mlsanityData to 14 Oct 2026

Memorization Through the Lens of Curvature of Loss Function Around Samples

arXiv 2307.05831 ↗First posted 11 Jul 2023cs.LG cs.AIcited by 27

Not on the map. Why?

Abstract (arXiv)

Deep neural networks are over-parameterized and easily overfit the datasets they train on. In the extreme case, it has been shown that these networks can memorize a training set with fully randomized labels. We propose using the curvature of loss function around each training sample, averaged over training epochs, as a measure of memorization of the sample. We use this metric to study the generalization versus memorization properties of different samples in popular image datasets and show that it captures memorization statistics well, both qualitatively and quantitatively. We first show that the high curvature samples visually correspond to long-tailed, mislabeled, or conflicting samples, those that are most likely to be memorized. This analysis helps us find, to the best of our knowledge, a novel failure mode on the CIFAR100 and ImageNet datasets: that of duplicated images with differing labels. Quantitatively, we corroborate the validity of our scores via two methods. First, we validate our scores against an independent and comprehensively calculated baseline, by showing high cosine similarity with the memorization scores released by Feldman and Zhang (2020). Second, we inject corrupted samples which are memorized by the network, and show that these are learned with high curvature. To this end, we synthetically mislabel a random subset of the dataset. We overfit a network to it and show that sorting by curvature yields high AUROC values for identifying the corrupted samples. An added advantage of our method is that it is scalable, as it requires training only a single network as opposed to the thousands trained by the baseline, while capturing the aforementioned failure mode that the baseline fails to identify.

Key facts. Cited by 27 papers in the map (data through 14 Oct 2026). Builds on 33 of its 47 references that are in the map. First posted on arXiv 11 Jul 2023.

Builds on

33 of 47 references.

References · 33

  1. 2015Deep Residual Learning for Image Recognitioncited by 52,096
  2. 2014ImageNet Large Scale Visual Recognition Challengecited by 8,498
  3. 2015Batch Normalization: Accelerating Deep Network Training by Reducing Internal Covariate Shiftcited by 7,005
  4. 2017mixup: Beyond Empirical Risk Minimizationcited by 5,183
  5. 2017On Calibration of Modern Neural Networkscited by 4,960
  6. 2017Fashion-MNIST: a Novel Image Dataset for Benchmarking Machine Learning Algorithmscited by 4,349
  7. 2016Membership Inference Attacks against Machine Learning Modelscited by 2,281
  8. 2019A Survey on Bias and Fairness in Machine Learningcited by 1,917
  9. 2016Understanding deep learning requires rethinking generalizationcited by 1,674
  10. 2017Improved Regularization of Convolutional Neural Networks with Cutoutcited by 1,628
  11. 2019Do ImageNet Classifiers Generalize to ImageNet?cited by 1,515
  12. 2016On Large-Batch Training for Deep Learning: Generalization Gap and Sharp Minimacited by 1,352
21 more
  1. 2017Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoningcited by 1,055
  2. 2017A Closer Look at Memorization in Deep Networkscited by 942
  3. 2018The Secret Sharer: Evaluating and Testing Unintended Memorization in Neural Networkscited by 864
  4. 2019Benign Overfitting in Linear Regressioncited by 549
  5. 2020Overfitting in adversarially robust deep learningcited by 506
  6. 2020What Neural Networks Memorize and Why: Discovering the Long Tail via Influence Estimationcited by 497
  7. 2017Sharp Minima Can Generalize For Deep Netscited by 466
  8. 2019Does Learning Require Memorization? A Short Tale about a Long Tailcited by 460
  9. 2019Confident Learning: Estimating Uncertainty in Dataset Labelscited by 413
  10. 2021Pervasive Label Errors in Test Sets Destabilize Machine Learning Benchmarkscited by 395
  11. 2018Not All Samples Are Created Equal: Deep Learning with Importance Samplingcited by 328
  12. 2019An Investigation into Neural Net Optimization via Hessian Eigenvalue Densitycited by 292
  13. 2019PyHessian: Neural Networks Through the Lens of the Hessiancited by 292
  14. 2020Identifying Mislabeled Data using the Area Under the Margin Rankingcited by 261
  15. 2018Robustness via curvature regularization, and vice versacited by 175
  16. 2020Characterizing Structural Regularities of Labeled Data in Overparameterized Modelscited by 93
  17. 2021On the geometry of generalization and memorization in deep neural networkscited by 73
  18. 2019Do We Train on Test Data? Purging CIFAR of Near-Duplicatescited by 62
  19. 2019The Generalization-Stability Tradeoff In Neural Network Pruningcited by 54
  20. 2019Distribution Density, Tails, and Outliers in Machine Learning: Metrics and Applicationscited by 43
  21. 2022Characterizing Datapoints via Second-Split Forgettingcited by 37

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2023: 1; 2024: 8; 2025: 8; 2026: 10.

27 papers.

Sort:

By area:

  1. 2024The Pitfalls of Memorization: When Memorization Hurts Generalizationcited by 19
  2. 2024Memorization in deep learning: A surveycited by 15
  3. 2024Remaining-data-free Machine Unlearning by Suppressing Sample Contributioncited by 13
  4. 2024Range Membership Inference Attackscited by 12
  5. 2024Unveiling Privacy, Memorization, and Input Curvature Linkscited by 10
  6. 2024SAP: Corrective Machine Unlearning with Scaled Activation Projection for Label Noise Robustnesscited by 10
  7. 2025FUNU: Boosting Machine Unlearning Efficiency by Filtering Unnecessary Unlearningcited by 7
  8. 2025The Surprising Effectiveness of Membership Inference with Simple N-Gram Coveragecited by 7
  9. 2025Trustworthy Machine Learning via Memorization and the Granular Long-Tail: A Survey on Interactions, Tradeoffs, and Beyondcited by 6
  10. 2024Curvature Clues: Decoding Deep Learning Privacy with Input Loss Curvaturecited by 5
  11. 2024Scalability of memorization-based machine unlearningcited by 5
  12. 2025Shared Path: Unraveling Memorization in Multilingual LLMs through Language Similaritiescited by 3
15 more
  1. 2025Hey, That's My Data! Token-Only Dataset Inference in Large Language Modelscited by 3
  2. 2025Rethinking Benign Overfitting in Two-Layer Neural Networkscited by 2
  3. 2025From Memorization to Reasoning in the Spectrum of Loss Curvaturecited by 2
  4. 2023SoK: Memorisation in machine learningcited by 1
  5. 2026TopoPrune: Robust Data Pruning via Unified Latent Space Topologycited by 1
  6. 2026APEX: Probing Neural Networks via Activation Perturbationcited by 1
  7. 2025Efficiently Attacking Memorization Scorescited by 0
  8. 2026Loss Knows Best: Detecting Annotation Errors in Videos via Loss Trajectoriescited by 0
  9. 2026Geometry-Aware Attention Guidance for Diffusion Models via Modern Hopfield Dynamicscited by 0
  10. 2026Updating the standard neuron model in artificial neural networkscited by 0
  11. 2026Certification of Machine Learning Models via Directional Sharpnesscited by 0
  12. 2026When T2I Synthetic Data Backfires: Amplified Privacy Risks in Real-Synthetic Mix Trainingcited by 0
  13. 2026Memorization in image classification: test set behavior and scaling lawscited by 0
  14. 2026Fisher information and the geometry of memorization in neural networkscited by 0
  15. 2026Loss Curvature as a Sampling-Free Proxy for Memorization in Diffusion Modelscited by 0