Federated Unlearning via Class-Discriminative Pruning
On the map: LLM safety and security → Federated unlearning and poisoning
Abstract (arXiv)
We explore the problem of selectively forgetting categories from trained CNN classification models in the federated learning (FL). Given that the data used for training cannot be accessed globally in FL, our insights probe deep into the internal influence of each channel. Through the visualization of feature maps activated by different channels, we observe that different channels have a varying contribution to different categories in image classification. Inspired by this, we propose a method for scrubbing the model clean of information about particular categories. The method does not require retraining from scratch, nor global access to the data used for training. Instead, we introduce the concept of Term Frequency Inverse Document Frequency (TF-IDF) to quantize the class discrimination of channels. Channels with high TF-IDF scores have more discrimination on the target categories and thus need to be pruned to unlearn. The channel pruning is followed by a fine-tuning process to recover the performance of the pruned model. Evaluated on CIFAR10 dataset, our method accelerates the speed of unlearning by 8.9x for the ResNet model, and 7.9x for the VGG model under no degradation in accuracy, compared to retraining from scratch. For CIFAR100 dataset, the speedups are 9.9x and 8.4x, respectively. We envision this work as a complementary block for FL towards compliance with legal and ethical criteria.
Key facts. Cited by 115 papers in the map (data through 14 Oct 2026). Placed in Federated unlearning and poisoning, one of 12 directions in LLM safety and security. Builds on 28 of its 37 references that are in the map. First posted on arXiv 22 Oct 2021.
Builds on
28 of 37 references.
References · 28
- 2015Deep Residual Learning for Image Recognitioncited by 52,096
- 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,364
- 2016Communication-Efficient Learning of Deep Networks from Decentralized Datacited by 7,669
- 2019Advances and Open Problems in Federated Learningcited by 3,046
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,281
- 2017Understanding Black-box Predictions via Influence Functionscited by 1,741
- 2016Federated Learning: Strategies for Improving Communication Efficiencycited by 1,475
- 2018Federated Learning with Non-IID Datacited by 1,108
- 2019Machine Unlearningcited by 1,061
- 2017Channel Pruning for Accelerating Very Deep Neural Networkscited by 702
- 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 618
- 2019Certified Data Removal from Machine Learning Modelscited by 535
16 more
- 2019Local Model Poisoning Attacks to Byzantine-Robust Federated Learningcited by 493
- 2019Making AI Forget You: Data Deletion in Machine Learningcited by 465
- 2014New insights and perspectives on the natural gradient methodcited by 443
- 2019Federated Machine Learning: Concept and Applicationscited by 412
- 2015Understanding Neural Networks Through Deep Visualizationcited by 334
- 2020Amnesiac Machine Learningcited by 319
- 2020Descent-to-Delete: Gradient-Based Methods for Machine Unlearningcited by 311
- 2020Approximate Data Deletion from Machine Learning Modelscited by 255
- 2020Forgetting Outside the Box: Scrubbing Deep Networks of Information Accessible from Input-Output Observationscited by 180
- 2018Discrimination-aware Channel Pruning for Deep Neural Networkscited by 171
- 2020Mixed-Privacy Forgetting in Deep Networkscited by 163
- 2020DeltaGrad: Rapid retraining of machine learning modelscited by 149
- 2020Machine Unlearning for Random Forestscited by 131
- 2020Variational Bayesian Unlearningcited by 117
- 2020Channel Pruning via Automatic Structure Searchcited by 85
- 2020PrIU: A Provenance-Based Approach for Incrementally Updating Regression Modelscited by 16
Built on by
Citing papers per year: 2022: 9; 2023: 19; 2024: 45; 2025: 27; 2026: 15.
115 papers.
Sort:
By area:
- 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generationcited by 386
- 2022A Survey of Machine Unlearningcited by 312
- 2024Rethinking Machine Unlearning for Large Language Modelscited by 257
- 2023Model Sparsity Can Simplify Machine Unlearningcited by 214
- 2023To Generate or Not? Safety-Driven Unlearned Diffusion Models Are Still Easy To Generate Unsafe Images ... For Nowcited by 210
- 2022Can Bad Teaching Induce Forgetting? Unlearning in Deep Networks using an Incompetent Teachercited by 194
- 2023Boundary Unlearningcited by 134
- 2024SOUL: Unlocking the Power of Second-Order Optimization for LLM Unlearningcited by 104
- 2022Federated Unlearning: How to Efficiently Erase a Client in FL?cited by 95
- 2023Machine Unlearning: Solutions and Challengescited by 93
- 2024What makes unlearning hard and what to do about itcited by 89
- 2023A Survey on Federated Unlearning: Challenges, Methods, and Future Directionscited by 63
38 more
- 2024Scissorhands: Scrub Data Influence via Connection Sensitivity in Networkscited by 52
- 2023Exploring the Landscape of Machine Unlearning: A Comprehensive Survey and Taxonomycited by 51
- 2024Challenging Forgets: Unveiling the Worst-Case Forget Sets in Machine Unlearningcited by 44
- 2023GNNDelete: A General Strategy for Unlearning in Graph Neural Networkscited by 43
- 2022Evaluating Machine Unlearning via Epistemic Uncertaintycited by 39
- 2024Threats, Attacks, and Defenses in Machine Unlearning: A Surveycited by 39
- 2024Revisiting Who's Harry Potter: Towards Targeted Unlearning from a Causal Intervention Perspectivecited by 36
- 2024Machine Unlearning: A Comprehensive Surveycited by 35
- 2023Backdoor Attacks and Defenses in Federated Learning: Survey, Challenges and Future Research Directionscited by 33
- 2022Deep Regression Unlearningcited by 32
- 2023SAFE: Machine Unlearning With Shard Graphscited by 28
- 2024Federated Unlearning: A Survey on Methods, Design Guidelines, and Evaluation Metricscited by 27
- 2024When Machine Unlearning Meets Retrieval-Augmented Generation (RAG): Keep Secret or Forget Knowledge?cited by 24
- 2024Learning to Refuse: Towards Mitigating Privacy Risks in LLMscited by 23
- 2022Machine Unlearning of Federated Clusterscited by 22
- 2025Ten Challenging Problems in Federated Foundation Modelscited by 20
- 2023Machine Unlearning: A Surveycited by 19
- 2025Learning to Unlearn while Retaining: Combating Gradient Conflicts in Machine Unlearningcited by 19
- 2022SIFU: Sequential Informed Federated Unlearning for Efficient and Provable Client Unlearning in Federated Optimizationcited by 18
- 2024MEOW: MEMOry Supervised LLM Unlearning Via Inverted Factscited by 18
- 2022Efficient Attribute Unlearning: Towards Selective Removal of Input Attributes from Feature Representationscited by 17
- 2023Subspace based Federated Unlearningcited by 17
- 2024MU-Bench: A Multitask Multimodal Benchmark for Machine Unlearningcited by 17
- 2024MUNBa: Machine Unlearning via Nash Bargainingcited by 17
- 2025Unlearning through Knowledge Overwriting: Reversible Federated Unlearning via Selective Sparse Adaptercited by 16
- 2024A Survey on Machine Unlearning: Techniques and New Emerged Privacy Riskscited by 15
- 2024Unlearning during Learning: An Efficient Federated Machine Unlearning Methodcited by 14
- 2023Get Rid Of Your Trail: Remotely Erasing Backdoors in Federated Learningcited by 13
- 2023QuickDrop: Efficient Federated Unlearning by Integrated Dataset Distillationcited by 11
- 2024Ferrari: Federated Feature Unlearning via Optimizing Feature Sensitivitycited by 11
- 2024Don't Forget Too Much: Towards Machine Unlearning on Feature Levelcited by 11
- 2024Machine Unlearning for Traditional Models and Large Language Models: A Short Surveycited by 10
- 2025UIPE: Enhancing LLM Unlearning by Removing Knowledge Related to Forgetting Targetscited by 10
- 2024Label Smoothing Improves Machine Unlearningcited by 9
- 2025Data Duplication: A Novel Multi-Purpose Attack Paradigm in Machine Unlearningcited by 9
- 2025ESC: Erasing Space Concept for Knowledge Deletioncited by 9
- 2023Unlearning with Fisher Maskingcited by 8
- 2024Fast-FedUL: A Training-Free Federated Unlearning with Provable Skew Resiliencecited by 8
50 most cited of 115 All 115 (JSON)
- 2026UnAct: Gradient-Free Unlearning via Targeted Activation Intervention3 Oct 2026
- 2026Lethe: How Hard Is It to Forget? A Benchmark for Federated Unlearning in Medical Imaging2 Aug 2026
- 2026REDI: Corpus Aware Patch Ranking for DINOv3 Token Reduction30 Jun 2026
- 2026FedUP: One-Shot Federated Unlearning via Centroid-Guided Plug-in Filters23 Jun 2026
- 2026pFedUL: Layer-Aware Federated Unlearning for Personalized Federated Learning15 Jun 2026
- 2026Rethinking Federated Unlearning via the Lens of Memorization23 May 2026
- 2026Classification-Head Bias in Class-Level Machine Unlearning: Diagnosis, Mitigation, and Evaluation9 May 2026
- 2026EASE: Federated Multimodal Unlearning via Entanglement-Aware Anchor Closure1 May 2026
- 2026Asynchronous Federated Unlearning with Invariance Calibration for Medical Imaging29 Apr 2026
- 2026Computation and Communication Efficient Federated Unlearning via On-server Gradient Conflict Mitigation and Expression14 Mar 2026
- 2026Stake the Points: Structure-Faithful Instance Unlearning13 Mar 2026
- 2026Attention Smoothing Is All You Need For Unlearning1 Mar 2026
38 more
- 2026MeGU: Machine-Guided Unlearning with Target Feature Disentanglement19 Feb 2026
- 2026Structural Disentanglement in Bilinear MLPs via Architectural Inductive Bias5 Feb 2026
- 2026Forgetting Similar Samples: Can Machine Unlearning Do it Better?11 Jan 2026
- 2025Dual-Phase Federated Deep Unlearning via Weight-Aware Rollback and Reconstruction15 Dec 2025
- 2025ModHiFi: Identifying High Fidelity predictive components for Model Modification24 Nov 2025
- 2025MPRU: Modular Projection-Redistribution Unlearning as Output Filter for Classification Pipelines30 Oct 2025
- 2025Efficient Utility-Preserving Machine Unlearning with Implicit Gradient Surgery25 Oct 2025
- 2025Hierarchical Federated Unlearning for Large Language Models19 Oct 2025
- 2025Parameter-Efficient and Personalized Federated Training of Generative Models at the Edge11 Oct 2025
- 2025ToFU: Transforming How Federated Learning Systems Forget User Data19 Sep 2025
- 2025ReTrack: Data Unlearning in Diffusion Models through Redirecting the Denoising Trajectory16 Sep 2025
- 2025FedUP: Efficient Pruning-based Federated Unlearning for Model Poisoning Attacks19 Aug 2025
- 2025Invisible Watermarks, Visible Gains: Steering Machine Unlearning with Bi-Level Watermarking Design13 Aug 2025
- 2025EFU: Enforcing Federated Unlearning via Functional Encryption11 Aug 2025
- 2025Label Inference Attacks against Federated Unlearning9 Aug 2025
- 2025WSS-CL: Weight Saliency Soft-Guided Contrastive Learning for Efficient Machine Unlearning Image Classification6 Aug 2025
- 2025Zero-Shot Machine Unlearning with Proxy Adversarial Data Generation29 Jul 2025
- 2025DRAGD: A Federated Unlearning Data Reconstruction Attack Based on Gradient Differences13 Jul 2025
- 2025Orthogonal Soft Pruning for Efficient Class Unlearning24 Jun 2025
- 2025Not All Tokens Are Meant to Be Forgotten3 Jun 2025
- 2025Federated Unlearning Made Practical: Seamless Integration via Negated Pseudo-Gradients8 Apr 2025
- 2025ESC: Erasing Space Concept for Knowledge Deletion3 Apr 2025
- 2025Sky of Unlearning (SoUL): Rewiring Federated Machine Unlearning via Selective Pruning2 Apr 2025
- 2025Learning to Unlearn while Retaining: Combating Gradient Conflicts in Machine Unlearning8 Mar 2025
- 2025UIPE: Enhancing LLM Unlearning by Removing Knowledge Related to Forgetting Targets6 Mar 2025
- 2025Go Beyond Your Means: Unlearning with Per-Sample Gradient Orthogonalization4 Mar 2025
- 2025Unlearning through Knowledge Overwriting: Reversible Federated Unlearning via Selective Sparse Adapter28 Feb 2025
- 2025Model Inversion Attack against Federated Unlearning20 Feb 2025
- 2025Ten Challenging Problems in Federated Foundation Models14 Feb 2025
- 2025Data Duplication: A Novel Multi-Purpose Attack Paradigm in Machine Unlearning28 Jan 2025
- 2024Federated Unlearning Model Recovery in Data with Skewed Label Distributions18 Dec 2024
- 2024Streamlined Federated Unlearning: Unite as One to Be Highly Efficient28 Nov 2024
- 2024MUNBa: Machine Unlearning via Nash Bargaining23 Nov 2024
- 2024When Machine Unlearning Meets Retrieval-Augmented Generation (RAG): Keep Secret or Forget Knowledge?20 Oct 2024
- 2024Towards Privacy-Guaranteed Label Unlearning in Vertical Federated Learning: Few-Shot Forgetting without Disclosure14 Oct 2024
- 2024Evaluating of Machine Unlearning: Robustness Verification Without Prior Modifications14 Oct 2024
- 2024Forgetting Through Transforming: Enabling Federated Unlearning via Class-Aware Representation Transformation9 Oct 2024
- 2024Defending Membership Inference Attacks via Privacy-aware Sparsity Tuning9 Oct 2024
50 newest of 115 All 115 (JSON)
- 2022A Survey of Machine Unlearningcited by 312
- 2023Model Sparsity Can Simplify Machine Unlearningcited by 214
- 2022Can Bad Teaching Induce Forgetting? Unlearning in Deep Networks using an Incompetent Teachercited by 194
- 2023Boundary Unlearningcited by 134
- 2024SOUL: Unlocking the Power of Second-Order Optimization for LLM Unlearningcited by 104
- 2022Federated Unlearning: How to Efficiently Erase a Client in FL?cited by 95
- 2023Machine Unlearning: Solutions and Challengescited by 93
- 2024What makes unlearning hard and what to do about itcited by 89
- 2023A Survey on Federated Unlearning: Challenges, Methods, and Future Directionscited by 63
- 2024Scissorhands: Scrub Data Influence via Connection Sensitivity in Networkscited by 52
- 2023Exploring the Landscape of Machine Unlearning: A Comprehensive Survey and Taxonomycited by 51
- 2024Challenging Forgets: Unveiling the Worst-Case Forget Sets in Machine Unlearningcited by 44
12 most cited of 97 All 97 (JSON)
- 2026UnAct: Gradient-Free Unlearning via Targeted Activation Intervention3 Oct 2026
- 2026Lethe: How Hard Is It to Forget? A Benchmark for Federated Unlearning in Medical Imaging2 Aug 2026
- 2026FedUP: One-Shot Federated Unlearning via Centroid-Guided Plug-in Filters23 Jun 2026
- 2026pFedUL: Layer-Aware Federated Unlearning for Personalized Federated Learning15 Jun 2026
- 2026Rethinking Federated Unlearning via the Lens of Memorization23 May 2026
- 2026Classification-Head Bias in Class-Level Machine Unlearning: Diagnosis, Mitigation, and Evaluation9 May 2026
- 2026EASE: Federated Multimodal Unlearning via Entanglement-Aware Anchor Closure1 May 2026
- 2026Asynchronous Federated Unlearning with Invariance Calibration for Medical Imaging29 Apr 2026
- 2026Computation and Communication Efficient Federated Unlearning via On-server Gradient Conflict Mitigation and Expression14 Mar 2026
- 2026Stake the Points: Structure-Faithful Instance Unlearning13 Mar 2026
- 2026Attention Smoothing Is All You Need For Unlearning1 Mar 2026
- 2026MeGU: Machine-Guided Unlearning with Target Feature Disentanglement19 Feb 2026
12 newest of 97 All 97 (JSON)
- 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generationcited by 386
- 2023To Generate or Not? Safety-Driven Unlearned Diffusion Models Are Still Easy To Generate Unsafe Images ... For Nowcited by 210
- 2025ReTrack: Data Unlearning in Diffusion Models through Redirecting the Denoising Trajectorycited by 5
- 2025Parameter-Efficient and Personalized Federated Training of Generative Models at the Edgecited by 0
- 2025Parameter-Efficient and Personalized Federated Training of Generative Models at the Edge11 Oct 2025
- 2025ReTrack: Data Unlearning in Diffusion Models through Redirecting the Denoising Trajectory16 Sep 2025
- 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generation19 Oct 2023
- 2023To Generate or Not? Safety-Driven Unlearned Diffusion Models Are Still Easy To Generate Unsafe Images ... For Now18 Oct 2023
- 2024Rethinking Machine Unlearning for Large Language Modelscited by 257
- 2024Rethinking Machine Unlearning for Large Language Models13 Feb 2024
- 2023GNNDelete: A General Strategy for Unlearning in Graph Neural Networkscited by 43
- 2023Backdoor Attacks and Defenses in Federated Learning: Survey, Challenges and Future Research Directionscited by 33
- 2023Get Rid Of Your Trail: Remotely Erasing Backdoors in Federated Learningcited by 13
- 2025ESC: Erasing Space Concept for Knowledge Deletioncited by 9
- 2022To Store or Not? Online Data Selection for Federated Learning with Limited Storagecited by 7
- 2023On Knowledge Editing in Federated Learning: Perspectives, Challenges, and Future Directionscited by 4
- 2024Mitigating Backdoor Attacks using Activation-Guided Model Editingcited by 1
- 2025Invisible Watermarks, Visible Gains: Steering Machine Unlearning with Bi-Level Watermarking Designcited by 1
- 2024A Novel Defense Against Poisoning Attacks on Federated Learning: LayerCAM Augmented with Autoencodercited by 0
- 2024Federated Unlearning Model Recovery in Data with Skewed Label Distributionscited by 0
- 2025WSS-CL: Weight Saliency Soft-Guided Contrastive Learning for Efficient Machine Unlearning Image Classificationcited by 0
- 2026REDI: Corpus Aware Patch Ranking for DINOv3 Token Reductioncited by 0
- 2026REDI: Corpus Aware Patch Ranking for DINOv3 Token Reduction30 Jun 2026
- 2025Invisible Watermarks, Visible Gains: Steering Machine Unlearning with Bi-Level Watermarking Design13 Aug 2025
- 2025WSS-CL: Weight Saliency Soft-Guided Contrastive Learning for Efficient Machine Unlearning Image Classification6 Aug 2025
- 2025ESC: Erasing Space Concept for Knowledge Deletion3 Apr 2025
- 2024Federated Unlearning Model Recovery in Data with Skewed Label Distributions18 Dec 2024
- 2024Mitigating Backdoor Attacks using Activation-Guided Model Editing10 Jul 2024
- 2024A Novel Defense Against Poisoning Attacks on Federated Learning: LayerCAM Augmented with Autoencoder2 Jun 2024
- 2023On Knowledge Editing in Federated Learning: Perspectives, Challenges, and Future Directions2 Jun 2023
- 2023Get Rid Of Your Trail: Remotely Erasing Backdoors in Federated Learning20 Apr 2023
- 2023Backdoor Attacks and Defenses in Federated Learning: Survey, Challenges and Future Research Directions3 Mar 2023
- 2023GNNDelete: A General Strategy for Unlearning in Graph Neural Networks26 Feb 2023
- 2022To Store or Not? Online Data Selection for Federated Learning with Limited Storage1 Sep 2022
Similar, not cited
Close in wording, no citation either way
- 2026Forgetting to Witness: Efficient Federated Unlearning and Its Visible Evaluation
- 2023Deep Unlearning: Fast and Efficient Gradient-free Approach to Class Forgetting
- 2025REMISVFU: Vertical Federated Unlearning via Representation Misdirection for Intermediate Output Feature
- 2023Multi-Class Unlearning for Image Classification via Weight Filtering
- 2026Jellyfish: Zero-Shot Federated Unlearning Scheme with Knowledge Disentanglement
- 2026f-FUM: Federated Unlearning via min--max and f-divergence
- 2025Certifying the Right to Be Forgotten: Primal-Dual Optimization for Sample and Label Unlearning in Vertical Federated Learning
- 2024Goldfish: An Efficient Federated Unlearning Framework