A Closer Look at Memorization in Deep Networks
Not on the map. Why?
Cited by 25 in LLM safety and security, but placed by its own abstract, which didn’t fit.
Abstract (arXiv)
We examine the role of memorization in deep learning, drawing connections to capacity, generalization, and adversarial robustness. While deep networks are capable of memorizing noise data, our results suggest that they tend to prioritize learning simple patterns first. In our experiments, we expose qualitative differences in gradient-based optimization of deep neural networks (DNNs) on noise vs. real data. We also demonstrate that for appropriately tuned explicit regularization (e.g., dropout) we can degrade DNN training performance on noise datasets without compromising generalization on real data. Our analysis suggests that the notions of effective capacity which are dataset independent are unlikely to explain the generalization performance of deep networks when trained with gradient based methods because training data itself plays an important role in determining the degree of memorization.
Key facts. Cited by 936 papers in the map (data through 7 Oct 2026). First posted on arXiv 16 Jun 2017.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2019: 1; 2020: 0; 2021: 172; 2022: 204; 2023: 191; 2024: 147; 2025: 115; 2026: 106.
936 papers.
Sort:
By area:
- 2021Pre-train, Prompt, and Predict: A Systematic Survey of Prompting Methods in Natural Language Processingcited by 2,222
- 2023A Comprehensive Survey of Continual Learning: Theory, Method and Applicationcited by 860
- 2021Deduplicating Training Data Makes Language Models Bettercited by 705
- 2022Mind the Gap: Understanding the Modality Gap in Multi-modal Contrastive Representation Learningcited by 553
- 2022Diffusion Art or Digital Forgery? Investigating Data Replication in Diffusion Modelscited by 418
- 2021Pervasive Label Errors in Test Sets Destabilize Machine Learning Benchmarkscited by 388
- 2023Towards Unbounded Machine Unlearningcited by 261
- 2021Learning with Noisy Labels Revisited: A Study Using Real-World Human Annotationscited by 253
- 2022The Alignment Problem from a Deep Learning Perspectivecited by 246
- 2021Trustworthy AI: From Principles to Practicescited by 206
- 2025When More is Less: Understanding Chain-of-Thought Length in LLMscited by 182
- 2022A Model or 603 Exemplars: Towards Memory-Efficient Class-Incremental Learningcited by 152
38 more
- 2021The Low-Rank Simplicity Bias in Deep Networkscited by 150
- 2021Deep Learning Through the Lens of Example Difficultycited by 139
- 2022Training Data Influence Analysis and Estimation: A Surveycited by 134
- 2023Sudden Drops in the Loss: Syntax Acquisition, Phase Transitions, and Simplicity Bias in MLMscited by 121
- 2023Towards Lossless Dataset Distillation via Difficulty-Aligned Trajectory Matchingcited by 118
- 2021Assessing Generalization of SGD via Disagreementcited by 116
- 2024The Evolution of Statistical Induction Heads: In-Context Learning Markov Chainscited by 115
- 2021Understanding and Improving Early Stopping for Learning with Noisy Labelscited by 112
- 2021Source-free Domain Adaptation via Avatar Prototype Generation and Adaptationcited by 111
- 2021Regularizing Generative Adversarial Networks under Limited Datacited by 105
- 2023A Comprehensive Survey on Source-free Domain Adaptationcited by 104
- 2021DEUP: Direct Epistemic Uncertainty Predictioncited by 102
- 2023DyVal: Dynamic Evaluation of Large Language Models for Reasoning Taskscited by 100
- 2021Provably End-to-end Label-Noise Learning without Anchor Pointscited by 97
- 2021Influence-Balanced Loss for Imbalanced Visual Classificationcited by 91
- 2021Augmentation Strategies for Learning with Noisy Labelscited by 86
- 2024How Do Large Language Models Acquire Factual Knowledge During Pretraining?cited by 86
- 2021FINE Samples for Learning with Noisy Labelscited by 82
- 2021Jo-SRC: A Contrastive Approach for Combating Noisy Labelscited by 80
- 2021Sample Selection with Uncertainty of Losses for Learning with Noisy Labelscited by 79
- 2022Source-Free Unsupervised Domain Adaptation: A Surveycited by 79
- 2022UNICON: Combating Label Noise Through Uniform Selection and Contrastive Learningcited by 77
- 2022Do Language Models Plagiarize?cited by 72
- 2021On the geometry of generalization and memorization in deep neural networkscited by 71
- 2021Contrast to Divide: Self-Supervised Pre-Training for Learning with Noisy Labelscited by 69
- 2022Agree to Disagree: Diversity through Disagreement for Better Transferabilitycited by 69
- 2022Overview frequency principle/spectral bias in deep learningcited by 68
- 2022Simplicity Bias in Transformers and their Ability to Learn Sparse Boolean Functionscited by 68
- 2022Recovering Private Text in Federated Learning of Language Modelscited by 67
- 2022Learn From All: Erasing Attention Consistency for Noisy Label Facial Expression Recognitioncited by 67
- 2023Bag of Tricks for Training Data Extraction from Language Modelscited by 67
- 2022Synthetic Data -- what, why and how?cited by 66
- 2022MaskTune: Mitigating Spurious Correlations by Forcing to Explorecited by 66
- 2023Can Neural Network Memorization Be Localized?cited by 66
- 2021Learning Noise Transition Matrix from Only Noisy Labels via Total Variation Regularizationcited by 62
- 2021Adaptive Early-Learning Correction for Segmentation from Noisy Annotationscited by 61
- 2021On Memorization in Probabilistic Deep Generative Modelscited by 60
- 2021Open-set Label Noise Can Improve Robustness Against Inherent Label Noisecited by 58
50 most cited of 936 All 936 (JSON)
- 2026Why Does Train-Validation Separation Emerge? Update-Pressure Density Dynamics in Pretrained Backbones1 Oct 2026
- 2026Rethinking the Information Bottleneck: Structured Decomposition under Label-Induced Partitions1 Oct 2026
- 2026Whitening Improves Robustness to Spurious Correlations in Linear Probes30 Sep 2026
- 2026Don't Forget! Decomposing the Training Dynamics of Memorization in Language Models28 Sep 2026
- 2026No Free Efficiency: Revisiting the Trade-off Between Training Efficiency and Model Vulnerability27 Sep 2026
- 2026Different Corruptions, Different Signals: Uncertainty and Loss in Federated Data Quality25 Sep 2026
- 2026Where Does the Watermark Hide? Push-Pull Disentanglement for Invisible Watermark Removal22 Sep 2026
- 2026TecoPrompt: Temporal-Conservative Prompt Learning for Vision-Language Models15 Sep 2026
- 2026The Blind Spot in 2D Infants' Pose Estimation:Robust Learning from Noisy Annotations3 Sep 2026
- 2026Spectral characteristics of autoencoder parameters as a vector representation of data3 Sep 2026
- 2026Error-Type-Aware Loss Reweighting for Robust Named Entity Recognition with Noisy LLM Labels31 Aug 2026
- 2026Measuring Memory and Generalization as Separable Geometric Channels: The Topo^2 Framework31 Aug 2026
38 more
- 2026False-science induction in autonomous scientific discovery20 Aug 2026
- 2026Iterative Self-Learning for Expressive Text-to-Speech Synthesis16 Aug 2026
- 2026Anti-Shortcut Distillation via Temporal Negative Knowledge Transfer12 Aug 2026
- 2026LiNC: Lightweight Noise Correction via Per-Sample Trust and Gaussian Mixture Modeling4 Aug 2026
- 2026Domain-Division based Progressive Learning for Source-Free Domain Adaptation31 Jul 2026
- 2026Robust Losses from Univariate Base Functions for Noisy-Label Learning18 Jul 2026
- 2026When T2I Synthetic Data Backfires: Amplified Privacy Risks in Real-Synthetic Mix Training15 Jul 2026
- 2026Fisher Rank Inflation: A Spectral Signature of Memorization under Label Noise14 Jul 2026
- 2026Random Label Prediction Heads for Studying Memorization in Deep Neural Networks13 Jul 2026
- 2026Singular perturbations and hierarchical learning in two-layer neural networks12 Jul 2026
- 2026ALER-TI: Aligned Latent Embedding Retrieval for Time Series Imputation8 Jul 2026
- 2026Uncertainty-aware tree height change regression1 Jul 2026
- 2026Multi-Hypothesis Test-Time Adaptation to Mitigate Underspecification30 Jun 2026
- 2026Revisiting the Volume Hypothesis30 Jun 2026
- 2026Structured Proper Loss Geometries for Multiclass Classification: Theory and Controlled Empirical Evaluation28 Jun 2026
- 2026Orthogonal Gradient Constraints Shape Noisy-Label Memorization Dynamics24 Jun 2026
- 2026Distill on a Diet: Efficient Knowledge Distillation via Learnable Data Pruning24 Jun 2026
- 2026The Generalization Spectrum: A Chromatographic Approach to Evaluating Learning Algorithms24 Jun 2026
- 2026Data Selection Through Iterative Self-Filtering for Vision-Language Settings22 Jun 2026
- 2026Incremental Learning in Mirror Flows22 Jun 2026
- 2026TuneAhead: Predicting Fine-tuning Performance Before Full Training Begins16 Jun 2026
- 2026TAKE: Trajectory-Aware Knowledge Estimation for Text Dataset Distillation13 Jun 2026
- 2026Benchmarking Instance-Dependent Label Noise with Controlled Corruptions12 Jun 2026
- 2026Noise-Aware Framework for Correcting Corrupted Labels10 Jun 2026
- 2026Deep Active Re-Labeling: Toward Noise-Resilient Annotation Efficiency7 Jun 2026
- 2026Cross-Source Reasoning-based Correction for Author Name Disambiguation7 Jun 2026
- 2026An Adaptive Data cleaning Framework for Noisy Label Detection5 Jun 2026
- 2026The Piggyback Hypothesis of Generalization: Explaining and Mitigating Emergent Misalignment4 Jun 2026
- 2026An Empirical Study of Data Scale, Model Complexity, and Input Modalities in Visual Generalization3 Jun 2026
- 2026Robust Multi-view Clustering against Imperfect Information3 Jun 2026
- 2026Quantifying and Optimizing Simplicity via Polynomial Representations28 May 2026
- 2026Do Deep Networks Forget Initialization? A Forgetting-Time View of Practical Inductive Bias27 May 2026
- 2026Stochastic Estimation of the Layer-wise Hessian Trace for Monitoring Neural-network Training25 May 2026
- 2026Batch Normalization Amplifies Memorization and Privacy Risks23 May 2026
- 2026Rethinking Noise-Robust Training for Frozen Vision Foundation Models: A Cross-Dataset Benchmark with a Case Study of Small-Loss Failure21 May 2026
- 2026Holistic Reliability Propagation: Decoupling Annotation and Prediction for Robust Noisy-Label20 May 2026
- 2026Symmetrization of Loss Functions for Robust Training of Neural Networks in the Presence of Noisy Labels19 May 2026
- 2026Efficient Bilevel Optimization for Meta Label Correction in Noisy Label Learning18 May 2026
50 newest of 936 All 936 (JSON)
- 2023Towards Unbounded Machine Unlearningcited by 261
- 2022VeriFi: Towards Verifiable Federated Unlearningcited by 41
- 2024Towards Effective Evaluations and Comparisons for LLM Unlearning Methodscited by 27
- 2023Deep Unlearning: Fast and Efficient Gradient-free Approach to Class Forgettingcited by 21
- 2021DeepObliviate: A Powerful Charm for Erasing Data Residual Memory in Deep Neural Networkscited by 19
- 2024An Information Theoretic Approach to Machine Unlearningcited by 15
- 2024Contrastive Unlearning: A Contrastive Approach to Machine Unlearningcited by 14
- 2025Towards Lifecycle Unlearning Commitment Management: Measuring Sample-level Unlearning Completenesscited by 11
- 2024Improved Localized Machine Unlearning Through the Lens of Memorizationcited by 6
- 2024Data-centric NLP Backdoor Defense from the Lens of Memorizationcited by 5
- 2024Scalability of memorization-based machine unlearningcited by 5
- 2026Models Designed to Forget: Machine Unlearning via Key Deletioncited by 3
12 most cited of 25 All 25 (JSON)
- 2026Models Designed to Forget: Machine Unlearning via Key Deletion16 Mar 2026
- 2026Amnesia: Adversarial Semantic Layer Specific Activation Steering in Large Language Models10 Mar 2026
- 2026ACD-U: Asymmetric co-teaching with machine unlearning for robust learning with noisy labels7 Mar 2026
- 2026LeakBoost: Perceptual-Loss-Based Membership Inference Attack5 Feb 2026
- 2026Representation Unlearning: Forgetting through Information Compression29 Jan 2026
- 2026Re-understanding Graph Unlearning through Memorization21 Jan 2026
- 2025Subtract the Corruption: Training-Data-Free Corrective Machine Unlearning using Task Arithmetic24 Nov 2025
- 2025Machine Unlearning for Robust DNNs: Attribution-Guided Partitioning and Neuron Pruning in Noisy Environments13 Jun 2025
- 2025Towards Lifecycle Unlearning Commitment Management: Measuring Sample-level Unlearning Completeness6 Jun 2025
- 2025How Does Overparameterization Affect Machine Unlearning of Deep Neural Networks?11 Mar 2025
- 2024Improved Localized Machine Unlearning Through the Lens of Memorization3 Dec 2024
- 2024From Machine Learning to Machine Unlearning: Complying with GDPR's Right to be Forgotten while Maintaining Business Value of Predictive Models26 Nov 2024
12 newest of 25 All 25 (JSON)
- 2022Diffusion Art or Digital Forgery? Investigating Data Replication in Diffusion Modelscited by 418
- 2024Finding NeMo: Localizing Neurons Responsible For Memorization in Diffusion Modelscited by 36
- 2025A Comprehensive Survey of Synthetic Tabular Data Generationcited by 27
- 2024MagicTailor: Component-Controllable Personalization in Text-to-Image Diffusion Modelscited by 14
- 2023Don't be so negative! Score-based Generative Modeling with Oracle-assisted Guidancecited by 6
- 2024FreeCond: Free Lunch in the Input Conditions of Text-Guided Inpaintingcited by 4
- 2025Demystifying Foreground-Background Memorization in Diffusion Modelscited by 2
- 2026On the Robustness of Langevin Dynamics to Score Function Errorcited by 2
- 2026Understanding diffusion models requires rethinking (again) generalizationcited by 2
- 2025Beyond Memorization: Selective Learning for Copyright-Safe Diffusion Model Trainingcited by 0
- 2026RelativeFlow: Taming Medical Image Denoising Learning with Noisy Referencecited by 0
- 2026Understanding diffusion models requires rethinking (again) generalization7 May 2026
- 2026RelativeFlow: Taming Medical Image Denoising Learning with Noisy Reference16 Apr 2026
- 2026On the Robustness of Langevin Dynamics to Score Function Error11 Mar 2026
- 2025Beyond Memorization: Selective Learning for Copyright-Safe Diffusion Model Training12 Dec 2025
- 2025Demystifying Foreground-Background Memorization in Diffusion Models16 Aug 2025
- 2025A Comprehensive Survey of Synthetic Tabular Data Generation23 Apr 2025
- 2024FreeCond: Free Lunch in the Input Conditions of Text-Guided Inpainting30 Nov 2024
- 2024MagicTailor: Component-Controllable Personalization in Text-to-Image Diffusion Models17 Oct 2024
- 2024Finding NeMo: Localizing Neurons Responsible For Memorization in Diffusion Models4 Jun 2024
- 2023Don't be so negative! Score-based Generative Modeling with Oracle-assisted Guidance31 Jul 2023
- 2022Diffusion Art or Digital Forgery? Investigating Data Replication in Diffusion Models7 Dec 2022
- 2023Towards Label-free Scene Understanding by Vision Foundation Modelscited by 54
- 2023Distilling Large Vision-Language Model with Out-of-Distribution Generalizabilitycited by 33
- 2024Vision-Language Models are Strong Noisy Label Detectorscited by 16
- 2024NEVLP: Noise-Robust Framework for Efficient Vision-Language Pre-trainingcited by 15
- 2025Towards General Continuous Memory for Vision-Language Modelscited by 14
- 2025Efficient Vocabulary-Free Fine-Grained Visual Recognition in the Age of Multimodal LLMscited by 2
- 2025Corrupted but Not Broken: Understanding and Mitigating the Negative Impacts of Corrupted Data in Visual Instruction Tuningcited by 1
- 2026VLM2Rec: Resolving Modality Collapse in Vision-Language Model Embedders for Multimodal Sequential Recommendationcited by 0
- 2026TecoPrompt: Temporal-Conservative Prompt Learning for Vision-Language Modelscited by 0
- 2026TecoPrompt: Temporal-Conservative Prompt Learning for Vision-Language Models15 Sep 2026
- 2026VLM2Rec: Resolving Modality Collapse in Vision-Language Model Embedders for Multimodal Sequential Recommendation18 Mar 2026
- 2025Towards General Continuous Memory for Vision-Language Models23 May 2025
- 2025Efficient Vocabulary-Free Fine-Grained Visual Recognition in the Age of Multimodal LLMs2 May 2025
- 2025Corrupted but Not Broken: Understanding and Mitigating the Negative Impacts of Corrupted Data in Visual Instruction Tuning18 Feb 2025
- 2024Vision-Language Models are Strong Noisy Label Detectors29 Sep 2024
- 2024NEVLP: Noise-Robust Framework for Efficient Vision-Language Pre-training15 Sep 2024
- 2023Distilling Large Vision-Language Model with Out-of-Distribution Generalizability6 Jul 2023
- 2023Towards Label-free Scene Understanding by Vision Foundation Models6 Jun 2023
- 2025When More is Less: Understanding Chain-of-Thought Length in LLMscited by 182
- 2023DyVal: Dynamic Evaluation of Large Language Models for Reasoning Taskscited by 100
- 2024What Do Learning Dynamics Reveal About Generalization in LLM Reasoning?cited by 22
- 2025Is Random Attention Sufficient for Sequence Modeling? Disentangling Trainable Components in the Transformercited by 12
- 2026Data Repetition Beats Data Scaling in Long-CoT Supervised Fine-Tuningcited by 7
- 2024Supervised Chain of Thoughtcited by 5
- 2026Linear Dynamics in the RLVR Training of Large Language Modelscited by 2
- 2026Data Repetition Beats Data Scaling in Long-CoT Supervised Fine-Tuning11 Feb 2026
- 2026Linear Dynamics in the RLVR Training of Large Language Models8 Jan 2026
- 2025Is Random Attention Sufficient for Sequence Modeling? Disentangling Trainable Components in the Transformer1 Jun 2025
- 2025When More is Less: Understanding Chain-of-Thought Length in LLMs11 Feb 2025
- 2024What Do Learning Dynamics Reveal About Generalization in LLM Reasoning?12 Nov 2024
- 2024Supervised Chain of Thought18 Oct 2024
- 2023DyVal: Dynamic Evaluation of Large Language Models for Reasoning Tasks29 Sep 2023
- 2019VILD: Variational Imitation Learning with Diverse-quality Demonstrationscited by 12
- 2022Masked Imitation Learning: Discovering Environment-Invariant Modalities in Multimodal Demonstrationscited by 6
- 2025From Action Labels to Sets: Rethinking Action Supervision for Imitation Learning from Corrective Feedbackcited by 2
- 2025LLM-Driven Policy Diffusion: Enhancing Generalization in Offline Reinforcement Learningcited by 0
- 2025LLM-Driven Policy Diffusion: Enhancing Generalization in Offline Reinforcement Learning30 Aug 2025
- 2025From Action Labels to Sets: Rethinking Action Supervision for Imitation Learning from Corrective Feedback11 Feb 2025
- 2022Masked Imitation Learning: Discovering Environment-Invariant Modalities in Multimodal Demonstrations16 Sep 2022
- 2019VILD: Variational Imitation Learning with Diverse-quality Demonstrations15 Sep 2019
- 2021Pre-train, Prompt, and Predict: A Systematic Survey of Prompting Methods in Natural Language Processingcited by 2,222
- 2023A Comprehensive Survey of Continual Learning: Theory, Method and Applicationcited by 860
- 2021Deduplicating Training Data Makes Language Models Bettercited by 705
- 2022Mind the Gap: Understanding the Modality Gap in Multi-modal Contrastive Representation Learningcited by 553
- 2021Pervasive Label Errors in Test Sets Destabilize Machine Learning Benchmarkscited by 388
- 2021Learning with Noisy Labels Revisited: A Study Using Real-World Human Annotationscited by 253
- 2022The Alignment Problem from a Deep Learning Perspectivecited by 246
- 2021Trustworthy AI: From Principles to Practicescited by 206
- 2022A Model or 603 Exemplars: Towards Memory-Efficient Class-Incremental Learningcited by 152
- 2021The Low-Rank Simplicity Bias in Deep Networkscited by 150
- 2021Deep Learning Through the Lens of Example Difficultycited by 139
- 2022Training Data Influence Analysis and Estimation: A Surveycited by 134
12 most cited of 871 All 871 (JSON)
- 2026Why Does Train-Validation Separation Emerge? Update-Pressure Density Dynamics in Pretrained Backbones1 Oct 2026
- 2026Rethinking the Information Bottleneck: Structured Decomposition under Label-Induced Partitions1 Oct 2026
- 2026Whitening Improves Robustness to Spurious Correlations in Linear Probes30 Sep 2026
- 2026Don't Forget! Decomposing the Training Dynamics of Memorization in Language Models28 Sep 2026
- 2026No Free Efficiency: Revisiting the Trade-off Between Training Efficiency and Model Vulnerability27 Sep 2026
- 2026Different Corruptions, Different Signals: Uncertainty and Loss in Federated Data Quality25 Sep 2026
- 2026Where Does the Watermark Hide? Push-Pull Disentanglement for Invisible Watermark Removal22 Sep 2026
- 2026The Blind Spot in 2D Infants' Pose Estimation:Robust Learning from Noisy Annotations3 Sep 2026
- 2026Spectral characteristics of autoencoder parameters as a vector representation of data3 Sep 2026
- 2026Error-Type-Aware Loss Reweighting for Robust Named Entity Recognition with Noisy LLM Labels31 Aug 2026
- 2026Measuring Memory and Generalization as Separable Geometric Channels: The Topo^2 Framework31 Aug 2026
- 2026False-science induction in autonomous scientific discovery20 Aug 2026
12 newest of 871 All 871 (JSON)