Fast Machine Unlearning Without Retraining Through Selective Synaptic Dampening
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
Machine unlearning, the ability for a machine learning model to forget, is becoming increasingly important to comply with data privacy regulations, as well as to remove harmful, manipulated, or outdated information. The key challenge lies in forgetting specific information while protecting model performance on the remaining data. While current state-of-the-art methods perform well, they typically require some level of retraining over the retained data, in order to protect or restore model performance. This adds computational overhead and mandates that the training data remain available and accessible, which may not be feasible. In contrast, other methods employ a retrain-free paradigm, however, these approaches are prohibitively computationally expensive and do not perform on par with their retrain-based counterparts. We present Selective Synaptic Dampening (SSD), a novel two-step, post hoc, retrain-free approach to machine unlearning which is fast, performant, and does not require long-term storage of the training data. First, SSD uses the Fisher information matrix of the training and forgetting data to select parameters that are disproportionately important to the forget set. Second, SSD induces forgetting by dampening these parameters proportional to their relative importance to the forget set with respect to the wider training data. We evaluate our method against several existing unlearning methods in a range of experiments using ResNet18 and Vision Transformer. Results show that the performance of SSD is competitive with retrain-based post hoc methods, demonstrating the viability of retrain-free post hoc unlearning approaches.
Key facts. Cited by 177 papers in the map (data through 7 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 26 of its 38 references that are in the map. First posted on arXiv 15 Aug 2023.
Builds on
26 of 38 references.
Closest ancestors · 7
Same direction, newest first
- 2022Deep Regression Unlearning15 Oct
- 2022A Survey of Machine Unlearning6 Sep
- 2022Can Bad Teaching Induce Forgetting? Unlearning in Deep Networks using an Incompetent Teacher17 May
- 2022Deep Unlearning via Randomized Conditionally Independent Hessians15 Apr
- 2022Zero-Shot Machine Unlearning14 Jan
- 2021Fast Yet Effective Machine Unlearning17 Nov
- 2021Remember What You Want to Forget: Algorithms for Machine Unlearning4 Mar
Other references · 19
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2014Adam: A Method for Stochastic Optimizationcited by 36,960
- 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 29,915
- 2016Overcoming catastrophic forgetting in neural networkscited by 4,718
- 2019Optuna: A Next-generation Hyperparameter Optimization Frameworkcited by 2,455
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,221
- 2018The Secret Sharer: Evaluating and Testing Unintended Memorization in Neural Networkscited by 847
- 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 599
- 2019Certified Data Removal from Machine Learning Modelscited by 512
- 2019Does Learning Require Memorization? A Short Tale about a Long Tailcited by 452
- 2019Making AI Forget You: Data Deletion in Machine Learningcited by 447
- 2021Membership Inference Attacks on Machine Learning: A Surveycited by 306
7 more
- 2020Amnesiac Machine Learningcited by 305
- 2020Forgetting Outside the Box: Scrubbing Deep Networks of Information Accessible from Input-Output Observationscited by 171
- 2020Mixed-Privacy Forgetting in Deep Networkscited by 158
- 2020Variational Bayesian Unlearningcited by 114
- 2018Continuous Learning in Single-Incremental-Task Scenarioscited by 109
- 2021On the geometry of generalization and memorization in deep neural networkscited by 71
- 2021Elastic Weight Consolidation (EWC): Nuts and Boltscited by 21
Built on by
Citing papers per year: 2023: 5; 2024: 58; 2025: 59; 2026: 55.
177 papers.
Sort:
By area:
- 2024The WMDP Benchmark: Measuring and Reducing Malicious Use With Unlearningcited by 488
- 2023In-Context Unlearning: Language Models as Few Shot Unlearnerscited by 214
- 2024Guardrail Baselines for Unlearning in LLMscited by 90
- 2024Scissorhands: Scrub Data Influence via Connection Sensitivity in Networkscited by 50
- 2024Unified Gradient-Based Machine Unlearning with Remain Geometry Enhancementcited by 43
- 2024Dissecting Language Models: Machine Unlearning via Selective Pruningcited by 38
- 2024Extending Activation Steering to Broad Skills and Multiple Behaviourscited by 36
- 2024Machine Unlearning Fails to Remove Data Poisoning Attackscited by 35
- 2024Erasing Conceptual Knowledge from Language Modelscited by 34
- 2025Decoupled Distillation to Erase: A General Unlearning Method for Any Class-centric Taskscited by 28
- 2024On Effects of Steering Latent Representation for Large Language Model Unlearningcited by 27
- 2024Corrective Machine Unlearningcited by 26
38 more
- 2024Pruning for Robust Concept Erasing in Diffusion Modelscited by 22
- 2024Data Attribution for Text-to-Image Models by Unlearning Synthesized Imagescited by 22
- 2023Deep Unlearning: Fast and Efficient Gradient-free Approach to Class Forgettingcited by 21
- 2025SAEs Can Improve Unlearning: Dynamic Sparse Autoencoder Guardrails for Precision Unlearning in LLMscited by 21
- 2024The Utility and Complexity of in- and out-of-Distribution Machine Unlearningcited by 20
- 2024Learning to Unlearn for Robust Machine Unlearningcited by 19
- 2024MUNBa: Machine Unlearning via Nash Bargainingcited by 17
- 2024MU-Bench: A Multitask Multimodal Benchmark for Machine Unlearningcited by 16
- 2024Targeted Unlearning with Single Layer Unlearning Gradientcited by 16
- 2024An Information Theoretic Approach to Machine Unlearningcited by 15
- 2024Boosting Alignment for Post-Unlearning Text-to-Image Generative Modelscited by 15
- 2025NoT: Federated Unlearning via Weight Negationcited by 15
- 2026ConeSep: Cone-based Robust Noise-Unlearning Compositional Network for Composed Image Retrievalcited by 15
- 2024Potion: Towards Poison Unlearningcited by 14
- 2023DUCK: Distance-based Unlearning via Centroid Kinematicscited by 13
- 2024Remaining-data-free Machine Unlearning by Suppressing Sample Contributioncited by 13
- 2024Loss-Free Machine Unlearningcited by 12
- 2024Erase then Rectify: A Training-Free Parameter Editing Approach for Cost-Effective Graph Unlearningcited by 12
- 2025LoTUS: Large-Scale Machine Unlearning with a Taste of Uncertaintycited by 12
- 2025From Dormant to Deleted: Tamper-Resistant Unlearning Through Weight-Space Regularizationcited by 12
- 2024nabla τ: Gradient-based and Task-Agnostic machine Unlearningcited by 11
- 2024Towards Natural Machine Unlearningcited by 11
- 2024Ferrari: Federated Feature Unlearning via Optimizing Feature Sensitivitycited by 11
- 2024An Information Theoretic Evaluation Metric For Strong Unlearningcited by 11
- 2025Towards Lifecycle Unlearning Commitment Management: Measuring Sample-level Unlearning Completenesscited by 11
- 2025Membership Inference Attacks as Privacy Tools: Reliability, Disparity and Ensemblecited by 11
- 2023Generative Adversarial Networks Unlearningcited by 10
- 2023Unlearning via Sparse Representationscited by 10
- 2024SAP: Corrective Machine Unlearning with Scaled Activation Projection for Label Noise Robustnesscited by 10
- 2024Revisiting Machine Unlearning with Dimensional Alignmentcited by 10
- 2026Machine Unlearning under Retain-Forget Entanglementcited by 10
- 2024Parameter-tuning-free data entry error unlearning with adaptive selective synaptic dampeningcited by 9
- 2025Agents Are All You Need for LLM Unlearningcited by 9
- 2026VLA-Forget: Vision-Language-Action Unlearning for Embodied Foundation Modelscited by 9
- 2024Gone but Not Forgotten: Improved Benchmarks for Machine Unlearningcited by 8
- 2024LVMark: Robust Watermark for Latent Video Diffusion Modelscited by 8
- 2025Go Beyond Your Means: Unlearning with Per-Sample Gradient Orthogonalizationcited by 7
- 2025Redirection for Erasing Memory (REM): Towards a universal unlearning method for corrupted datacited by 7
50 most cited of 177 All 177 (JSON)
- 2026Repurposing Obsolete Representations for Post-Deployment Adaptation1 Oct 2026
- 2026When Is Deletion Ordering Tractable? From Update Dynamics to Permutation Structure1 Oct 2026
- 2026Unmerge: Efficient Machine Unlearning via Task Arithmetic30 Sep 2026
- 2026eval-unlearn: Benchmarking unlearning in Text-to-Image Diffusion Models28 Sep 2026
- 2026PruneForget: Joint Unlearning and Pruning of Vision Models26 Sep 2026
- 2026Damnatio Memoriae: Adversarially and Selectively Forgetting Identities in the Embedding Space of Face Recognition Models22 Sep 2026
- 2026Not All Patches Are Equally Forgettable: Spatially Localized Domain Unlearning in Vision-Language Models15 Sep 2026
- 2026Do Influence-Derived Data Perturbations Enable Machine Unlearning? A Controlled Study of Three Plausible Roles11 Sep 2026
- 2026Certifying Concept Unlearning in Text-to-Image Diffusion Models10 Sep 2026
- 2026Published Unlearning Numbers Move Per Checkpoint, and Not Because the Removed Data Survives: An Audit of 263 Released Batch-Normalized Checkpoints10 Sep 2026
- 2026The BatchNorm Illusion: Diagnosing Normalization Artifacts in Machine Unlearning Evaluation8 Sep 2026
- 2026OSR: Output Space Redistribution for Adaptive Label Removal in Classification Models3 Sep 2026
38 more
- 2026Distance Is Not Enough: Forget-Retain Alignment Gap Predicts LLM Relearning Robustness26 Aug 2026
- 2026Spectral Saliency for Machine Unlearning16 Aug 2026
- 2026SCOPE: Entanglement Frontier Escape for Source-Free Class Unlearning3 Aug 2026
- 2026Unlearning as Distribution Restoration: A Controlled Counterfactual Study, a Validated Selective Screen, and the Limits of Oracle-Free Certification21 Jul 2026
- 2026Association Restoration Test: Revealing Restorable Shortcuts after Unlearning7 Jul 2026
- 2026DFMU: Data-Frugal Machine Unlearning24 Jun 2026
- 2026Erased, but Not Gone: Output Forgetting Is Not True Forgetting23 Jun 2026
- 2026RepSelect: Robust LLM Unlearning via Representation Selectivity15 Jun 2026
- 2026TrustErase: Auditable Instant Machine Unlearning with Passport-Embedded Representations15 Jun 2026
- 2026SUPREME: A Multi-GPU Framework for Reproducible Image Unlearning Method Evaluation29 May 2026
- 2026MAAT: Multi-phase Adapter-Aware Targeted Unlearning28 May 2026
- 2026Do Vision Models Truly Forget? New Findings from Representation-Level Certification of Visual Unlearning in Vertical Federated Learning19 May 2026
- 2026Interference-Aware Multi-Task Unlearning18 May 2026
- 2026Behavioral Guarantees for Proxy-Based Unlearning11 May 2026
- 2026Classification-Head Bias in Class-Level Machine Unlearning: Diagnosis, Mitigation, and Evaluation9 May 2026
- 2026Retain-Neutral Surrogates for Min-Max Unlearning7 May 2026
- 2026Stable Multimodal Graph Unlearning via Feature-Dimension Aware Quantile Selection5 May 2026
- 2026Metric Unreliability in Multimodal Machine Unlearning: A Systematic Analysis and Principled Unified Score4 May 2026
- 2026CAP: Controllable Alignment Prompting for Unlearning in LLMs23 Apr 2026
- 2026ConeSep: Cone-based Robust Noise-Unlearning Compositional Network for Composed Image Retrieval22 Apr 2026
- 2026Robust Continual Unlearning against Knowledge Erosion and Forgetting Reversal21 Apr 2026
- 2026Class Unlearning via Depth-Aware Removal of Forget-Specific Directions16 Apr 2026
- 2026Mitigating Privacy Risk via Forget Set-Free Unlearning12 Apr 2026
- 2026Bias Redistribution in Visual Machine Unlearning: Does Forgetting One Group Harm Another?9 Apr 2026
- 2026Jellyfish: Zero-Shot Federated Unlearning Scheme with Knowledge Disentanglement5 Apr 2026
- 2026VLA-Forget: Vision-Language-Action Unlearning for Embodied Foundation Models5 Apr 2026
- 2026Machine Unlearning under Retain-Forget Entanglement27 Mar 2026
- 2026Models Designed to Forget: Machine Unlearning via Key Deletion16 Mar 2026
- 2026RAZOR: Ratio-Aware Layer Editing for Targeted Unlearning in Vision Transformers and Diffusion Models16 Mar 2026
- 2026Stake the Points: Structure-Faithful Instance Unlearning13 Mar 2026
- 2026Reference-Guided Machine Unlearning11 Mar 2026
- 2026Less Noise, Same Certificate: Retain Sensitivity for Unlearning3 Mar 2026
- 2026Attention Smoothing Is All You Need For Unlearning1 Mar 2026
- 2026ROKA: Robust Knowledge Unlearning against Adversaries28 Feb 2026
- 2026MeGU: Machine-Guided Unlearning with Target Feature Disentanglement19 Feb 2026
- 2026Suppression or Deletion: A Restoration-Based Representation-Level Analysis of Machine Unlearning18 Feb 2026
- 2026Selective Fine-Tuning for Targeted and Robust Concept Unlearning8 Feb 2026
- 2026Position: Capability Control Should be a Separate Goal From Alignment5 Feb 2026
50 newest of 177 All 177 (JSON)
- 2024The WMDP Benchmark: Measuring and Reducing Malicious Use With Unlearningcited by 488
- 2023In-Context Unlearning: Language Models as Few Shot Unlearnerscited by 214
- 2024Guardrail Baselines for Unlearning in LLMscited by 90
- 2024Scissorhands: Scrub Data Influence via Connection Sensitivity in Networkscited by 50
- 2024Unified Gradient-Based Machine Unlearning with Remain Geometry Enhancementcited by 43
- 2024Dissecting Language Models: Machine Unlearning via Selective Pruningcited by 38
- 2024Machine Unlearning Fails to Remove Data Poisoning Attackscited by 35
- 2024Erasing Conceptual Knowledge from Language Modelscited by 34
- 2025Decoupled Distillation to Erase: A General Unlearning Method for Any Class-centric Taskscited by 28
- 2024On Effects of Steering Latent Representation for Large Language Model Unlearningcited by 27
- 2024Corrective Machine Unlearningcited by 26
- 2024Data Attribution for Text-to-Image Models by Unlearning Synthesized Imagescited by 22
12 most cited of 147 All 147 (JSON)
- 2026Repurposing Obsolete Representations for Post-Deployment Adaptation1 Oct 2026
- 2026Unmerge: Efficient Machine Unlearning via Task Arithmetic30 Sep 2026
- 2026PruneForget: Joint Unlearning and Pruning of Vision Models26 Sep 2026
- 2026Do Influence-Derived Data Perturbations Enable Machine Unlearning? A Controlled Study of Three Plausible Roles11 Sep 2026
- 2026Published Unlearning Numbers Move Per Checkpoint, and Not Because the Removed Data Survives: An Audit of 263 Released Batch-Normalized Checkpoints10 Sep 2026
- 2026The BatchNorm Illusion: Diagnosing Normalization Artifacts in Machine Unlearning Evaluation8 Sep 2026
- 2026Distance Is Not Enough: Forget-Retain Alignment Gap Predicts LLM Relearning Robustness26 Aug 2026
- 2026Spectral Saliency for Machine Unlearning16 Aug 2026
- 2026SCOPE: Entanglement Frontier Escape for Source-Free Class Unlearning3 Aug 2026
- 2026Unlearning as Distribution Restoration: A Controlled Counterfactual Study, a Validated Selective Screen, and the Limits of Oracle-Free Certification21 Jul 2026
- 2026Association Restoration Test: Revealing Restorable Shortcuts after Unlearning7 Jul 2026
- 2026DFMU: Data-Frugal Machine Unlearning24 Jun 2026
12 newest of 147 All 147 (JSON)
- 2024Pruning for Robust Concept Erasing in Diffusion Modelscited by 22
- 2024Boosting Alignment for Post-Unlearning Text-to-Image Generative Modelscited by 15
- 2024LVMark: Robust Watermark for Latent Video Diffusion Modelscited by 8
- 2025A Unified Framework for Diffusion Model Unlearning with f-Divergencecited by 2
- 2026Selective Fine-Tuning for Targeted and Robust Concept Unlearningcited by 2
- 2025Unleashing Uncertainty: Efficient Machine Unlearning for Generative AIcited by 0
- 2026Certifying Concept Unlearning in Text-to-Image Diffusion Modelscited by 0
- 2026eval-unlearn: Benchmarking unlearning in Text-to-Image Diffusion Modelscited by 0
- 2026eval-unlearn: Benchmarking unlearning in Text-to-Image Diffusion Models28 Sep 2026
- 2026Certifying Concept Unlearning in Text-to-Image Diffusion Models10 Sep 2026
- 2026Selective Fine-Tuning for Targeted and Robust Concept Unlearning8 Feb 2026
- 2025A Unified Framework for Diffusion Model Unlearning with f-Divergence25 Sep 2025
- 2025Unleashing Uncertainty: Efficient Machine Unlearning for Generative AI28 Aug 2025
- 2024LVMark: Robust Watermark for Latent Video Diffusion Models12 Dec 2024
- 2024Boosting Alignment for Post-Unlearning Text-to-Image Generative Models9 Dec 2024
- 2024Pruning for Robust Concept Erasing in Diffusion Models26 May 2024
- 2026RAZOR: Ratio-Aware Layer Editing for Targeted Unlearning in Vision Transformers and Diffusion Modelscited by 3
- 2025Unlearning the Noisy Correspondence Makes CLIP More Robustcited by 1
- 2026Metric Unreliability in Multimodal Machine Unlearning: A Systematic Analysis and Principled Unified Scorecited by 0
- 2026Not All Patches Are Equally Forgettable: Spatially Localized Domain Unlearning in Vision-Language Modelscited by 0
- 2026Not All Patches Are Equally Forgettable: Spatially Localized Domain Unlearning in Vision-Language Models15 Sep 2026
- 2026Metric Unreliability in Multimodal Machine Unlearning: A Systematic Analysis and Principled Unified Score4 May 2026
- 2026RAZOR: Ratio-Aware Layer Editing for Targeted Unlearning in Vision Transformers and Diffusion Models16 Mar 2026
- 2025Unlearning the Noisy Correspondence Makes CLIP More Robust4 Jul 2025
- 2025Agents Are All You Need for LLM Unlearningcited by 9
- 2025Agents Are All You Need for LLM Unlearning1 Feb 2025
- 2024Extending Activation Steering to Broad Skills and Multiple Behaviourscited by 36
- 2024BMFT: Achieving Fairness via Bias-based Weight Masking Fine-tuningcited by 6
- 2024Learning to Obstruct Few-Shot Image Classification over Restricted Classescited by 5
- 2024Investigating Neuron Ablation in Attention Heads: The Case for Peak Activation Centeringcited by 4
- 2024Unforgettable Generalization in Language Modelscited by 4
- 2026Position: Capability Control Should be a Separate Goal From Alignmentcited by 2
- 2025Single-weight Model Editing for Post-hoc Spurious Correlation Neutralizationcited by 1
- 2025Backdoor Unlearning by Linear Task Decompositioncited by 1
- 2025Beyond Tokens in Language Models: Interpreting Activations through Text Genre Chunkscited by 1
- 2025SWiFT: Soft-Mask Weight Fine-tuning for Bias Mitigationcited by 0
- 2025Factor Decorrelation Enhanced Data Removal from Deep Predictive Modelscited by 0
- 2026OSR: Output Space Redistribution for Adaptive Label Removal in Classification Modelscited by 0
12 most cited of 14 All 14 (JSON)
- 2026When Is Deletion Ordering Tractable? From Update Dynamics to Permutation Structure1 Oct 2026
- 2026Damnatio Memoriae: Adversarially and Selectively Forgetting Identities in the Embedding Space of Face Recognition Models22 Sep 2026
- 2026OSR: Output Space Redistribution for Adaptive Label Removal in Classification Models3 Sep 2026
- 2026Position: Capability Control Should be a Separate Goal From Alignment5 Feb 2026
- 2025Beyond Tokens in Language Models: Interpreting Activations through Text Genre Chunks20 Nov 2025
- 2025Backdoor Unlearning by Linear Task Decomposition16 Oct 2025
- 2025Factor Decorrelation Enhanced Data Removal from Deep Predictive Models27 Sep 2025
- 2025SWiFT: Soft-Mask Weight Fine-tuning for Bias Mitigation26 Aug 2025
- 2025Single-weight Model Editing for Post-hoc Spurious Correlation Neutralization24 Jan 2025
- 2024Learning to Obstruct Few-Shot Image Classification over Restricted Classes28 Sep 2024
- 2024Unforgettable Generalization in Language Models3 Sep 2024
- 2024Investigating Neuron Ablation in Attention Heads: The Case for Peak Activation Centering30 Aug 2024
12 newest of 14 All 14 (JSON)