Ticketed Learning-Unlearning Schemes
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
We consider the learning--unlearning paradigm defined as follows. First given a dataset, the goal is to learn a good predictor, such as one minimizing a certain loss. Subsequently, given any subset of examples that wish to be unlearnt, the goal is to learn, without the knowledge of the original training dataset, a good predictor that is identical to the predictor that would have been produced when learning from scratch on the surviving examples. We propose a new ticketed model for learning--unlearning wherein the learning algorithm can send back additional information in the form of a small-sized (encrypted) ``ticket'' to each participating training example, in addition to retaining a small amount of ``central'' information for later. Subsequently, the examples that wish to be unlearnt present their tickets to the unlearning algorithm, which additionally uses the central information to return a new predictor. We provide space-efficient ticketed learning--unlearning schemes for a broad family of concept classes, including thresholds, parities, intersection-closed classes, among others. En route, we introduce the count-to-zero problem, where during unlearning, the goal is to simply know if there are any examples that survived. We give a ticketed learning--unlearning scheme for this problem that relies on the construction of Sperner families with certain properties, which might be of independent interest.
Key facts. Cited by 10 papers in the map (data through 7 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 30 of its 49 references that are in the map. First posted on arXiv 27 Jun 2023.
Builds on
30 of 49 references.
Closest ancestors · 9
Same direction, newest first
- 2023SAFE: Machine Unlearning With Shard Graphs25 Apr
- 2022Verifiable and Provably Secure Machine Unlearning17 Oct
- 2022Forget Unlearning: Towards True Data-Deletion in Machine Learning17 Oct
- 2022Control, Confidentiality, and the Right to be Forgotten14 Oct
- 2022Algorithms that Approximate Data Removal: New Results and Limitations25 Sep
- 2021Unrolling SGD: Understanding Factors Influencing Machine Unlearning27 Sep
- 2021Adaptive Machine Unlearning8 Jun
- 2021Remember What You Want to Forget: Algorithms for Machine Unlearning4 Mar
- 2021Machine Unlearning via Algorithmic Stability25 Feb
Other references · 21
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,221
- 2020Extracting Training Data from Large Language Modelscited by 2,144
- 2019Machine Unlearningcited by 1,020
- 2021Membership Inference Attacks From First Principlescited by 839
- 2022Quantifying Memorization Across Neural Language Modelscited by 755
- 2023Extracting Training Data from Diffusion Modelscited by 723
- 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 599
- 2019Certified Data Removal from Machine Learning Modelscited by 512
- 2019Making AI Forget You: Data Deletion in Machine Learningcited by 447
- 2020Amnesiac Machine Learningcited by 305
- 2020Descent-to-Delete: Gradient-Based Methods for Machine Unlearningcited by 303
- 2020Approximate Data Deletion from Machine Learning Modelscited by 250
9 more
- 2020Mixed-Privacy Forgetting in Deep Networkscited by 158
- 2022The Privacy Onion Effect: Memorization is Relativecited by 128
- 2020Machine Unlearning for Random Forestscited by 125
- 2020Variational Bayesian Unlearningcited by 114
- 2019Analyzing Information Leakage of Updates to Natural Language Modelscited by 89
- 2020Proper Learning, Helly Number, and an Optimal SVM Boundcited by 52
- 2020Formalizing Data Deletion in the Context of the Right to be Forgottencited by 46
- 2022Hidden Poison: Machine Unlearning Enables Camouflaged Poisoning Attackscited by 37
- 2023Towards Bridging the Gaps between the Right to Explanation and the Right to be Forgottencited by 10
Built on by
Citing papers per year: 2023: 1; 2024: 3; 2025: 5; 2026: 1.
10 papers.
- 2024MUSE: Machine Unlearning Six-Way Evaluation for Language Modelscited by 251
- 2023Certified Minimax Unlearning with Generalization Rates and Deletion Capacitycited by 29
- 2024Unstable Unlearning: The Hidden Risk of Concept Resurgence in Diffusion Modelscited by 14
- 2025UCD: Unlearning in LLMs via Contrastive Decodingcited by 9
- 2025Machine Unlearning under Overparameterizationcited by 4
- 2025System-Aware Unlearning Algorithms: Use Lesser, Forget Fastercited by 3
- 2025Towards Evaluation for Real-World LLM Unlearningcited by 2
- 2025Online Learning and Unlearningcited by 1
- 2026Temper-Then-Tilt: Principled Unlearning for Generative Models through Tempering and Classifier Guidancecited by 1
- 2024Machine Unlearning using a Multi-GAN based Modelcited by 0
- 2026Temper-Then-Tilt: Principled Unlearning for Generative Models through Tempering and Classifier Guidance10 Feb 2026
- 2025Towards Evaluation for Real-World LLM Unlearning2 Aug 2025
- 2025UCD: Unlearning in LLMs via Contrastive Decoding12 Jun 2025
- 2025System-Aware Unlearning Algorithms: Use Lesser, Forget Faster6 Jun 2025
- 2025Machine Unlearning under Overparameterization28 May 2025
- 2025Online Learning and Unlearning13 May 2025
- 2024Unstable Unlearning: The Hidden Risk of Concept Resurgence in Diffusion Models10 Oct 2024
- 2024Machine Unlearning using a Multi-GAN based Model26 Jul 2024
- 2024MUSE: Machine Unlearning Six-Way Evaluation for Language Models8 Jul 2024
- 2023Certified Minimax Unlearning with Generalization Rates and Deletion Capacity16 Dec 2023