Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networks
Not on the map. Why?
Cited by 509 in LLM safety and security, but placed by its own abstract, which didn’t fit.
Abstract (arXiv)
We explore the problem of selectively forgetting a particular subset of the data used for training a deep neural network. While the effects of the data to be forgotten can be hidden from the output of the network, insights may still be gleaned by probing deep into its weights. We propose a method for "scrubbing'" the weights clean of information about a particular set of training data. The method does not require retraining from scratch, nor access to the data originally used for training. Instead, the weights are modified so that any probing function of the weights is indistinguishable from the same function applied to the weights of a network trained without the data to be forgotten. This condition is a generalized and weaker form of Differential Privacy. Exploiting ideas related to the stability of stochastic gradient descent, we introduce an upper-bound on the amount of information remaining in the weights, which can be estimated efficiently even for deep neural networks.
Key facts. Cited by 618 papers in the map (data through 14 Oct 2026). First posted on arXiv 12 Nov 2019.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 19; 2022: 44; 2023: 72; 2024: 176; 2025: 164; 2026: 143.
618 papers.
Sort:
By area:
- 2022Editing Models with Task Arithmeticcited by 1,120
- 2023A Comprehensive Survey of Continual Learning: Theory, Method and Applicationcited by 872
- 2023Erasing Concepts from Diffusion Modelscited by 539
- 2024TOFU: A Task of Fictitious Unlearning for LLMscited by 533
- 2024Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearningcited by 504
- 2022Knowledge Unlearning for Mitigating Privacy Risks in Language Modelscited by 437
- 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generationcited by 386
- 2021Remember What You Want to Forget: Algorithms for Machine Unlearningcited by 371
- 2023Ablating Concepts in Text-to-Image Diffusion Modelscited by 317
- 2022A Survey of Machine Unlearningcited by 312
- 2021Unrolling SGD: Understanding Factors Influencing Machine Unlearningcited by 279
- 2023Towards Unbounded Machine Unlearningcited by 268
38 more
- 2024MUSE: Machine Unlearning Six-Way Evaluation for Language Modelscited by 261
- 2024Rethinking Machine Unlearning for Large Language Modelscited by 257
- 2021Machine Unlearning of Features and Labelscited by 229
- 2023In-Context Unlearning: Language Models as Few Shot Unlearnerscited by 224
- 2021Fast Yet Effective Machine Unlearningcited by 217
- 2023Unlearn What You Want to Forget: Efficient Unlearning for LLMscited by 215
- 2023Model Sparsity Can Simplify Machine Unlearningcited by 214
- 2023To Generate or Not? Safety-Driven Unlearned Diffusion Models Are Still Easy To Generate Unsafe Images ... For Nowcited by 210
- 2022Can Bad Teaching Induce Forgetting? Unlearning in Deep Networks using an Incompetent Teachercited by 194
- 2023Fast Machine Unlearning Without Retraining Through Selective Synaptic Dampeningcited by 181
- 2023Selective Amnesia: A Continual Learning Approach to Forgetting in Deep Generative Modelscited by 177
- 2021On the Necessity of Auditable Algorithmic Definitions for Machine Unlearningcited by 171
- 2021Graph Unlearningcited by 138
- 2024Tamper-Resistant Safeguards for Open-Weight LLMscited by 138
- 2023Boundary Unlearningcited by 134
- 2022Zero-Shot Machine Unlearningcited by 133
- 2022Continual Learning and Private Unlearningcited by 130
- 2024Machine Unlearning of Pre-trained Large Language Modelscited by 119
- 2022Measuring Forgetting of Memorized Training Examplescited by 118
- 2021Federated Unlearning via Class-Discriminative Pruningcited by 115
- 2024SOUL: Unlocking the Power of Second-Order Optimization for LLM Unlearningcited by 104
- 2023KGA: A General Machine Unlearning Framework Based on Knowledge Gap Alignmentcited by 99
- 2024Guardrail Baselines for Unlearning in LLMscited by 96
- 2022Federated Unlearning: How to Efficiently Erase a Client in FL?cited by 95
- 2023Machine Unlearning: Solutions and Challengescited by 93
- 2024What makes unlearning hard and what to do about itcited by 89
- 2024Reversing the Forget-Retain Objectives: An Efficient LLM Unlearning Framework from Logit Differencecited by 88
- 2023Circumventing Concept Erasure Methods For Text-to-Image Generative Modelscited by 85
- 2022Towards Adversarial Evaluations for Inexact Machine Unlearningcited by 84
- 2022Deep Unlearning via Randomized Conditionally Independent Hessianscited by 84
- 2024Unlearning or Obfuscating? Jogging the Memory of Unlearned LLMs via Benign Relearningcited by 84
- 2024Inexact Unlearning Needs More Careful Evaluations to Avoid a False Sense of Privacycited by 82
- 2022Recommendation Unlearningcited by 80
- 2024RWKU: Benchmarking Real-World Knowledge Unlearning for Large Language Modelscited by 78
- 2024LLM Unlearning via Loss Adjustment with Only Forget Datacited by 75
- 2024Do Unlearning Methods Remove Information from Language Model Weights?cited by 73
- 2023Fast Model Debias with Machine Unlearningcited by 72
- 2025wd1: Weighted Policy Optimization for Reasoning in Diffusion Language Modelscited by 71
50 most cited of 618 All 618 (JSON)
- 2026CUSE: Fine-Grained Multimodal Unlearning with Counterfactual Guidance and On-Policy Self-Distillation10 Oct 2026
- 2026Modeling Deletion Requests in Machine Unlearning3 Oct 2026
- 2026One-Step Curvature Probes Miss the Fitting Operator: Retained Capacity and Terminal Null-Space Correction for Continual Learning2 Oct 2026
- 2026Repurposing Obsolete Representations for Post-Deployment Adaptation1 Oct 2026
- 2026State-Space Unlearning for Non-Stationary Bias in Land Surface Forecasting30 Sep 2026
- 2026Unlearning Deceptive Behaviors in LLMs with Contrastive Forget Sets30 Sep 2026
- 2026Unmerge: Efficient Machine Unlearning via Task Arithmetic30 Sep 2026
- 2026Storage Is Not Strategy: State-Conditioned Support Control for LLM Unlearning29 Sep 2026
- 2026Physics-Aware Machine Unlearning for Cyber-Physical Systems29 Sep 2026
- 2026Data Unlearning via Inverse Distillation28 Sep 2026
- 2026Evaluating Machine Unlearning in ASR28 Sep 2026
- 2026Continual Data Unlearning in Diffusion Models via Transition-based Regularization26 Sep 2026
38 more
- 2026PruneForget: Joint Unlearning and Pruning of Vision Models26 Sep 2026
- 2026Open Vocabulary Domain Unlearning25 Sep 2026
- 2026What Was Once Learned May Need to Be Unlearned: Machine Unlearning for Deprecated API Knowledge in Large Language Models22 Sep 2026
- 2026Not All Patches Are Equally Forgettable: Spatially Localized Domain Unlearning in Vision-Language Models15 Sep 2026
- 2026Do Influence-Derived Data Perturbations Enable Machine Unlearning? A Controlled Study of Three Plausible Roles11 Sep 2026
- 2026Published Unlearning Numbers Move Per Checkpoint, and Not Because the Removed Data Survives: An Audit of 263 Released Batch-Normalized Checkpoints10 Sep 2026
- 2026The BatchNorm Illusion: Diagnosing Normalization Artifacts in Machine Unlearning Evaluation8 Sep 2026
- 2026When Retain Constraints Conflict: Mitigating Forget-Retain Interference in Tabular Data6 Sep 2026
- 2026On-the-go Forgetting without Explicit Unlearning via ERASE5 Sep 2026
- 2026Forget or Fine-tune? A Comparative Study of Machine Unlearning Strategies for Noisy Label Correction30 Aug 2026
- 2026Spatial Entropy based Partitioning for Spatiotemporal Graph Unlearning29 Aug 2026
- 2026AIM: Anchor Identity Features, Then Match for Multimodal Large Language Model Unlearning28 Aug 2026
- 2026BLADE: Bilevel Low-rank Augmented-Lagrangian Erasure for LLM Unlearning23 Aug 2026
- 2026Rethinking Demonstration Unlearning in Imitation Learning for Robotics21 Aug 2026
- 2026Cross-Domain Generalization in Machine Unlearning via Label-Conditioned Energy Magnitude Regularization18 Aug 2026
- 2026Dynamic Entanglement-Weighted Pruning for Quantum Federated Unlearning in Supply-Chain Risk Prediction17 Aug 2026
- 2026Learning to Unlearn: Machine Unlearning via Learning the Unlearning Behaviors17 Aug 2026
- 2026Spectral Saliency for Machine Unlearning16 Aug 2026
- 2026PRMU: A Corpus-Free Benchmark for Person-Centric Knowledge Unlearning in Multimodal Large Language Models11 Aug 2026
- 2026Suppression Sticks, Locality Is Fragile: A Closed-Loop Target-and-Control Audit of Task-Vector Negation in VLA Policies5 Aug 2026
- 2026SCOPE: Entanglement Frontier Escape for Source-Free Class Unlearning3 Aug 2026
- 2026Generated Images Are Easier to Forget: A Machine Unlearning Perspective for Synthetic Image Detection1 Aug 2026
- 2026Similarity-Aware Machine Unlearning31 Jul 2026
- 2026MMFGU: Multimodal Federated Graph Unlearning30 Jul 2026
- 2026Understanding Machine Unlearning Through the Lens of Mode Connectivity27 Jul 2026
- 2026Unlearning Under Imbalance: Benchmarking Fairness in Multimodal LLM Unlearning23 Jul 2026
- 2026TOUR: A Trajectory-Level Unlearning Benchmark for Offline Reinforcement Learning23 Jul 2026
- 2026Quantifying Training Membership Information in the Hyperspherical Embedding Geometry of Face Recognition Models16 Jul 2026
- 2026Signal-Guided Optimization for Machine Unlearning13 Jul 2026
- 2026Auditing of Unlearning Algorithms7 Jul 2026
- 2026Association Restoration Test: Revealing Restorable Shortcuts after Unlearning7 Jul 2026
- 2026MUTE: Return-Preserving Communication Unlearning for Efficient Multi-Agent Coordination3 Jul 2026
- 2026LACUNA: A Testbed for Evaluating Localization Precision for LLM Unlearning2 Jul 2026
- 2026Revocable Learned State via Process Sidecars29 Jun 2026
- 2026Detect, Unlearn, Restore: Defending Text Summarization Models Against Data Poisoning24 Jun 2026
- 2026LLM Unlearning for Cyber Defense: A Survey on Methods, Challenges, and Emerging Threats23 Jun 2026
- 2026Erased, but Not Gone: Output Forgetting Is Not True Forgetting23 Jun 2026
- 2026FedUP: One-Shot Federated Unlearning via Centroid-Guided Plug-in Filters23 Jun 2026
50 newest of 618 All 618 (JSON)
- 2024TOFU: A Task of Fictitious Unlearning for LLMscited by 533
- 2022Knowledge Unlearning for Mitigating Privacy Risks in Language Modelscited by 437
- 2021Remember What You Want to Forget: Algorithms for Machine Unlearningcited by 371
- 2022A Survey of Machine Unlearningcited by 312
- 2021Unrolling SGD: Understanding Factors Influencing Machine Unlearningcited by 279
- 2023Towards Unbounded Machine Unlearningcited by 268
- 2024MUSE: Machine Unlearning Six-Way Evaluation for Language Modelscited by 261
- 2021Machine Unlearning of Features and Labelscited by 229
- 2023In-Context Unlearning: Language Models as Few Shot Unlearnerscited by 224
- 2021Fast Yet Effective Machine Unlearningcited by 217
- 2023Unlearn What You Want to Forget: Efficient Unlearning for LLMscited by 215
- 2023Model Sparsity Can Simplify Machine Unlearningcited by 214
12 most cited of 460 All 460 (JSON)
- 2026Modeling Deletion Requests in Machine Unlearning3 Oct 2026
- 2026Repurposing Obsolete Representations for Post-Deployment Adaptation1 Oct 2026
- 2026Unlearning Deceptive Behaviors in LLMs with Contrastive Forget Sets30 Sep 2026
- 2026Unmerge: Efficient Machine Unlearning via Task Arithmetic30 Sep 2026
- 2026Storage Is Not Strategy: State-Conditioned Support Control for LLM Unlearning29 Sep 2026
- 2026Evaluating Machine Unlearning in ASR28 Sep 2026
- 2026PruneForget: Joint Unlearning and Pruning of Vision Models26 Sep 2026
- 2026What Was Once Learned May Need to Be Unlearned: Machine Unlearning for Deprecated API Knowledge in Large Language Models22 Sep 2026
- 2026Do Influence-Derived Data Perturbations Enable Machine Unlearning? A Controlled Study of Three Plausible Roles11 Sep 2026
- 2026Published Unlearning Numbers Move Per Checkpoint, and Not Because the Removed Data Survives: An Audit of 263 Released Batch-Normalized Checkpoints10 Sep 2026
- 2026The BatchNorm Illusion: Diagnosing Normalization Artifacts in Machine Unlearning Evaluation8 Sep 2026
- 2026When Retain Constraints Conflict: Mitigating Forget-Retain Interference in Tabular Data6 Sep 2026
12 newest of 460 All 460 (JSON)
- 2023Erasing Concepts from Diffusion Modelscited by 539
- 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generationcited by 386
- 2023Ablating Concepts in Text-to-Image Diffusion Modelscited by 317
- 2023To Generate or Not? Safety-Driven Unlearned Diffusion Models Are Still Easy To Generate Unsafe Images ... For Nowcited by 210
- 2024Erasing Undesirable Influence in Diffusion Modelscited by 57
- 2024UnlearnCanvas: Stylized Image Dataset for Enhanced Machine Unlearning Evaluation in Diffusion Modelscited by 50
- 2024Adversarial Attacks and Defenses on Text-to-Image Diffusion Models: A Surveycited by 35
- 2024Score Forgetting Distillation: A Swift, Data-Free Method for Machine Unlearning in Diffusion Modelscited by 23
- 2024Holistic Unlearning Benchmark: A Multi-Faceted Evaluation for Text-to-Image Diffusion Model Unlearningcited by 21
- 2025Data Unlearning in Diffusion Modelscited by 18
- 2023Training Data Protection with Compositional Diffusion Modelscited by 17
- 2024Boosting Alignment for Post-Unlearning Text-to-Image Generative Modelscited by 15
12 most cited of 35 All 35 (JSON)
- 2026Data Unlearning via Inverse Distillation28 Sep 2026
- 2026Continual Data Unlearning in Diffusion Models via Transition-based Regularization26 Sep 2026
- 2026Unlearning in Diffusion Models: A Unified Framework with KL Divergence and Likelihood Constraints29 May 2026
- 2026Machine Unlearning for Masked Diffusion Language Models18 May 2026
- 2026Training data attribution in diffusion models via mirrored unlearning and noise-consistent skew18 May 2026
- 2026Projected Gradient Unlearning for Text-to-Image Diffusion Models: Defending Against Concept Revival Attacks22 Apr 2026
- 2026Unlearning the Unpromptable: Prompt-free Instance Unlearning in Diffusion Models11 Mar 2026
- 2026You Don't Need All That Attention: Surgical Memorization Mitigation in Text-to-Image Diffusion Models23 Feb 2026
- 2026SPARE: Self-distillation for PARameter-Efficient Removal4 Feb 2026
- 2025Adaptive-lambda Subtracted Importance Sampled Scores in Machine Unlearning for DDPMs and VAEs30 Nov 2025
- 2025Fast Data Attribution for Text-to-Image Models13 Nov 2025
- 2025Not Every Time and Frequency Need to Be Forgotten in Diffusion Unlearning20 Oct 2025
12 newest of 35 All 35 (JSON)
- 2025Hyperbolic Safety-Aware Vision-Language Modelscited by 17
- 2025Approximate Domain Unlearning for Vision-Language Modelscited by 8
- 2025Safe-LLaVA: A Privacy-Preserving Vision-Language Dataset and Benchmark for Biometric Safetycited by 7
- 2025SafeR-CLIP: Mitigating NSFW Content in Vision-Language Models While Preserving Pre-Trained Knowledgecited by 3
- 2026CATA: Continual Machine Unlearning via Conflict-Averse Task Arithmeticcited by 2
- 2026Which Concepts to Forget and How to Refuse? Decomposing Concepts for Continual Unlearning in Large Vision-Language Modelscited by 1
- 2026Metric Unreliability in Multimodal Machine Unlearning: A Systematic Analysis and Principled Unified Scorecited by 1
- 2026AIM: Anchor Identity Features, Then Match for Multimodal Large Language Model Unlearningcited by 1
- 2023Reinforcement Learning from Diffusion Feedback: Q* for Image Searchcited by 0
- 2026ICED: Concept-level Machine Unlearning via Interpretable Concept Decompositioncited by 0
- 2026Unlearning Under Imbalance: Benchmarking Fairness in Multimodal LLM Unlearningcited by 0
- 2026PRMU: A Corpus-Free Benchmark for Person-Centric Knowledge Unlearning in Multimodal Large Language Modelscited by 0
12 most cited of 15 All 15 (JSON)
- 2026CUSE: Fine-Grained Multimodal Unlearning with Counterfactual Guidance and On-Policy Self-Distillation10 Oct 2026
- 2026Open Vocabulary Domain Unlearning25 Sep 2026
- 2026Not All Patches Are Equally Forgettable: Spatially Localized Domain Unlearning in Vision-Language Models15 Sep 2026
- 2026AIM: Anchor Identity Features, Then Match for Multimodal Large Language Model Unlearning28 Aug 2026
- 2026PRMU: A Corpus-Free Benchmark for Person-Centric Knowledge Unlearning in Multimodal Large Language Models11 Aug 2026
- 2026Unlearning Under Imbalance: Benchmarking Fairness in Multimodal LLM Unlearning23 Jul 2026
- 2026CATA: Continual Machine Unlearning via Conflict-Averse Task Arithmetic18 May 2026
- 2026ICED: Concept-level Machine Unlearning via Interpretable Concept Decomposition14 May 2026
- 2026Metric Unreliability in Multimodal Machine Unlearning: A Systematic Analysis and Principled Unified Score4 May 2026
- 2026Which Concepts to Forget and How to Refuse? Decomposing Concepts for Continual Unlearning in Large Vision-Language Models23 Mar 2026
- 2025SafeR-CLIP: Mitigating NSFW Content in Vision-Language Models While Preserving Pre-Trained Knowledge20 Nov 2025
- 2025Approximate Domain Unlearning for Vision-Language Models9 Oct 2025
12 newest of 15 All 15 (JSON)
- 2024Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearningcited by 504
- 2024A Probabilistic Perspective on Unlearning and Alignment for Large Language Modelscited by 21
- 2023ULMA: Unified Language Model Alignment with Human Demonstration and Point-wise Preferencecited by 12
- 2025SUV: Scalable Large Language Model Copyright Compliance with Regularized Selective Unlearningcited by 5
- 2025Distribution Preference Optimization: A Fine-grained Perspective for LLM Unlearningcited by 3
- 2025Unlearning of Knowledge Graph Embedding via Preference Optimizationcited by 0
- 2025Distribution Preference Optimization: A Fine-grained Perspective for LLM Unlearning6 Oct 2025
- 2025Unlearning of Knowledge Graph Embedding via Preference Optimization28 Jul 2025
- 2025SUV: Scalable Large Language Model Copyright Compliance with Regularized Selective Unlearning29 Mar 2025
- 2024A Probabilistic Perspective on Unlearning and Alignment for Large Language Models4 Oct 2024
- 2024Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearning8 Apr 2024
- 2023ULMA: Unified Language Model Alignment with Human Demonstration and Point-wise Preference5 Dec 2023
- 2025Tool Unlearning for Tool-Augmented LLMscited by 17
- 2025Tool Unlearning for Tool-Augmented LLMs3 Feb 2025
- 2024CPR: Retrieval Augmented Generation for Copyright Protectioncited by 24
- 2024CPR: Retrieval Augmented Generation for Copyright Protection27 Mar 2024
- 2022Editing Models with Task Arithmeticcited by 1,120
- 2023A Comprehensive Survey of Continual Learning: Theory, Method and Applicationcited by 872
- 2023Selective Amnesia: A Continual Learning Approach to Forgetting in Deep Generative Modelscited by 177
- 2022Measuring Forgetting of Memorized Training Examplescited by 118
- 2023Circumventing Concept Erasure Methods For Text-to-Image Generative Modelscited by 85
- 2022Recommendation Unlearningcited by 80
- 2023A Comprehensive Survey of Forgetting in Deep Learning Beyond Continual Learningcited by 69
- 2023Privacy Issues in Large Language Models: A Surveycited by 60
- 2022ASIF: Coupled Data Turns Unimodal Models to Multimodal Without Trainingcited by 47
- 2021Survey: Leakage and Privacy at Inference Timecited by 44
- 2023GNNDelete: A General Strategy for Unlearning in Graph Neural Networkscited by 43
- 2024Evaluating Copyright Takedown Methods for Language Modelscited by 43
12 most cited of 89 All 89 (JSON)
- 2026One-Step Curvature Probes Miss the Fitting Operator: Retained Capacity and Terminal Null-Space Correction for Continual Learning2 Oct 2026
- 2026Physics-Aware Machine Unlearning for Cyber-Physical Systems29 Sep 2026
- 2026Dynamic Entanglement-Weighted Pruning for Quantum Federated Unlearning in Supply-Chain Risk Prediction17 Aug 2026
- 2026Quantifying Training Membership Information in the Hyperspherical Embedding Geometry of Face Recognition Models16 Jul 2026
- 2026Revocable Learned State via Process Sidecars29 Jun 2026
- 2026AI Engram: In Search of Memory Traces in Artificial Intelligence12 Jun 2026
- 2026FederatedFactory: Generative One-Shot Learning for Extremely Non-IID Distributed Scenarios17 Mar 2026
- 2026CoPeP: Benchmarking Continual Pretraining for Protein Language Models27 Feb 2026
- 2026Unlearning Noise in PINNs: A Selective Pruning Framework for PDE Inverse Problems23 Feb 2026
- 2026Controllable Concept Bottleneck Models1 Jan 2026
- 2025FAME: Fictional Actors for Multilingual Erasure17 Dec 2025
- 2025Stress-Testing Causal Claims via Cardinality Repairs2 Dec 2025
12 newest of 89 All 89 (JSON)