Concept Removal on Ring-A-Bell Nudity
95.6Attack Success Rate (ASR)SLD Medium
Evaluation results
| Method | Links | ||
|---|---|---|---|
| SLD MediumEvaluation Protocol=Inference-time, Configuration=Medium, Backbone=Stable Diffusion v1.42026.06 | 95.6 | — | |
| SLD MediumEvaluation Protocol=Inference-time, Configuration=Medium, Backbone=Stable Diffusion v1.42026.06 | 93.6 | — | |
| SD v1.4Backbone=Stable Diffusion v1.42026.06 | 92.6 | — | |
| SLD StrongEvaluation Protocol=Inference-time, Configuration=Strong, Backbone=Stable Diffusion v1.42026.06 | 92.6 | — | |
| SD v1.4Backbone=Stable Diffusion v1.42026.06 | 92.6 | — | |
| SLD StrongEvaluation Protocol=Inference-time, Configuration=Strong, Backbone=Stable Diffusion v1.42026.06 | 92.6 | — | |
| SGFBase Model=FLUX, Sampling Steps=82026.06 | 81 | 80.1 | |
| SLD MaxEvaluation Protocol=Inference-time, Configuration=Max, Backbone=Stable Diffusion v1.42026.06 | 80 | — | |
| SLD MaxEvaluation Protocol=Inference-time, Configuration=Max, Backbone=Stable Diffusion v1.42026.06 | 78.9 | — | |
| SGF + SAFREEBase Model=FLUX, Sampling Steps=82026.06 | 74.7 | 73 | |
| SGF + Semantic SurgeryBase Model=FLUX, Sampling Steps=82026.06 | 73.4 | 77.5 | |
| Baseline + SAFREEBase Model=FLUX, Sampling Steps=82026.06 | 70.9 | 73.2 | |
| BaselineBase Model=MeanFlow, Sampling Steps=42026.06 | 70.9 | 69.3 | |
| CAEvaluation Protocol=Fine-tuning, Backbone=Stable Diffusion v1.42026.06 | 68.4 | — | |
| STG + SAFREEBase Model=FLUX, Sampling Steps=82026.06 | 67.1 | 71.5 | |
| STGBase Model=MeanFlow, Sampling Steps=42026.06 | 67.1 | 65.6 | |
| SGF + Semantic SurgeryBase Model=MeanFlow, Sampling Steps=42026.06 | 67.1 | 68.8 | |
| STGBase Model=FLUX, Sampling Steps=82026.06 | 65.8 | 71.6 | |
| STG + Semantic SurgeryBase Model=MeanFlow, Sampling Steps=42026.06 | 65.8 | 65.8 | |
| SGFBase Model=MeanFlow, Sampling Steps=42026.06 | 65.8 | 69.5 | |
| BaselineBase Model=FLUX, Sampling Steps=82026.06 | 64.6 | 71.4 | |
| STG + Semantic SurgeryBase Model=FLUX, Sampling Steps=82026.06 | 64.6 | 69.6 | |
| Baseline + Semantic SurgeryBase Model=FLUX, Sampling Steps=82026.06 | 62 | 68.6 | |
| CAEvaluation Protocol=Fine-tuning, Backbone=Stable Diffusion v1.42026.06 | 60 | — | |
| Baseline + SAFREEBase Model=MeanFlow, Sampling Steps=42026.06 | 57 | 57.2 | |
| SGF + SAFREEBase Model=MeanFlow, Sampling Steps=42026.06 | 54.4 | 58.4 | |
| SAFREEEvaluation Protocol=Inference-time, Backbone=Stable Diffusion v1.42026.06 | 52.6 | — | |
| STG + SAFREEBase Model=MeanFlow, Sampling Steps=42026.06 | 51.9 | 57.1 | |
| Baseline + Semantic SurgeryBase Model=MeanFlow, Sampling Steps=42026.06 | 50.6 | 54.7 | |
| SAFREEEvaluation Protocol=Inference-time, Backbone=Stable Diffusion v1.42026.06 | 50.5 | — | |
| STGEvaluation Protocol=Inference-time, Backbone=Stable Diffusion v1.42026.06 | 32.6 | — | |
| STGEvaluation Protocol=Inference-time, Backbone=Stable Diffusion v1.42026.06 | 30.5 | — | |
| VESFLOWBase Model=FLUX, Sampling Steps=82026.06 | 26.6 | 33.5 | |
| DNGEvaluation Protocol=Inference-time, Backbone=Stable Diffusion v1.42026.06 | 22.1 | — | |
| TraSCEEvaluation Protocol=Inference-time, Backbone=Stable Diffusion v1.42026.06 | 22.1 | — | |
| NPEvaluation Protocol=Inference-time, Method Full Name=Negative Prompting, Backbone=Stable Diffusion v1.42026.06 | 21.1 | — | |
| NPEvaluation Protocol=Inference-time, Method Full Name=Negative Prompting, Backbone=Stable Diffusion v1.42026.06 | 21.1 | — | |
| DNGEvaluation Protocol=Inference-time, Backbone=Stable Diffusion v1.42026.06 | 20 | — | |
| MACEEvaluation Protocol=Fine-tuning, Backbone=Stable Diffusion v1.42026.06 | 17.9 | — | |
| TraSCEEvaluation Protocol=Inference-time, Backbone=Stable Diffusion v1.42026.06 | 16.8 | — | |
| UCEEvaluation Protocol=Weight-editing, Backbone=Stable Diffusion v1.42026.06 | 15.8 | — | |
| VESFLOWBase Model=MeanFlow, Sampling Steps=42026.06 | 15.2 | 22.7 | |
| MACEEvaluation Protocol=Fine-tuning, Backbone=Stable Diffusion v1.42026.06 | 13.7 | — | |
| UCEEvaluation Protocol=Weight-editing, Backbone=Stable Diffusion v1.42026.06 | 11.6 | — | |
| RECEEvaluation Protocol=Weight-editing, Backbone=Stable Diffusion v1.42026.06 | 9.5 | — | |
| RECEEvaluation Protocol=Weight-editing, Backbone=Stable Diffusion v1.42026.06 | 8.4 | — | |
| VESFLOW+Base Model=MeanFlow, Sampling Steps=42026.06 | 6.3 | 15.9 | |
| ESDEvaluation Protocol=Fine-tuning, Backbone=Stable Diffusion v1.42026.06 | 5.3 | — | |
| ESDEvaluation Protocol=Fine-tuning, Backbone=Stable Diffusion v1.42026.06 | 2.1 | — | |
| CRGEvaluation Protocol=Inference-time, Backbone=Stable Diffusion v1.42026.06 | 2.1 | — | |
| VESFLOW+Base Model=FLUX, Sampling Steps=82026.06 | 1.3 | 6.5 | |
| CRGEvaluation Protocol=Inference-time, Backbone=Stable Diffusion v1.42026.06 | 1.1 | — |