arXiv:2509.12024cs.CV2025-09被引 1

提出可证明安全的扩散模型概念擦除方法,防止敏感信息泄露。

Robust Concept Erasure in Diffusion Models: A Theoretical Perspective on Security and Robustness

  • 将概念擦除建模为对抗独立问题,通过最小化互信息实现
  • 在四个基准上最高提升12.5%擦除效果,图像质量更优
  • 适合关注生成模型隐私与安全的研究者和开发者

扩散模型在图像生成中取得突破性进展,但带来了隐私、公平性和安全性风险。亟需擦除敏感或有害概念(如NSFW内容、特定人物、艺术风格),同时保持生成能力。本文提出SCORE(Secure and Concept-Oriented Robust Erasure)框架,将概念擦除建模为对抗独立问题,理论上保证模型输出与被擦除概念统计独立。通过最小化目标概念与生成结果间的互信息,实现可证明的擦除保障。提供收敛性证明并推导残留概念泄漏的上界。在Stable Diffusion和FLUX上评估,涵盖物体擦除、NSFW移除、名人面部抑制和艺术风格遗忘四个挑战性任务。实验表明,SCORE优于EraseAnything、ANT、MACE、ESD、UCE等先进方法,在擦除效能上最高提升12.5%,同时保持或超越图像质量。其结合对抗优化、轨迹一致性与显著性驱动微调,确立了扩散模型安全可靠概念擦除的新标准。

原文摘要 · Abstract (English)

Diffusion models have achieved unprecedented success in image generation but pose increasing risks in terms of privacy, fairness, and security. A growing demand exists to \emph{erase} sensitive or harmful concepts (e.g., NSFW content, private individuals, artistic styles) from these models while preserving their overall generative capabilities. We introduce \textbf{SCORE} (Secure and Concept-Oriented Robust Erasure), a novel framework for robust concept removal in diffusion models. SCORE formulates concept erasure as an \emph{adversarial independence} problem, theoretically guaranteeing that the model's outputs become statistically independent of the erased concept. Unlike prior heuristic methods, SCORE minimizes the mutual information between a target concept and generated outputs, yielding provable erasure guarantees. We provide formal proofs establishing convergence properties and derive upper bounds on residual concept leakage. Empirically, we evaluate SCORE on Stable Diffusion and FLUX across four challenging benchmarks: object erasure, NSFW removal, celebrity face suppression, and artistic style unlearning. SCORE consistently outperforms state-of-the-art methods including EraseAnything, ANT, MACE, ESD, and UCE, achieving up to \textbf{12.5\%} higher erasure efficacy while maintaining comparable or superior image quality. By integrating adversarial optimization, trajectory consistency, and saliency-driven fine-tuning, SCORE sets a new standard for secure and robust concept erasure in diffusion models.

扩散模型概念擦除隐私安全

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。