arXiv Computer Vision

PIU: Proximity-guided Identity Unlearning in ID-Conditioned Diffusion Models

arXiv Computer Vision
Oct 8

How Private is Private? A Comparative Study for Face De-Identification

The paper introduces a unified evaluation framework for face de-identification (FDeID), addressing inconsistencies in current protocols. It presents UtilFace, a demographically balanced benchmark assembled from four large-scale datasets, and HiFD, a hierarchical metric that simultaneously measures identity suppression, multi-level utility preservation, and image quality. Using this framework, the authors compare adversarial, GAN-based, and diffusion-based methods, revealing trade-offs and failure modes that were previously hidden, and they release the benchmark and toolkit for reproducible research.

By Hui Wei, Hao Yu, Hui Kuurila-Zhang, Guoying Zhao
arXiv AI
Jul 8

TILDE: TILt-based Distributional Erasure for Concept Unlearning

arXiv:2607. 06432v1 Announce Type: cross Abstract: Concept unlearning in text-to-image diffusion models is critical for safe and practical deployment: with rising privacy concerns, copyright disputes, trademark constraints, and safety regulations, deployed systems must be able to suppress unwanted concepts after training.

By Naveen George, Naoki Murata, Yuhta Takida, Konda Reddy Mopuri, Yuki Mitsufuji
arXiv Computation and Language
Aug 31

AIM: Anchor Identity Features, Then Match for Multimodal Large Language Model Unlearning

The paper introduces AIM, a two‑stage approach for unlearning identity‑specific information from multimodal large language models (MLLMs) when retain images are not available at deletion time. AIM first anchors an identity‑forgetting target using a universal visual prompt, then aligns the vision encoder to this target under a Fisher‑based constraint. Experiments demonstrate that AIM effectively removes identity knowledge while preserving other visual perception capabilities and prior knowledge.

By Wonjun Lee, Jaehyuk Jang, Kangwook Ko, Hee-Seon Kim, Changick Kim
arXiv Computer Vision
Sep 24

Damnatio Memoriae: Adversarially and Selectively Forgetting Identities in the Embedding Space of Face Recognition Models

The paper introduces "open‑set adversarial forgetting" to make selected identities unlinkable in face recognition models while keeping the system functional for other users. Three loss functions are proposed: one disperses embeddings from their centroid, and two map each image to a near‑orthogonal target—either learned via the classifier head or fixed as an almost‑orthonormal frame. Experiments on multiple backbones and forget scales show that these losses, especially the orthonormal‑frame approach, effectively render the targeted identities unidentifiable and outperform prior methods while preserving higher retain rates.

By \"Unsal \"Ozt\"urk, Vedrana Krivoku\'ca Hahn, Sushil Bhattacharjee, S\'ebastien Marcel
arXiv AI
Oct 15

No Concept Escapes the Audit: Auditing-Aware Unlearning for Verifiable Concept Erasure in Diffusion Models

The paper introduces AVCE, a method for verifiable concept erasure in diffusion models that audits latent representations to identify vulnerable directions and then edits cross‑attention and self‑attention projections in closed form. By fine‑tuning with pathway‑level auditing losses and orthogonal gradient projection, AVCE reduces attack success rates by 5.07× and improves auditing scores by 3.84× compared to the best baseline while maintaining generation quality.

By Kaiyuan Deng, Yuchen Li, Gen Li, Yang Xiao, Geng Yuan, Xiaoyong Yuan, Bo Hui, Xiaolong Ma