Towards Machine Unlearning Benchmarks: Forgetting the Personal Identities in Facial Recognition Systems
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
Machine unlearning is a crucial tool for enabling a classification model to forget specific data that are used in the training time. Recently, various studies have presented machine unlearning algorithms and evaluated their methods on several datasets. However, most of the current machine unlearning algorithms have been evaluated solely on traditional computer vision datasets such as CIFAR-10, MNIST, and SVHN. Furthermore, previous studies generally evaluate the unlearning methods in the class-unlearning setup. Most previous work first trains the classification models and then evaluates the machine unlearning performance of machine unlearning algorithms by forgetting selected image classes (categories) in the experiments. Unfortunately, these class-unlearning settings might not generalize to real-world scenarios. In this work, we propose a machine unlearning setting that aims to unlearn specific instance that contains personal privacy (identity) while maintaining the original task of a given model. Specifically, we propose two machine unlearning benchmark datasets, MUFAC and MUCAC, that are greatly useful to evaluate the performance and robustness of a machine unlearning algorithm. In our benchmark datasets, the original model performs facial feature recognition tasks: face age estimation (multi-class classification) and facial attribute classification (binary class classification), where a class does not depend on any single target subject (personal identity), which can be a realistic setting. Moreover, we also report the performance of the state-of-the-art machine unlearning methods on our proposed benchmark datasets. All the datasets, source codes, and trained models are publicly available at https://github.com/ndb796/MachineUnlearning.
Key facts. Cited by 27 papers in the map (data through 7 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 15 of its 25 references that are in the map. First posted on arXiv 3 Nov 2023.
Builds on
15 of 25 references.
Closest ancestors · 4
Same direction, newest first
- 2021Unrolling SGD: Understanding Factors Influencing Machine Unlearning27 Sep
- 2021Adaptive Machine Unlearning8 Jun
- 2021Remember What You Want to Forget: Algorithms for Machine Unlearning4 Mar
- 2021Machine Unlearning via Algorithmic Stability25 Feb
Other references · 11
- 2017Attention Is All You Needcited by 59,932
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,204
- 2020Language Models are Few-Shot Learnerscited by 32,199
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 13,958
- 2019EfficientNet: Rethinking Model Scaling for Convolutional Neural Networkscited by 6,415
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,221
- 2020Extracting Training Data from Large Language Modelscited by 2,144
- 2020Descent-to-Delete: Gradient-Based Methods for Machine Unlearningcited by 303
- 2020Forgetting Outside the Box: Scrubbing Deep Networks of Information Accessible from Input-Output Observationscited by 171
- 2023Bag of Tricks for Training Data Extraction from Language Modelscited by 67
Built on by
Citing papers per year: 2024: 12; 2025: 7; 2026: 8.
27 papers.
Sort:
By area:
- 2024The WMDP Benchmark: Measuring and Reducing Malicious Use With Unlearningcited by 488
- 2024UnlearnCanvas: Stylized Image Dataset for Enhanced Machine Unlearning Evaluation in Diffusion Modelscited by 47
- 2024Erasing Conceptual Knowledge from Language Modelscited by 34
- 2025LoTUS: Large-Scale Machine Unlearning with a Taste of Uncertaintycited by 12
- 2024Ferrari: Federated Feature Unlearning via Optimizing Feature Sensitivitycited by 11
- 2025Membership Inference Attacks as Privacy Tools: Reliability, Disparity and Ensemblecited by 11
- 2026Machine Unlearning under Retain-Forget Entanglementcited by 10
- 2024Gone but Not Forgotten: Improved Benchmarks for Machine Unlearningcited by 8
- 2024Distribution-Level Feature Distancing for Machine Unlearning: Towards a Better Trade-off Between Model Utility and Forgettingcited by 7
- 2024CURE4Rec: A Benchmark for Recommendation Unlearning with Deeper Influencecited by 6
- 2024Attack and Reset for Unlearning: Exploiting Adversarial Noise toward Machine Unlearning through Parameter Re-initializationcited by 5
- 2024Towards Privacy-Guaranteed Label Unlearning in Vertical Federated Learning: Few-Shot Forgetting without Disclosurecited by 5
15 more
- 2025"Alexa, can you forget me?" Machine Unlearning Benchmark in Spoken Language Understandingcited by 5
- 2024Unlearning Personal Data from a Single Imagecited by 4
- 2024Zero-shot Class Unlearning via Layer-wise Relevance Analysis and Neuronal Path Perturbationcited by 3
- 2026An Illusion of Unlearning? Assessing Machine Unlearning Through Internal Representationscited by 3
- 2024ViT-MUL: A Baseline Study on Recent Machine Unlearning Methods Applied to Vision Transformerscited by 1
- 2025ToFU: Transforming How Federated Learning Systems Forget User Datacited by 1
- 2025CURE: Centroid-guided Unsupervised Representation Erasure for Facial Recognition Systemscited by 1
- 2025FAME: Fictional Actors for Multilingual Erasurecited by 1
- 2026Robust Continual Unlearning against Knowledge Erosion and Forgetting Reversalcited by 1
- 2025Grokked Models are Better Unlearnerscited by 0
- 2026Classification-Head Bias in Class-Level Machine Unlearning: Diagnosis, Mitigation, and Evaluationcited by 0
- 2026Interference-Aware Multi-Task Unlearningcited by 0
- 2026REMEDI: A Benchmark for Retention and Unlearning Evaluation in Multi-label Clinical Disease Inferencecited by 0
- 2026Cross-Domain Generalization in Machine Unlearning via Label-Conditioned Energy Magnitude Regularizationcited by 0
- 2026Damnatio Memoriae: Adversarially and Selectively Forgetting Identities in the Embedding Space of Face Recognition Modelscited by 0
- 2026Damnatio Memoriae: Adversarially and Selectively Forgetting Identities in the Embedding Space of Face Recognition Models22 Sep 2026
- 2026Cross-Domain Generalization in Machine Unlearning via Label-Conditioned Energy Magnitude Regularization18 Aug 2026
- 2026REMEDI: A Benchmark for Retention and Unlearning Evaluation in Multi-label Clinical Disease Inference5 Jun 2026
- 2026Interference-Aware Multi-Task Unlearning18 May 2026
- 2026Classification-Head Bias in Class-Level Machine Unlearning: Diagnosis, Mitigation, and Evaluation9 May 2026
- 2026Robust Continual Unlearning against Knowledge Erosion and Forgetting Reversal21 Apr 2026
- 2026An Illusion of Unlearning? Assessing Machine Unlearning Through Internal Representations9 Apr 2026
- 2026Machine Unlearning under Retain-Forget Entanglement27 Mar 2026
- 2025FAME: Fictional Actors for Multilingual Erasure17 Dec 2025
- 2025Grokked Models are Better Unlearners3 Dec 2025
- 2025CURE: Centroid-guided Unsupervised Representation Erasure for Facial Recognition Systems23 Sep 2025
- 2025ToFU: Transforming How Federated Learning Systems Forget User Data19 Sep 2025
15 more
- 2025Membership Inference Attacks as Privacy Tools: Reliability, Disparity and Ensemble16 Jun 2025
- 2025"Alexa, can you forget me?" Machine Unlearning Benchmark in Spoken Language Understanding21 May 2025
- 2025LoTUS: Large-Scale Machine Unlearning with a Taste of Uncertainty24 Mar 2025
- 2024Zero-shot Class Unlearning via Layer-wise Relevance Analysis and Neuronal Path Perturbation31 Oct 2024
- 2024Towards Privacy-Guaranteed Label Unlearning in Vertical Federated Learning: Few-Shot Forgetting without Disclosure14 Oct 2024
- 2024Erasing Conceptual Knowledge from Language Models3 Oct 2024
- 2024Distribution-Level Feature Distancing for Machine Unlearning: Towards a Better Trade-off Between Model Utility and Forgetting23 Sep 2024
- 2024CURE4Rec: A Benchmark for Recommendation Unlearning with Deeper Influence26 Aug 2024
- 2024Unlearning Personal Data from a Single Image16 Jul 2024
- 2024Gone but Not Forgotten: Improved Benchmarks for Machine Unlearning29 May 2024
- 2024Ferrari: Federated Feature Unlearning via Optimizing Feature Sensitivity23 May 2024
- 2024The WMDP Benchmark: Measuring and Reducing Malicious Use With Unlearning5 Mar 2024
- 2024UnlearnCanvas: Stylized Image Dataset for Enhanced Machine Unlearning Evaluation in Diffusion Models19 Feb 2024
- 2024ViT-MUL: A Baseline Study on Recent Machine Unlearning Methods Applied to Vision Transformers7 Feb 2024
- 2024Attack and Reset for Unlearning: Exploiting Adversarial Noise toward Machine Unlearning through Parameter Re-initialization17 Jan 2024
- 2024The WMDP Benchmark: Measuring and Reducing Malicious Use With Unlearningcited by 488
- 2024Erasing Conceptual Knowledge from Language Modelscited by 34
- 2025LoTUS: Large-Scale Machine Unlearning with a Taste of Uncertaintycited by 12
- 2024Ferrari: Federated Feature Unlearning via Optimizing Feature Sensitivitycited by 11
- 2025Membership Inference Attacks as Privacy Tools: Reliability, Disparity and Ensemblecited by 11
- 2026Machine Unlearning under Retain-Forget Entanglementcited by 10
- 2024Gone but Not Forgotten: Improved Benchmarks for Machine Unlearningcited by 8
- 2024Distribution-Level Feature Distancing for Machine Unlearning: Towards a Better Trade-off Between Model Utility and Forgettingcited by 7
- 2024CURE4Rec: A Benchmark for Recommendation Unlearning with Deeper Influencecited by 6
- 2024Attack and Reset for Unlearning: Exploiting Adversarial Noise toward Machine Unlearning through Parameter Re-initializationcited by 5
- 2024Towards Privacy-Guaranteed Label Unlearning in Vertical Federated Learning: Few-Shot Forgetting without Disclosurecited by 5
- 2025"Alexa, can you forget me?" Machine Unlearning Benchmark in Spoken Language Understandingcited by 5
12 most cited of 24 All 24 (JSON)
- 2026Cross-Domain Generalization in Machine Unlearning via Label-Conditioned Energy Magnitude Regularization18 Aug 2026
- 2026REMEDI: A Benchmark for Retention and Unlearning Evaluation in Multi-label Clinical Disease Inference5 Jun 2026
- 2026Interference-Aware Multi-Task Unlearning18 May 2026
- 2026Classification-Head Bias in Class-Level Machine Unlearning: Diagnosis, Mitigation, and Evaluation9 May 2026
- 2026Robust Continual Unlearning against Knowledge Erosion and Forgetting Reversal21 Apr 2026
- 2026An Illusion of Unlearning? Assessing Machine Unlearning Through Internal Representations9 Apr 2026
- 2026Machine Unlearning under Retain-Forget Entanglement27 Mar 2026
- 2025Grokked Models are Better Unlearners3 Dec 2025
- 2025CURE: Centroid-guided Unsupervised Representation Erasure for Facial Recognition Systems23 Sep 2025
- 2025ToFU: Transforming How Federated Learning Systems Forget User Data19 Sep 2025
- 2025Membership Inference Attacks as Privacy Tools: Reliability, Disparity and Ensemble16 Jun 2025
- 2025"Alexa, can you forget me?" Machine Unlearning Benchmark in Spoken Language Understanding21 May 2025
12 newest of 24 All 24 (JSON)