mlsanityData to 7 Oct 2026

Subspace based Federated Unlearning

arXiv 2302.12448 ↗First posted 24 Feb 2023cs.LG cs.CR cs.DCcited by 13

On the map: LLM safety and security → Federated unlearning and poisoning

Abstract (arXiv)

Federated learning (FL) enables multiple clients to train a machine learning model collaboratively without exchanging their local data. Federated unlearning is an inverse FL process that aims to remove a specified target client's contribution in FL to satisfy the user's right to be forgotten. Most existing federated unlearning algorithms require the server to store the history of the parameter updates, which is not applicable in scenarios where the server storage resource is constrained. In this paper, we propose a simple-yet-effective subspace based federated unlearning method, dubbed SFU, that lets the global model perform gradient ascent in the orthogonal space of input gradient spaces formed by other clients to eliminate the target client's contribution without requiring additional storage. Specifically, the server first collects the gradients generated from the target client after performing gradient ascent, and the input representation matrix is computed locally by the remaining clients. We also design a differential privacy method to protect the privacy of the representation matrix. Then the server merges those representation matrices to get the input gradient subspace and updates the global model in the orthogonal subspace of the input gradient subspace to complete the forgetting task with minimal model performance degradation. Experiments on MNIST, CIFAR10, and CIFAR100 show that SFU outperforms several state-of-the-art (SOTA) federated unlearning algorithms by a large margin in various settings.

Key facts. Cited by 13 papers in the map (data through 7 Oct 2026). Placed in Federated unlearning and poisoning, one of 12 directions in LLM safety and security. Builds on 38 of its 58 references that are in the map. First posted on arXiv 24 Feb 2023.

Builds on

38 of 58 references.

Closest ancestors · 3

Same direction, newest first

  1. 2022Federated Unlearning: How to Efficiently Erase a Client in FL?12 Jul
  2. 2022Federated Unlearning with Knowledge Distillation24 Jan
  3. 2021Federated Unlearning via Class-Discriminative Pruning22 Oct

Other references · 35

  1. 2015Deep Residual Learning for Image Recognitioncited by 51,809
  2. 2019PyTorch: An Imperative Style, High-Performance Deep Learning Librarycited by 20,160
  3. 2018Representation Learning with Contrastive Predictive Codingcited by 7,662
  4. 2016Communication-Efficient Learning of Deep Networks from Decentralized Datacited by 7,592
  5. 2017Fashion-MNIST: a Novel Image Dataset for Benchmarking Machine Learning Algorithmscited by 4,283
  6. 2019Federated Learning: Challenges, Methods, and Future Directionscited by 1,531
  7. 2019On the Convergence of FedAvg on Non-IID Datacited by 1,220
  8. 2018Federated Learning with Non-IID Datacited by 1,099
  9. 2017BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chaincited by 1,052
  10. 2019Machine Unlearningcited by 1,020
  11. 2019Towards Federated Learning at Scale: System Designcited by 826
  12. 2021Model-Contrastive Federated Learningcited by 762
23 more
  1. 2018How To Backdoor Federated Learningcited by 745
  2. 2018Exploiting Unintended Feature Leakage in Collaborative Learningcited by 509
  3. 2019Making AI Forget You: Data Deletion in Machine Learningcited by 447
  4. 2019A Survey on Federated Learning Systems: Vision, Hype and Reality for Data Privacy and Protectioncited by 371
  5. 2019Orthogonal Gradient Descent for Continual Learningcited by 361
  6. 2021Remember What You Want to Forget: Algorithms for Machine Unlearningcited by 360
  7. 2021Gradient Projection Memory for Continual Learningcited by 338
  8. 2020Amnesiac Machine Learningcited by 305
  9. 2021Unrolling SGD: Understanding Factors Influencing Machine Unlearningcited by 274
  10. 2020Approximate Data Deletion from Machine Learning Modelscited by 250
  11. 2018A Hybrid Approach to Privacy-Preserving Federated Learningcited by 208
  12. 2020DeltaGrad: Rapid retraining of machine learning modelscited by 143
  13. 2020Machine Unlearning: Linear Filtration for Logit-based Classifierscited by 89
  14. 2020Bypassing the Ambient Dimension: Private SGD with Gradient Subspace Identificationcited by 88
  15. 2018Comprehensive Privacy Analysis of Deep Learning: Passive and Active White-box Inference Attacks against Centralized and Federated Learningcited by 75
  16. 2015Fast low-rank estimation by projected gradient descent: General statistical and algorithmic guaranteescited by 68
  17. 2022FedRecover: Recovering from Poisoning Attacks in Federated Learning using Historical Informationcited by 53
  18. 2017Detecting Cancer Metastases on Gigapixel Pathology Imagescited by 51
  19. 2021Subspace Adversarial Trainingcited by 41
  20. 2022One-shot Federated Learning without Server-side Trainingcited by 20
  21. 2022FedHiSyn: A Hierarchical Synchronous Federated Learning Framework for Resource and Data Heterogeneitycited by 20
  22. 2023Efficiently Forgetting What You Have Learned in Graph Representation Learning via Projectioncited by 20
  23. 2013Efficient Distance Metric Learning by Adaptive Sampling and Mini-Batch Stochastic Gradient Descent (SGD)cited by 4

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2023: 3; 2024: 7; 2025: 1; 2026: 2.

13 papers.

Sort:

By area: