Kernelized Concept Erasure
Not on the map. Why?
Abstract (arXiv)
The representation space of neural models for textual data emerges in an unsupervised manner during training. Understanding how those representations encode human-interpretable concepts is a fundamental problem. One prominent approach for the identification of concepts in neural representations is searching for a linear subspace whose erasure prevents the prediction of the concept from the representations. However, while many linear erasure algorithms are tractable and interpretable, neural networks do not necessarily represent concepts in a linear manner. To identify non-linearly encoded concepts, we propose a kernelization of a linear minimax game for concept erasure. We demonstrate that it is possible to prevent specific non-linear adversaries from predicting the concept. However, the protection does not transfer to different nonlinear adversaries. Therefore, exhaustively erasing a non-linearly encoded concept remains an open problem.
Key facts. Cited by 47 papers in the map (data through 7 Oct 2026). Builds on 19 of its 51 references that are in the map. First posted on arXiv 28 Jan 2022.
Builds on
19 of 51 references.
References · 19
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,204
- 2013Efficient Estimation of Word Representations in Vector Spacecited by 4,346
- 2021Convex optimizationcited by 2,479
- 2019ViLBERT: Pretraining Task-Agnostic Visiolinguistic Representations for Vision-and-Language Taskscited by 2,219
- 2017Interpretability Beyond Feature Attribution: Quantitative Testing with Concept Activation Vectors (TCAV)cited by 1,309
- 2016Man is to Computer Programmer as Woman is to Homemaker? Debiasing Word Embeddingscited by 1,304
- 2020Null It Out: Guarding Protected Attributes by Iterative Nullspace Projectioncited by 442
- 2019Bias in Bios: A Case Study of Semantic Representation Bias in a High-Stakes Settingcited by 346
- 2019Lipstick on a Pig: Debiasing Methods Cover up Systematic Gender Biases in Word Embeddings But do not Remove Themcited by 268
- 2014SimLex-999: Evaluating Semantic Models with (Genuine) Similarity Estimationcited by 170
- 2019It's All in the Name: Mitigating Gender Bias with Name-Based Counterfactual Data Substitutioncited by 102
- 2020Multimodal Pretraining Unmasked: A Meta-Analysis and a Unified Framework of Vision-and-Language BERTscited by 71
7 more
- 2019Attenuating Bias in Word Vectorscited by 64
- 2021Counterfactual Interventions Reveal the Causal Effect of Relative Clause Representations on Agreement Predictioncited by 58
- 2021The Low-Dimensional Linear Geometry of Contextualized Word Representationscited by 39
- 2021A Non-Linear Structural Probecited by 31
- 2020It's not Greek to mBERT: Inducing Word-Level Translations from Multilingual BERTcited by 30
- 2020Exploring the Linear Subspace Hypothesis in Gender Bias Mitigationcited by 25
- 2019On the Global Optima of Kernelized Adversarial Representation Learningcited by 14
Built on by
Citing papers per year: 2022: 4; 2023: 13; 2024: 12; 2025: 7; 2026: 11.
47 papers.
Sort:
By area:
- 2024Sparse Feature Circuits: Discovering and Editing Interpretable Causal Graphs in Language Modelscited by 412
- 2023LEACE: Perfect linear concept erasure in closed formcited by 254
- 2023In-Context Unlearning: Language Models as Few Shot Unlearnerscited by 214
- 2023Emergent and Predictable Memorization in Large Language Modelscited by 147
- 2022Probing for the Usage of Grammatical Numbercited by 57
- 2022Self-Destructing Models: Increasing the Costs of Harmful Dual Uses of Foundation Modelscited by 56
- 2024Representation Surgery: Theory and Practice of Affine Steeringcited by 47
- 2022Probing Classifiers are Unreliable for Concept Removal and Detectioncited by 40
- 2024Machine Unlearning Fails to Remove Data Poisoning Attackscited by 35
- 2025Steering Out-of-Distribution Generalization with Concept Ablation Fine-Tuningcited by 34
- 2024Exploring Safety-Utility Trade-Offs in Personalized Language Modelscited by 26
- 2023Shielded Representations: Protecting Sensitive Attributes Through Iterative Gradient-Based Projectioncited by 25
35 more
- 2024The Quest for the Right Mediator: Surveying Mechanistic Interpretability Through the Lens of Causal Mediation Analysiscited by 24
- 2022Naturalistic Causal Probing for Morpho-Syntaxcited by 19
- 2024Gumbel Counterfactual Generation From Language Modelscited by 13
- 2023Robust Concept Erasure via Kernelized Rate-Distortion Maximizationcited by 10
- 2024Opt-Out: Investigating Entity-Level Unlearning for Large Language Models via Optimal Transportcited by 10
- 2024Protecting Privacy Through Approximating Optimal Parameters for Sequence Unlearning in Language Modelscited by 10
- 2024How Reliable are Causal Probing Interventions?cited by 9
- 2025Memory in Large Language Models: Mechanisms, Evaluation and Evolutioncited by 8
- 2025Can Prompts Rewind Time for LLMs? Evaluating the Effectiveness of Prompted Knowledge Cutoffscited by 8
- 2023Gen-Z: Generative Zero-Shot Text Classification with Contextualized Label Descriptionscited by 7
- 2023Removing Spurious Concepts from Neural Network Representations via Joint Subspace Estimationcited by 5
- 2023Fair Streaming Principal Component Analysis: Statistical and Algorithmic Viewpointcited by 5
- 2024Focus On This, Not That! Steering LLMs with Adaptive Feature Specificationcited by 5
- 2025Fundamental Limits of Perfect Concept Erasurecited by 5
- 2023Competence-Based Analysis of Language Modelscited by 4
- 2024Explaining Text Classifiers with Counterfactual Representationscited by 3
- 2024Leveraging Prototypical Representations for Mitigating Social Bias without Demographic Informationcited by 3
- 2026What Do EEG Foundation Models Capture from Human Brain Signals?cited by 3
- 2023Counterfactual Probing for the Influence of Affect and Specificity on Intergroup Biascited by 2
- 2023How To Build Competitive Multi-gender Speech Translation Models For Controlling Speaker Gender Translationcited by 2
- 2023Counterfactually Probing Language Identity in Multilingual Modelscited by 2
- 2025Improving Causal Interventions in Amnesic Probing with Mean Projection or LEACEcited by 2
- 2025Nonlinear Concept Erasure: a Density Matching Approachcited by 2
- 2026No More, No Less: Least-Privilege Language Modelscited by 1
- 2026Obliviator Reveals the Cost of Nonlinear Guardedness in Concept Erasurecited by 1
- 2023The Ethics of Automating Legal Actorscited by 0
- 2025Extending Fair Null-Space Projections for Continuous Attributes to Kernel Methodscited by 0
- 2026Refit the Probe: Single-Direction Ablation Is Not a Necessity Testcited by 0
- 2026Debiasing Without Protected Attributes: Latent Concept Erasure from Textual Profilescited by 0
- 2026MPSelectTune: Prompt-type Selection for Fine-tuning improves Concept Unlearning in LLMscited by 0
- 2026MANCE: Manifold Aware Concept Erasurecited by 0
- 2026SCOPE: Entanglement Frontier Escape for Source-Free Class Unlearningcited by 0
- 2026MUtE: A Dual Framework for Concept Erasure and Counterfactual Interventionscited by 0
- 2026Hidden not Deleted: How Networks Suppress Entangled Featurescited by 0
- 2026Is invariance all you need for algorithmic fairness? Removing demographic information can create new biascited by 0
- 2026Is invariance all you need for algorithmic fairness? Removing demographic information can create new bias25 Sep 2026
- 2026Hidden not Deleted: How Networks Suppress Entangled Features23 Sep 2026
- 2026MUtE: A Dual Framework for Concept Erasure and Counterfactual Interventions10 Sep 2026
- 2026SCOPE: Entanglement Frontier Escape for Source-Free Class Unlearning3 Aug 2026
- 2026MANCE: Manifold Aware Concept Erasure4 Jul 2026
- 2026MPSelectTune: Prompt-type Selection for Fine-tuning improves Concept Unlearning in LLMs4 Jul 2026
- 2026Debiasing Without Protected Attributes: Latent Concept Erasure from Textual Profiles10 Jun 2026
- 2026Refit the Probe: Single-Direction Ablation Is Not a Necessity Test30 May 2026
- 2026What Do EEG Foundation Models Capture from Human Brain Signals?12 May 2026
- 2026Obliviator Reveals the Cost of Nonlinear Guardedness in Concept Erasure8 Mar 2026
- 2026No More, No Less: Least-Privilege Language Models30 Jan 2026
- 2025Extending Fair Null-Space Projections for Continuous Attributes to Kernel Methods5 Nov 2025
35 more
- 2025Can Prompts Rewind Time for LLMs? Evaluating the Effectiveness of Prompted Knowledge Cutoffs26 Sep 2025
- 2025Memory in Large Language Models: Mechanisms, Evaluation and Evolution23 Sep 2025
- 2025Steering Out-of-Distribution Generalization with Concept Ablation Fine-Tuning22 Jul 2025
- 2025Nonlinear Concept Erasure: a Density Matching Approach16 Jul 2025
- 2025Improving Causal Interventions in Amnesic Probing with Mean Projection or LEACE13 Jun 2025
- 2025Fundamental Limits of Perfect Concept Erasure25 Mar 2025
- 2024Gumbel Counterfactual Generation From Language Models11 Nov 2024
- 2024Focus On This, Not That! Steering LLMs with Adaptive Feature Specification30 Oct 2024
- 2024How Reliable are Causal Probing Interventions?28 Aug 2024
- 2024The Quest for the Right Mediator: Surveying Mechanistic Interpretability Through the Lens of Causal Mediation Analysis2 Aug 2024
- 2024Machine Unlearning Fails to Remove Data Poisoning Attacks25 Jun 2024
- 2024Protecting Privacy Through Approximating Optimal Parameters for Sequence Unlearning in Language Models20 Jun 2024
- 2024Opt-Out: Investigating Entity-Level Unlearning for Large Language Models via Optimal Transport18 Jun 2024
- 2024Exploring Safety-Utility Trade-Offs in Personalized Language Models17 Jun 2024
- 2024Sparse Feature Circuits: Discovering and Editing Interpretable Causal Graphs in Language Models28 Mar 2024
- 2024Leveraging Prototypical Representations for Mitigating Social Bias without Demographic Information14 Mar 2024
- 2024Representation Surgery: Theory and Practice of Affine Steering15 Feb 2024
- 2024Explaining Text Classifiers with Counterfactual Representations1 Feb 2024
- 2023The Ethics of Automating Legal Actors1 Dec 2023
- 2023Robust Concept Erasure via Kernelized Rate-Distortion Maximization30 Nov 2023
- 2023Gen-Z: Generative Zero-Shot Text Classification with Contextualized Label Descriptions13 Nov 2023
- 2023Counterfactually Probing Language Identity in Multilingual Models29 Oct 2023
- 2023Fair Streaming Principal Component Analysis: Statistical and Algorithmic Viewpoint28 Oct 2023
- 2023How To Build Competitive Multi-gender Speech Translation Models For Controlling Speaker Gender Translation23 Oct 2023
- 2023Removing Spurious Concepts from Neural Network Representations via Joint Subspace Estimation18 Oct 2023
- 2023In-Context Unlearning: Language Models as Few Shot Unlearners11 Oct 2023
- 2023LEACE: Perfect linear concept erasure in closed form6 Jun 2023
- 2023Counterfactual Probing for the Influence of Affect and Specificity on Intergroup Bias25 May 2023
- 2023Shielded Representations: Protecting Sensitive Attributes Through Iterative Gradient-Based Projection17 May 2023
- 2023Emergent and Predictable Memorization in Large Language Models21 Apr 2023
- 2023Competence-Based Analysis of Language Models1 Mar 2023
- 2022Self-Destructing Models: Increasing the Costs of Harmful Dual Uses of Foundation Models27 Nov 2022
- 2022Probing Classifiers are Unreliable for Concept Removal and Detection8 Jul 2022
- 2022Naturalistic Causal Probing for Morpho-Syntax14 May 2022
- 2022Probing for the Usage of Grammatical Number19 Apr 2022
- 2023In-Context Unlearning: Language Models as Few Shot Unlearnerscited by 214
- 2024Machine Unlearning Fails to Remove Data Poisoning Attackscited by 35
- 2024Opt-Out: Investigating Entity-Level Unlearning for Large Language Models via Optimal Transportcited by 10
- 2024Protecting Privacy Through Approximating Optimal Parameters for Sequence Unlearning in Language Modelscited by 10
- 2026MPSelectTune: Prompt-type Selection for Fine-tuning improves Concept Unlearning in LLMscited by 0
- 2026SCOPE: Entanglement Frontier Escape for Source-Free Class Unlearningcited by 0
- 2026SCOPE: Entanglement Frontier Escape for Source-Free Class Unlearning3 Aug 2026
- 2026MPSelectTune: Prompt-type Selection for Fine-tuning improves Concept Unlearning in LLMs4 Jul 2026
- 2024Machine Unlearning Fails to Remove Data Poisoning Attacks25 Jun 2024
- 2024Protecting Privacy Through Approximating Optimal Parameters for Sequence Unlearning in Language Models20 Jun 2024
- 2024Opt-Out: Investigating Entity-Level Unlearning for Large Language Models via Optimal Transport18 Jun 2024
- 2023In-Context Unlearning: Language Models as Few Shot Unlearners11 Oct 2023
- 2024Sparse Feature Circuits: Discovering and Editing Interpretable Causal Graphs in Language Modelscited by 412
- 2023LEACE: Perfect linear concept erasure in closed formcited by 254
- 2023Emergent and Predictable Memorization in Large Language Modelscited by 147
- 2022Probing for the Usage of Grammatical Numbercited by 57
- 2022Self-Destructing Models: Increasing the Costs of Harmful Dual Uses of Foundation Modelscited by 56
- 2024Representation Surgery: Theory and Practice of Affine Steeringcited by 47
- 2022Probing Classifiers are Unreliable for Concept Removal and Detectioncited by 40
- 2025Steering Out-of-Distribution Generalization with Concept Ablation Fine-Tuningcited by 34
- 2024Exploring Safety-Utility Trade-Offs in Personalized Language Modelscited by 26
- 2023Shielded Representations: Protecting Sensitive Attributes Through Iterative Gradient-Based Projectioncited by 25
- 2024The Quest for the Right Mediator: Surveying Mechanistic Interpretability Through the Lens of Causal Mediation Analysiscited by 24
- 2022Naturalistic Causal Probing for Morpho-Syntaxcited by 19
12 most cited of 41 All 41 (JSON)
- 2026Is invariance all you need for algorithmic fairness? Removing demographic information can create new bias25 Sep 2026
- 2026Hidden not Deleted: How Networks Suppress Entangled Features23 Sep 2026
- 2026MUtE: A Dual Framework for Concept Erasure and Counterfactual Interventions10 Sep 2026
- 2026MANCE: Manifold Aware Concept Erasure4 Jul 2026
- 2026Debiasing Without Protected Attributes: Latent Concept Erasure from Textual Profiles10 Jun 2026
- 2026Refit the Probe: Single-Direction Ablation Is Not a Necessity Test30 May 2026
- 2026What Do EEG Foundation Models Capture from Human Brain Signals?12 May 2026
- 2026Obliviator Reveals the Cost of Nonlinear Guardedness in Concept Erasure8 Mar 2026
- 2026No More, No Less: Least-Privilege Language Models30 Jan 2026
- 2025Extending Fair Null-Space Projections for Continuous Attributes to Kernel Methods5 Nov 2025
- 2025Can Prompts Rewind Time for LLMs? Evaluating the Effectiveness of Prompted Knowledge Cutoffs26 Sep 2025
- 2025Memory in Large Language Models: Mechanisms, Evaluation and Evolution23 Sep 2025
12 newest of 41 All 41 (JSON)