{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,6]],"date-time":"2026-08-06T19:37:55Z","timestamp":1786045075044,"version":"3.56.0"},"reference-count":44,"publisher":"IEEE","license":[{"start":{"date-parts":[[2025,10,19]],"date-time":"2025-10-19T00:00:00Z","timestamp":1760832000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,10,19]],"date-time":"2025-10-19T00:00:00Z","timestamp":1760832000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"NSF of China","doi-asserted-by":"publisher","award":["92470118,62306176"],"award-info":[{"award-number":["92470118,62306176"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025,10,19]]},"DOI":"10.1109\/iccv51701.2025.00206","type":"proceedings-article","created":{"date-parts":[[2026,4,29]],"date-time":"2026-04-29T19:45:49Z","timestamp":1777491949000},"page":"2131-2141","source":"Crossref","is-referenced-by-count":1,"title":["Meta-Unlearning on Diffusion Models: Preventing Relearning Unlearned Concepts"],"prefix":"10.1109","author":[{"given":"Hongcheng","family":"Gao","sequence":"first","affiliation":[{"name":"Sea AI Lab,Singapore"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Tianyu","family":"Pang","sequence":"additional","affiliation":[{"name":"Sea AI Lab,Singapore"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Chao","family":"Du","sequence":"additional","affiliation":[{"name":"Sea AI Lab,Singapore"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Taihang","family":"Hu","sequence":"additional","affiliation":[{"name":"Nankai University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Zhijie","family":"Deng","sequence":"additional","affiliation":[{"name":"Shanghai Jiao Tong University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Min","family":"Lin","sequence":"additional","affiliation":[{"name":"Sea AI Lab,Singapore"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","article-title":"Multimodal datasets: misogyny, pornography, and malignant stereotypes","author":"Birhane","year":"2021","journal-title":"arXiv preprint arXiv"},{"key":"ref2","article-title":"Model-agnostic meta-learning for fast adaptation of deep networks","volume-title":"International Conference on Machine Learning (ICML)","author":"Finn","year":"2017"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51070.2023.00230"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/WACV57701.2024.00503"},{"key":"ref5","article-title":"Evaluating the robustness of text-to-image diffusion models against real-world attacks","author":"Gao","year":"2023","journal-title":"arXiv preprint arXiv"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-73668-1_5"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2025.112916"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.52202\/075280-0751"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2021.emnlp-main.595"},{"key":"ref10","first-page":"6626","article-title":"Gans trained by a two time-scale update rule converge to a local nash equilibrium","author":"Heusel","year":"2017","journal-title":"Advances in Neu-ral Information Processing Systems (NeurIPS)"},{"key":"ref11","article-title":"Denoising diffusion probabilistic models","author":"Ho","year":"2020","journal-title":"Advances in Neural Information Processing Systems (NeurIPS)"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-73661-2_20"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-72943-0_12"},{"key":"ref14","article-title":"Race: Robust adversarial concept erasure for secure text-to-image diffusion model","author":"Kim","year":"2024","journal-title":"arXiv preprint arXiv"},{"key":"ref15","article-title":"Towards safe self-distillation of internet-scale text-to-image diffusion models","author":"Kim","year":"2023","journal-title":"ICML Workshop on Challenges in Deployable Generative AI"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV51070.2023.02074"},{"key":"ref17","volume-title":"Flux","author":"Labs","year":"2024"},{"key":"ref18","article-title":"Safegen: Mitigating unsafe content generation in text-to-image models","author":"Li","year":"2024","journal-title":"arXiv preprint arXiv"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-10602-1_48"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52733.2024.00615"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2025.findings-naacl.172"},{"key":"ref22","article-title":"Direct unlearning optimization for robust and safe text-to-image models","author":"Park","year":"2024","journal-title":"arXiv preprint arXiv"},{"key":"ref23","first-page":"8024","article-title":"Pytorch: An imperative style, highperformance deep learning library","author":"Paszke","year":"2019","journal-title":"Advances in Neural Information Processing Systems (NeurIPS)"},{"key":"ref24","article-title":"Can sensitive information be deleted from 11 ms ? objectives for defending against extraction attacks","volume-title":"International Conference on Learning Representations (ICLR)","author":"Patil","year":"2024"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-73223-2_18"},{"key":"ref26","article-title":"Circumventing concept erasure methods for text-to-image generative models","volume-title":"International Conference on Learning Representations (ICLR)","author":"Pham","year":"2024"},{"key":"ref27","article-title":"Robust concept erasure using task vectors","author":"Pham","year":"2024","journal-title":"arXiv preprint arXiv"},{"key":"ref28","article-title":"Sdxl: improving latent diffusion models for high-resolution image synthesis","author":"Podell","year":"2023","journal-title":"arXiv preprint arXiv"},{"key":"ref29","volume-title":"Fine-tuning aligned language models compromises safety, even when users do not intend to! In International Conference on Learning Representations (ICLR)","author":"Qi","year":"2023"},{"key":"ref30","article-title":"Red-teaming the stable diffusion safety filter","author":"Rando","year":"2022","journal-title":"arXiv preprint arXiv"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/cvpr52688.2022.01042"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.02157"},{"key":"ref33","article-title":"Ununlearning: Unlearning is not sufficient for content regulation in advanced generative ai","author":"Shumailov","year":"2024","journal-title":"arXiv preprint arXiv"},{"key":"ref34","first-page":"2256","article-title":"Deep unsupervised learning using nonequilibrium thermodynamics","volume-title":"International Conference on Machine Learning (ICML)","author":"Sohl-Dickstein","year":"2015"},{"key":"ref35","article-title":"Score-based generative modeling through stochastic differential equations","volume-title":"International Conference on Learning Representations (ICLR)","author":"Song","year":"2021"},{"key":"ref36","article-title":"Tamper-resistant safeguards for open-weight 11 ms","author":"Tamirisa","year":"2024","journal-title":"arXiv preprint arXiv"},{"key":"ref37","article-title":"Ring-a-bell! how reliable are concept removal methods for diffusion models?","author":"Tsai","year":"2023","journal-title":"arXiv preprint arXiv"},{"key":"ref38","article-title":"Unlearning concepts in diffusion model via concept domain correction and concept preserving gradient","author":"Wu","year":"2024","journal-title":"arXiv preprint arXiv"},{"key":"ref39","article-title":"Guardt2i: Defending text-to-image models from adversarial prompts","author":"Yang","year":"2024","journal-title":"arXiv preprint arXiv"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v39i24.34769"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW63382.2024.00182"},{"key":"ref42","article-title":"To generate or not? safety-driven unlearned diffusion models are still easy to generate unsafe images\u2026 for now","author":"Zhang","year":"2023","journal-title":"arXiv preprint arXiv"},{"key":"ref43","article-title":"Defensive unlearning with adversarial training for robust concept erasure in diffusion models","author":"Zhang","year":"2024","journal-title":"arXiv preprint arXiv"},{"key":"ref44","article-title":"An adversarial perspective on machine unlearning for ai safety","author":"\u0141ucki","year":"2024","journal-title":"arXiv preprint arXiv"}],"event":{"name":"2025 IEEE\/CVF International Conference on Computer Vision (ICCV)","location":"Honolulu, HI, USA","start":{"date-parts":[[2025,10,19]]},"end":{"date-parts":[[2025,10,25]]}},"container-title":["2025 IEEE\/CVF International Conference on Computer Vision (ICCV)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11443115\/11443287\/11444524.pdf?arnumber=11444524","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,5,1]],"date-time":"2026-05-01T05:06:43Z","timestamp":1777612003000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11444524\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,10,19]]},"references-count":44,"URL":"https:\/\/doi.org\/10.1109\/iccv51701.2025.00206","relation":{},"subject":[],"published":{"date-parts":[[2025,10,19]]}}}