Feature Unlearning for Pre-trained GANs and VAEs
On the map: LLM safety and security → Vision-language and text-to-image safety
Abstract (arXiv)
We tackle the problem of feature unlearning from a pre-trained image generative model: GANs and VAEs. Unlike a common unlearning task where an unlearning target is a subset of the training set, we aim to unlearn a specific feature, such as hairstyle from facial images, from the pre-trained generative models. As the target feature is only presented in a local region of an image, unlearning the entire image from the pre-trained model may result in losing other details in the remaining region of the image. To specify which features to unlearn, we collect randomly generated images that contain the target features. We then identify a latent representation corresponding to the target feature and then use the representation to fine-tune the pre-trained model. Through experiments on MNIST, CelebA, and FFHQ datasets, we show that target features are successfully removed while keeping the fidelity of the original models. Further experiments with an adversarial attack show that the unlearned model is more robust under the presence of malicious parties.
Key facts. Cited by 16 papers in the map (data through 14 Oct 2026). Placed in Vision-language and text-to-image safety, one of 12 directions in LLM safety and security. Builds on 35 of its 52 references that are in the map. First posted on arXiv 10 Mar 2023.
Builds on
35 of 52 references.
References · 35
- 2022Hierarchical Text-Conditional Image Generation with CLIP Latentscited by 6,585
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
- 2018A Style-Based Generator Architecture for Generative Adversarial Networkscited by 6,013
- 2022Generative Adversarial Networkscited by 5,627
- 2016Image-to-Image Translation with Conditional Adversarial Networkscited by 4,527
- 2017MobileNets: Efficient Convolutional Neural Networks for Mobile Vision Applicationscited by 3,845
- 2017Progressive Growing of GANs for Improved Quality, Stability, and Variationcited by 2,988
- 2016Improved Techniques for Training GANscited by 2,970
- 2016Perceptual Losses for Real-Time Style Transfer and Super-Resolutioncited by 2,694
- 2015Unsupervised Representation Learning with Deep Convolutional Generative Adversarial Networkscited by 2,054
- 2016Context Encoders: Feature Learning by Inpaintingcited by 1,428
- 2016Colorful Image Colorizationcited by 1,114
23 more
- 2018Challenging Common Assumptions in the Unsupervised Learning of Disentangled Representationscited by 941
- 2019Interpreting the Latent Space of GANs for Semantic Face Editingcited by 695
- 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 618
- 2020GANSpace: Discovering Interpretable GAN Controlscited by 614
- 2019Making AI Forget You: Data Deletion in Machine Learningcited by 465
- 2020Closed-Form Factorization of Latent Semantics in GANscited by 408
- 2017Adversarial Examples: Attacks and Defenses for Deep Learningcited by 351
- 2022A Survey of Machine Unlearningcited by 312
- 2020Unsupervised Discovery of Interpretable Directions in the GAN Latent Spacecited by 289
- 2020Very Deep VAEs Generalize Autoregressive Models and Can Outperform Them on Imagescited by 264
- 2021Fast Yet Effective Machine Unlearningcited by 217
- 2019GANalyze: Toward Visual Definitions of Cognitive Image Propertiescited by 193
- 2021Adaptive Machine Unlearningcited by 176
- 2022Zero-Shot Machine Unlearningcited by 133
- 2020Variational Bayesian Unlearningcited by 117
- 2020Machine Unlearning: Linear Filtration for Logit-based Classifierscited by 95
- 2018Morpho-MNIST: Quantitative Assessment and Diagnostics for Representation Learningcited by 56
- 2021WarpedGANSpace: Finding non-linear RBF paths in GAN latent spacecited by 48
- 2022StudioGAN: A Taxonomy and Benchmark of GANs for Image Synthesiscited by 38
- 2021The Geometry of Deep Generative Image Models and its Applicationscited by 35
- 2022Few-Shot Unlearning by Model Inversioncited by 19
- 2022Data Redaction from Pre-trained GANscited by 18
- 2022Efficient Attribute Unlearning: Towards Selective Removal of Input Attributes from Feature Representationscited by 17
Built on by
Citing papers per year: 2023: 3; 2024: 6; 2025: 5; 2026: 2.
16 papers.
Sort:
By area:
- 2023Exploring the Landscape of Machine Unlearning: A Comprehensive Survey and Taxonomycited by 51
- 2024Machine Unlearning in Generative AI: A Surveycited by 49
- 2024Unified Parameter-Efficient Unlearning for LLMscited by 25
- 2024A Survey on Machine Unlearning: Techniques and New Emerged Privacy Riskscited by 15
- 2023Adapt then Unlearn: Exploring Parameter Space Semantics for Unlearning in Generative Adversarial Networkscited by 11
- 2024Ferrari: Federated Feature Unlearning via Optimizing Feature Sensitivitycited by 11
- 2023FAST: Feature Aware Similarity Thresholding for Weak Unlearning in Black-Box Generative Modelscited by 5
- 2024Moderating the Generalization of Score-based Generative Modelcited by 4
- 2025Generative Model Unlearning: A Survey through Target Events, Unlearning Operators, and Evaluation Protocolscited by 4
- 2025Efficient Knowledge Graph Unlearning with Zeroth-order Informationcited by 3
- 2025Backdoor Defense in Diffusion Models via Spatial Attention Unlearningcited by 2
- 2025Prompting Forgetting: Unlearning in GANs via Textual Guidancecited by 1
4 more
- 2025Unlearning in Diffusion models under Data Constraints: A Variational Inference Approachcited by 1
- 2024Targeted Therapy in Data Removal: Object Unlearning Based on Scene Graphscited by 0
- 2026IREU: Identity-Related Encoder-Only Unlearning for Customized Portrait Generationcited by 0
- 2026DECAF: De-Clustering for Adaptive Representational Unlearningcited by 0
- 2026DECAF: De-Clustering for Adaptive Representational Unlearning27 Jul 2026
- 2026IREU: Identity-Related Encoder-Only Unlearning for Customized Portrait Generation29 Jun 2026
- 2025Unlearning in Diffusion models under Data Constraints: A Variational Inference Approach5 Oct 2025
- 2025Efficient Knowledge Graph Unlearning with Zeroth-order Information19 Aug 2025
- 2025Generative Model Unlearning: A Survey through Target Events, Unlearning Operators, and Evaluation Protocols26 Jul 2025
- 2025Backdoor Defense in Diffusion Models via Spatial Attention Unlearning21 Apr 2025
- 2025Prompting Forgetting: Unlearning in GANs via Textual Guidance1 Apr 2025
- 2024Moderating the Generalization of Score-based Generative Model10 Dec 2024
- 2024Unified Parameter-Efficient Unlearning for LLMs30 Nov 2024
- 2024Targeted Therapy in Data Removal: Object Unlearning Based on Scene Graphs25 Nov 2024
- 2024Machine Unlearning in Generative AI: A Survey30 Jul 2024
- 2024A Survey on Machine Unlearning: Techniques and New Emerged Privacy Risks10 Jun 2024
4 more
- 2024Ferrari: Federated Feature Unlearning via Optimizing Feature Sensitivity23 May 2024
- 2023FAST: Feature Aware Similarity Thresholding for Weak Unlearning in Black-Box Generative Models22 Dec 2023
- 2023Adapt then Unlearn: Exploring Parameter Space Semantics for Unlearning in Generative Adversarial Networks25 Sep 2023
- 2023Exploring the Landscape of Machine Unlearning: A Comprehensive Survey and Taxonomy10 May 2023
- 2023Exploring the Landscape of Machine Unlearning: A Comprehensive Survey and Taxonomycited by 51
- 2024Machine Unlearning in Generative AI: A Surveycited by 49
- 2024A Survey on Machine Unlearning: Techniques and New Emerged Privacy Riskscited by 15
- 2023Adapt then Unlearn: Exploring Parameter Space Semantics for Unlearning in Generative Adversarial Networkscited by 11
- 2024Ferrari: Federated Feature Unlearning via Optimizing Feature Sensitivitycited by 11
- 2023FAST: Feature Aware Similarity Thresholding for Weak Unlearning in Black-Box Generative Modelscited by 5
- 2025Generative Model Unlearning: A Survey through Target Events, Unlearning Operators, and Evaluation Protocolscited by 4
- 2025Efficient Knowledge Graph Unlearning with Zeroth-order Informationcited by 3
- 2025Prompting Forgetting: Unlearning in GANs via Textual Guidancecited by 1
- 2024Targeted Therapy in Data Removal: Object Unlearning Based on Scene Graphscited by 0
- 2026IREU: Identity-Related Encoder-Only Unlearning for Customized Portrait Generationcited by 0
- 2026DECAF: De-Clustering for Adaptive Representational Unlearningcited by 0
- 2026DECAF: De-Clustering for Adaptive Representational Unlearning27 Jul 2026
- 2026IREU: Identity-Related Encoder-Only Unlearning for Customized Portrait Generation29 Jun 2026
- 2025Efficient Knowledge Graph Unlearning with Zeroth-order Information19 Aug 2025
- 2025Generative Model Unlearning: A Survey through Target Events, Unlearning Operators, and Evaluation Protocols26 Jul 2025
- 2025Prompting Forgetting: Unlearning in GANs via Textual Guidance1 Apr 2025
- 2024Targeted Therapy in Data Removal: Object Unlearning Based on Scene Graphs25 Nov 2024
- 2024Machine Unlearning in Generative AI: A Survey30 Jul 2024
- 2024A Survey on Machine Unlearning: Techniques and New Emerged Privacy Risks10 Jun 2024
- 2024Ferrari: Federated Feature Unlearning via Optimizing Feature Sensitivity23 May 2024
- 2023FAST: Feature Aware Similarity Thresholding for Weak Unlearning in Black-Box Generative Models22 Dec 2023
- 2023Adapt then Unlearn: Exploring Parameter Space Semantics for Unlearning in Generative Adversarial Networks25 Sep 2023
- 2023Exploring the Landscape of Machine Unlearning: A Comprehensive Survey and Taxonomy10 May 2023
- 2024Unified Parameter-Efficient Unlearning for LLMscited by 25
- 2024Unified Parameter-Efficient Unlearning for LLMs30 Nov 2024
Similar, not cited
Close in wording, no citation either way
- 2025UNO: Unlearning via Orthogonalization in Generative models
- 2024Unlearn and Burn: Adversarial Machine Unlearning Requests Destroy Model Accuracy
- 2024Defensive Unlearning with Adversarial Training for Robust Concept Erasure in Diffusion Models
- 2024Machine Unlearning for Image-to-Image Generative Models
- 2025AMUN: Adversarial Machine UNlearning
- 2023Generative Adversarial Networks Unlearning
- 2025Toward Reliable Machine Unlearning: Theory, Algorithms, and Evaluation
- 2024Attack and Reset for Unlearning: Exploiting Adversarial Noise toward Machine Unlearning through Parameter Re-initialization