Unlearning Graph Classifiers with Limited Data Resources
On the map: LLM safety and security → Graph unlearning
Abstract (arXiv)
As the demand for user privacy grows, controlled data removal (machine unlearning) is becoming an important feature of machine learning models for data-sensitive Web applications such as social networks and recommender systems. Nevertheless, at this point it is still largely unknown how to perform efficient machine unlearning of graph neural networks (GNNs); this is especially the case when the number of training samples is small, in which case unlearning can seriously compromise the performance of the model. To address this issue, we initiate the study of unlearning the Graph Scattering Transform (GST), a mathematical framework that is efficient, provably stable under feature or graph topology perturbations, and offers graph classification performance comparable to that of GNNs. Our main contribution is the first known nonlinear approximate graph unlearning method based on GSTs. Our second contribution is a theoretical analysis of the computational complexity of the proposed unlearning mechanism, which is hard to replicate for deep neural networks. Our third contribution are extensive simulation results which show that, compared to complete retraining of GNNs after each removal request, the new GST-based approach offers, on average, a 10.38x speed-up and leads to a 2.6% increase in test accuracy during unlearning of 90 out of 100 training graphs from the IMDB dataset (10% training ratio). Our implementation is available online at https://doi.org/10.5281/zenodo.7613150.
Key facts. Cited by 31 papers in the map (data through 7 Oct 2026). Placed in Graph unlearning, one of 12 directions in LLM safety and security. Builds on 37 of its 62 references that are in the map. First posted on arXiv 6 Nov 2022.
Builds on
37 of 62 references.
Closest ancestors · 2
Same direction, newest first
- 2022Certified Graph Unlearning18 Jun
- 2021Graph Unlearning27 Mar
Other references · 35
- 2014Adam: A Method for Stochastic Optimizationcited by 36,960
- 2016Semi-Supervised Classification with Graph Convolutional Networkscited by 11,282
- 2017Inductive Representation Learning on Large Graphscited by 6,284
- 2018How Powerful are Graph Neural Networks?cited by 4,355
- 2019Fast Graph Representation Learning with PyTorch Geometriccited by 2,414
- 2019Simplifying Graph Convolutional Networkscited by 1,470
- 2018Graph Convolutional Neural Networks for Web-Scale Recommender Systemscited by 1,133
- 2019Machine Unlearningcited by 1,020
- 2015Convolutional Networks on Graphs for Learning Molecular Fingerprintscited by 751
- 2020TUDataset: A collection of benchmark datasets for learning with graphscited by 718
- 2019Graph Neural Networks for Social Recommendationcited by 711
- 2020Benchmarking Graph Neural Networkscited by 672
23 more
- 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 599
- 2019Certified Data Removal from Machine Learning Modelscited by 512
- 2020Graph Neural Networks in Recommender Systems: A Surveycited by 493
- 2019Generalizing from a Few Examples: A Survey on Few-Shot Learningcited by 462
- 2019Making AI Forget You: Data Deletion in Machine Learningcited by 447
- 2021Remember What You Want to Forget: Algorithms for Machine Unlearningcited by 360
- 2017Few-Shot Learning with Graph Neural Networkscited by 324
- 2019Graph Neural Networks with convolutional ARMA filterscited by 185
- 2020Scattering GCN: Overcoming Oversmoothness in Graph Convolutional Networkscited by 57
- 2019Semi-Supervised Graph Classification: A Hierarchical Graph Perspectivecited by 55
- 2018Algorithms that Remember: Model Inversion Attacks and Data Protection Lawcited by 52
- 2014PageRank beyond the Webcited by 51
- 2018Geometric Scattering for Graph Data Analysiscited by 49
- 2021Knowledge-aware Coupled Graph Neural Network for Social Recommendationcited by 49
- 2018Graph Convolutional Neural Networks via Scatteringcited by 46
- 2022GAP: Differentially Private Graph Neural Networks with Aggregation Perturbationcited by 46
- 2018Diffusion Scattering Transforms on Graphscited by 43
- 2021Node-Level Differentially Private Graph Neural Networkscited by 43
- 2019Graph Neural Network for Interpreting Task-fMRI Biomarkerscited by 40
- 2019Stability of Graph Scattering Transformscited by 34
- 2022Machine Unlearning of Federated Clusterscited by 21
- 2020Spatio-Temporal Graph Scattering Transformcited by 19
- 2013Spectrum-Adapted Tight Graph Wavelet and Vertex-Frequency Framescited by 15
Built on by
Citing papers per year: 2023: 8; 2024: 11; 2025: 9; 2026: 3.
31 papers.
Sort:
By area:
- 2023Machine Unlearning: Solutions and Challengescited by 85
- 2024Machine Unlearning in Generative AI: A Surveycited by 49
- 2023Exploring the Landscape of Machine Unlearning: A Comprehensive Survey and Taxonomycited by 44
- 2024Towards Certified Unlearning for Deep Neural Networkscited by 28
- 2024IDEA: A Flexible Framework of Certified Unlearning for Graph Neural Networkscited by 22
- 2023Breaking the Trilemma of Privacy, Utility, Efficiency via Controllable Machine Unlearningcited by 21
- 2024Verification of Machine Unlearning is Fragilecited by 20
- 2024Dynamic Graph Unlearning: A General and Efficient Post-Processing Method via Gradient Transformationcited by 15
- 2023Distill to Delete: Unlearning in Graph Networks with Knowledge Distillationcited by 13
- 2023DUCK: Distance-based Unlearning via Centroid Kinematicscited by 13
- 2024Scalable and Certifiable Graph Unlearning: Overcoming the Approximation Error Barriercited by 13
- 2023Differentially Private Decoupled Graph Convolutions for Multigranular Topology Protectioncited by 12
19 more
- 2023A Survey of Graph Unlearningcited by 12
- 2024Safety in Graph Machine Learning: Threats and Safeguardscited by 11
- 2024Machine Unlearning for Recommendation Systems: An Insightcited by 9
- 2023GraphGuard: Detecting and Counteracting Training Data Misuse in Graph Neural Networkscited by 8
- 2025OpenGU: A Comprehensive Benchmark for Graph Unlearningcited by 8
- 2025UPCORE: Utility-Preserving Coreset Selection for Balanced Unlearningcited by 7
- 2025TAPE: Tailored Posterior Difference for Auditing of Machine Unlearningcited by 6
- 2026SafeMo: Linguistically Grounded Unlearning for Trustworthy Text-to-Motion Generationcited by 6
- 2025Unlearning Inversion Attacks for Graph Neural Networkscited by 4
- 2024Can Graph Neural Networks Expose Training Data Properties? An Efficient Risk Assessment Approachcited by 3
- 2025Toward Scalable Graph Unlearning: A Node Influence Maximization based Approachcited by 2
- 2025Node-level Contrastive Unlearning on Graph Neural Networkscited by 1
- 2026Attack by Unlearning: Unlearning-Induced Adversarial Attacks on Graph Neural Networkscited by 1
- 2026GDGU: A Gradient Difference-based Graph Unlearning Method for Cyberattack Localization in Electric Vehicle Charging Networkscited by 1
- 2024Graph Transductive Defense: a Two-Stage Defense for Graph Membership Inference Attackscited by 0
- 2024Targeted Therapy in Data Removal: Object Unlearning Based on Scene Graphscited by 0
- 2025Unlearning Algorithmic Biases over Graphscited by 0
- 2025Unlearning of Knowledge Graph Embedding via Preference Optimizationcited by 0
- 2025Graph Unlearning via Embedding Reconstruction -- A Range-Null Space Decomposition Approachcited by 0
- 2026GDGU: A Gradient Difference-based Graph Unlearning Method for Cyberattack Localization in Electric Vehicle Charging Networks17 Jun 2026
- 2026Attack by Unlearning: Unlearning-Induced Adversarial Attacks on Graph Neural Networks19 Mar 2026
- 2026SafeMo: Linguistically Grounded Unlearning for Trustworthy Text-to-Motion Generation2 Jan 2026
- 2025Graph Unlearning via Embedding Reconstruction -- A Range-Null Space Decomposition Approach4 Aug 2025
- 2025Unlearning of Knowledge Graph Embedding via Preference Optimization28 Jul 2025
- 2025Unlearning Inversion Attacks for Graph Neural Networks1 Jun 2025
- 2025Unlearning Algorithmic Biases over Graphs20 May 2025
- 2025Node-level Contrastive Unlearning on Graph Neural Networks4 Mar 2025
- 2025TAPE: Tailored Posterior Difference for Auditing of Machine Unlearning27 Feb 2025
- 2025UPCORE: Utility-Preserving Coreset Selection for Balanced Unlearning20 Feb 2025
- 2025Toward Scalable Graph Unlearning: A Node Influence Maximization based Approach21 Jan 2025
- 2025OpenGU: A Comprehensive Benchmark for Graph Unlearning6 Jan 2025
19 more
- 2024Targeted Therapy in Data Removal: Object Unlearning Based on Scene Graphs25 Nov 2024
- 2024Can Graph Neural Networks Expose Training Data Properties? An Efficient Risk Assessment Approach6 Nov 2024
- 2024Scalable and Certifiable Graph Unlearning: Overcoming the Approximation Error Barrier17 Aug 2024
- 2024Verification of Machine Unlearning is Fragile1 Aug 2024
- 2024Towards Certified Unlearning for Deep Neural Networks1 Aug 2024
- 2024Machine Unlearning in Generative AI: A Survey30 Jul 2024
- 2024IDEA: A Flexible Framework of Certified Unlearning for Graph Neural Networks28 Jul 2024
- 2024Graph Transductive Defense: a Two-Stage Defense for Graph Membership Inference Attacks12 Jun 2024
- 2024Dynamic Graph Unlearning: A General and Efficient Post-Processing Method via Gradient Transformation23 May 2024
- 2024Safety in Graph Machine Learning: Threats and Safeguards17 May 2024
- 2024Machine Unlearning for Recommendation Systems: An Insight17 Jan 2024
- 2023GraphGuard: Detecting and Counteracting Training Data Misuse in Graph Neural Networks13 Dec 2023
- 2023DUCK: Distance-based Unlearning via Centroid Kinematics4 Dec 2023
- 2023Breaking the Trilemma of Privacy, Utility, Efficiency via Controllable Machine Unlearning28 Oct 2023
- 2023Distill to Delete: Unlearning in Graph Networks with Knowledge Distillation28 Sep 2023
- 2023A Survey of Graph Unlearning23 Aug 2023
- 2023Machine Unlearning: Solutions and Challenges14 Aug 2023
- 2023Differentially Private Decoupled Graph Convolutions for Multigranular Topology Protection12 Jul 2023
- 2023Exploring the Landscape of Machine Unlearning: A Comprehensive Survey and Taxonomy10 May 2023
- 2023Machine Unlearning: Solutions and Challengescited by 85
- 2024Machine Unlearning in Generative AI: A Surveycited by 49
- 2023Exploring the Landscape of Machine Unlearning: A Comprehensive Survey and Taxonomycited by 44
- 2024Towards Certified Unlearning for Deep Neural Networkscited by 28
- 2023Breaking the Trilemma of Privacy, Utility, Efficiency via Controllable Machine Unlearningcited by 21
- 2024Verification of Machine Unlearning is Fragilecited by 20
- 2024Dynamic Graph Unlearning: A General and Efficient Post-Processing Method via Gradient Transformationcited by 15
- 2023Distill to Delete: Unlearning in Graph Networks with Knowledge Distillationcited by 13
- 2023DUCK: Distance-based Unlearning via Centroid Kinematicscited by 13
- 2024Scalable and Certifiable Graph Unlearning: Overcoming the Approximation Error Barriercited by 13
- 2023A Survey of Graph Unlearningcited by 12
- 2024Machine Unlearning for Recommendation Systems: An Insightcited by 9
12 most cited of 21 All 21 (JSON)
- 2026SafeMo: Linguistically Grounded Unlearning for Trustworthy Text-to-Motion Generation2 Jan 2026
- 2025Graph Unlearning via Embedding Reconstruction -- A Range-Null Space Decomposition Approach4 Aug 2025
- 2025Unlearning Algorithmic Biases over Graphs20 May 2025
- 2025TAPE: Tailored Posterior Difference for Auditing of Machine Unlearning27 Feb 2025
- 2025UPCORE: Utility-Preserving Coreset Selection for Balanced Unlearning20 Feb 2025
- 2025Toward Scalable Graph Unlearning: A Node Influence Maximization based Approach21 Jan 2025
- 2025OpenGU: A Comprehensive Benchmark for Graph Unlearning6 Jan 2025
- 2024Targeted Therapy in Data Removal: Object Unlearning Based on Scene Graphs25 Nov 2024
- 2024Scalable and Certifiable Graph Unlearning: Overcoming the Approximation Error Barrier17 Aug 2024
- 2024Verification of Machine Unlearning is Fragile1 Aug 2024
- 2024Towards Certified Unlearning for Deep Neural Networks1 Aug 2024
- 2024Machine Unlearning in Generative AI: A Survey30 Jul 2024
12 newest of 21 All 21 (JSON)
- 2024IDEA: A Flexible Framework of Certified Unlearning for Graph Neural Networkscited by 22
- 2023Differentially Private Decoupled Graph Convolutions for Multigranular Topology Protectioncited by 12
- 2024Safety in Graph Machine Learning: Threats and Safeguardscited by 11
- 2023GraphGuard: Detecting and Counteracting Training Data Misuse in Graph Neural Networkscited by 8
- 2025Unlearning Inversion Attacks for Graph Neural Networkscited by 4
- 2024Can Graph Neural Networks Expose Training Data Properties? An Efficient Risk Assessment Approachcited by 3
- 2025Node-level Contrastive Unlearning on Graph Neural Networkscited by 1
- 2026Attack by Unlearning: Unlearning-Induced Adversarial Attacks on Graph Neural Networkscited by 1
- 2026GDGU: A Gradient Difference-based Graph Unlearning Method for Cyberattack Localization in Electric Vehicle Charging Networkscited by 1
- 2026GDGU: A Gradient Difference-based Graph Unlearning Method for Cyberattack Localization in Electric Vehicle Charging Networks17 Jun 2026
- 2026Attack by Unlearning: Unlearning-Induced Adversarial Attacks on Graph Neural Networks19 Mar 2026
- 2025Unlearning Inversion Attacks for Graph Neural Networks1 Jun 2025
- 2025Node-level Contrastive Unlearning on Graph Neural Networks4 Mar 2025
- 2024Can Graph Neural Networks Expose Training Data Properties? An Efficient Risk Assessment Approach6 Nov 2024
- 2024IDEA: A Flexible Framework of Certified Unlearning for Graph Neural Networks28 Jul 2024
- 2024Safety in Graph Machine Learning: Threats and Safeguards17 May 2024
- 2023GraphGuard: Detecting and Counteracting Training Data Misuse in Graph Neural Networks13 Dec 2023
- 2023Differentially Private Decoupled Graph Convolutions for Multigranular Topology Protection12 Jul 2023