Efficient Attribute Unlearning: Towards Selective Removal of Input Attributes from Feature Representations
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
Recently, the enactment of privacy regulations has promoted the rise of the machine unlearning paradigm. Existing studies of machine unlearning mainly focus on sample-wise unlearning, such that a learnt model will not expose user's privacy at the sample level. Yet we argue that such ability of selective removal should also be presented at the attribute level, especially for the attributes irrelevant to the main task, e.g., whether a person recognized in a face recognition system wears glasses or the age range of that person. Through a comprehensive literature review, it is found that existing studies on attribute-related problems like fairness and de-biasing learning cannot address the above concerns properly. To bridge this gap, we propose a paradigm of selectively removing input attributes from feature representations which we name `attribute unlearning'. In this paradigm, certain attributes will be accurately captured and detached from the learned feature representations at the stage of training, according to their mutual information. The particular attributes will be progressively eliminated along with the training procedure towards convergence, while the rest of attributes related to the main task are preserved for achieving competitive model performance. Considering the computational complexity during the training process, we not only give a theoretically approximate training method, but also propose an acceleration scheme to speed up the training process. We validate our method by spanning several datasets and models and demonstrate that our design can preserve model fidelity and reach prevailing unlearning efficacy with high efficiency. The proposed unlearning paradigm builds a foundation for future machine unlearning system and will become an essential component of the latest privacy-related legislation.
Key facts. Cited by 16 papers in the map (data through 7 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 33 of its 49 references that are in the map. First posted on arXiv 27 Feb 2022.
Builds on
33 of 49 references.
Closest ancestors · 2
Same direction, newest first
- 2021Adaptive Machine Unlearning8 Jun
- 2021Remember What You Want to Forget: Algorithms for Machine Unlearning4 Mar
Other references · 31
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2020A Simple Framework for Contrastive Learning of Visual Representationscited by 11,979
- 2016Grad-CAM: Visual Explanations from Deep Networks via Gradient-based Localizationcited by 6,690
- 2014Deep Learning Face Attributes in the Wildcited by 3,679
- 2020Supervised Contrastive Learningcited by 2,803
- 2018Learning deep representations by mutual information estimation and maximizationcited by 1,265
- 2019Machine Unlearningcited by 1,020
- 2020What Makes for Good Views for Contrastive Learning?cited by 843
- 2019Making AI Forget You: Data Deletion in Machine Learningcited by 447
- 2019Federated Machine Learning: Concept and Applicationscited by 409
- 2018Split learning for health: Distributed deep learning without sharing raw patient datacited by 391
- 2015Adversarial Autoencoderscited by 359
19 more
- 2020Amnesiac Machine Learningcited by 305
- 2020Descent-to-Delete: Gradient-Based Methods for Machine Unlearningcited by 303
- 2019Towards Fairness in Visual Recognition: Effective Strategies for Bias Mitigationcited by 252
- 2020Approximate Data Deletion from Machine Learning Modelscited by 250
- 2021Unlearnable Examples: Making Personal Data Unexploitablecited by 188
- 2020DeltaGrad: Rapid retraining of machine learning modelscited by 143
- 2016Decoupled Neural Interfaces using Synthetic Gradientscited by 135
- 2020Machine Unlearning for Random Forestscited by 125
- 2020Fair Attribute Classification through Latent Space De-biasingcited by 125
- 2021Federated Unlearning via Class-Discriminative Pruningcited by 108
- 2016Towards the Science of Security and Privacy in Machine Learningcited by 89
- 2021Revisiting Locally Supervised Learning: an Alternative to End-to-end Trainingcited by 71
- 2022Recommendation Unlearningcited by 71
- 2020When Machine Learning Meets Privacy: A Survey and Outlookcited by 67
- 2018Decoupled Parallel Backpropagation with Convergence Guaranteecited by 39
- 2020Parallel Training of Deep Networks with Local Updatescited by 18
- 2021Anatomizing Bias in Facial Analysiscited by 18
- 2020Interpreting and Disentangling Feature Components of Various Complexity from DNNscited by 8
- 2021Visualizing the Emergence of Intermediate Visual Patterns in DNNscited by 7
Built on by
Citing papers per year: 2022: 2; 2023: 3; 2024: 4; 2025: 5; 2026: 2.
16 papers.
Sort:
By area:
- 2022A Survey of Machine Unlearningcited by 298
- 2023Feature Unlearning for Pre-trained GANs and VAEscited by 15
- 2023Making Users Indistinguishable: Attribute-wise Unlearning in Recommender Systemscited by 15
- 2024Ferrari: Federated Feature Unlearning via Optimizing Feature Sensitivitycited by 11
- 2025OpenGU: A Comprehensive Benchmark for Graph Unlearningcited by 8
- 2023DeepClean: Machine Unlearning on the Cheap by Resetting Privacy Sensitive Weights using the Fisher Diagonalcited by 7
- 2024TrajDeleter: Enabling Trajectory Forgetting in Offline Reinforcement Learning Agentscited by 7
- 2022Local Learning on Transformers via Feature Reconstructioncited by 4
- 2024"Forgetting" in Machine Learning and Beyond: A Surveycited by 2
- 2025RAID: An In-Training Defense against Attribute Inference Attacks in Recommender Systemscited by 1
- 2024Targeted Therapy in Data Removal: Object Unlearning Based on Scene Graphscited by 0
- 2025Unlearning Algorithmic Biases over Graphscited by 0
4 more
- 2025CAF'E: Causal Black-Box Testing of Machine Unlearningcited by 0
- 2025LEGO: A Lightweight and Efficient Multiple-Attribute Unlearning Framework for Recommender Systemscited by 0
- 2026Don't Break the Boundary: Continual Unlearning for OOD Detection Based on Free Energy Repulsioncited by 0
- 2026Erased, but Not Gone: Output Forgetting Is Not True Forgettingcited by 0
- 2026Erased, but Not Gone: Output Forgetting Is Not True Forgetting23 Jun 2026
- 2026Don't Break the Boundary: Continual Unlearning for OOD Detection Based on Free Energy Repulsion6 Feb 2026
- 2025LEGO: A Lightweight and Efficient Multiple-Attribute Unlearning Framework for Recommender Systems23 Oct 2025
- 2025CAF'E: Causal Black-Box Testing of Machine Unlearning20 Sep 2025
- 2025Unlearning Algorithmic Biases over Graphs20 May 2025
- 2025RAID: An In-Training Defense against Attribute Inference Attacks in Recommender Systems15 Apr 2025
- 2025OpenGU: A Comprehensive Benchmark for Graph Unlearning6 Jan 2025
- 2024Targeted Therapy in Data Removal: Object Unlearning Based on Scene Graphs25 Nov 2024
- 2024"Forgetting" in Machine Learning and Beyond: A Survey31 May 2024
- 2024Ferrari: Federated Feature Unlearning via Optimizing Feature Sensitivity23 May 2024
- 2024TrajDeleter: Enabling Trajectory Forgetting in Offline Reinforcement Learning Agents18 Apr 2024
- 2023DeepClean: Machine Unlearning on the Cheap by Resetting Privacy Sensitive Weights using the Fisher Diagonal17 Nov 2023
4 more
- 2023Making Users Indistinguishable: Attribute-wise Unlearning in Recommender Systems6 Oct 2023
- 2023Feature Unlearning for Pre-trained GANs and VAEs10 Mar 2023
- 2022Local Learning on Transformers via Feature Reconstruction29 Dec 2022
- 2022A Survey of Machine Unlearning6 Sep 2022
- 2022A Survey of Machine Unlearningcited by 298
- 2023Feature Unlearning for Pre-trained GANs and VAEscited by 15
- 2023Making Users Indistinguishable: Attribute-wise Unlearning in Recommender Systemscited by 15
- 2024Ferrari: Federated Feature Unlearning via Optimizing Feature Sensitivitycited by 11
- 2025OpenGU: A Comprehensive Benchmark for Graph Unlearningcited by 8
- 2023DeepClean: Machine Unlearning on the Cheap by Resetting Privacy Sensitive Weights using the Fisher Diagonalcited by 7
- 2024Targeted Therapy in Data Removal: Object Unlearning Based on Scene Graphscited by 0
- 2025Unlearning Algorithmic Biases over Graphscited by 0
- 2025CAF'E: Causal Black-Box Testing of Machine Unlearningcited by 0
- 2025LEGO: A Lightweight and Efficient Multiple-Attribute Unlearning Framework for Recommender Systemscited by 0
- 2026Don't Break the Boundary: Continual Unlearning for OOD Detection Based on Free Energy Repulsioncited by 0
- 2026Erased, but Not Gone: Output Forgetting Is Not True Forgettingcited by 0
- 2026Erased, but Not Gone: Output Forgetting Is Not True Forgetting23 Jun 2026
- 2026Don't Break the Boundary: Continual Unlearning for OOD Detection Based on Free Energy Repulsion6 Feb 2026
- 2025LEGO: A Lightweight and Efficient Multiple-Attribute Unlearning Framework for Recommender Systems23 Oct 2025
- 2025CAF'E: Causal Black-Box Testing of Machine Unlearning20 Sep 2025
- 2025Unlearning Algorithmic Biases over Graphs20 May 2025
- 2025OpenGU: A Comprehensive Benchmark for Graph Unlearning6 Jan 2025
- 2024Targeted Therapy in Data Removal: Object Unlearning Based on Scene Graphs25 Nov 2024
- 2024Ferrari: Federated Feature Unlearning via Optimizing Feature Sensitivity23 May 2024
- 2023DeepClean: Machine Unlearning on the Cheap by Resetting Privacy Sensitive Weights using the Fisher Diagonal17 Nov 2023
- 2023Making Users Indistinguishable: Attribute-wise Unlearning in Recommender Systems6 Oct 2023
- 2023Feature Unlearning for Pre-trained GANs and VAEs10 Mar 2023
- 2022A Survey of Machine Unlearning6 Sep 2022