Descent-to-Delete: Gradient-Based Methods for Machine Unlearning
Not on the map. Why?
Cited by 255 in LLM safety and security, but placed by its own abstract, which didn’t fit.
Abstract (arXiv)
We study the data deletion problem for convex models. By leveraging techniques from convex optimization and reservoir sampling, we give the first data deletion algorithms that are able to handle an arbitrarily long sequence of adversarial updates while promising both per-deletion run-time and steady-state error that do not grow with the length of the update sequence. We also introduce several new conceptual distinctions: for example, we can ask that after a deletion, the entire state maintained by the optimization algorithm is statistically indistinguishable from the state that would have resulted had we retrained, or we can ask for the weaker condition that only the observable output is statistically indistinguishable from the observable output that would have resulted from retraining. We are able to give more efficient deletion algorithms under this weaker deletion criterion.
Key facts. Cited by 303 papers in the map (data through 7 Oct 2026). First posted on arXiv 6 Jul 2020.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 14; 2022: 30; 2023: 43; 2024: 79; 2025: 76; 2026: 61.
303 papers.
Sort:
By area:
- 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generationcited by 376
- 2021Remember What You Want to Forget: Algorithms for Machine Unlearningcited by 360
- 2022A Survey of Machine Unlearningcited by 298
- 2023Large Language Model Unlearningcited by 288
- 2023Towards Unbounded Machine Unlearningcited by 261
- 2024MUSE: Machine Unlearning Six-Way Evaluation for Language Modelscited by 251
- 2024Rethinking Machine Unlearning for Large Language Modelscited by 247
- 2021Machine Unlearning of Features and Labelscited by 223
- 2023In-Context Unlearning: Language Models as Few Shot Unlearnerscited by 214
- 2021Fast Yet Effective Machine Unlearningcited by 209
- 2023Model Sparsity Can Simplify Machine Unlearningcited by 206
- 2024From Persona to Personalization: A Survey on Role-Playing Language Agentscited by 206
38 more
- 2022Can Bad Teaching Induce Forgetting? Unlearning in Deep Networks using an Incompetent Teachercited by 189
- 2021Adaptive Machine Unlearningcited by 164
- 2021Graph Unlearningcited by 129
- 2021Machine Unlearning via Algorithmic Stabilitycited by 128
- 2022Zero-Shot Machine Unlearningcited by 125
- 2022Measuring Forgetting of Memorized Training Examplescited by 118
- 2022The Right to be Forgotten in Federated Learning: An Efficient Realization with Rapid Retrainingcited by 109
- 2021Federated Unlearning via Class-Discriminative Pruningcited by 108
- 2022Federated Unlearning: How to Efficiently Erase a Client in FL?cited by 90
- 2023Machine Unlearning: Solutions and Challengescited by 85
- 2022Deep Unlearning via Randomized Conditionally Independent Hessianscited by 83
- 2024Unlearning or Obfuscating? Jogging the Memory of Unlearned LLMs via Benign Relearningcited by 81
- 2024Inexact Unlearning Needs More Careful Evaluations to Avoid a False Sense of Privacycited by 78
- 2023DEPN: Detecting and Editing Privacy Neurons in Pretrained Language Modelscited by 75
- 2023Nightshade: Prompt-Specific Poisoning Attacks on Text-to-Image Generative Modelscited by 72
- 2022Recommendation Unlearningcited by 71
- 2023Fast Model Debias with Machine Unlearningcited by 70
- 2022Backdoor Defense with Machine Unlearningcited by 61
- 2023GIF: A General Graph Unlearning Strategy via Influence Functioncited by 59
- 2022Forget Unlearning: Towards True Data-Deletion in Machine Learningcited by 58
- 2024Position: LLM Unlearning Benchmarks are Weak Measures of Progresscited by 58
- 2024Scissorhands: Scrub Data Influence via Connection Sensitivity in Networkscited by 50
- 2024Langevin Unlearning: A New Perspective of Noisy Gradient Descent for Machine Unlearningcited by 48
- 2024Are we making progress in unlearning? Findings from the first NeurIPS unlearning competitioncited by 48
- 2021Hard to Forget: Poisoning Attacks on Certified Machine Unlearningcited by 47
- 2024Machine Unlearning for Image-to-Image Generative Modelscited by 47
- 2024UnlearnCanvas: Stylized Image Dataset for Enhanced Machine Unlearning Evaluation in Diffusion Modelscited by 47
- 2021Domain Adaptation and Multi-Domain Adaptation for Neural Machine Translation: A Surveycited by 46
- 2024Challenging Forgets: Unveiling the Worst-Case Forget Sets in Machine Unlearningcited by 44
- 2023GNNDelete: A General Strategy for Unlearning in Graph Neural Networkscited by 43
- 2024Unified Gradient-Based Machine Unlearning with Remain Geometry Enhancementcited by 43
- 2025Measuring Chain of Thought Faithfulness by Unlearning Reasoning Stepscited by 43
- 2021Certifiable Machine Unlearning for Linear Modelscited by 42
- 2022Evaluating Machine Unlearning via Epistemic Uncertaintycited by 39
- 2022Algorithms that Approximate Data Removal: New Results and Limitationscited by 39
- 2025When is Task Vector Provably Effective for Model Editing? A Generalization Analysis of Nonlinear Transformerscited by 38
- 2021Poison Forensics: Traceback of Data Poisoning Attacks in Neural Networkscited by 37
- 2022Hidden Poison: Machine Unlearning Enables Camouflaged Poisoning Attackscited by 37
50 most cited of 303 All 303 (JSON)
- 2026Learning What to Forget: Distributional Unlearning for LLM Representation Spaces30 Sep 2026
- 2026PruneForget: Joint Unlearning and Pruning of Vision Models26 Sep 2026
- 2026Quantization-Robust Unlearning through the Lens of Retain-Forget Loss Landscapes Interaction23 Sep 2026
- 2026Do Influence-Derived Data Perturbations Enable Machine Unlearning? A Controlled Study of Three Plausible Roles11 Sep 2026
- 2026When Retain Constraints Conflict: Mitigating Forget-Retain Interference in Tabular Data6 Sep 2026
- 2026On the Recoverability of Private Information Unlearning in Large Language Models30 Aug 2026
- 2026On the Plasticity Collapse in Continual Machine Unlearning30 Aug 2026
- 2026Memorization Is Not Extraction: Tight Differential-Privacy Bounds and Audit Blind Spots27 Aug 2026
- 2026Can Scientific Claims Be Removed from Large Language Models? A Systematic Evaluation of Claim-Level Unlearning21 Aug 2026
- 2026Learning to Unlearn: Machine Unlearning via Learning the Unlearning Behaviors17 Aug 2026
- 2026Spectral Saliency for Machine Unlearning16 Aug 2026
- 2026SCOPE: Entanglement Frontier Escape for Source-Free Class Unlearning3 Aug 2026
38 more
- 2026MMFGU: Multimodal Federated Graph Unlearning30 Jul 2026
- 2026Beyond Binary Rewards: A Comparative Study of Reward Design for Reinforcement Unlearning30 Jul 2026
- 2026Anti-Backdoor Coreset Selection via Cumulative Entropy28 Jul 2026
- 2026Unlearning as Distribution Restoration: A Controlled Counterfactual Study, a Validated Selective Screen, and the Limits of Oracle-Free Certification21 Jul 2026
- 2026Stochastic Meta-Unlearning: Bridging Language Backbone and Multimodal Unlearning21 Jul 2026
- 2026Multimodal Unlearning Across Vision, Language, Video, and Audio: Survey of Methods, Datasets, and Benchmarks8 Jul 2026
- 2026Auditing of Unlearning Algorithms7 Jul 2026
- 2026The Forgetting-Retention Dilemma: Certified Unlearning Theory in Continual Learning29 Jun 2026
- 2026SAGE: Retain-Aware Post-Hoc Sanitization of Final Unlearning Vector16 Jun 2026
- 2026TrustErase: Auditable Instant Machine Unlearning with Passport-Embedded Representations15 Jun 2026
- 2026InstantForget: Update-Free Backdoor Unlearning with Inference-Time Feature Reset14 Jun 2026
- 2026Characterizing Privacy-Audit Alignment in Behavioral Audit of Machine Unlearning12 Jun 2026
- 2026Exact Unlearning in Reinforcement Learning2 Jun 2026
- 2026How Hard Can It Be? Hardness-Aware Multi-Objective Unlearning1 Jun 2026
- 2026Near-Optimal Machine Unlearning Utility for Smooth Strongly Convex Losses1 Jun 2026
- 2026Approximate Machine Unlearning through Manifold Representation Forgetting Guided by Self Mode Connectivity20 May 2026
- 2026Statistical Unlearning of Distributions: A Hypothesis Testing Approach15 May 2026
- 2026SoK: Unlearnability and Unlearning for Model Dememorization12 May 2026
- 2026Behavioral Guarantees for Proxy-Based Unlearning11 May 2026
- 2026Position: The Term "Machine Unlearning" Is Overused in LLMs8 May 2026
- 2026Not Every Subject Should Stay: Machine Unlearning for Noisy Engagement Recognition6 May 2026
- 2026DurableUn: Quantization-Induced Recovery Attacks in Machine Unlearning4 May 2026
- 2026Unlearning Offline Stochastic Multi-Armed Bandits1 May 2026
- 2026Machine Unlearning for Class Removal through SISA-based Deep Neural Network Architectures30 Apr 2026
- 2026Harmonizing Multi-Objective LLM Unlearning via Unified Domain Representation and Bidirectional Logit Distillation16 Apr 2026
- 2026Is your algorithm unlearning or untraining?9 Apr 2026
- 2026Forgetting to Witness: Efficient Federated Unlearning and Its Visible Evaluation6 Apr 2026
- 2026Jellyfish: Zero-Shot Federated Unlearning Scheme with Knowledge Disentanglement5 Apr 2026
- 2026SALMUBench: A Benchmark for Sensitive Association-Level Multimodal Unlearning27 Mar 2026
- 2026Designing to Forget: Deep Semi-parametric Models for Unlearning24 Mar 2026
- 2026Exact Federated Continual Unlearning for Ridge Heads on Frozen Foundation Models13 Mar 2026
- 2026Reference-Guided Machine Unlearning11 Mar 2026
- 2026Less Noise, Same Certificate: Retain Sensitivity for Unlearning3 Mar 2026
- 2026Attention Smoothing Is All You Need For Unlearning1 Mar 2026
- 2026U-CAN: Utility-Aware Contrastive Attenuation for Efficient Unlearning in Generative Recommendation26 Feb 2026
- 2026Benchmarking Unlearning for Vision Transformers23 Feb 2026
- 2026MeGU: Machine-Guided Unlearning with Target Feature Disentanglement19 Feb 2026
- 2026Protecting the Undeleted in Machine Unlearning18 Feb 2026
50 newest of 303 All 303 (JSON)
- 2021Remember What You Want to Forget: Algorithms for Machine Unlearningcited by 360
- 2022A Survey of Machine Unlearningcited by 298
- 2023Large Language Model Unlearningcited by 288
- 2023Towards Unbounded Machine Unlearningcited by 261
- 2024MUSE: Machine Unlearning Six-Way Evaluation for Language Modelscited by 251
- 2021Machine Unlearning of Features and Labelscited by 223
- 2023In-Context Unlearning: Language Models as Few Shot Unlearnerscited by 214
- 2021Fast Yet Effective Machine Unlearningcited by 209
- 2023Model Sparsity Can Simplify Machine Unlearningcited by 206
- 2022Can Bad Teaching Induce Forgetting? Unlearning in Deep Networks using an Incompetent Teachercited by 189
- 2021Adaptive Machine Unlearningcited by 164
- 2021Graph Unlearningcited by 129
12 most cited of 243 All 243 (JSON)
- 2026Learning What to Forget: Distributional Unlearning for LLM Representation Spaces30 Sep 2026
- 2026PruneForget: Joint Unlearning and Pruning of Vision Models26 Sep 2026
- 2026Quantization-Robust Unlearning through the Lens of Retain-Forget Loss Landscapes Interaction23 Sep 2026
- 2026Do Influence-Derived Data Perturbations Enable Machine Unlearning? A Controlled Study of Three Plausible Roles11 Sep 2026
- 2026When Retain Constraints Conflict: Mitigating Forget-Retain Interference in Tabular Data6 Sep 2026
- 2026On the Recoverability of Private Information Unlearning in Large Language Models30 Aug 2026
- 2026On the Plasticity Collapse in Continual Machine Unlearning30 Aug 2026
- 2026Can Scientific Claims Be Removed from Large Language Models? A Systematic Evaluation of Claim-Level Unlearning21 Aug 2026
- 2026Learning to Unlearn: Machine Unlearning via Learning the Unlearning Behaviors17 Aug 2026
- 2026Spectral Saliency for Machine Unlearning16 Aug 2026
- 2026SCOPE: Entanglement Frontier Escape for Source-Free Class Unlearning3 Aug 2026
- 2026MMFGU: Multimodal Federated Graph Unlearning30 Jul 2026
12 newest of 243 All 243 (JSON)
- 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generationcited by 376
- 2024UnlearnCanvas: Stylized Image Dataset for Enhanced Machine Unlearning Evaluation in Diffusion Modelscited by 47
- 2024Score Forgetting Distillation: A Swift, Data-Free Method for Machine Unlearning in Diffusion Modelscited by 22
- 2023Training Data Protection with Compositional Diffusion Modelscited by 16
- 2025Side Effects of Erasing Concepts from Diffusion Modelscited by 12
- 2025Sealing The Backdoor: Unlearning Adversarial Text Triggers In Diffusion Models Using Knowledge Distillationcited by 2
- 2025Sealing The Backdoor: Unlearning Adversarial Text Triggers In Diffusion Models Using Knowledge Distillation20 Aug 2025
- 2025Side Effects of Erasing Concepts from Diffusion Models20 Aug 2025
- 2024Score Forgetting Distillation: A Swift, Data-Free Method for Machine Unlearning in Diffusion Models17 Sep 2024
- 2024UnlearnCanvas: Stylized Image Dataset for Enhanced Machine Unlearning Evaluation in Diffusion Models19 Feb 2024
- 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generation19 Oct 2023
- 2023Training Data Protection with Compositional Diffusion Models2 Aug 2023
- 2024From Persona to Personalization: A Survey on Role-Playing Language Agentscited by 206
- 2025Agents Are All You Need for LLM Unlearningcited by 9
- 2026Agentic Unlearning: When LLM Agent Meets Machine Unlearningcited by 6
- 2024Rethinking Machine Unlearning for Large Language Modelscited by 247
- 2025Measuring Chain of Thought Faithfulness by Unlearning Reasoning Stepscited by 43
- 2022Measuring Forgetting of Memorized Training Examplescited by 118
- 2023DEPN: Detecting and Editing Privacy Neurons in Pretrained Language Modelscited by 75
- 2022Recommendation Unlearningcited by 71
- 2022Backdoor Defense with Machine Unlearningcited by 61
- 2021Domain Adaptation and Multi-Domain Adaptation for Neural Machine Translation: A Surveycited by 46
- 2023GNNDelete: A General Strategy for Unlearning in Graph Neural Networkscited by 43
- 2023Backdoor Attacks and Defenses in Federated Learning: Survey, Challenges and Future Research Directionscited by 33
- 2022Learning with Recoverable Forgettingcited by 29
- 2022Understanding Rare Spurious Correlations in Neural Networkscited by 27
- 2022Repairing Neural Networks by Leaving the Right Past Behindcited by 27
- 2024Ethos: Rectifying Language Models in Orthogonal Parameter Spacecited by 20
- 2022Data Redaction from Pre-trained GANscited by 18
12 most cited of 45 All 45 (JSON)
- 2026Memorization Is Not Extraction: Tight Differential-Privacy Bounds and Audit Blind Spots27 Aug 2026
- 2026Anti-Backdoor Coreset Selection via Cumulative Entropy28 Jul 2026
- 2026InstantForget: Update-Free Backdoor Unlearning with Inference-Time Feature Reset14 Jun 2026
- 2025On the Accuracy of Newton Step and Influence Function Data Attributions14 Dec 2025
- 2025Efficient Public Verification of Private ML via Regularization3 Dec 2025
- 2025Backdoor Unlearning by Linear Task Decomposition16 Oct 2025
- 2025Incentivizing Time-Aware Fairness in Data Sharing10 Oct 2025
- 2025Factor Decorrelation Enhanced Data Removal from Deep Predictive Models27 Sep 2025
- 2025Invisible Watermarks, Visible Gains: Steering Machine Unlearning with Bi-Level Watermarking Design13 Aug 2025
- 2025Model Immunization from a Condition Number Perspective29 May 2025
- 2024Vertical Federated Unlearning via Backdoor Certification16 Dec 2024
- 2024Data Deletion for Linear Regression with Noisy SGD12 Oct 2024
12 newest of 45 All 45 (JSON)