Linear Adversarial Concept Erasure
Not on the map. Why?
Abstract (arXiv)
Modern neural models trained on textual data rely on pre-trained representations that emerge without direct supervision. As these representations are increasingly being used in real-world applications, the inability to control their content becomes an increasingly important problem. We formulate the problem of identifying and erasing a linear subspace that corresponds to a given concept, in order to prevent linear predictors from recovering the concept. We model this problem as a constrained, linear maximin game, and show that existing solutions are generally not optimal for this task. We derive a closed-form solution for certain objectives, and propose a convex relaxation, method, that works well for others. When evaluated in the context of binary gender removal, the method recovers a low-dimensional subspace whose removal mitigates bias by intrinsic and extrinsic evaluation. We show that the method is highly expressive, effectively mitigating bias in deep nonlinear classifiers while maintaining tractability and interpretability.
Key facts. Cited by 98 papers in the map (data through 7 Oct 2026). Builds on 35 of its 74 references that are in the map. First posted on arXiv 28 Jan 2022.
Builds on
35 of 74 references.
References · 35
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,204
- 2018A Style-Based Generator Architecture for Generative Adversarial Networkscited by 5,986
- 2021Convex optimizationcited by 2,479
- 2018Deep contextualized word representationscited by 2,285
- 2019HuggingFace's Transformers: State-of-the-art Natural Language Processingcited by 2,201
- 2016Equality of Opportunity in Supervised Learningcited by 2,000
- 2014Unsupervised Domain Adaptation by Backpropagationcited by 1,906
- 2017Interpretability Beyond Feature Attribution: Quantitative Testing with Concept Activation Vectors (TCAV)cited by 1,309
- 2016Man is to Computer Programmer as Woman is to Homemaker? Debiasing Word Embeddingscited by 1,304
- 2016Semantics derived automatically from language corpora contain human-like biasescited by 894
- 2018Mitigating Unwanted Biases with Adversarial Learningcited by 663
- 2020Null It Out: Guarding Protected Attributes by Iterative Nullspace Projectioncited by 442
23 more
- 2019Bias in Bios: A Case Study of Semantic Representation Bias in a High-Stakes Settingcited by 346
- 2021Efficient and Modular Implicit Differentiationcited by 199
- 2015Censoring Representations with an Adversarycited by 191
- 2014SimLex-999: Evaluating Semantic Models with (Genuine) Similarity Estimationcited by 170
- 2018Adversarial Removal of Demographic Attributes from Text Datacited by 166
- 2019Solving a Class of Non-Convex Min-Max Games Using Iterative First Order Methodscited by 148
- 2020Intrinsic Bias Metrics Do Not Correlate with Application Biascited by 148
- 2017Controllable Invariance through Adversarial Feature Learningcited by 127
- 2021Debiasing Pre-trained Contextualised Embeddingscited by 107
- 2020The Complexity of Constrained Min-Max Optimizationcited by 81
- 2021Accelerated Algorithms for Smooth Convex-Concave Minimax Problems with O(1/k2) Rate on Squared Gradient Normcited by 71
- 2019Attenuating Bias in Word Vectorscited by 64
- 2021Counterfactual Interventions Reveal the Causal Effect of Relative Clause Representations on Agreement Predictioncited by 58
- 2016Adversarial Deep Averaging Networks for Cross-Lingual Sentiment Classificationcited by 48
- 2015From Facial Parts Responses to Face Detection: A Deep Learning Approachcited by 42
- 2020OSCaR: Orthogonal Subspace Correction and Rectification of Biases in Word Embeddingscited by 40
- 2021The Low-Dimensional Linear Geometry of Contextualized Word Representationscited by 39
- 2020Improved Algorithms for Convex-Concave Minimax Optimizationcited by 34
- 2020It's not Greek to mBERT: Inducing Word-Level Translations from Multilingual BERTcited by 30
- 2020Exploring the Linear Subspace Hypothesis in Gender Bias Mitigationcited by 25
- 2019On the Global Optima of Kernelized Adversarial Representation Learningcited by 14
- 2021Obstructing Classification via Projectioncited by 5
- 2021Effects of Pre- and Post-Processing on type-based Embeddings in Lexical Semantic Change Detectioncited by 4
Built on by
Citing papers per year: 2022: 15; 2023: 20; 2024: 13; 2025: 19; 2026: 31.
98 papers.
Sort:
By area:
- 2023Sparse Autoencoders Find Highly Interpretable Features in Language Modelscited by 1,359
- 2024Sparse Feature Circuits: Discovering and Editing Interpretable Causal Graphs in Language Modelscited by 412
- 2023LEACE: Perfect linear concept erasure in closed formcited by 254
- 2023Finding Alignments Between Interpretable Causal Variables and Distributed Neural Representationscited by 197
- 2024ReFT: Representation Finetuning for Language Modelscited by 186
- 2022Toward Transparent AI: A Survey on Interpreting the Inner Structures of Deep Neural Networkscited by 126
- 2023A Survey on Fairness in Large Language Modelscited by 91
- 2024A Primer on the Inner Workings of Transformer-based Language Modelscited by 83
- 2022Probing for the Usage of Grammatical Numbercited by 57
- 2022Self-Destructing Models: Increasing the Costs of Harmful Dual Uses of Foundation Modelscited by 56
- 2022Probing Classifiers are Unreliable for Concept Removal and Detectioncited by 40
- 2022Gender Artifacts in Visual Datasetscited by 38
38 more
- 2024Machine Unlearning Fails to Remove Data Poisoning Attackscited by 35
- 2025Steering Out-of-Distribution Generalization with Concept Ablation Fine-Tuningcited by 34
- 2022Gold Doesn't Always Glitter: Spectral Removal of Linear and Nonlinear Guarded Attribute Informationcited by 33
- 2024Immunization against harmful fine-tuning attackscited by 33
- 2022MABEL: Attenuating Gender Bias using Textual Entailment Datacited by 31
- 2023Parameter-efficient Modularised Bias Mitigation via AdapterFusioncited by 25
- 2023Shielded Representations: Protecting Sensitive Attributes Through Iterative Gradient-Based Projectioncited by 25
- 2023Debiasing Algorithm through Model Adaptationcited by 24
- 2023Efficient fair PCA for fair representation learningcited by 23
- 2023A Geometric Notion of Causal Probingcited by 23
- 2022BLIND: Bias Removal With No Demographicscited by 22
- 2024Controllable Context Sensitivity and the Knob Behind Itcited by 22
- 2023Prompt Tuning Pushes Farther, Contrastive Learning Pulls Closer: A Two-Stage Approach to Mitigate Social Biasescited by 21
- 2024Decomposing and Editing Predictions by Modeling Model Computationcited by 19
- 2024Attribute-to-Delete: Machine Unlearning via Datamodel Matchingcited by 18
- 2022Better Hit the Nail on the Head than Beat around the Bush: Removing Protected Attributes with a Single Projectioncited by 17
- 2025Improved Representation Steering for Language Modelscited by 17
- 2025Analyzing Finetuning Representation Shift for Multimodal LLMs Steeringcited by 15
- 2022Visual Comparison of Language Model Adaptationcited by 14
- 2023A Review of the Role of Causality in Developing Trustworthy AI Systemscited by 14
- 2024Towards a theory of model distillationcited by 14
- 2023Uncovering Intermediate Variables in Transformers using Circuit Probingcited by 12
- 2025Ascent Fails to Forgetcited by 12
- 2025Emergence of Linear Truth Encodings in Language Modelscited by 12
- 2022Analyzing Gender Representation in Multilingual Modelscited by 10
- 2023Robust Concept Erasure via Kernelized Rate-Distortion Maximizationcited by 10
- 2022Fair NLP Models with Differentially Private Text Encoderscited by 9
- 2025The Blessing and Curse of Dimensionality in Safety Alignmentcited by 9
- 2026The Information Geometry of Softmax: Probing and Steeringcited by 9
- 2025NS-Net: Decoupling CLIP Semantic Information through NULL-Space for Generalizable AI-Generated Image Detectioncited by 7
- 2023Erasure of Unaligned Attributes from Neural Representationscited by 6
- 2024Concept-ROT: Poisoning Concepts in Large Language Models with Model Editingcited by 6
- 2023Controlling Learned Effects to Reduce Spurious Correlations in Text Classifierscited by 5
- 2023Removing Spurious Concepts from Neural Network Representations via Joint Subspace Estimationcited by 5
- 2023Fair Streaming Principal Component Analysis: Statistical and Algorithmic Viewpointcited by 5
- 2025Fundamental Limits of Perfect Concept Erasurecited by 5
- 2023Competence-Based Analysis of Language Modelscited by 4
- 2024On the Encoding of Gender in Transformer-based ASR Representationscited by 4
50 most cited of 98 All 98 (JSON)
- 2026LLM Persona Unlearning30 Sep 2026
- 2026Unmerge: Efficient Machine Unlearning via Task Arithmetic30 Sep 2026
- 2026Invariant Atoms: Sparse Coordinates of Local Semantic Geometry in Language Model Representations29 Sep 2026
- 2026Hidden not Deleted: How Networks Suppress Entangled Features23 Sep 2026
- 2026Monitoring and Discovering Reward Hacking with Internal Representations during LLM Evaluations16 Sep 2026
- 2026Semantic Fibers and Cross-Gram Interference: A Calculus of Safety Drift in Overcomplete Representations14 Sep 2026
- 2026MUtE: A Dual Framework for Concept Erasure and Counterfactual Interventions10 Sep 2026
- 2026Iterative Erasure Count Is Not an Affine-Invariant Concept Dimension11 Aug 2026
- 2026When and Why Do Linear Bias Probes Fail? A Geometric and Statistical Theory of Bias Detectability in Large Language Model Representations21 Jul 2026
- 2026Exposure is not manifestation: measurement target and output resolution jointly determine which behavioural-faithfulness evaluator wins10 Jul 2026
- 2026MANCE: Manifold Aware Concept Erasure4 Jul 2026
- 2026MPSelectTune: Prompt-type Selection for Fine-tuning improves Concept Unlearning in LLMs4 Jul 2026
38 more
- 2026Learning Instance-Adaptive Low-Rank Orthogonal Subspaces for Clothes-Changing Person Re-Identification10 Jun 2026
- 2026In Defense of Information Leakage in Concept-based Models9 Jun 2026
- 2026Now You (Still) See Me: Detecting Evasive Steganographic Payloads in LLMs8 Jun 2026
- 2026Unsupervised Identification and Removal of Spurious Correlations During Fine-Tuning26 May 2026
- 2026Abduction-Deduction Entanglement: Domain Generalization via Representation Transplants24 May 2026
- 2026Where Pretraining writes and Alignment reads: the asymmetry of Transformer weight space15 May 2026
- 2026What Do EEG Foundation Models Capture from Human Brain Signals?12 May 2026
- 2026Inference Time Causal Probing in LLMs8 May 2026
- 2026Concept-Based Abductive and Contrastive Explanations for Behaviors of Vision Models7 May 2026
- 2026Probe-Geometry Alignment: Erasing the Cross-Sequence Memorization Signature Below Chance3 May 2026
- 2026Dissociating Decodability and Causal Use in Bracket-Sequence Transformers24 Apr 2026
- 2026From Measurement to Mitigation: Quantifying and Reducing Identity Leakage in Image Representation Encoders with Linear Subspace Removal7 Apr 2026
- 2026Lightweight Fairness for LLM-Based Recommendations via Kernelized Projection and Gated Adapters24 Mar 2026
- 2026Obliviator Reveals the Cost of Nonlinear Guardedness in Concept Erasure8 Mar 2026
- 2026Understanding Empirical Unlearning with Combinatorial Interpretability22 Feb 2026
- 2026The Information Geometry of Softmax: Probing and Steering17 Feb 2026
- 2026The Confidence Manifold: Geometric Structure of Correctness Representations in Language Models8 Feb 2026
- 2026No More, No Less: Least-Privilege Language Models30 Jan 2026
- 2026The Unseen Threat: Residual Knowledge in Machine Unlearning under Perturbed Samples29 Jan 2026
- 2025Understanding Fairness and Prediction Error through Subspace Decomposition and Influence Analysis27 Oct 2025
- 2025Compositional Bias Control in Large Language Models: Preference Learning Fails, Supervision Succeeds24 Oct 2025
- 2025Emergence of Linear Truth Encodings in Language Models17 Oct 2025
- 2025Ascent Fails to Forget30 Sep 2025
- 2025NS-Net: Decoupling CLIP Semantic Information through NULL-Space for Generalizable AI-Generated Image Detection2 Aug 2025
- 2025The Blessing and Curse of Dimensionality in Safety Alignment27 Jul 2025
- 2025Steering Out-of-Distribution Generalization with Concept Ablation Fine-Tuning22 Jul 2025
- 2025Nonlinear Concept Erasure: a Density Matching Approach16 Jul 2025
- 2025Energy-Guided Decoding for Object Hallucination Mitigation10 Jul 2025
- 2025Preserving Task-Relevant Information Under Linear Concept Removal12 Jun 2025
- 2025Learning Distribution-Wise Control in Representation Space for Language Models7 Jun 2025
- 2025Improved Representation Steering for Language Models27 May 2025
- 2025Concept Concentration for Faithful Representation Intervention24 May 2025
- 2025Deep Fair Learning: Task-Aware Fair Representations via Joint Distance-Covariance Regularization8 Apr 2025
- 2025Language Models Are Implicitly Continuous4 Apr 2025
- 2025Fundamental Limits of Perfect Concept Erasure25 Mar 2025
- 2025Dual Debiasing: Remove Stereotypes and Keep Factual Gender for Fair Language Modeling and Translation17 Jan 2025
- 2025Analyzing Finetuning Representation Shift for Multimodal LLMs Steering6 Jan 2025
- 2025Representation in large language models1 Jan 2025
50 newest of 98 All 98 (JSON)
- 2024Machine Unlearning Fails to Remove Data Poisoning Attackscited by 35
- 2024Attribute-to-Delete: Machine Unlearning via Datamodel Matchingcited by 18
- 2025Ascent Fails to Forgetcited by 12
- 2026The Unseen Threat: Residual Knowledge in Machine Unlearning under Perturbed Samplescited by 4
- 2025Concept Concentration for Faithful Representation Interventioncited by 0
- 2026Understanding Empirical Unlearning with Combinatorial Interpretabilitycited by 0
- 2026Probe-Geometry Alignment: Erasing the Cross-Sequence Memorization Signature Below Chancecited by 0
- 2026MPSelectTune: Prompt-type Selection for Fine-tuning improves Concept Unlearning in LLMscited by 0
- 2026Semantic Fibers and Cross-Gram Interference: A Calculus of Safety Drift in Overcomplete Representationscited by 0
- 2026Unmerge: Efficient Machine Unlearning via Task Arithmeticcited by 0
- 2026LLM Persona Unlearningcited by 0
- 2026LLM Persona Unlearning30 Sep 2026
- 2026Unmerge: Efficient Machine Unlearning via Task Arithmetic30 Sep 2026
- 2026Semantic Fibers and Cross-Gram Interference: A Calculus of Safety Drift in Overcomplete Representations14 Sep 2026
- 2026MPSelectTune: Prompt-type Selection for Fine-tuning improves Concept Unlearning in LLMs4 Jul 2026
- 2026Probe-Geometry Alignment: Erasing the Cross-Sequence Memorization Signature Below Chance3 May 2026
- 2026Understanding Empirical Unlearning with Combinatorial Interpretability22 Feb 2026
- 2026The Unseen Threat: Residual Knowledge in Machine Unlearning under Perturbed Samples29 Jan 2026
- 2025Ascent Fails to Forget30 Sep 2025
- 2025Concept Concentration for Faithful Representation Intervention24 May 2025
- 2024Attribute-to-Delete: Machine Unlearning via Datamodel Matching30 Oct 2024
- 2024Machine Unlearning Fails to Remove Data Poisoning Attacks25 Jun 2024
- 2025The Blessing and Curse of Dimensionality in Safety Alignmentcited by 9
- 2026Where Pretraining writes and Alignment reads: the asymmetry of Transformer weight spacecited by 1
- 2026Monitoring and Discovering Reward Hacking with Internal Representations during LLM Evaluationscited by 1
- 2025Compositional Bias Control in Large Language Models: Preference Learning Fails, Supervision Succeedscited by 0
- 2026Monitoring and Discovering Reward Hacking with Internal Representations during LLM Evaluations16 Sep 2026
- 2026Where Pretraining writes and Alignment reads: the asymmetry of Transformer weight space15 May 2026
- 2025Compositional Bias Control in Large Language Models: Preference Learning Fails, Supervision Succeeds24 Oct 2025
- 2025The Blessing and Curse of Dimensionality in Safety Alignment27 Jul 2025
- 2023Sparse Autoencoders Find Highly Interpretable Features in Language Modelscited by 1,359
- 2024Sparse Feature Circuits: Discovering and Editing Interpretable Causal Graphs in Language Modelscited by 412
- 2023LEACE: Perfect linear concept erasure in closed formcited by 254
- 2023Finding Alignments Between Interpretable Causal Variables and Distributed Neural Representationscited by 197
- 2024ReFT: Representation Finetuning for Language Modelscited by 186
- 2022Toward Transparent AI: A Survey on Interpreting the Inner Structures of Deep Neural Networkscited by 126
- 2023A Survey on Fairness in Large Language Modelscited by 91
- 2024A Primer on the Inner Workings of Transformer-based Language Modelscited by 83
- 2022Probing for the Usage of Grammatical Numbercited by 57
- 2022Self-Destructing Models: Increasing the Costs of Harmful Dual Uses of Foundation Modelscited by 56
- 2022Probing Classifiers are Unreliable for Concept Removal and Detectioncited by 40
- 2022Gender Artifacts in Visual Datasetscited by 38
12 most cited of 79 All 79 (JSON)
- 2026Invariant Atoms: Sparse Coordinates of Local Semantic Geometry in Language Model Representations29 Sep 2026
- 2026Hidden not Deleted: How Networks Suppress Entangled Features23 Sep 2026
- 2026MUtE: A Dual Framework for Concept Erasure and Counterfactual Interventions10 Sep 2026
- 2026Iterative Erasure Count Is Not an Affine-Invariant Concept Dimension11 Aug 2026
- 2026When and Why Do Linear Bias Probes Fail? A Geometric and Statistical Theory of Bias Detectability in Large Language Model Representations21 Jul 2026
- 2026Exposure is not manifestation: measurement target and output resolution jointly determine which behavioural-faithfulness evaluator wins10 Jul 2026
- 2026MANCE: Manifold Aware Concept Erasure4 Jul 2026
- 2026Learning Instance-Adaptive Low-Rank Orthogonal Subspaces for Clothes-Changing Person Re-Identification10 Jun 2026
- 2026In Defense of Information Leakage in Concept-based Models9 Jun 2026
- 2026Now You (Still) See Me: Detecting Evasive Steganographic Payloads in LLMs8 Jun 2026
- 2026Unsupervised Identification and Removal of Spurious Correlations During Fine-Tuning26 May 2026
- 2026Abduction-Deduction Entanglement: Domain Generalization via Representation Transplants24 May 2026
12 newest of 79 All 79 (JSON)