gordon Ramsay, Patrick Stewart, Doris Day, Matthew McConaughey, Amy Schumer, Hayley Atwell, Niall Horan, Neil deGrasse Tyson, Heath Ledger, Kristen Stewart, Amy Poehler, Kirsten Dunst, Matt Damon, Joan Rivers, Bill Nye, Britney Spears, Lizzy Caplan, Emma Roberts, Clint Eastwood, Rachel McAdams, Harry Dean Stanton, Krysten Ritter, Aretha Franklin, Kate Upton, George Takei, Christina Hendricks, Andy Samberg |
| Artistic Style | Abed Abdi, Albert Marquet, Alberto Vargas, Adrian Tomine, Albert Edelfelt, A. J. Casson, Abbott Fuller Graves, Alan Kenny, Alberto Sughi, Aaron Siskind, Adriaen van Outrecht, Albert Goodwin, Alberto Biasi, Albert Bloch, Adrian Donoghue, Akos Major, Alberto Burri, Ai Weiwei, Alastair Magnaldo, Albert Watson, Agnes Martin, Aleksey Savrasov, Adolph Gottlieb, Adrianus Eversen, Affandi, Alessandro Allori, Alec Soth, Abigail Larson, Alan Parry, Akira Toriyama, Adonna Khare, Alena Aenami, Agnes Cecile, Albert Lynch, Albrecht Dürer, Alejandro Jodorowsky, Alex Alemany, Alex Colville, Albert Eckhout, Abram Efimovich Arkhipov, Adolph Menzel, Aleksi Briclot, Agostino Tassi, Albert Bierstadt, Aaron Douglas, Albert Tucker, Abraham Pether, Alberto Magnelli, Adam Hughes, Alan Schaller |
Concept Erasure
Concept erasure removes specified knowledge or attributes from models while preserving their ability to perform unrelated tasks.
See all 61 papers