Federated Unlearning with Knowledge Distillation
On the map: LLM safety and security → Federated unlearning and poisoning
Abstract (arXiv)
Federated Learning (FL) is designed to protect the data privacy of each client during the training process by transmitting only models instead of the original data. However, the trained model may memorize certain information about the training data. With the recent legislation on right to be forgotten, it is crucially essential for the FL model to possess the ability to forget what it has learned from each client. We propose a novel federated unlearning method to eliminate a client's contribution by subtracting the accumulated historical updates from the model and leveraging the knowledge distillation method to restore the model's performance without using any data from the clients. This method does not have any restrictions on the type of neural networks and does not rely on clients' participation, so it is practical and efficient in the FL system. We further introduce backdoor attacks in the training process to help evaluate the unlearning effect. Experiments on three canonical datasets demonstrate the effectiveness and efficiency of our method.
Key facts. Cited by 70 papers in the map (data through 7 Oct 2026). Placed in Federated unlearning and poisoning, one of 12 directions in LLM safety and security. Builds on 13 of its 29 references that are in the map. First posted on arXiv 24 Jan 2022.
Builds on
13 of 29 references.
References · 13
- 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,267
- 2015Distilling the Knowledge in a Neural Networkcited by 10,076
- 2016Communication-Efficient Learning of Deep Networks from Decentralized Datacited by 7,592
- 2017BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chaincited by 1,052
- 2019Machine Unlearningcited by 1,020
- 2018How To Backdoor Federated Learningcited by 745
- 2015Distillation as a Defense to Adversarial Perturbations against Deep Neural Networkscited by 675
- 2018ML-Leaks: Model and Data Independent Membership Inference Attacks and Defenses on Machine Learning Modelscited by 475
- 2019Making AI Forget You: Data Deletion in Machine Learningcited by 447
- 2018Analyzing Federated Learning through an Adversarial Lenscited by 346
- 2020Approximate Data Deletion from Machine Learning Modelscited by 250
- 2019The Secret Revealer: Generative Model-Inversion Attacks Against Deep Neural Networkscited by 241
1 more
- 2017Detecting Cancer Metastases on Gigapixel Pathology Imagescited by 51
Built on by
Citing papers per year: 2022: 6; 2023: 12; 2024: 30; 2025: 11; 2026: 11.
70 papers.
Sort:
By area:
- 2022A Survey of Machine Unlearningcited by 298
- 2023Towards Unbounded Machine Unlearningcited by 261
- 2022Can Bad Teaching Induce Forgetting? Unlearning in Deep Networks using an Incompetent Teachercited by 189
- 2022Federated Unlearning: How to Efficiently Erase a Client in FL?cited by 90
- 2024Scissorhands: Scrub Data Influence via Connection Sensitivity in Networkscited by 50
- 2023Exploring the Landscape of Machine Unlearning: A Comprehensive Survey and Taxonomycited by 44
- 2024Threats, Attacks, and Defenses in Machine Unlearning: A Surveycited by 34
- 2023Backdoor Attacks and Defenses in Federated Learning: Survey, Challenges and Future Research Directionscited by 33
- 2024Machine Unlearning: A Comprehensive Surveycited by 33
- 2022Deep Regression Unlearningcited by 32
- 2022Knowledge Distillation for Federated Learning: a Practical Guidecited by 31
- 2024A Review on Machine Unlearningcited by 30
38 more
- 2024Federated Unlearning: A Survey on Methods, Design Guidelines, and Evaluation Metricscited by 25
- 2022Machine Unlearning of Federated Clusterscited by 21
- 2025Learning to Unlearn while Retaining: Combating Gradient Conflicts in Machine Unlearningcited by 19
- 2023Machine Unlearning: A Surveycited by 18
- 2023Data and Model Poisoning Backdoor Attacks on Wireless Federated Learning, and the Defense Mechanisms: A Comprehensive Surveycited by 17
- 2024MUNBa: Machine Unlearning via Nash Bargainingcited by 17
- 2025NoT: Federated Unlearning via Weight Negationcited by 15
- 2024Unlearning during Learning: An Efficient Federated Machine Unlearning Methodcited by 14
- 2024UnStar: Unlearning with Self-Taught Anti-Sample Reasoning for LLMscited by 14
- 2023Subspace based Federated Unlearningcited by 13
- 2023Distill to Delete: Unlearning in Graph Networks with Knowledge Distillationcited by 13
- 2023Get Rid Of Your Trail: Remotely Erasing Backdoors in Federated Learningcited by 12
- 2024Ferrari: Federated Feature Unlearning via Optimizing Feature Sensitivitycited by 11
- 2024Enable the Right to be Forgotten with Federated Client Unlearning in Medical Imagingcited by 9
- 2024Fast-FedUL: A Training-Free Federated Unlearning with Provable Skew Resiliencecited by 8
- 2024Federated Unlearning: a Perspective of Stability and Fairnesscited by 7
- 2024Multi-Modal Recommendation Unlearning for Legal, Licensing, and Modality Constraintscited by 5
- 2024Towards Privacy-Guaranteed Label Unlearning in Vertical Federated Learning: Few-Shot Forgetting without Disclosurecited by 5
- 2026EASE: Federated Multimodal Unlearning via Entanglement-Aware Anchor Closurecited by 5
- 2023Defending Our Privacy With Backdoorscited by 4
- 2024How to Forget Clients in Federated Online Learning to Rank?cited by 4
- 2024Vertical Federated Unlearning via Backdoor Certificationcited by 4
- 2025Deep Contrastive Unlearning for Language Modelscited by 4
- 2023On Knowledge Editing in Federated Learning: Perspectives, Challenges, and Future Directionscited by 3
- 2023Heterogeneous Decentralized Machine Unlearning with Seed Model Distillationcited by 3
- 2024BlockFUL: Enabling Unlearning in Blockchained Federated Learningcited by 3
- 2024Goldfish: An Efficient Federated Unlearning Frameworkcited by 3
- 2024FedUHB: Accelerating Federated Unlearning via Polyak Heavy Ball Methodcited by 3
- 2024Machine unlearning through fine-grained model parameters perturbationcited by 2
- 2024FedQUIT: On-Device Federated Unlearning via a Quasi-Competent Virtual Teachercited by 2
- 2024ConDa: Fast Federated Unlearning with Contribution Dampeningcited by 2
- 2024FedBlock: A Blockchain Approach to Federated Learning against Backdoor Attackscited by 2
- 2025Exploring Incremental Unlearning: Techniques, Challenges, and Future Directionscited by 2
- 2025Quantum-Inspired Audio Unlearning: Towards Privacy-Preserving Voice Biometricscited by 2
- 2023Machine Unlearning Methodology base on Stochastic Teacher Networkcited by 1
- 2024Federated Unlearning for Human Activity Recognitioncited by 1
- 2024Efficient Federated Unlearning under Plausible Deniabilitycited by 1
- 2025Federated Unlearning Made Practical: Seamless Integration via Negated Pseudo-Gradientscited by 1
50 most cited of 70 All 70 (JSON)
- 2026Dynamic Entanglement-Weighted Pruning for Quantum Federated Unlearning in Supply-Chain Risk Prediction17 Aug 2026
- 2026FedUP: One-Shot Federated Unlearning via Centroid-Guided Plug-in Filters23 Jun 2026
- 2026Priority-Aware Learning-Unlearning Correction for Dynamic Decentralized LoRA Fine-Tuning22 Jun 2026
- 2026Image Feature Fusion-based Federated Client Unlearning (FCU)26 May 2026
- 2026Causal Unlearning in Collaborative Optimization: Exact and Approximate Influence Reversal under Adversarial Contributions19 May 2026
- 2026EASE: Federated Multimodal Unlearning via Entanglement-Aware Anchor Closure1 May 2026
- 2026Asynchronous Federated Unlearning with Invariance Calibration for Medical Imaging29 Apr 2026
- 2026Forgetting to Witness: Efficient Federated Unlearning and Its Visible Evaluation6 Apr 2026
- 2026Jellyfish: Zero-Shot Federated Unlearning Scheme with Knowledge Disentanglement5 Apr 2026
- 2026Forgetting is Competition: Rethinking Unlearning as Representation Interference in Diffusion Models1 Mar 2026
- 2026f-FUM: Federated Unlearning via min--max and f-divergence5 Feb 2026
- 2025Dual-Phase Federated Deep Unlearning via Weight-Aware Rollback and Reconstruction15 Dec 2025
38 more
- 2025ToFU: Transforming How Federated Learning Systems Forget User Data19 Sep 2025
- 2025Tackling Federated Unlearning as a Parameter Estimation Problem26 Aug 2025
- 2025FedUP: Efficient Pruning-based Federated Unlearning for Model Poisoning Attacks19 Aug 2025
- 2025Quantum-Inspired Audio Unlearning: Towards Privacy-Preserving Voice Biometrics29 Jul 2025
- 2025DRAGD: A Federated Unlearning Data Reconstruction Attack Based on Gradient Differences13 Jul 2025
- 2025Federated Unlearning Made Practical: Seamless Integration via Negated Pseudo-Gradients8 Apr 2025
- 2025Deep Contrastive Unlearning for Language Models19 Mar 2025
- 2025Learning to Unlearn while Retaining: Combating Gradient Conflicts in Machine Unlearning8 Mar 2025
- 2025NoT: Federated Unlearning via Weight Negation7 Mar 2025
- 2025Exploring Incremental Unlearning: Techniques, Challenges, and Future Directions23 Feb 2025
- 2024Vertical Federated Unlearning via Backdoor Certification16 Dec 2024
- 2024Client-Side Patching against Backdoor Attacks in Federated Learning13 Dec 2024
- 2024Upcycling Noise for Federated Unlearning7 Dec 2024
- 2024MUNBa: Machine Unlearning via Nash Bargaining23 Nov 2024
- 2024A Review on Machine Unlearning18 Nov 2024
- 2024FedUHB: Accelerating Federated Unlearning via Polyak Heavy Ball Method17 Nov 2024
- 2024Act in Collusion: Distributed Multi-Target Backdoor Attacks in Federated Learning6 Nov 2024
- 2024Game-Theoretic Machine Unlearning: Mitigating Extra Privacy Leakage6 Nov 2024
- 2024FedBlock: A Blockchain Approach to Federated Learning against Backdoor Attacks5 Nov 2024
- 2024UnStar: Unlearning with Self-Taught Anti-Sample Reasoning for LLMs22 Oct 2024
- 2024Towards Privacy-Guaranteed Label Unlearning in Vertical Federated Learning: Few-Shot Forgetting without Disclosure14 Oct 2024
- 2024Efficient Federated Unlearning under Plausible Deniability13 Oct 2024
- 2024ConDa: Fast Federated Unlearning with Contribution Dampening5 Oct 2024
- 2024FedQUIT: On-Device Federated Unlearning via a Quasi-Competent Virtual Teacher14 Aug 2024
- 2024Enable the Right to be Forgotten with Federated Client Unlearning in Medical Imaging2 Jul 2024
- 2024Fast-FedUL: A Training-Free Federated Unlearning with Provable Skew Resilience28 May 2024
- 2024Unlearning during Learning: An Efficient Federated Machine Unlearning Method24 May 2024
- 2024Multi-Modal Recommendation Unlearning for Legal, Licensing, and Modality Constraints24 May 2024
- 2024Ferrari: Federated Feature Unlearning via Optimizing Feature Sensitivity23 May 2024
- 2024Machine Unlearning: A Comprehensive Survey13 May 2024
- 2024Goldfish: An Efficient Federated Unlearning Framework4 Apr 2024
- 2024Threats, Attacks, and Defenses in Machine Unlearning: A Survey20 Mar 2024
- 2024Efficient Knowledge Deletion from Trained Models through Layer-wise Partial Machine Unlearning12 Mar 2024
- 2024BlockFUL: Enabling Unlearning in Blockchained Federated Learning26 Feb 2024
- 2024Federated Unlearning: a Perspective of Stability and Fairness2 Feb 2024
- 2024How to Forget Clients in Federated Online Learning to Rank?24 Jan 2024
- 2024Federated Unlearning for Human Activity Recognition17 Jan 2024
- 2024Scissorhands: Scrub Data Influence via Connection Sensitivity in Networks11 Jan 2024
50 newest of 70 All 70 (JSON)
- 2022A Survey of Machine Unlearningcited by 298
- 2023Towards Unbounded Machine Unlearningcited by 261
- 2022Can Bad Teaching Induce Forgetting? Unlearning in Deep Networks using an Incompetent Teachercited by 189
- 2022Federated Unlearning: How to Efficiently Erase a Client in FL?cited by 90
- 2024Scissorhands: Scrub Data Influence via Connection Sensitivity in Networkscited by 50
- 2023Exploring the Landscape of Machine Unlearning: A Comprehensive Survey and Taxonomycited by 44
- 2024Threats, Attacks, and Defenses in Machine Unlearning: A Surveycited by 34
- 2024Machine Unlearning: A Comprehensive Surveycited by 33
- 2022Deep Regression Unlearningcited by 32
- 2024A Review on Machine Unlearningcited by 30
- 2024Federated Unlearning: A Survey on Methods, Design Guidelines, and Evaluation Metricscited by 25
- 2022Machine Unlearning of Federated Clusterscited by 21
12 most cited of 56 All 56 (JSON)
- 2026FedUP: One-Shot Federated Unlearning via Centroid-Guided Plug-in Filters23 Jun 2026
- 2026Priority-Aware Learning-Unlearning Correction for Dynamic Decentralized LoRA Fine-Tuning22 Jun 2026
- 2026Image Feature Fusion-based Federated Client Unlearning (FCU)26 May 2026
- 2026Causal Unlearning in Collaborative Optimization: Exact and Approximate Influence Reversal under Adversarial Contributions19 May 2026
- 2026EASE: Federated Multimodal Unlearning via Entanglement-Aware Anchor Closure1 May 2026
- 2026Asynchronous Federated Unlearning with Invariance Calibration for Medical Imaging29 Apr 2026
- 2026Forgetting to Witness: Efficient Federated Unlearning and Its Visible Evaluation6 Apr 2026
- 2026Jellyfish: Zero-Shot Federated Unlearning Scheme with Knowledge Disentanglement5 Apr 2026
- 2026f-FUM: Federated Unlearning via min--max and f-divergence5 Feb 2026
- 2025Dual-Phase Federated Deep Unlearning via Weight-Aware Rollback and Reconstruction15 Dec 2025
- 2025ToFU: Transforming How Federated Learning Systems Forget User Data19 Sep 2025
- 2025Tackling Federated Unlearning as a Parameter Estimation Problem26 Aug 2025
12 newest of 56 All 56 (JSON)
- 2023Backdoor Attacks and Defenses in Federated Learning: Survey, Challenges and Future Research Directionscited by 33
- 2022Knowledge Distillation for Federated Learning: a Practical Guidecited by 31
- 2023Data and Model Poisoning Backdoor Attacks on Wireless Federated Learning, and the Defense Mechanisms: A Comprehensive Surveycited by 17
- 2023Get Rid Of Your Trail: Remotely Erasing Backdoors in Federated Learningcited by 12
- 2024Multi-Modal Recommendation Unlearning for Legal, Licensing, and Modality Constraintscited by 5
- 2023Defending Our Privacy With Backdoorscited by 4
- 2024Vertical Federated Unlearning via Backdoor Certificationcited by 4
- 2023On Knowledge Editing in Federated Learning: Perspectives, Challenges, and Future Directionscited by 3
- 2024FedBlock: A Blockchain Approach to Federated Learning against Backdoor Attackscited by 2
- 2024Act in Collusion: Distributed Multi-Target Backdoor Attacks in Federated Learningcited by 0
- 2024Client-Side Patching against Backdoor Attacks in Federated Learningcited by 0
- 2026Dynamic Entanglement-Weighted Pruning for Quantum Federated Unlearning in Supply-Chain Risk Predictioncited by 0
- 2026Dynamic Entanglement-Weighted Pruning for Quantum Federated Unlearning in Supply-Chain Risk Prediction17 Aug 2026
- 2024Vertical Federated Unlearning via Backdoor Certification16 Dec 2024
- 2024Client-Side Patching against Backdoor Attacks in Federated Learning13 Dec 2024
- 2024Act in Collusion: Distributed Multi-Target Backdoor Attacks in Federated Learning6 Nov 2024
- 2024FedBlock: A Blockchain Approach to Federated Learning against Backdoor Attacks5 Nov 2024
- 2024Multi-Modal Recommendation Unlearning for Legal, Licensing, and Modality Constraints24 May 2024
- 2023Data and Model Poisoning Backdoor Attacks on Wireless Federated Learning, and the Defense Mechanisms: A Comprehensive Survey14 Dec 2023
- 2023Defending Our Privacy With Backdoors12 Oct 2023
- 2023On Knowledge Editing in Federated Learning: Perspectives, Challenges, and Future Directions2 Jun 2023
- 2023Get Rid Of Your Trail: Remotely Erasing Backdoors in Federated Learning20 Apr 2023
- 2023Backdoor Attacks and Defenses in Federated Learning: Survey, Challenges and Future Research Directions3 Mar 2023
- 2022Knowledge Distillation for Federated Learning: a Practical Guide9 Nov 2022