{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,4]],"date-time":"2026-05-04T06:08:25Z","timestamp":1777874905276,"version":"3.51.4"},"reference-count":56,"publisher":"Elsevier BV","license":[{"start":{"date-parts":[[2026,4,1]],"date-time":"2026-04-01T00:00:00Z","timestamp":1775001600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2026,4,1]],"date-time":"2026-04-01T00:00:00Z","timestamp":1775001600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/legal\/tdmrep-license"},{"start":{"date-parts":[[2026,4,1]],"date-time":"2026-04-01T00:00:00Z","timestamp":1775001600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-017"},{"start":{"date-parts":[[2026,4,1]],"date-time":"2026-04-01T00:00:00Z","timestamp":1775001600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"},{"start":{"date-parts":[[2026,4,1]],"date-time":"2026-04-01T00:00:00Z","timestamp":1775001600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-012"},{"start":{"date-parts":[[2026,4,1]],"date-time":"2026-04-01T00:00:00Z","timestamp":1775001600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,4,1]],"date-time":"2026-04-01T00:00:00Z","timestamp":1775001600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-004"}],"funder":[{"DOI":"10.13039\/501100007129","name":"Shandong Province Natural Science Foundation","doi-asserted-by":"publisher","award":["ZR2024MF021"],"award-info":[{"award-number":["ZR2024MF021"]}],"id":[{"id":"10.13039\/501100007129","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["Computer Standards &amp; Interfaces"],"published-print":{"date-parts":[[2026,4]]},"DOI":"10.1016\/j.csi.2026.104142","type":"journal-article","created":{"date-parts":[[2026,2,14]],"date-time":"2026-02-14T15:54:28Z","timestamp":1771084468000},"page":"104142","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":0,"special_numbering":"C","title":["Fortified Concept Forgetting for text-to-image generative models by machine unlearning on CLIP"],"prefix":"10.1016","volume":"97","author":[{"given":"Jiahao","family":"Fan","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4793-8509","authenticated-orcid":false,"given":"Xu","family":"Ma","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8625-0275","authenticated-orcid":false,"given":"Changyu","family":"Dong","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Honghao","family":"Chu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Bingqing","family":"Yang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"78","reference":[{"key":"10.1016\/j.csi.2026.104142_b1","series-title":"Proceedings of the IEEE\/CVF International Conference on Computer Vision","first-page":"13049","article-title":"Diffir: Efficient diffusion model for image restoration","author":"Xia","year":"2023"},{"key":"10.1016\/j.csi.2026.104142_b2","series-title":"Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition","first-page":"18423","article-title":"Holodiffusion: Training a 3d diffusion model using 2d images","author":"Karnewar","year":"2023"},{"key":"10.1016\/j.csi.2026.104142_b3","series-title":"Proceedings of the IEEE\/CVF International Conference on Computer Vision","first-page":"19773","article-title":"Diffusiondet: Diffusion model for object detection","author":"Chen","year":"2023"},{"key":"10.1016\/j.csi.2026.104142_b4","series-title":"Proceedings of the IEEE\/CVF International Conference on Computer Vision","first-page":"2206","article-title":"Your diffusion model is secretly a zero-shot classifier","author":"Li","year":"2023"},{"key":"10.1016\/j.csi.2026.104142_b5","series-title":"Proceedings of the IEEE\/CVF International Conference on Computer Vision","first-page":"21684","article-title":"Ddp: Diffusion model for dense visual prediction","author":"Ji","year":"2023"},{"key":"10.1016\/j.csi.2026.104142_b6","series-title":"Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition","first-page":"22563","article-title":"Align your latents: High-resolution video synthesis with latent diffusion models","author":"Blattmann","year":"2023"},{"key":"10.1016\/j.csi.2026.104142_b7","series-title":"International Conference on Machine Learning","first-page":"8748","article-title":"Learning transferable visual models from natural language supervision","author":"Radford","year":"2021"},{"key":"10.1016\/j.csi.2026.104142_b8","series-title":"USENIX Security Symposium","first-page":"5253","article-title":"Extracting training data from diffusion models","author":"Carlini","year":"2023"},{"key":"10.1016\/j.csi.2026.104142_b9","series-title":"NeurIPS Workshop Datacentric AI","article-title":"Laion-400m: Open dataset of clip-filtered 400 million image-text pairs","author":"Schuhmann","year":"2021"},{"key":"10.1016\/j.csi.2026.104142_b10","first-page":"25278","article-title":"Laion-5b: An open large-scale dataset for training next generation image-text models","volume":"35","author":"Schuhmann","year":"2022","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"10.1016\/j.csi.2026.104142_b11","series-title":"Privacy Technologies and Policy","first-page":"106","article-title":"Towards improving privacy of synthetic datasets","author":"Kuppa","year":"2021"},{"key":"10.1016\/j.csi.2026.104142_b12","doi-asserted-by":"crossref","unstructured":"N. Carlini, D. Ippolito, M. Jagielski, K. Lee, F. Tramer, C. Zhang, Quantifying memorization across neural language models, in: International Conference on Learning Representations, 2023, https:\/\/iclr.cc\/virtual\/2023\/oral\/12637.","DOI":"10.52202\/075280-1708"},{"key":"10.1016\/j.csi.2026.104142_b13","unstructured":"N. Carlini, C. Liu, \u00da. Erlingsson, J. Kos, D. Song, The secret sharer: Evaluating and testing unintended memorization in neural networks, in: USENIX Security Symposium, 2019, pp. 267\u2013284, https:\/\/dl.acm.org\/doi\/10.5555\/3361338.3361358."},{"issue":"3","key":"10.1016\/j.csi.2026.104142_b14","doi-asserted-by":"crossref","first-page":"107","DOI":"10.1145\/3446776","article-title":"Understanding deep learning (still) requires rethinking generalization","volume":"64","author":"Zhang","year":"2021","journal-title":"Commun. ACM"},{"key":"10.1016\/j.csi.2026.104142_b15","series-title":"Proceedings of International Conference on Multimodal Interaction","article-title":"Multimodal datasets: misogyny, pornography, and malignant stereotypes","author":"Birhane","year":"2023"},{"key":"10.1016\/j.csi.2026.104142_b16","series-title":"USENIX Security Symposium","first-page":"2187","article-title":"Glaze: protecting artists from style mimicry by text-to-image models","author":"Shan","year":"2023"},{"key":"10.1016\/j.csi.2026.104142_b17","series-title":"Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition","first-page":"6048","article-title":"Diffusion art or digital forgery? investigating data replication in diffusion models","author":"Somepalli","year":"2023"},{"issue":"1","key":"10.1016\/j.csi.2026.104142_b18","first-page":"3","article-title":"Applying current copyright law to artificial intelligence image generators in the context of Anderson v. Stability AI, Ltd.","volume":"15","author":"Lindberg","year":"2024","journal-title":"Cybaris\u00ae"},{"key":"10.1016\/j.csi.2026.104142_b19","first-page":"8780","article-title":"Diffusion models beat gans on image synthesis","volume":"34","author":"Dhariwal","year":"2021","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"10.1016\/j.csi.2026.104142_b20","series-title":"Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition","first-page":"22522","article-title":"Safe latent diffusion: Mitigating inappropriate degeneration in diffusion models","author":"Schramowski","year":"2023"},{"key":"10.1016\/j.csi.2026.104142_b21","series-title":"Proceedings of the IEEE\/CVF International Conference on Computer Vision","first-page":"2426","article-title":"Erasing concepts from diffusion models","author":"Gandikota","year":"2023"},{"key":"10.1016\/j.csi.2026.104142_b22","series-title":"Proceedings of the IEEE\/CVF International Conference on Computer Vision","first-page":"22634","article-title":"Ablating concepts in text-to-image diffusion models","author":"Kumari","year":"2023"},{"key":"10.1016\/j.csi.2026.104142_b23","series-title":"Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition","first-page":"1755","article-title":"Forget-me-not: Learning to forget in text-to-image diffusion models","author":"Zhang","year":"2024"},{"key":"10.1016\/j.csi.2026.104142_b24","series-title":"Proceedings of the IEEE\/CVF Winter Conference on Applications of Computer Vision","first-page":"5099","article-title":"Unified concept editing in diffusion models","author":"Gandikota","year":"2024"},{"key":"10.1016\/j.csi.2026.104142_b25","series-title":"European Conference on Computer Vision","first-page":"340","article-title":"Safe-CLIP: Removing NSFW concepts from vision-and-language models","author":"Poppi","year":"2024"},{"key":"10.1016\/j.csi.2026.104142_b26","series-title":"NeurIPS Workshop ML Safety","article-title":"Red-teaming the stable diffusion safety filter","author":"Rando","year":"2022"},{"key":"10.1016\/j.csi.2026.104142_b27","series-title":"Proceedings of International Conference on Machine Learning","article-title":"Prompting4debugging: Red-teaming text-to-image diffusion models by finding problematic prompts","author":"Chin","year":"2024"},{"key":"10.1016\/j.csi.2026.104142_b28","series-title":"International Conference on Representation Learning","first-page":"41543","article-title":"Ring-a-bell! how reliable are concept removal methods for diffusion models?","author":"Tsai","year":"2024"},{"key":"10.1016\/j.csi.2026.104142_b29","series-title":"European Conference on Computer Vision","first-page":"385","article-title":"To generate or not? safety-driven unlearned diffusion models are still easy to generate unsafe images... for now","author":"Zhang","year":"2024"},{"key":"10.1016\/j.csi.2026.104142_b30","series-title":"European Conference on Computer Vision","first-page":"360","article-title":"Receler: Reliable concept erasing of text-to-image diffusion models via lightweight erasers","author":"Huang","year":"2024"},{"key":"10.1016\/j.csi.2026.104142_b31","series-title":"European Conference on Computer Vision","first-page":"73","article-title":"Reliable and efficient concept erasure of text-to-image diffusion models","author":"Gong","year":"2024"},{"key":"10.1016\/j.csi.2026.104142_b32","series-title":"Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition","first-page":"10674","article-title":"High-resolution image synthesis with latent diffusion models","author":"Rombach","year":"2022"},{"key":"10.1016\/j.csi.2026.104142_b33","series-title":"Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition","first-page":"16389","article-title":"Disentangling visual and written concepts in CLIP","author":"Materzy\u0144ska","year":"2022"},{"key":"10.1016\/j.csi.2026.104142_b34","series-title":"International Conference on Learning Representations","article-title":"How much can clip benefit vision-and-language tasks?","author":"Shen","year":"2021"},{"issue":"1","key":"10.1016\/j.csi.2026.104142_b35","doi-asserted-by":"crossref","first-page":"625","DOI":"10.1109\/TNNLS.2023.3331841","article-title":"Actionclip: A new paradigm for video action recognition","volume":"36","author":"Wang","year":"2023","journal-title":"IEEE Trans. Neural Networks Learn. Syst."},{"issue":"9","key":"10.1016\/j.csi.2026.104142_b36","article-title":"A survey of machine unlearning","author":"Nguyen","year":"2022","journal-title":"ACM Trans. Intell. Syst. Technol."},{"issue":"9","key":"10.1016\/j.csi.2026.104142_b37","doi-asserted-by":"crossref","first-page":"13046","DOI":"10.1109\/TNNLS.2023.3266233","article-title":"Fast yet effective machine unlearning","volume":"35","author":"Tarun","year":"2024","journal-title":"IEEE Trans. Neural Netw. Learn. Syst."},{"key":"10.1016\/j.csi.2026.104142_b38","series-title":"International Conference on Learning Representations","first-page":"31693","article-title":"Machine unlearning for image-to-image generative models","volume":"2024","author":"Li","year":"2024"},{"key":"10.1016\/j.csi.2026.104142_b39","series-title":"IEEE Symposium on Security and Privacy","first-page":"141","article-title":"Machine unlearning","author":"Bourtoule","year":"2021"},{"key":"10.1016\/j.csi.2026.104142_b40","series-title":"Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition","first-page":"9301","article-title":"Eternal sunshine of the spotless net: Selective forgetting in deep networks","author":"Golatkar","year":"2020"},{"key":"10.1016\/j.csi.2026.104142_b41","first-page":"18075","article-title":"Remember what you want to forget: Algorithms for machine unlearning","volume":"34","author":"Sekhari","year":"2021","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"10.1016\/j.csi.2026.104142_b42","first-page":"11516","article-title":"Amnesiac machine learning","volume":"vol. 35","author":"Graves","year":"2021"},{"key":"10.1016\/j.csi.2026.104142_b43","series-title":"Algorithmic Learning Theory","first-page":"931","article-title":"Descent-to-delete: Gradient-based methods for machine unlearning","author":"Neel","year":"2021"},{"key":"10.1016\/j.csi.2026.104142_b44","series-title":"International Conference on Machine Learning","first-page":"33921","article-title":"Deep regression unlearning","author":"Tarun","year":"2023"},{"key":"10.1016\/j.csi.2026.104142_b45","series-title":"International Conference on Machine Learning","first-page":"6028","article-title":"Forget unlearning: Towards true data-deletion in machine learning","author":"Chourasia","year":"2023"},{"key":"10.1016\/j.csi.2026.104142_b46","series-title":"Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition","first-page":"7766","article-title":"Boundary unlearning: Rapid forgetting of deep networks via shifting the decision boundary","author":"Chen","year":"2023"},{"issue":"5","key":"10.1016\/j.csi.2026.104142_b47","doi-asserted-by":"crossref","first-page":"5303","DOI":"10.1109\/TDSC.2025.3564992","article-title":"Generative adversarial networks unlearning","volume":"22","author":"Sun","year":"2025","journal-title":"IEEE Trans. Dependable Secur. Comput."},{"key":"10.1016\/j.csi.2026.104142_b48","series-title":"ICML Workshop Generative AI and Law","article-title":"Gradient surgery for one-shot unlearning on generative model","author":"Bae","year":"2023"},{"key":"10.1016\/j.csi.2026.104142_b49","series-title":"2024 IEEE Conference on Secure and Trustworthy Machine Learning","first-page":"569","article-title":"Data redaction from conditional generative models","author":"Kong","year":"2024"},{"key":"10.1016\/j.csi.2026.104142_b50","article-title":"A closer look at the robustness of contrastive language-image pre-training (clip)","volume":"36","author":"Tu","year":"2024","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"10.1016\/j.csi.2026.104142_b51","article-title":"Visual instruction tuning","volume":"36","author":"Liu","year":"2024","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"10.1016\/j.csi.2026.104142_b52","series-title":"NSFW: Sex, humor, and risk in social media","author":"Paasonen","year":"2024"},{"key":"10.1016\/j.csi.2026.104142_b53","series-title":"Proceedings of International Conference on Computational Linguistics","first-page":"3850","article-title":"Automated progressive red teaming","author":"Jiang","year":"2025"},{"key":"10.1016\/j.csi.2026.104142_b54","series-title":"Genetic algorithms","author":"Sivanandam","year":"2008"},{"key":"10.1016\/j.csi.2026.104142_b55","series-title":"NudeNet: An ensemble of neural nets for nudity detection and censoring","author":"Bedapudi","year":"2019"},{"key":"10.1016\/j.csi.2026.104142_b56","series-title":"Proceedings of the ACM Conference on Fairness, Accountability, and Transparency","article-title":"Can machines help us answering question 16 in datasheets, and in turn reflecting on inappropriate content?","author":"Schramowski","year":"2022"}],"container-title":["Computer Standards &amp; Interfaces"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S0920548926000164?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S0920548926000164?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2026,4,30]],"date-time":"2026-04-30T20:32:03Z","timestamp":1777581123000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S0920548926000164"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,4]]},"references-count":56,"alternative-id":["S0920548926000164"],"URL":"https:\/\/doi.org\/10.1016\/j.csi.2026.104142","relation":{},"ISSN":["0920-5489"],"issn-type":[{"value":"0920-5489","type":"print"}],"subject":[],"published":{"date-parts":[[2026,4]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"Fortified Concept Forgetting for text-to-image generative models by machine unlearning on CLIP","name":"articletitle","label":"Article Title"},{"value":"Computer Standards & Interfaces","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.csi.2026.104142","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2026 Elsevier B.V. All rights are reserved, including those for text and data mining, AI training, and similar technologies.","name":"copyright","label":"Copyright"}],"article-number":"104142"}}