Datamodels: Predicting Predictions from Training Data
Not on the map. Why?
Abstract (arXiv)
We present a conceptual framework, datamodeling, for analyzing the behavior of a model class in terms of the training data. For any fixed "target" example x, training set S, and learning algorithm, a datamodel is a parameterized function 2S → ℝ that for any subset of S' subset S -- using only information about which examples of S are contained in S' -- predicts the outcome of training a model on S' and evaluating on x. Despite the potential complexity of the underlying process being approximated (e.g., end-to-end training and evaluation of deep neural networks), we show that even simple linear datamodels can successfully predict model outputs. We then demonstrate that datamodels give rise to a variety of applications, such as: accurately predicting the effect of dataset counterfactuals; identifying brittle predictions; finding semantically similar examples; quantifying train-test leakage; and embedding data into a well-behaved and feature-rich representation space. Data for this paper (including pre-computed datamodels as well as raw predictions from four million trained deep neural networks) is available at https://github.com/MadryLab/datamodels-data .
Key facts. Cited by 186 papers in the map (data through 7 Oct 2026). Builds on 53 of its 98 references that are in the map. First posted on arXiv 1 Feb 2022.
Builds on
53 of 98 references.
References · 53
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,204
- 2018The Unreasonable Effectiveness of Deep Features as a Perceptual Metriccited by 11,029
- 2017A Unified Approach to Interpreting Model Predictionscited by 6,488
- 2016"Why Should I Trust You?": Explaining the Predictions of Any Classifiercited by 5,040
- 2016Simple and Scalable Predictive Uncertainty Estimation using Deep Ensemblescited by 3,888
- 2016Deep Learning with Differential Privacycited by 2,682
- 2020Extracting Training Data from Large Language Modelscited by 2,144
- 2017Understanding Black-box Predictions via Influence Functionscited by 1,714
- 2019Similarity of Neural Network Representations Revisitedcited by 1,695
- 2016Understanding deep learning requires rethinking generalizationcited by 1,657
- 2017Improved Regularization of Convolutional Neural Networks with Cutoutcited by 1,623
38 more
- 2020WILDS: A Benchmark of in-the-Wild Distribution Shiftscited by 1,366
- 2017BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chaincited by 1,052
- 2019Adversarial Examples Are Not Bugs, They Are Featurescited by 950
- 2021Deduplicating Training Data Makes Language Models Bettercited by 705
- 2018An Empirical Study of Example Forgetting during Deep Neural Network Learningcited by 669
- 2019Data Shapley: Equitable Valuation of Data for Machine Learningcited by 617
- 2020Estimating Training Data Influence by Tracing Gradient Descentcited by 565
- 2020What Neural Networks Memorize and Why: Discovering the Long Tail via Influence Estimationcited by 492
- 2020Underspecification Presents Challenges for Credibility in Modern Machine Learningcited by 488
- 2019Does Learning Require Memorization? A Short Tale about a Long Tailcited by 452
- 2017Functional Map of the Worldcited by 338
- 2019Selection via Proxy: Efficient Data Selection for Deep Learningcited by 337
- 2019Differential Privacy Has Disparate Impact on Model Accuracycited by 316
- 2020An Investigation of Why Overparameterization Exacerbates Spurious Correlationscited by 310
- 2019Towards Efficient Data Valuation Based on the Shapley Valuecited by 279
- 2020Influence Functions in Deep Learning Are Fragilecited by 247
- 2021Deep learning: a statistical viewpointcited by 239
- 2021Revisiting Model Stitching to Compare Neural Representationscited by 203
- 2018Representer Point Selection for Explaining Deep Neural Networkscited by 187
- 2019On the Accuracy of Influence Functions for Measuring Group Effectscited by 146
- 2021Assessing Generalization of SGD via Disagreementcited by 116
- 2020Certified Robustness to Label-Flipping Attacks via Randomized Smoothingcited by 103
- 2020When is Memorization of Irrelevant Training Data Necessary for High-Accuracy Learning?cited by 102
- 2021The MultiBERTs: BERT Reproductions for Robustness Analysiscited by 89
- 2021Leveraging Sparse Linear Layers for Debuggable Deep Networkscited by 82
- 2021Input Similarity from the Neural Network Perspectivecited by 78
- 2019Do We Train on Test Data? Purging CIFAR of Near-Duplicatescited by 61
- 2020Distributional Generalization: A New Kind of Generalizationcited by 41
- 2019Model Similarity Mitigates Test Set Overusecited by 37
- 2021An Empirical Comparison of Instance Attribution Methods for NLPcited by 35
- 2021Are Larger Pretrained Language Models Uniformly Better? Comparing Performance at the Instance Levelcited by 34
- 2019Identity Crisis: Memorization and Generalization under Extreme Overparameterizationcited by 33
- 2018Celer: a Fast Solver for the Lasso with Dual Extrapolationcited by 31
- 20213DB: A Framework for Debugging Computer Vision Modelscited by 31
- 2019bLIMEy: Surrogate Prediction Explanations Beyond LIMEcited by 17
- 2020A Corrective View of Neural Networks: Representation, Memorization and Learningcited by 13
- 2016Prediction models for network-linked datacited by 12
- 2019Regression from Dependent Observationscited by 10
50 most cited of 53 All 53 (JSON)
Built on by
Citing papers per year: 2022: 20; 2023: 32; 2024: 54; 2025: 49; 2026: 31.
186 papers.
Sort:
By area:
- 2023DataComp: In search of the next generation of multimodal datasetscited by 635
- 2024LESS: Selecting Influential Data for Targeted Instruction Tuningcited by 514
- 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generationcited by 376
- 2023TRAK: Attributing Model Behavior at Scalecited by 273
- 2022The Privacy Onion Effect: Memorization is Relativecited by 128
- 2023Similarity of Neural Network Models: A Survey of Functional and Representational Measurescited by 128
- 2022Data Banzhaf: A Robust Data Valuation Framework for Machine Learningcited by 126
- 2023Skill-it! A Data-Driven Skills Framework for Understanding and Training Language Modelscited by 120
- 2023Foundation Models and Fair Usecited by 112
- 2024DsDm: Model-Aware Dataset Selection with Datamodelscited by 103
- 2024MATES: Model-Aware Data Selection for Efficient Pretraining with Data Influence Modelscited by 96
- 2024ContextCite: Attributing Model Generation to Contextcited by 93
38 more
- 2022Distilling Model Failures as Directions in Latent Spacecited by 82
- 2022Cramming: Training a Language Model on a Single GPU in One Daycited by 81
- 2024Data Shapley in One Training Runcited by 76
- 2023In-context Example Selection with Influencescited by 60
- 2022Data Curation Alone Can Stabilize In-context Learningcited by 58
- 2022Measuring the Effect of Training Data on Deep Learning Predictions via Randomized Experimentscited by 50
- 2023Intriguing Properties of Data Attribution on Diffusion Modelscited by 47
- 2024Improving Pretraining Data Using Perplexity Correlationscited by 46
- 2024Incremental Residual Concept Bottleneck Modelscited by 43
- 2023The Journey, Not the Destination: How Data Guides Diffusion Modelscited by 42
- 2024Scalable Influence and Fact Tracing for Large Language Model Pretrainingcited by 40
- 2022Canary in a Coalmine: Better Membership Inference with Ensembled Adversarial Queriescited by 36
- 2024Capturing the Temporal Dependence of Training Data Influencecited by 34
- 2024Training Data Attribution via Approximate Unrolled Differentiationcited by 33
- 2022A Data-Based Perspective on Transfer Learningcited by 32
- 2024Most Influential Subset Selection: Challenges, Promises, and Beyondcited by 31
- 2022ModelDiff: A Framework for Comparing Learning Algorithmscited by 30
- 2024Rethinking Data Shapley for Data Selection Tasks: Misleads and Meritscited by 29
- 2025MoDoMoDo: Multi-Domain Data Mixtures for Multimodal LLM Reinforcement Learningcited by 29
- 2022Exploring Transformer Backbones for Heterogeneous Treatment Effect Estimationcited by 25
- 2024Hybrid Preferences: Learning to Route Instances for Human vs. AI Feedbackcited by 25
- 2025DataMIL: Selecting Data for Robot Imitation Learning with Datamodelscited by 25
- 2022Understanding Influence Functions and Datamodels via Harmonic Analysiscited by 23
- 2023Exploring the Limits of Model-Targeted Indiscriminate Data Poisoning Attackscited by 23
- 2024Data Attribution for Text-to-Image Models by Unlearning Synthesized Imagescited by 22
- 2023Internet Explorer: Targeted Representation Learning on the Open Webcited by 21
- 2024Stochastic Amortization: A Unified Approach to Accelerate Feature and Data Attributioncited by 21
- 2024Diffusion Attribution Score: Evaluating Training Data Influence in Diffusion Modelscited by 21
- 2023Neural Relation Graph: A Unified Framework for Identifying Label Noise and Outlier Datacited by 20
- 2023Identification of Negative Transfers in Multitask Learning Using Surrogate Modelscited by 20
- 2023On the Variance of Neural Network Training with respect to Test Sets and Distributionscited by 20
- 2024CoLoR-Filter: Conditional Loss Reduction Filtering for Targeted Language Model Pre-trainingcited by 20
- 2024Scalable Multitask Learning Using Gradient-based Estimation of Task Affinitycited by 20
- 2025MAGIC: Near-Optimal Data Attribution for Deep Learningcited by 20
- 2024Decomposing and Editing Predictions by Modeling Model Computationcited by 19
- 2024Task-Adaptive Pretrained Language Models via Clustered-Importance Samplingcited by 18
- 2024textttdattri: A Library for Efficient Data Attributioncited by 18
- 2024Attribute-to-Delete: Machine Unlearning via Datamodel Matchingcited by 18
50 most cited of 186 All 186 (JSON)
- 2026TrueMuse: A Benchmark for Data Attribution in Text-to-Music Models30 Sep 2026
- 2026PoEM: Predicting RL Outcomes from Existing Policies24 Sep 2026
- 2026Alignment Inertia: Auditing the Durability of Training Data Influence Through Policy Override Resistance23 Sep 2026
- 2026Can Data Attribution Filter Out Subliminal Learning? Not Reliably17 Sep 2026
- 2026Attributing Cohen's d: Training Data Attribution for Disease-Related Effects in Normative Age Biomarkers7 Sep 2026
- 2026Learned, Then Lost: A Measured Single-Example Counterfactual in Pre-training19 Aug 2026
- 2026What to Forget in Unlearning? Forget Set Curation for Language Models14 Aug 2026
- 2026Domain-Aware Scaling Laws Uncover Data Synergy13 Jul 2026
- 2026What's a Credit Worth? A Market Framework for Attribution-Aware Compensation in Generative Music1 Jul 2026
- 2026Watermarking for Proprietary Dataset Protection1 Jul 2026
- 2026DRIFT: Data Selection for LLM Instruction Tuning via On-Policy Attribution16 Jun 2026
- 2026Position: Don't Just "Fix it in Post": A Science of AI Must Study Training Dynamics3 Jun 2026
38 more
- 2026Data Attribution in Large Language Models via Bidirectional Gradient Optimization3 Jun 2026
- 2026Convex Dataset Valuation for Post-Training15 May 2026
- 2026GRACE: Gradient-aligned Reasoning Data Curation for Efficient Post-training13 May 2026
- 2026Query-efficient model evaluation using cached responses8 May 2026
- 2026NH-CROP: Robust Pricing for Governed Language Data Assets under Cost Uncertainty3 May 2026
- 2026Small edits, large models: How Wikipedia advocacy shapes LLM values30 Apr 2026
- 2026Adalina: Adaptive Linear Approximation for the Shapley Value and Beyond9 Apr 2026
- 2026How to sketch a learning algorithm8 Apr 2026
- 2026DiffInf: Influence-Guided Diffusion for Supervision Alignment in Facial Attribute Learning6 Mar 2026
- 2026Challenges in Enabling Private Data Valuation27 Feb 2026
- 2026Subliminal Effects in Your Data: A General Mechanism via Log-Linearity4 Feb 2026
- 2026Efficient Estimation of Kernel Surrogate Models for Task Attribution3 Feb 2026
- 2026Imperfect Influence, Preserved Rankings: A Theory of TRAK for Data Attribution1 Feb 2026
- 2026In-Run Data Shapley for Adam Optimizer30 Jan 2026
- 2026SurrogateSHAP: Training-Free Contributor Attribution for Text-to-Image (T2I) Models29 Jan 2026
- 2026LoRIF: Low-Rank Influence Functions for Scalable Training Data Attribution29 Jan 2026
- 2026Influence Guided Sampling for Domain Adaptation of Text Retrievers29 Jan 2026
- 2026Shaping capabilities with token-level data filtering29 Jan 2026
- 2026OATS: Online Data Augmentation for Time Series Foundation Models26 Jan 2026
- 2025Understanding the Mechanisms of Fast Hyperparameter Transfer28 Dec 2025
- 2025Natural Geometry of Robust Data Attribution: From Convex Models to Deep Networks9 Dec 2025
- 2025Efficiently Learning Branching Networks for Multitask Algorithmic Reasoning30 Nov 2025
- 2025AssayMatch: Learning to Select Data for Molecular Activity Models20 Nov 2025
- 2025Scalable Multi-Objective and Meta Reinforcement Learning via Gradient Estimation16 Nov 2025
- 2025Fast Data Attribution for Text-to-Image Models13 Nov 2025
- 2025Explore and Establish Synergistic Effects Between Weight Pruning and Coreset Selection in Neural Network Training13 Nov 2025
- 2025Error Estimate and Convergence Analysis for Data Valuation9 Nov 2025
- 2025Nonparametric Data Attribution for Diffusion Models16 Oct 2025
- 2025Large Language Model Sourcing: A Survey11 Oct 2025
- 2025What Is The Performance Ceiling of My Classifier? Utilizing Category-Wise Influence Functions for Pareto Frontier Analysis4 Oct 2025
- 2025Train on Validation (ToV): Fast data selection with applications to fine-tuning1 Oct 2025
- 2025Train Once, Answer All: Many Pretraining Experiments for the Cost of One27 Sep 2025
- 2025Exploring Training Data Attribution under Limited Access Constraints16 Sep 2025
- 2025Coresets from Trajectories: Selecting Data via Correlation of Loss Differences27 Aug 2025
- 2025Understanding Data Influence with Differential Approximation20 Aug 2025
- 2025Efficiently Verifiable Proofs of Data Attribution14 Aug 2025
- 2025Integrated Influence: Data Attribution with Baseline7 Aug 2025
- 2025WSS-CL: Weight Saliency Soft-Guided Contrastive Learning for Efficient Machine Unlearning Image Classification6 Aug 2025
50 newest of 186 All 186 (JSON)
- 2023DataComp: In search of the next generation of multimodal datasetscited by 635
- 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generationcited by 376
- 2023Intriguing Properties of Data Attribution on Diffusion Modelscited by 47
- 2023The Journey, Not the Destination: How Data Guides Diffusion Modelscited by 42
- 2024Diffusion Attribution Score: Evaluating Training Data Influence in Diffusion Modelscited by 21
- 2025Fast Data Attribution for Text-to-Image Modelscited by 7
- 2024An Efficient Framework for Crediting Data Contributors of Diffusion Modelscited by 4
- 2025Nonparametric Data Attribution for Diffusion Modelscited by 4
- 2026SurrogateSHAP: Training-Free Contributor Attribution for Text-to-Image (T2I) Modelscited by 0
- 2026DiffInf: Influence-Guided Diffusion for Supervision Alignment in Facial Attribute Learningcited by 0
- 2026DiffInf: Influence-Guided Diffusion for Supervision Alignment in Facial Attribute Learning6 Mar 2026
- 2026SurrogateSHAP: Training-Free Contributor Attribution for Text-to-Image (T2I) Models29 Jan 2026
- 2025Fast Data Attribution for Text-to-Image Models13 Nov 2025
- 2025Nonparametric Data Attribution for Diffusion Models16 Oct 2025
- 2024Diffusion Attribution Score: Evaluating Training Data Influence in Diffusion Models24 Oct 2024
- 2024An Efficient Framework for Crediting Data Contributors of Diffusion Models9 Jun 2024
- 2023The Journey, Not the Destination: How Data Guides Diffusion Models11 Dec 2023
- 2023Intriguing Properties of Data Attribution on Diffusion Models1 Nov 2023
- 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generation19 Oct 2023
- 2023DataComp: In search of the next generation of multimodal datasets27 Apr 2023
- 2022Canary in a Coalmine: Better Membership Inference with Ensembled Adversarial Queriescited by 36
- 2023Exploring the Limits of Model-Targeted Indiscriminate Data Poisoning Attackscited by 23
- 2024Data Attribution for Text-to-Image Models by Unlearning Synthesized Imagescited by 22
- 2024Attribute-to-Delete: Machine Unlearning via Datamodel Matchingcited by 18
- 2023Rethinking Backdoor Attackscited by 14
- 2026What to Forget in Unlearning? Forget Set Curation for Language Modelscited by 0
- 2026What to Forget in Unlearning? Forget Set Curation for Language Models14 Aug 2026
- 2024Attribute-to-Delete: Machine Unlearning via Datamodel Matching30 Oct 2024
- 2024Data Attribution for Text-to-Image Models by Unlearning Synthesized Images13 Jun 2024
- 2023Rethinking Backdoor Attacks19 Jul 2023
- 2023Exploring the Limits of Model-Targeted Indiscriminate Data Poisoning Attacks7 Mar 2023
- 2022Canary in a Coalmine: Better Membership Inference with Ensembled Adversarial Queries19 Oct 2022
- 2024Hybrid Preferences: Learning to Route Instances for Human vs. AI Feedbackcited by 25
- 2024More RLHF, More Trust? On The Impact of Preference Alignment On Trustworthinesscited by 9
- 2025IDEAL: Data Equilibrium Adaptation for Multi-Capability Language Model Alignmentcited by 8
- 2026GRACE: Gradient-aligned Reasoning Data Curation for Efficient Post-trainingcited by 0
- 2026GRACE: Gradient-aligned Reasoning Data Curation for Efficient Post-training13 May 2026
- 2025IDEAL: Data Equilibrium Adaptation for Multi-Capability Language Model Alignment19 May 2025
- 2024Hybrid Preferences: Learning to Route Instances for Human vs. AI Feedback24 Oct 2024
- 2024More RLHF, More Trust? On The Impact of Preference Alignment On Trustworthiness29 Apr 2024
- 2025A Survey of LLM × DATAcited by 4
- 2025A Survey of LLM × DATA24 May 2025
- 2024LESS: Selecting Influential Data for Targeted Instruction Tuningcited by 514
- 2023TRAK: Attributing Model Behavior at Scalecited by 273
- 2022The Privacy Onion Effect: Memorization is Relativecited by 128
- 2023Similarity of Neural Network Models: A Survey of Functional and Representational Measurescited by 128
- 2022Data Banzhaf: A Robust Data Valuation Framework for Machine Learningcited by 126
- 2023Skill-it! A Data-Driven Skills Framework for Understanding and Training Language Modelscited by 120
- 2023Foundation Models and Fair Usecited by 112
- 2024DsDm: Model-Aware Dataset Selection with Datamodelscited by 103
- 2024MATES: Model-Aware Data Selection for Efficient Pretraining with Data Influence Modelscited by 96
- 2024ContextCite: Attributing Model Generation to Contextcited by 93
- 2022Distilling Model Failures as Directions in Latent Spacecited by 82
- 2022Cramming: Training a Language Model on a Single GPU in One Daycited by 81
12 most cited of 160 All 160 (JSON)
- 2026TrueMuse: A Benchmark for Data Attribution in Text-to-Music Models30 Sep 2026
- 2026PoEM: Predicting RL Outcomes from Existing Policies24 Sep 2026
- 2026Alignment Inertia: Auditing the Durability of Training Data Influence Through Policy Override Resistance23 Sep 2026
- 2026Can Data Attribution Filter Out Subliminal Learning? Not Reliably17 Sep 2026
- 2026Attributing Cohen's d: Training Data Attribution for Disease-Related Effects in Normative Age Biomarkers7 Sep 2026
- 2026Learned, Then Lost: A Measured Single-Example Counterfactual in Pre-training19 Aug 2026
- 2026Domain-Aware Scaling Laws Uncover Data Synergy13 Jul 2026
- 2026What's a Credit Worth? A Market Framework for Attribution-Aware Compensation in Generative Music1 Jul 2026
- 2026Watermarking for Proprietary Dataset Protection1 Jul 2026
- 2026DRIFT: Data Selection for LLM Instruction Tuning via On-Policy Attribution16 Jun 2026
- 2026Position: Don't Just "Fix it in Post": A Science of AI Must Study Training Dynamics3 Jun 2026
- 2026Data Attribution in Large Language Models via Bidirectional Gradient Optimization3 Jun 2026
12 newest of 160 All 160 (JSON)