Certified Graph Unlearning
On the map: LLM safety and security → Graph unlearning
Abstract (arXiv)
Graph-structured data is ubiquitous in practice and often processed using graph neural networks (GNNs). With the adoption of recent laws ensuring the ``right to be forgotten'', the problem of graph data removal has become of significant importance. To address the problem, we introduce the first known framework for certified graph unlearning of GNNs. In contrast to standard machine unlearning, new analytical and heuristic unlearning challenges arise when dealing with complex graph data. First, three different types of unlearning requests need to be considered, including node feature, edge and node unlearning. Second, to establish provable performance guarantees, one needs to address challenges associated with feature mixing during propagation. The underlying analysis is illustrated on the example of simple graph convolutions (SGC) and their generalized PageRank (GPR) extensions, thereby laying the theoretical foundation for certified unlearning of GNNs. Our empirical studies on six benchmark datasets demonstrate excellent performance-complexity trade-offs when compared to complete retraining methods and approaches that do not leverage graph information. For example, when unlearning 20% of the nodes on the Cora dataset, our approach suffers only a 0.1% loss in test accuracy while offering a 4-fold speed-up compared to complete retraining. Our scheme also outperforms unlearning methods that do not leverage graph information with a 12% increase in test accuracy for a comparable time complexity.
Key facts. Cited by 46 papers in the map (data through 7 Oct 2026). Placed in Graph unlearning, one of 12 directions in LLM safety and security. Builds on 34 of its 44 references that are in the map. First posted on arXiv 18 Jun 2022.
Builds on
34 of 44 references.
Closest ancestors · 1
Same direction, newest first
- 2021Graph Unlearning27 Mar
Other references · 33
- 2016Semi-Supervised Classification with Graph Convolutional Networkscited by 11,282
- 2016Deep Learning with Differential Privacycited by 2,682
- 2019Fast Graph Representation Learning with PyTorch Geometriccited by 2,414
- 2020Open Graph Benchmark: Datasets for Machine Learning on Graphscited by 2,148
- 2019Simplifying Graph Convolutional Networkscited by 1,470
- 2018Graph Convolutional Neural Networks for Web-Scale Recommender Systemscited by 1,133
- 2019Machine Unlearningcited by 1,020
- 2018Pitfalls of Graph Neural Network Evaluationcited by 994
- 2018Predict then Propagate: Graph Neural Networks meet Personalized PageRankcited by 987
- 2016Revisiting Semi-Supervised Learning with Graph Embeddingscited by 970
- 2015Image-based Recommendations on Styles and Substitutescited by 702
- 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 599
21 more
- 2020Adaptive Universal Generalized PageRank Graph Neural Networkcited by 592
- 2020VectorNet: Encoding HD Maps and Agent Dynamics from Vectorized Representationcited by 528
- 2019Certified Data Removal from Machine Learning Modelscited by 512
- 2019Making AI Forget You: Data Deletion in Machine Learningcited by 447
- 2021Remember What You Want to Forget: Algorithms for Machine Unlearningcited by 360
- 2020SIGN: Scalable Inception Graph Neural Networkscited by 283
- 2015YFCC100M: The New Data in Multimedia Researchcited by 234
- 2021Node Feature Extraction by Self-Supervised Multi-scale Neighborhood Predictioncited by 137
- 2021ETA Prediction with Graph Neural Networks in Google Mapscited by 130
- 2022Graph Attention Multi-Layer Perceptroncited by 82
- 2021New Benchmarks for Learning on Non-Homophilous Graphscited by 81
- 2021LinkTeller: Recovering Private Edges from Graph Neural Networks via Influence Analysiscited by 65
- 2021Scalable and Adaptive Graph Neural Networks with Self-Label-Enhanced trainingcited by 54
- 2022GAP: Differentially Private Graph Neural Networks with Aggregation Perturbationcited by 46
- 2021Node-Level Differentially Private Graph Neural Networkscited by 43
- 2019Optimizing Generalized PageRank Methods for Seed-Expansion Community Detectioncited by 35
- 2019Stability of Graph Scattering Transformscited by 34
- 2021Releasing Graph Neural Networks with Differential Privacy Guaranteescited by 32
- 2020Spatio-Temporal Graph Scattering Transformcited by 19
- 2020Residual Correlation in Graph Neural Network Regressioncited by 11
- 2020CopulaGNN: Towards Integrating Representational and Correlational Roles of Graphs in Graph Neural Networkscited by 10
Built on by
Citing papers per year: 2022: 3; 2023: 13; 2024: 14; 2025: 13; 2026: 3.
46 papers.
Sort:
By area:
- 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generationcited by 376
- 2022A Survey of Machine Unlearningcited by 298
- 2023Model Sparsity Can Simplify Machine Unlearningcited by 206
- 2023To Generate or Not? Safety-Driven Unlearned Diffusion Models Are Still Easy To Generate Unsafe Images ... For Nowcited by 204
- 2024Simplicity Prevails: Rethinking Negative Preference Optimization for LLM Unlearningcited by 160
- 2023GIF: A General Graph Unlearning Strategy via Influence Functioncited by 59
- 2023Exploring the Landscape of Machine Unlearning: A Comprehensive Survey and Taxonomycited by 44
- 2024Challenging Forgets: Unveiling the Worst-Case Forget Sets in Machine Unlearningcited by 44
- 2023GNNDelete: A General Strategy for Unlearning in Graph Neural Networkscited by 43
- 2024Machine Unlearning: A Comprehensive Surveycited by 33
- 2022Unlearning Graph Classifiers with Limited Data Resourcescited by 31
- 2023SAFE: Machine Unlearning With Shard Graphscited by 28
34 more
- 2024WAGLE: Strategic Weight Attribution for Effective and Modular Unlearning in Large Language Modelscited by 25
- 2022Machine Unlearning of Federated Clusterscited by 21
- 2024A Probabilistic Perspective on Unlearning and Alignment for Large Language Modelscited by 21
- 2023Efficiently Forgetting What You Have Learned in Graph Representation Learning via Projectioncited by 20
- 2023MultiDelete for Multimodal Machine Unlearningcited by 20
- 2024Rewind-to-Delete: Certified Machine Unlearning for Nonconvex Functionscited by 17
- 2024Targeted Unlearning with Single Layer Unlearning Gradientcited by 16
- 2023Distill to Delete: Unlearning in Graph Networks with Knowledge Distillationcited by 13
- 2024Scalable and Certifiable Graph Unlearning: Overcoming the Approximation Error Barriercited by 13
- 2023Differentially Private Decoupled Graph Convolutions for Multigranular Topology Protectioncited by 12
- 2023A Survey of Graph Unlearningcited by 12
- 2025Robust Machine Unlearning for Quantized Neural Networks via Adaptive Gradient Reweighting with Similar Labelscited by 12
- 2023GraphGuard: Detecting and Counteracting Training Data Misuse in Graph Neural Networkscited by 8
- 2024Label Smoothing Improves Machine Unlearningcited by 8
- 2025OpenGU: A Comprehensive Benchmark for Graph Unlearningcited by 8
- 2025Model Collapse Is Not a Bug but a Feature in Machine Unlearning for LLMscited by 7
- 2025A Comprehensive Data-centric Overview of Federated Graph Learningcited by 7
- 2025Efficient Utility-Preserving Machine Unlearning with Implicit Gradient Surgerycited by 5
- 2024Graph Memory Learning: Imitating Lifelong Remembering and Forgetting of Brain Networkscited by 4
- 2025Unlearning Inversion Attacks for Graph Neural Networkscited by 4
- 2024Can Graph Neural Networks Expose Training Data Properties? An Efficient Risk Assessment Approachcited by 3
- 2025Human Motion Unlearningcited by 3
- 2026Forget by Uncertainty: Orthogonal Entropy Unlearning for Quantized Neural Networkscited by 2
- 2026Mitigating Privacy Risk via Forget Set-Free Unlearningcited by 2
- 2024GraphMU: Repairing Robustness of Graph Neural Networks via Machine Unlearningcited by 1
- 2024Accurate Forgetting for All-in-One Image Restoration Modelcited by 1
- 2025Face Identity Unlearning for Retrieval via Embedding Dispersioncited by 1
- 2024Graph Transductive Defense: a Two-Stage Defense for Graph Membership Inference Attackscited by 0
- 2025Unlearning Algorithmic Biases over Graphscited by 0
- 2025Graph Unlearning via Embedding Reconstruction -- A Range-Null Space Decomposition Approachcited by 0
- 2025Beyond Uniform Deletion: A Data Value-Weighted Framework for Certified Machine Unlearningcited by 0
- 2025GraphToxin: Reconstructing Full Unlearned Graphs from Graph Unlearningcited by 0
- 2025Descend or Rewind? Stochastic Gradient Descent Unlearningcited by 0
- 2026A Robust Certified Machine Unlearning Method Under Distribution Shiftcited by 0
- 2026Mitigating Privacy Risk via Forget Set-Free Unlearning12 Apr 2026
- 2026Forget by Uncertainty: Orthogonal Entropy Unlearning for Quantized Neural Networks31 Jan 2026
- 2026A Robust Certified Machine Unlearning Method Under Distribution Shift11 Jan 2026
- 2025Face Identity Unlearning for Retrieval via Embedding Dispersion15 Dec 2025
- 2025Descend or Rewind? Stochastic Gradient Descent Unlearning20 Nov 2025
- 2025GraphToxin: Reconstructing Full Unlearned Graphs from Graph Unlearning14 Nov 2025
- 2025Beyond Uniform Deletion: A Data Value-Weighted Framework for Certified Machine Unlearning10 Nov 2025
- 2025Efficient Utility-Preserving Machine Unlearning with Implicit Gradient Surgery25 Oct 2025
- 2025Graph Unlearning via Embedding Reconstruction -- A Range-Null Space Decomposition Approach4 Aug 2025
- 2025A Comprehensive Data-centric Overview of Federated Graph Learning22 Jul 2025
- 2025Model Collapse Is Not a Bug but a Feature in Machine Unlearning for LLMs6 Jul 2025
- 2025Unlearning Inversion Attacks for Graph Neural Networks1 Jun 2025
34 more
- 2025Unlearning Algorithmic Biases over Graphs20 May 2025
- 2025Human Motion Unlearning24 Mar 2025
- 2025Robust Machine Unlearning for Quantized Neural Networks via Adaptive Gradient Reweighting with Similar Labels18 Mar 2025
- 2025OpenGU: A Comprehensive Benchmark for Graph Unlearning6 Jan 2025
- 2024Can Graph Neural Networks Expose Training Data Properties? An Efficient Risk Assessment Approach6 Nov 2024
- 2024WAGLE: Strategic Weight Attribution for Effective and Modular Unlearning in Large Language Models23 Oct 2024
- 2024Simplicity Prevails: Rethinking Negative Preference Optimization for LLM Unlearning9 Oct 2024
- 2024A Probabilistic Perspective on Unlearning and Alignment for Large Language Models4 Oct 2024
- 2024Rewind-to-Delete: Certified Machine Unlearning for Nonconvex Functions15 Sep 2024
- 2024Accurate Forgetting for All-in-One Image Restoration Model1 Sep 2024
- 2024Scalable and Certifiable Graph Unlearning: Overcoming the Approximation Error Barrier17 Aug 2024
- 2024Graph Memory Learning: Imitating Lifelong Remembering and Forgetting of Brain Networks27 Jul 2024
- 2024Targeted Unlearning with Single Layer Unlearning Gradient16 Jul 2024
- 2024GraphMU: Repairing Robustness of Graph Neural Networks via Machine Unlearning19 Jun 2024
- 2024Graph Transductive Defense: a Two-Stage Defense for Graph Membership Inference Attacks12 Jun 2024
- 2024Label Smoothing Improves Machine Unlearning11 Jun 2024
- 2024Machine Unlearning: A Comprehensive Survey13 May 2024
- 2024Challenging Forgets: Unveiling the Worst-Case Forget Sets in Machine Unlearning12 Mar 2024
- 2023GraphGuard: Detecting and Counteracting Training Data Misuse in Graph Neural Networks13 Dec 2023
- 2023MultiDelete for Multimodal Machine Unlearning18 Nov 2023
- 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generation19 Oct 2023
- 2023To Generate or Not? Safety-Driven Unlearned Diffusion Models Are Still Easy To Generate Unsafe Images ... For Now18 Oct 2023
- 2023Distill to Delete: Unlearning in Graph Networks with Knowledge Distillation28 Sep 2023
- 2023A Survey of Graph Unlearning23 Aug 2023
- 2023Differentially Private Decoupled Graph Convolutions for Multigranular Topology Protection12 Jul 2023
- 2023Exploring the Landscape of Machine Unlearning: A Comprehensive Survey and Taxonomy10 May 2023
- 2023SAFE: Machine Unlearning With Shard Graphs25 Apr 2023
- 2023Model Sparsity Can Simplify Machine Unlearning11 Apr 2023
- 2023GIF: A General Graph Unlearning Strategy via Influence Function6 Apr 2023
- 2023GNNDelete: A General Strategy for Unlearning in Graph Neural Networks26 Feb 2023
- 2023Efficiently Forgetting What You Have Learned in Graph Representation Learning via Projection17 Feb 2023
- 2022Unlearning Graph Classifiers with Limited Data Resources6 Nov 2022
- 2022Machine Unlearning of Federated Clusters28 Oct 2022
- 2022A Survey of Machine Unlearning6 Sep 2022
- 2022A Survey of Machine Unlearningcited by 298
- 2023Model Sparsity Can Simplify Machine Unlearningcited by 206
- 2023GIF: A General Graph Unlearning Strategy via Influence Functioncited by 59
- 2023Exploring the Landscape of Machine Unlearning: A Comprehensive Survey and Taxonomycited by 44
- 2024Challenging Forgets: Unveiling the Worst-Case Forget Sets in Machine Unlearningcited by 44
- 2024Machine Unlearning: A Comprehensive Surveycited by 33
- 2022Unlearning Graph Classifiers with Limited Data Resourcescited by 31
- 2023SAFE: Machine Unlearning With Shard Graphscited by 28
- 2024WAGLE: Strategic Weight Attribution for Effective and Modular Unlearning in Large Language Modelscited by 25
- 2022Machine Unlearning of Federated Clusterscited by 21
- 2023Efficiently Forgetting What You Have Learned in Graph Representation Learning via Projectioncited by 20
- 2023MultiDelete for Multimodal Machine Unlearningcited by 20
12 most cited of 33 All 33 (JSON)
- 2026Mitigating Privacy Risk via Forget Set-Free Unlearning12 Apr 2026
- 2026Forget by Uncertainty: Orthogonal Entropy Unlearning for Quantized Neural Networks31 Jan 2026
- 2026A Robust Certified Machine Unlearning Method Under Distribution Shift11 Jan 2026
- 2025Face Identity Unlearning for Retrieval via Embedding Dispersion15 Dec 2025
- 2025Descend or Rewind? Stochastic Gradient Descent Unlearning20 Nov 2025
- 2025GraphToxin: Reconstructing Full Unlearned Graphs from Graph Unlearning14 Nov 2025
- 2025Beyond Uniform Deletion: A Data Value-Weighted Framework for Certified Machine Unlearning10 Nov 2025
- 2025Efficient Utility-Preserving Machine Unlearning with Implicit Gradient Surgery25 Oct 2025
- 2025Graph Unlearning via Embedding Reconstruction -- A Range-Null Space Decomposition Approach4 Aug 2025
- 2025Unlearning Algorithmic Biases over Graphs20 May 2025
- 2025Human Motion Unlearning24 Mar 2025
- 2025Robust Machine Unlearning for Quantized Neural Networks via Adaptive Gradient Reweighting with Similar Labels18 Mar 2025
12 newest of 33 All 33 (JSON)
- 2023GNNDelete: A General Strategy for Unlearning in Graph Neural Networkscited by 43
- 2023Differentially Private Decoupled Graph Convolutions for Multigranular Topology Protectioncited by 12
- 2023GraphGuard: Detecting and Counteracting Training Data Misuse in Graph Neural Networkscited by 8
- 2025A Comprehensive Data-centric Overview of Federated Graph Learningcited by 7
- 2024Graph Memory Learning: Imitating Lifelong Remembering and Forgetting of Brain Networkscited by 4
- 2025Unlearning Inversion Attacks for Graph Neural Networkscited by 4
- 2024Can Graph Neural Networks Expose Training Data Properties? An Efficient Risk Assessment Approachcited by 3
- 2024GraphMU: Repairing Robustness of Graph Neural Networks via Machine Unlearningcited by 1
- 2025A Comprehensive Data-centric Overview of Federated Graph Learning22 Jul 2025
- 2025Unlearning Inversion Attacks for Graph Neural Networks1 Jun 2025
- 2024Can Graph Neural Networks Expose Training Data Properties? An Efficient Risk Assessment Approach6 Nov 2024
- 2024Graph Memory Learning: Imitating Lifelong Remembering and Forgetting of Brain Networks27 Jul 2024
- 2024GraphMU: Repairing Robustness of Graph Neural Networks via Machine Unlearning19 Jun 2024
- 2023GraphGuard: Detecting and Counteracting Training Data Misuse in Graph Neural Networks13 Dec 2023
- 2023Differentially Private Decoupled Graph Convolutions for Multigranular Topology Protection12 Jul 2023
- 2023GNNDelete: A General Strategy for Unlearning in Graph Neural Networks26 Feb 2023