Adapt then Unlearn: Exploring Parameter Space Semantics for Unlearning in Generative Adversarial Networks
On the map: LLM safety and security → Vision-language and text-to-image safety
Abstract (arXiv)
Owing to the growing concerns about privacy and regulatory compliance, it is desirable to regulate the output of generative models. To that end, the objective of this work is to prevent the generation of outputs containing undesired features from a pre-trained Generative Adversarial Network (GAN) where the underlying training data set is inaccessible. Our approach is inspired by the observation that the parameter space of GANs exhibits meaningful directions that can be leveraged to suppress specific undesired features. However, such directions usually result in the degradation of the quality of generated samples. Our proposed two-stage method, known as 'Adapt-then-Unlearn,' excels at unlearning such undesirable features while also maintaining the quality of generated samples. In the initial stage, we adapt a pre-trained GAN on a set of negative samples (containing undesired features) provided by the user. Subsequently, we train the original pre-trained GAN using positive samples, along with a repulsion regularizer. This regularizer encourages the learned model parameters to move away from the parameters of the adapted model (first stage) while not degrading the generation quality. We provide theoretical insights into the proposed method. To the best of our knowledge, our approach stands as the first method addressing unlearning within the realm of high-fidelity GANs (such as StyleGAN). We validate the effectiveness of our method through comprehensive experiments, encompassing both class-level unlearning on the MNIST and AFHQ dataset and feature-level unlearning tasks on the CelebA-HQ dataset. Our code and implementation is available at: https://github.com/atriguha/Adapt_Unlearn.
Key facts. Cited by 11 papers in the map (data through 14 Oct 2026). Placed in Vision-language and text-to-image safety, one of 12 directions in LLM safety and security. Builds on 57 of its 85 references that are in the map. First posted on arXiv 25 Sep 2023.
Builds on
57 of 85 references.
Closest ancestors · 2
Same direction, newest first
- 2023Generative Adversarial Networks Unlearning19 Aug
- 2023Feature Unlearning for Pre-trained GANs and VAEs10 Mar
Other references · 55
- 2020Denoising Diffusion Probabilistic Modelscited by 21,076
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,863
- 2020Score-Based Generative Modeling through Stochastic Differential Equationscited by 9,122
- 2022Hierarchical Text-Conditional Image Generation with CLIP Latentscited by 6,585
- 2018A Style-Based Generator Architecture for Generative Adversarial Networkscited by 6,013
- 2021Zero-Shot Text-to-Image Generationcited by 4,288
- 2019Generative Modeling by Estimating Gradients of the Data Distributioncited by 4,101
- 2016Simple and Scalable Predictive Uncertainty Estimation using Deep Ensemblescited by 3,926
- 2017Deep reinforcement learning from human preferencescited by 3,912
- 2014Deep Learning Face Attributes in the Wildcited by 3,693
- 2019Analyzing and Improving the Image Quality of StyleGANcited by 3,588
- 2017Progressive Growing of GANs for Improved Quality, Stability, and Variationcited by 2,988
38 more
- 2016Aggregated Residual Transformations for Deep Neural Networkscited by 2,546
- 2019Fine-Tuning Language Models from Human Preferencescited by 2,150
- 2017Understanding Black-box Predictions via Influence Functionscited by 1,741
- 2019Can You Trust Your Model's Uncertainty? Evaluating Predictive Uncertainty Under Dataset Shiftcited by 1,287
- 2021Alias-Free Generative Adversarial Networkscited by 1,184
- 2019StarGAN v2: Diverse Image Synthesis for Multiple Domainscited by 1,098
- 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 618
- 2019Certified Data Removal from Machine Learning Modelscited by 535
- 2020Bayesian Deep Learning and a Probabilistic Perspective of Generalizationcited by 480
- 2019Making AI Forget You: Data Deletion in Machine Learningcited by 465
- 2021Remember What You Want to Forget: Algorithms for Machine Unlearningcited by 371
- 2017Snapshot Ensembles: Train 1, get M for freecited by 350
- 2020Amnesiac Machine Learningcited by 319
- 2022A Survey of Machine Unlearningcited by 312
- 2020Descent-to-Delete: Gradient-Based Methods for Machine Unlearningcited by 311
- 2021Few-shot Image Generation via Cross-domain Correspondencecited by 207
- 2020Forgetting Outside the Box: Scrubbing Deep Networks of Information Accessible from Input-Output Observationscited by 180
- 2020Mixed-Privacy Forgetting in Deep Networkscited by 163
- 2020Hyperparameter Ensembles for Robustness and Uncertainty Quantificationcited by 150
- 2020DeltaGrad: Rapid retraining of machine learning modelscited by 149
- 2018Transferring GANs: generating images from limited datacited by 134
- 2022Zero-Shot Machine Unlearningcited by 133
- 2020Freeze the Discriminator: a Simple Baseline for Fine-Tuning GANscited by 132
- 2020Machine Unlearning for Random Forestscited by 131
- 2020Few-shot Image Generation with Elastic Weight Consolidationcited by 122
- 2020Variational Bayesian Unlearningcited by 117
- 2019MineGAN: effective knowledge transfer from GANs to target domains with few imagescited by 106
- 2021Repulsive Deep Ensembles are Bayesiancited by 104
- 2019Image Generation From Small Datasets via Batch Statistics Adaptationcited by 102
- 2022Towards Adversarial Evaluations for Inexact Machine Unlearningcited by 84
- 2020Learn to Forget: Machine Unlearning via Neuron Maskingcited by 62
- 2022Forget Unlearning: Towards True Data-Deletion in Machine Learningcited by 61
- 2022PUMA: Performance Unchanged Model Augmentation for Training Data Removalcited by 58
- 2022Few Shot Generative Model Adaption via Relaxed Spatial Structural Alignmentcited by 54
- 2020Navigating the GAN Parameter Space for Semantic Image Editingcited by 49
- 2022Learning with Recoverable Forgettingcited by 30
- 2020Neural networks with late-phase weightscited by 29
- 2022Repairing Neural Networks by Leaving the Right Past Behindcited by 27
50 most cited of 55 All 55 (JSON)
Built on by
Citing papers per year: 2023: 2; 2024: 2; 2025: 6; 2026: 1.
11 papers.
- 2025Fine-Grained Erasure in Text-to-Image Diffusion-based Foundation Modelscited by 25
- 2025Training-Free Safe Denoisers for Safe Use of Diffusion Modelscited by 21
- 2024Generative Unlearning for Any Identitycited by 19
- 2024Is Retain Set All You Need in Machine Unlearning? Restoring Performance of Unlearned Models with Out-Of-Distribution Imagescited by 18
- 2023DUCK: Distance-based Unlearning via Centroid Kinematicscited by 13
- 2025Continual Unlearning for Foundational Text-to-Image Models without Generalization Erosioncited by 12
- 2023FAST: Feature Aware Similarity Thresholding for Weak Unlearning in Black-Box Generative Modelscited by 5
- 2026Unlearning for One-Step Generative Models via Unbalanced Optimal Transportcited by 2
- 2025LangDAug: Langevin Data Augmentation for Multi-Source Domain Generalization in Medical Image Segmentationcited by 1
- 2025Unlearning in Diffusion models under Data Constraints: A Variational Inference Approachcited by 1
- 2025SUGAR: A Sweeter Spot for Generative Unlearning of Many Identitiescited by 1
- 2026Unlearning for One-Step Generative Models via Unbalanced Optimal Transport17 Mar 2026
- 2025SUGAR: A Sweeter Spot for Generative Unlearning of Many Identities6 Dec 2025
- 2025Unlearning in Diffusion models under Data Constraints: A Variational Inference Approach5 Oct 2025
- 2025LangDAug: Langevin Data Augmentation for Multi-Source Domain Generalization in Medical Image Segmentation26 May 2025
- 2025Fine-Grained Erasure in Text-to-Image Diffusion-based Foundation Models25 Mar 2025
- 2025Continual Unlearning for Foundational Text-to-Image Models without Generalization Erosion17 Mar 2025
- 2025Training-Free Safe Denoisers for Safe Use of Diffusion Models11 Feb 2025
- 2024Generative Unlearning for Any Identity16 May 2024
- 2024Is Retain Set All You Need in Machine Unlearning? Restoring Performance of Unlearned Models with Out-Of-Distribution Images19 Apr 2024
- 2023FAST: Feature Aware Similarity Thresholding for Weak Unlearning in Black-Box Generative Models22 Dec 2023
- 2023DUCK: Distance-based Unlearning via Centroid Kinematics4 Dec 2023
Similar, not cited
Close in wording, no citation either way
- 2025Prompting Forgetting: Unlearning in GANs via Textual Guidance
- 2023Gradient Surgery for One-shot Unlearning on Generative Model
- 2025Layered Unlearning for Adversarial Relearning
- 2025UNO: Unlearning via Orthogonalization in Generative models
- 2024Defensive Unlearning with Adversarial Training for Robust Concept Erasure in Diffusion Models
- 2025Adversarial Mixup Unlearning
- 2024Machine Unlearning using a Multi-GAN based Model
- 2024Attack and Reset for Unlearning: Exploiting Adversarial Noise toward Machine Unlearning through Parameter Re-initialization