mlsanityData to 14 Oct 2026

Adapt then Unlearn: Exploring Parameter Space Semantics for Unlearning in Generative Adversarial Networks

arXiv 2309.14054 ↗First posted 25 Sep 2023cs.LG cs.AI cs.CVcited by 11

On the map: LLM safety and security → Vision-language and text-to-image safety

Abstract (arXiv)

Owing to the growing concerns about privacy and regulatory compliance, it is desirable to regulate the output of generative models. To that end, the objective of this work is to prevent the generation of outputs containing undesired features from a pre-trained Generative Adversarial Network (GAN) where the underlying training data set is inaccessible. Our approach is inspired by the observation that the parameter space of GANs exhibits meaningful directions that can be leveraged to suppress specific undesired features. However, such directions usually result in the degradation of the quality of generated samples. Our proposed two-stage method, known as 'Adapt-then-Unlearn,' excels at unlearning such undesirable features while also maintaining the quality of generated samples. In the initial stage, we adapt a pre-trained GAN on a set of negative samples (containing undesired features) provided by the user. Subsequently, we train the original pre-trained GAN using positive samples, along with a repulsion regularizer. This regularizer encourages the learned model parameters to move away from the parameters of the adapted model (first stage) while not degrading the generation quality. We provide theoretical insights into the proposed method. To the best of our knowledge, our approach stands as the first method addressing unlearning within the realm of high-fidelity GANs (such as StyleGAN). We validate the effectiveness of our method through comprehensive experiments, encompassing both class-level unlearning on the MNIST and AFHQ dataset and feature-level unlearning tasks on the CelebA-HQ dataset. Our code and implementation is available at: https://github.com/atriguha/Adapt_Unlearn.

Key facts. Cited by 11 papers in the map (data through 14 Oct 2026). Placed in Vision-language and text-to-image safety, one of 12 directions in LLM safety and security. Builds on 57 of its 85 references that are in the map. First posted on arXiv 25 Sep 2023.

Builds on

57 of 85 references.

Closest ancestors · 2

Same direction, newest first

  1. 2023Generative Adversarial Networks Unlearning19 Aug
  2. 2023Feature Unlearning for Pre-trained GANs and VAEs10 Mar

Other references · 55

  1. 2020Denoising Diffusion Probabilistic Modelscited by 21,076
  2. 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,863
  3. 2020Score-Based Generative Modeling through Stochastic Differential Equationscited by 9,122
  4. 2022Hierarchical Text-Conditional Image Generation with CLIP Latentscited by 6,585
  5. 2018A Style-Based Generator Architecture for Generative Adversarial Networkscited by 6,013
  6. 2021Zero-Shot Text-to-Image Generationcited by 4,288
  7. 2019Generative Modeling by Estimating Gradients of the Data Distributioncited by 4,101
  8. 2016Simple and Scalable Predictive Uncertainty Estimation using Deep Ensemblescited by 3,926
  9. 2017Deep reinforcement learning from human preferencescited by 3,912
  10. 2014Deep Learning Face Attributes in the Wildcited by 3,693
  11. 2019Analyzing and Improving the Image Quality of StyleGANcited by 3,588
  12. 2017Progressive Growing of GANs for Improved Quality, Stability, and Variationcited by 2,988
38 more
  1. 2016Aggregated Residual Transformations for Deep Neural Networkscited by 2,546
  2. 2019Fine-Tuning Language Models from Human Preferencescited by 2,150
  3. 2017Understanding Black-box Predictions via Influence Functionscited by 1,741
  4. 2019Can You Trust Your Model's Uncertainty? Evaluating Predictive Uncertainty Under Dataset Shiftcited by 1,287
  5. 2021Alias-Free Generative Adversarial Networkscited by 1,184
  6. 2019StarGAN v2: Diverse Image Synthesis for Multiple Domainscited by 1,098
  7. 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 618
  8. 2019Certified Data Removal from Machine Learning Modelscited by 535
  9. 2020Bayesian Deep Learning and a Probabilistic Perspective of Generalizationcited by 480
  10. 2019Making AI Forget You: Data Deletion in Machine Learningcited by 465
  11. 2021Remember What You Want to Forget: Algorithms for Machine Unlearningcited by 371
  12. 2017Snapshot Ensembles: Train 1, get M for freecited by 350
  13. 2020Amnesiac Machine Learningcited by 319
  14. 2022A Survey of Machine Unlearningcited by 312
  15. 2020Descent-to-Delete: Gradient-Based Methods for Machine Unlearningcited by 311
  16. 2021Few-shot Image Generation via Cross-domain Correspondencecited by 207
  17. 2020Forgetting Outside the Box: Scrubbing Deep Networks of Information Accessible from Input-Output Observationscited by 180
  18. 2020Mixed-Privacy Forgetting in Deep Networkscited by 163
  19. 2020Hyperparameter Ensembles for Robustness and Uncertainty Quantificationcited by 150
  20. 2020DeltaGrad: Rapid retraining of machine learning modelscited by 149
  21. 2018Transferring GANs: generating images from limited datacited by 134
  22. 2022Zero-Shot Machine Unlearningcited by 133
  23. 2020Freeze the Discriminator: a Simple Baseline for Fine-Tuning GANscited by 132
  24. 2020Machine Unlearning for Random Forestscited by 131
  25. 2020Few-shot Image Generation with Elastic Weight Consolidationcited by 122
  26. 2020Variational Bayesian Unlearningcited by 117
  27. 2019MineGAN: effective knowledge transfer from GANs to target domains with few imagescited by 106
  28. 2021Repulsive Deep Ensembles are Bayesiancited by 104
  29. 2019Image Generation From Small Datasets via Batch Statistics Adaptationcited by 102
  30. 2022Towards Adversarial Evaluations for Inexact Machine Unlearningcited by 84
  31. 2020Learn to Forget: Machine Unlearning via Neuron Maskingcited by 62
  32. 2022Forget Unlearning: Towards True Data-Deletion in Machine Learningcited by 61
  33. 2022PUMA: Performance Unchanged Model Augmentation for Training Data Removalcited by 58
  34. 2022Few Shot Generative Model Adaption via Relaxed Spatial Structural Alignmentcited by 54
  35. 2020Navigating the GAN Parameter Space for Semantic Image Editingcited by 49
  36. 2022Learning with Recoverable Forgettingcited by 30
  37. 2020Neural networks with late-phase weightscited by 29
  38. 2022Repairing Neural Networks by Leaving the Right Past Behindcited by 27

50 most cited of 55 All 55 (JSON)

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2023: 2; 2024: 2; 2025: 6; 2026: 1.

11 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2025Prompting Forgetting: Unlearning in GANs via Textual Guidance
  2. 2023Gradient Surgery for One-shot Unlearning on Generative Model
  3. 2025Layered Unlearning for Adversarial Relearning
  4. 2025UNO: Unlearning via Orthogonalization in Generative models
  5. 2024Defensive Unlearning with Adversarial Training for Robust Concept Erasure in Diffusion Models
  6. 2025Adversarial Mixup Unlearning
  7. 2024Machine Unlearning using a Multi-GAN based Model
  8. 2024Attack and Reset for Unlearning: Exploiting Adversarial Noise toward Machine Unlearning through Parameter Re-initialization