Subspace based Federated Unlearning
On the map: LLM safety and security → Federated unlearning and poisoning
Abstract (arXiv)
Federated learning (FL) enables multiple clients to train a machine learning model collaboratively without exchanging their local data. Federated unlearning is an inverse FL process that aims to remove a specified target client's contribution in FL to satisfy the user's right to be forgotten. Most existing federated unlearning algorithms require the server to store the history of the parameter updates, which is not applicable in scenarios where the server storage resource is constrained. In this paper, we propose a simple-yet-effective subspace based federated unlearning method, dubbed SFU, that lets the global model perform gradient ascent in the orthogonal space of input gradient spaces formed by other clients to eliminate the target client's contribution without requiring additional storage. Specifically, the server first collects the gradients generated from the target client after performing gradient ascent, and the input representation matrix is computed locally by the remaining clients. We also design a differential privacy method to protect the privacy of the representation matrix. Then the server merges those representation matrices to get the input gradient subspace and updates the global model in the orthogonal subspace of the input gradient subspace to complete the forgetting task with minimal model performance degradation. Experiments on MNIST, CIFAR10, and CIFAR100 show that SFU outperforms several state-of-the-art (SOTA) federated unlearning algorithms by a large margin in various settings.
Key facts. Cited by 13 papers in the map (data through 7 Oct 2026). Placed in Federated unlearning and poisoning, one of 12 directions in LLM safety and security. Builds on 38 of its 58 references that are in the map. First posted on arXiv 24 Feb 2023.
Builds on
38 of 58 references.
Closest ancestors · 3
Same direction, newest first
- 2022Federated Unlearning: How to Efficiently Erase a Client in FL?12 Jul
- 2022Federated Unlearning with Knowledge Distillation24 Jan
- 2021Federated Unlearning via Class-Discriminative Pruning22 Oct
Other references · 35
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2019PyTorch: An Imperative Style, High-Performance Deep Learning Librarycited by 20,160
- 2018Representation Learning with Contrastive Predictive Codingcited by 7,662
- 2016Communication-Efficient Learning of Deep Networks from Decentralized Datacited by 7,592
- 2017Fashion-MNIST: a Novel Image Dataset for Benchmarking Machine Learning Algorithmscited by 4,283
- 2019Federated Learning: Challenges, Methods, and Future Directionscited by 1,531
- 2019On the Convergence of FedAvg on Non-IID Datacited by 1,220
- 2018Federated Learning with Non-IID Datacited by 1,099
- 2017BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chaincited by 1,052
- 2019Machine Unlearningcited by 1,020
- 2019Towards Federated Learning at Scale: System Designcited by 826
- 2021Model-Contrastive Federated Learningcited by 762
23 more
- 2018How To Backdoor Federated Learningcited by 745
- 2018Exploiting Unintended Feature Leakage in Collaborative Learningcited by 509
- 2019Making AI Forget You: Data Deletion in Machine Learningcited by 447
- 2019A Survey on Federated Learning Systems: Vision, Hype and Reality for Data Privacy and Protectioncited by 371
- 2019Orthogonal Gradient Descent for Continual Learningcited by 361
- 2021Remember What You Want to Forget: Algorithms for Machine Unlearningcited by 360
- 2021Gradient Projection Memory for Continual Learningcited by 338
- 2020Amnesiac Machine Learningcited by 305
- 2021Unrolling SGD: Understanding Factors Influencing Machine Unlearningcited by 274
- 2020Approximate Data Deletion from Machine Learning Modelscited by 250
- 2018A Hybrid Approach to Privacy-Preserving Federated Learningcited by 208
- 2020DeltaGrad: Rapid retraining of machine learning modelscited by 143
- 2020Machine Unlearning: Linear Filtration for Logit-based Classifierscited by 89
- 2020Bypassing the Ambient Dimension: Private SGD with Gradient Subspace Identificationcited by 88
- 2018Comprehensive Privacy Analysis of Deep Learning: Passive and Active White-box Inference Attacks against Centralized and Federated Learningcited by 75
- 2015Fast low-rank estimation by projected gradient descent: General statistical and algorithmic guaranteescited by 68
- 2022FedRecover: Recovering from Poisoning Attacks in Federated Learning using Historical Informationcited by 53
- 2017Detecting Cancer Metastases on Gigapixel Pathology Imagescited by 51
- 2021Subspace Adversarial Trainingcited by 41
- 2022One-shot Federated Learning without Server-side Trainingcited by 20
- 2022FedHiSyn: A Hierarchical Synchronous Federated Learning Framework for Resource and Data Heterogeneitycited by 20
- 2023Efficiently Forgetting What You Have Learned in Graph Representation Learning via Projectioncited by 20
- 2013Efficient Distance Metric Learning by Adaptive Sampling and Mini-Batch Stochastic Gradient Descent (SGD)cited by 4
Built on by
Citing papers per year: 2023: 3; 2024: 7; 2025: 1; 2026: 2.
13 papers.
Sort:
By area:
- 2023Exploring the Landscape of Machine Unlearning: A Comprehensive Survey and Taxonomycited by 44
- 2024Federated Unlearning: A Survey on Methods, Design Guidelines, and Evaluation Metricscited by 25
- 2023Federated Orthogonal Training: Mitigating Global Catastrophic Forgetting in Continual Federated Learningcited by 21
- 2023Deep Unlearning: Fast and Efficient Gradient-free Approach to Class Forgettingcited by 21
- 2024Ferrari: Federated Feature Unlearning via Optimizing Feature Sensitivitycited by 11
- 2024Towards Privacy-Guaranteed Label Unlearning in Vertical Federated Learning: Few-Shot Forgetting without Disclosurecited by 5
- 2024Efficient Federated Unlearning with Adaptive Differential Privacy Preservationcited by 2
- 2025Ready2Unlearn: A Learning-Time Approach for Preparing Models with Future Unlearning Readinesscited by 2
- 2024A Survey on Federated Unlearning: Challenges and Opportunitiescited by 0
- 2024Convergent Differential Privacy Analysis for General Federated Learningcited by 0
- 2024Streamlined Federated Unlearning: Unite as One to Be Highly Efficientcited by 0
- 2026Machine Unlearning in Low-Dimensional Feature Subspacecited by 0
1 more
- 2026f-FUM: Federated Unlearning via min--max and f-divergence5 Feb 2026
- 2026Machine Unlearning in Low-Dimensional Feature Subspace30 Jan 2026
- 2025Ready2Unlearn: A Learning-Time Approach for Preparing Models with Future Unlearning Readiness16 May 2025
- 2024Streamlined Federated Unlearning: Unite as One to Be Highly Efficient28 Nov 2024
- 2024Efficient Federated Unlearning with Adaptive Differential Privacy Preservation17 Nov 2024
- 2024Towards Privacy-Guaranteed Label Unlearning in Vertical Federated Learning: Few-Shot Forgetting without Disclosure14 Oct 2024
- 2024Convergent Differential Privacy Analysis for General Federated Learning28 Aug 2024
- 2024Ferrari: Federated Feature Unlearning via Optimizing Feature Sensitivity23 May 2024
- 2024A Survey on Federated Unlearning: Challenges and Opportunities4 Mar 2024
- 2024Federated Unlearning: A Survey on Methods, Design Guidelines, and Evaluation Metrics10 Jan 2024
- 2023Deep Unlearning: Fast and Efficient Gradient-free Approach to Class Forgetting1 Dec 2023
- 2023Federated Orthogonal Training: Mitigating Global Catastrophic Forgetting in Continual Federated Learning3 Sep 2023
1 more
- 2023Exploring the Landscape of Machine Unlearning: A Comprehensive Survey and Taxonomycited by 44
- 2024Federated Unlearning: A Survey on Methods, Design Guidelines, and Evaluation Metricscited by 25
- 2023Deep Unlearning: Fast and Efficient Gradient-free Approach to Class Forgettingcited by 21
- 2024Ferrari: Federated Feature Unlearning via Optimizing Feature Sensitivitycited by 11
- 2024Towards Privacy-Guaranteed Label Unlearning in Vertical Federated Learning: Few-Shot Forgetting without Disclosurecited by 5
- 2024Efficient Federated Unlearning with Adaptive Differential Privacy Preservationcited by 2
- 2025Ready2Unlearn: A Learning-Time Approach for Preparing Models with Future Unlearning Readinesscited by 2
- 2024A Survey on Federated Unlearning: Challenges and Opportunitiescited by 0
- 2024Streamlined Federated Unlearning: Unite as One to Be Highly Efficientcited by 0
- 2026Machine Unlearning in Low-Dimensional Feature Subspacecited by 0
- 2026f-FUM: Federated Unlearning via min--max and f-divergencecited by 0
- 2026f-FUM: Federated Unlearning via min--max and f-divergence5 Feb 2026
- 2026Machine Unlearning in Low-Dimensional Feature Subspace30 Jan 2026
- 2025Ready2Unlearn: A Learning-Time Approach for Preparing Models with Future Unlearning Readiness16 May 2025
- 2024Streamlined Federated Unlearning: Unite as One to Be Highly Efficient28 Nov 2024
- 2024Efficient Federated Unlearning with Adaptive Differential Privacy Preservation17 Nov 2024
- 2024Towards Privacy-Guaranteed Label Unlearning in Vertical Federated Learning: Few-Shot Forgetting without Disclosure14 Oct 2024
- 2024Ferrari: Federated Feature Unlearning via Optimizing Feature Sensitivity23 May 2024
- 2024A Survey on Federated Unlearning: Challenges and Opportunities4 Mar 2024
- 2024Federated Unlearning: A Survey on Methods, Design Guidelines, and Evaluation Metrics10 Jan 2024
- 2023Deep Unlearning: Fast and Efficient Gradient-free Approach to Class Forgetting1 Dec 2023
- 2023Exploring the Landscape of Machine Unlearning: A Comprehensive Survey and Taxonomy10 May 2023