Remember What You Want to Forget: Algorithms for Machine Unlearning
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
We study the problem of unlearning datapoints from a learnt model. The learner first receives a dataset S drawn i.i.d. from an unknown distribution, and outputs a model widehatw that performs well on unseen samples from the same distribution. However, at some point in the future, any training datapoint z ∈ S can request to be unlearned, thus prompting the learner to modify its output model while still ensuring the same accuracy guarantees. We initiate a rigorous study of generalization in machine unlearning, where the goal is to perform well on previously unseen datapoints. Our focus is on both computational and storage complexity. For the setting of convex losses, we provide an unlearning algorithm that can unlearn up to O(n/d1/4) samples, where d is the problem dimension. In comparison, in general, differentially private learning (which implies unlearning) only guarantees deletion of O(n/d1/2) samples. This demonstrates a novel separation between differential privacy and machine unlearning.
Key facts. Cited by 360 papers in the map (data through 7 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 19 of its 39 references that are in the map. First posted on arXiv 4 Mar 2021.
Builds on
19 of 39 references.
Closest ancestors · 1
Same direction, newest first
Other references · 18
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,221
- 2019Machine Unlearningcited by 1,020
- 2018The Secret Sharer: Evaluating and Testing Unintended Memorization in Neural Networkscited by 847
- 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 599
- 2014Convex Optimization: Algorithms and Complexitycited by 569
- 2019Certified Data Removal from Machine Learning Modelscited by 512
- 2019Making AI Forget You: Data Deletion in Machine Learningcited by 447
- 2020Descent-to-Delete: Gradient-Based Methods for Machine Unlearningcited by 303
- 2020Approximate Data Deletion from Machine Learning Modelscited by 250
- 2016Robust Estimators in High Dimensions without the Computational Intractabilitycited by 209
- 2019Private Stochastic Convex Optimization with Optimal Ratescited by 183
- 2020When Machine Unlearning Jeopardizes Privacycited by 181
6 more
- 2020Mixed-Privacy Forgetting in Deep Networkscited by 158
- 2016Agnostic Estimation of Mean and Covariancecited by 131
- 2020Variational Bayesian Unlearningcited by 114
- 2020Formalizing Data Deletion in the Context of the Right to be Forgottencited by 46
- 2020Towards Probabilistic Verification of Machine Unlearningcited by 46
- 2016Generalization of ERM in Stochastic Convex Optimization: The Dimension Strikes Backcited by 37
Built on by
Citing papers per year: 2021: 8; 2022: 26; 2023: 54; 2024: 99; 2025: 92; 2026: 81.
360 papers.
Sort:
By area:
- 2023Erasing Concepts from Diffusion Modelscited by 530
- 2024TOFU: A Task of Fictitious Unlearning for LLMscited by 507
- 2024Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearningcited by 484
- 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generationcited by 376
- 2023Detecting Pretraining Data from Large Language Modelscited by 375
- 2023Ablating Concepts in Text-to-Image Diffusion Modelscited by 312
- 2022A Survey of Machine Unlearningcited by 298
- 2021Unrolling SGD: Understanding Factors Influencing Machine Unlearningcited by 274
- 2023Towards Unbounded Machine Unlearningcited by 261
- 2024MUSE: Machine Unlearning Six-Way Evaluation for Language Modelscited by 251
- 2024Rethinking Machine Unlearning for Large Language Modelscited by 247
- 2023In-Context Unlearning: Language Models as Few Shot Unlearnerscited by 214
38 more
- 2023Unlearn What You Want to Forget: Efficient Unlearning for LLMscited by 211
- 2021Fast Yet Effective Machine Unlearningcited by 209
- 2023Model Sparsity Can Simplify Machine Unlearningcited by 206
- 2022Can Bad Teaching Induce Forgetting? Unlearning in Deep Networks using an Incompetent Teachercited by 189
- 2023Fast Machine Unlearning Without Retraining Through Selective Synaptic Dampeningcited by 177
- 2021Adaptive Machine Unlearningcited by 164
- 2021On the Necessity of Auditable Algorithmic Definitions for Machine Unlearningcited by 164
- 2024Towards Safer Large Language Models through Machine Unlearningcited by 134
- 2023Boundary Unlearningcited by 132
- 2022Zero-Shot Machine Unlearningcited by 125
- 2022Measuring Forgetting of Memorized Training Examplescited by 118
- 2024Machine Unlearning of Pre-trained Large Language Modelscited by 118
- 2022Synthetic Text Generation with Differential Privacy: A Simple and Practical Recipecited by 108
- 2024SOUL: Unlocking the Power of Second-Order Optimization for LLM Unlearningcited by 104
- 2022Federated Unlearning: How to Efficiently Erase a Client in FL?cited by 90
- 2023Machine Unlearning: Solutions and Challengescited by 85
- 2024Reversing the Forget-Retain Objectives: An Efficient LLM Unlearning Framework from Logit Differencecited by 85
- 2022Deep Unlearning via Randomized Conditionally Independent Hessianscited by 83
- 2024Inexact Unlearning Needs More Careful Evaluations to Avoid a False Sense of Privacycited by 78
- 2024Catastrophic Failure of LLM Unlearning via Quantizationcited by 76
- 2024When LLMs Meet Cybersecurity: A Systematic Literature Reviewcited by 70
- 2023A Comprehensive Survey of Forgetting in Deep Learning Beyond Continual Learningcited by 66
- 2022Forget Unlearning: Towards True Data-Deletion in Machine Learningcited by 58
- 2024Position: LLM Unlearning Benchmarks are Weak Measures of Progresscited by 58
- 2024Erasing Undesirable Influence in Diffusion Modelscited by 52
- 2024Scissorhands: Scrub Data Influence via Connection Sensitivity in Networkscited by 50
- 2024Langevin Unlearning: A New Perspective of Noisy Gradient Descent for Machine Unlearningcited by 48
- 2024Are we making progress in unlearning? Findings from the first NeurIPS unlearning competitioncited by 48
- 2021Hard to Forget: Poisoning Attacks on Certified Machine Unlearningcited by 47
- 2024UnlearnCanvas: Stylized Image Dataset for Enhanced Machine Unlearning Evaluation in Diffusion Modelscited by 47
- 2022Certified Graph Unlearningcited by 46
- 2024UnUnlearning: Unlearning is not sufficient for content regulation in advanced generative AIcited by 46
- 2023Exploring the Landscape of Machine Unlearning: A Comprehensive Survey and Taxonomycited by 44
- 2024Challenging Forgets: Unveiling the Worst-Case Forget Sets in Machine Unlearningcited by 44
- 2023GNNDelete: A General Strategy for Unlearning in Graph Neural Networkscited by 43
- 2024Unified Gradient-Based Machine Unlearning with Remain Geometry Enhancementcited by 43
- 2024Soft Prompting for Unlearning in Large Language Modelscited by 42
- 2022Evaluating Machine Unlearning via Epistemic Uncertaintycited by 39
50 most cited of 360 All 360 (JSON)
- 2026Unlearning Deceptive Behaviors in LLMs with Contrastive Forget Sets30 Sep 2026
- 2026Storage Is Not Strategy: State-Conditioned Support Control for LLM Unlearning29 Sep 2026
- 2026Physics-Aware Machine Unlearning for Cyber-Physical Systems29 Sep 2026
- 2026Bounding Retraining Equivalence and the Deletion Floor in Materials Machine Unlearning28 Sep 2026
- 2026TULIP: Targeted LLM Unlearning at Layers Identified Per-Input28 Sep 2026
- 2026Causal Routing for Unlearning28 Sep 2026
- 2026Making LLMs Truly Forget: Deep Unlearning by Searching, Selecting, and Severing Knowledge Paths28 Sep 2026
- 2026Traceprop: Training Data Attribution in a Single Pass26 Sep 2026
- 2026ForgetMimic: Motion Unlearning for Reinforcement Learning Humanoid Control23 Sep 2026
- 2026Damnatio Memoriae: Adversarially and Selectively Forgetting Identities in the Embedding Space of Face Recognition Models22 Sep 2026
- 2026Not All Patches Are Equally Forgettable: Spatially Localized Domain Unlearning in Vision-Language Models15 Sep 2026
- 2026Correlation-Guided Fast Machine Unlearning via Hessian Analysis11 Sep 2026
38 more
- 2026Do Influence-Derived Data Perturbations Enable Machine Unlearning? A Controlled Study of Three Plausible Roles11 Sep 2026
- 2026Certifying Concept Unlearning in Text-to-Image Diffusion Models10 Sep 2026
- 2026Memorization Is Not Extraction: Tight Differential-Privacy Bounds and Audit Blind Spots27 Aug 2026
- 2026Rethinking Demonstration Unlearning in Imitation Learning for Robotics21 Aug 2026
- 2026Cross-Domain Generalization in Machine Unlearning via Label-Conditioned Energy Magnitude Regularization18 Aug 2026
- 2026Dynamic Entanglement-Weighted Pruning for Quantum Federated Unlearning in Supply-Chain Risk Prediction17 Aug 2026
- 2026Learning to Unlearn: Machine Unlearning via Learning the Unlearning Behaviors17 Aug 2026
- 2026Spectral Saliency for Machine Unlearning16 Aug 2026
- 2026A Model Merging Approach for Continual MLLM Unlearning5 Aug 2026
- 2026Beyond Binary Rewards: A Comparative Study of Reward Design for Reinforcement Unlearning30 Jul 2026
- 2026Unlearning Under Imbalance: Benchmarking Fairness in Multimodal LLM Unlearning23 Jul 2026
- 2026On Optimization Complexity of Second-Order Certified Unlearning22 Jul 2026
- 2026Unlearning as Distribution Restoration: A Controlled Counterfactual Study, a Validated Selective Screen, and the Limits of Oracle-Free Certification21 Jul 2026
- 2026Signal-Guided Optimization for Machine Unlearning13 Jul 2026
- 2026Multimodal Unlearning Across Vision, Language, Video, and Audio: Survey of Methods, Datasets, and Benchmarks8 Jul 2026
- 2026Auditing of Unlearning Algorithms7 Jul 2026
- 2026The Forgetting-Retention Dilemma: Certified Unlearning Theory in Continual Learning29 Jun 2026
- 2026pFedUL: Layer-Aware Federated Unlearning for Personalized Federated Learning15 Jun 2026
- 2026Auditing Machine Unlearning: A Systematic Research on Whether Models Truly Forget15 Jun 2026
- 2026Characterizing Privacy-Audit Alignment in Behavioral Audit of Machine Unlearning12 Jun 2026
- 2026REMEDI: A Benchmark for Retention and Unlearning Evaluation in Multi-label Clinical Disease Inference5 Jun 2026
- 2026Exact Unlearning in Reinforcement Learning2 Jun 2026
- 2026Near-Optimal Machine Unlearning Utility for Smooth Strongly Convex Losses1 Jun 2026
- 2026Closed-Form Node Classification with Exact Graph Unlearning25 May 2026
- 2026Approximate Machine Unlearning through Manifold Representation Forgetting Guided by Self Mode Connectivity20 May 2026
- 2026Interference-Aware Multi-Task Unlearning18 May 2026
- 2026Form and Function: Machine Unlearning as a Problem of Misaligned States17 May 2026
- 2026ZeroUnlearn: Few-Shot Knowledge Unlearning in Large Language Models16 May 2026
- 2026Behavioral Guarantees for Proxy-Based Unlearning11 May 2026
- 2026Unlearners Can Lie: Evaluating and Improving Honesty in LLM Unlearning9 May 2026
- 2026Null Space Constrained Contrastive Visual Forgetting for MLLM Unlearning7 May 2026
- 2026Metric Unreliability in Multimodal Machine Unlearning: A Systematic Analysis and Principled Unified Score4 May 2026
- 2026Unlearning Offline Stochastic Multi-Armed Bandits1 May 2026
- 2026Shape of Memory: a Geometric Analysis of Machine Unlearning in Second-Order Optimizers24 Apr 2026
- 2026PrivEraserVerify: Efficient, Private, and Verifiable Federated Unlearning14 Apr 2026
- 2026Is your algorithm unlearning or untraining?9 Apr 2026
- 2026Forgetting to Witness: Efficient Federated Unlearning and Its Visible Evaluation6 Apr 2026
- 2026Jellyfish: Zero-Shot Federated Unlearning Scheme with Knowledge Disentanglement5 Apr 2026
50 newest of 360 All 360 (JSON)
- 2024TOFU: A Task of Fictitious Unlearning for LLMscited by 507
- 2022A Survey of Machine Unlearningcited by 298
- 2021Unrolling SGD: Understanding Factors Influencing Machine Unlearningcited by 274
- 2023Towards Unbounded Machine Unlearningcited by 261
- 2024MUSE: Machine Unlearning Six-Way Evaluation for Language Modelscited by 251
- 2023In-Context Unlearning: Language Models as Few Shot Unlearnerscited by 214
- 2023Unlearn What You Want to Forget: Efficient Unlearning for LLMscited by 211
- 2021Fast Yet Effective Machine Unlearningcited by 209
- 2023Model Sparsity Can Simplify Machine Unlearningcited by 206
- 2022Can Bad Teaching Induce Forgetting? Unlearning in Deep Networks using an Incompetent Teachercited by 189
- 2023Fast Machine Unlearning Without Retraining Through Selective Synaptic Dampeningcited by 177
- 2021Adaptive Machine Unlearningcited by 164
12 most cited of 275 All 275 (JSON)
- 2026Unlearning Deceptive Behaviors in LLMs with Contrastive Forget Sets30 Sep 2026
- 2026Storage Is Not Strategy: State-Conditioned Support Control for LLM Unlearning29 Sep 2026
- 2026Bounding Retraining Equivalence and the Deletion Floor in Materials Machine Unlearning28 Sep 2026
- 2026TULIP: Targeted LLM Unlearning at Layers Identified Per-Input28 Sep 2026
- 2026Causal Routing for Unlearning28 Sep 2026
- 2026ForgetMimic: Motion Unlearning for Reinforcement Learning Humanoid Control23 Sep 2026
- 2026Correlation-Guided Fast Machine Unlearning via Hessian Analysis11 Sep 2026
- 2026Do Influence-Derived Data Perturbations Enable Machine Unlearning? A Controlled Study of Three Plausible Roles11 Sep 2026
- 2026Cross-Domain Generalization in Machine Unlearning via Label-Conditioned Energy Magnitude Regularization18 Aug 2026
- 2026Learning to Unlearn: Machine Unlearning via Learning the Unlearning Behaviors17 Aug 2026
- 2026Spectral Saliency for Machine Unlearning16 Aug 2026
- 2026Beyond Binary Rewards: A Comparative Study of Reward Design for Reinforcement Unlearning30 Jul 2026
12 newest of 275 All 275 (JSON)
- 2023Erasing Concepts from Diffusion Modelscited by 530
- 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generationcited by 376
- 2023Ablating Concepts in Text-to-Image Diffusion Modelscited by 312
- 2024Erasing Undesirable Influence in Diffusion Modelscited by 52
- 2024UnlearnCanvas: Stylized Image Dataset for Enhanced Machine Unlearning Evaluation in Diffusion Modelscited by 47
- 2024Attacks and Defenses for Generative Diffusion Models: A Comprehensive Surveycited by 32
- 2024Score Forgetting Distillation: A Swift, Data-Free Method for Machine Unlearning in Diffusion Modelscited by 22
- 2023Training Data Protection with Compositional Diffusion Modelscited by 16
- 2025Sculpting Memory: Multi-Concept Forgetting in Diffusion Models via Dynamic Mask and Concept-Aware Optimizationcited by 15
- 2024Unstable Unlearning: The Hidden Risk of Concept Resurgence in Diffusion Modelscited by 14
- 2025Demystifying Foreground-Background Memorization in Diffusion Modelscited by 2
- 2025Unlearning in Diffusion models under Data Constraints: A Variational Inference Approachcited by 1
12 most cited of 14 All 14 (JSON)
- 2026Certifying Concept Unlearning in Text-to-Image Diffusion Models10 Sep 2026
- 2025Adaptive-lambda Subtracted Importance Sampled Scores in Machine Unlearning for DDPMs and VAEs30 Nov 2025
- 2025Unlearning in Diffusion models under Data Constraints: A Variational Inference Approach5 Oct 2025
- 2025Demystifying Foreground-Background Memorization in Diffusion Models16 Aug 2025
- 2025Sculpting Memory: Multi-Concept Forgetting in Diffusion Models via Dynamic Mask and Concept-Aware Optimization12 Apr 2025
- 2024Unstable Unlearning: The Hidden Risk of Concept Resurgence in Diffusion Models10 Oct 2024
- 2024Score Forgetting Distillation: A Swift, Data-Free Method for Machine Unlearning in Diffusion Models17 Sep 2024
- 2024Attacks and Defenses for Generative Diffusion Models: A Comprehensive Survey6 Aug 2024
- 2024UnlearnCanvas: Stylized Image Dataset for Enhanced Machine Unlearning Evaluation in Diffusion Models19 Feb 2024
- 2024Erasing Undesirable Influence in Diffusion Models11 Jan 2024
- 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generation19 Oct 2023
- 2023Training Data Protection with Compositional Diffusion Models2 Aug 2023
12 newest of 14 All 14 (JSON)
- 2025Approximate Domain Unlearning for Vision-Language Modelscited by 6
- 2026RAZOR: Ratio-Aware Layer Editing for Targeted Unlearning in Vision Transformers and Diffusion Modelscited by 3
- 2026Metric Unreliability in Multimodal Machine Unlearning: A Systematic Analysis and Principled Unified Scorecited by 0
- 2026Unlearning Under Imbalance: Benchmarking Fairness in Multimodal LLM Unlearningcited by 0
- 2026A Model Merging Approach for Continual MLLM Unlearningcited by 0
- 2026Not All Patches Are Equally Forgettable: Spatially Localized Domain Unlearning in Vision-Language Modelscited by 0
- 2026Not All Patches Are Equally Forgettable: Spatially Localized Domain Unlearning in Vision-Language Models15 Sep 2026
- 2026A Model Merging Approach for Continual MLLM Unlearning5 Aug 2026
- 2026Unlearning Under Imbalance: Benchmarking Fairness in Multimodal LLM Unlearning23 Jul 2026
- 2026Metric Unreliability in Multimodal Machine Unlearning: A Systematic Analysis and Principled Unified Score4 May 2026
- 2026RAZOR: Ratio-Aware Layer Editing for Targeted Unlearning in Vision Transformers and Diffusion Models16 Mar 2026
- 2025Approximate Domain Unlearning for Vision-Language Models9 Oct 2025
- 2024Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearningcited by 484
- 2024A Probabilistic Perspective on Unlearning and Alignment for Large Language Modelscited by 21
- 2024Negating Negatives: Alignment with Human Negative Samples via Distributional Dispreference Optimizationcited by 11
- 2025SUV: Scalable Large Language Model Copyright Compliance with Regularized Selective Unlearningcited by 4
- 2025SUV: Scalable Large Language Model Copyright Compliance with Regularized Selective Unlearning29 Mar 2025
- 2024A Probabilistic Perspective on Unlearning and Alignment for Large Language Models4 Oct 2024
- 2024Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearning8 Apr 2024
- 2024Negating Negatives: Alignment with Human Negative Samples via Distributional Dispreference Optimization6 Mar 2024
- 2023Detecting Pretraining Data from Large Language Modelscited by 375
- 2022Measuring Forgetting of Memorized Training Examplescited by 118
- 2022Synthetic Text Generation with Differential Privacy: A Simple and Practical Recipecited by 108
- 2024When LLMs Meet Cybersecurity: A Systematic Literature Reviewcited by 70
- 2023A Comprehensive Survey of Forgetting in Deep Learning Beyond Continual Learningcited by 66
- 2023GNNDelete: A General Strategy for Unlearning in Graph Neural Networkscited by 43
- 2022Learning with Recoverable Forgettingcited by 29
- 2024Continual Forgetting for Pre-trained Vision Modelscited by 29
- 2023Circuit Breaking: Removing Model Behaviors with Targeted Ablationcited by 27
- 2023Make Them Spill the Beans! Coercive Knowledge Extraction from (Production) LLMscited by 26
- 2024IDEA: A Flexible Framework of Certified Unlearning for Graph Neural Networkscited by 22
- 2023Making Harmful Behaviors Unlearnable for Large Language Modelscited by 19
12 most cited of 55 All 55 (JSON)
- 2026Physics-Aware Machine Unlearning for Cyber-Physical Systems29 Sep 2026
- 2026Traceprop: Training Data Attribution in a Single Pass26 Sep 2026
- 2026Damnatio Memoriae: Adversarially and Selectively Forgetting Identities in the Embedding Space of Face Recognition Models22 Sep 2026
- 2026Memorization Is Not Extraction: Tight Differential-Privacy Bounds and Audit Blind Spots27 Aug 2026
- 2026Dynamic Entanglement-Weighted Pruning for Quantum Federated Unlearning in Supply-Chain Risk Prediction17 Aug 2026
- 2026Closed-Form Node Classification with Exact Graph Unlearning25 May 2026
- 2026Controllable Concept Bottleneck Models1 Jan 2026
- 2025On the Accuracy of Newton Step and Influence Function Data Attributions14 Dec 2025
- 2025Selective Forgetting in Option Calibration: An Operator-Theoretic Gauss-Newton Framework18 Nov 2025
- 2025Dropping Just a Handful of Preferences Can Change Top Large Language Model Rankings16 Aug 2025
- 2025Invisible Watermarks, Visible Gains: Steering Machine Unlearning with Bi-Level Watermarking Design13 Aug 2025
- 2025Approximating Full Conformal Prediction for Neural Network Regression with Gauss-Newton Influence27 Jul 2025
12 newest of 55 All 55 (JSON)