mlsanityData to 7 Oct 2026

Towards Machine Unlearning Benchmarks: Forgetting the Personal Identities in Facial Recognition Systems

arXiv 2311.02240 ↗First posted 3 Nov 2023cs.CVcited by 27

On the map: LLM safety and security → Machine unlearning

Abstract (arXiv)

Machine unlearning is a crucial tool for enabling a classification model to forget specific data that are used in the training time. Recently, various studies have presented machine unlearning algorithms and evaluated their methods on several datasets. However, most of the current machine unlearning algorithms have been evaluated solely on traditional computer vision datasets such as CIFAR-10, MNIST, and SVHN. Furthermore, previous studies generally evaluate the unlearning methods in the class-unlearning setup. Most previous work first trains the classification models and then evaluates the machine unlearning performance of machine unlearning algorithms by forgetting selected image classes (categories) in the experiments. Unfortunately, these class-unlearning settings might not generalize to real-world scenarios. In this work, we propose a machine unlearning setting that aims to unlearn specific instance that contains personal privacy (identity) while maintaining the original task of a given model. Specifically, we propose two machine unlearning benchmark datasets, MUFAC and MUCAC, that are greatly useful to evaluate the performance and robustness of a machine unlearning algorithm. In our benchmark datasets, the original model performs facial feature recognition tasks: face age estimation (multi-class classification) and facial attribute classification (binary class classification), where a class does not depend on any single target subject (personal identity), which can be a realistic setting. Moreover, we also report the performance of the state-of-the-art machine unlearning methods on our proposed benchmark datasets. All the datasets, source codes, and trained models are publicly available at https://github.com/ndb796/MachineUnlearning.

Key facts. Cited by 27 papers in the map (data through 7 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 15 of its 25 references that are in the map. First posted on arXiv 3 Nov 2023.

Builds on

15 of 25 references.

Closest ancestors · 4

Same direction, newest first

  1. 2021Unrolling SGD: Understanding Factors Influencing Machine Unlearning27 Sep
  2. 2021Adaptive Machine Unlearning8 Jun
  3. 2021Remember What You Want to Forget: Algorithms for Machine Unlearning4 Mar
  4. 2021Machine Unlearning via Algorithmic Stability25 Feb

Other references · 11

  1. 2017Attention Is All You Needcited by 59,932
  2. 2015Deep Residual Learning for Image Recognitioncited by 51,809
  3. 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,204
  4. 2020Language Models are Few-Shot Learnerscited by 32,199
  5. 2023LLaMA: Open and Efficient Foundation Language Modelscited by 13,958
  6. 2019EfficientNet: Rethinking Model Scaling for Convolutional Neural Networkscited by 6,415
  7. 2016Membership Inference Attacks against Machine Learning Modelscited by 2,221
  8. 2020Extracting Training Data from Large Language Modelscited by 2,144
  9. 2020Descent-to-Delete: Gradient-Based Methods for Machine Unlearningcited by 303
  10. 2020Forgetting Outside the Box: Scrubbing Deep Networks of Information Accessible from Input-Output Observationscited by 171
  11. 2023Bag of Tricks for Training Data Extraction from Language Modelscited by 67

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2024: 12; 2025: 7; 2026: 8.

27 papers.

Sort:

By area:

  1. 2024The WMDP Benchmark: Measuring and Reducing Malicious Use With Unlearningcited by 488
  2. 2024UnlearnCanvas: Stylized Image Dataset for Enhanced Machine Unlearning Evaluation in Diffusion Modelscited by 47
  3. 2024Erasing Conceptual Knowledge from Language Modelscited by 34
  4. 2025LoTUS: Large-Scale Machine Unlearning with a Taste of Uncertaintycited by 12
  5. 2024Ferrari: Federated Feature Unlearning via Optimizing Feature Sensitivitycited by 11
  6. 2025Membership Inference Attacks as Privacy Tools: Reliability, Disparity and Ensemblecited by 11
  7. 2026Machine Unlearning under Retain-Forget Entanglementcited by 10
  8. 2024Gone but Not Forgotten: Improved Benchmarks for Machine Unlearningcited by 8
  9. 2024Distribution-Level Feature Distancing for Machine Unlearning: Towards a Better Trade-off Between Model Utility and Forgettingcited by 7
  10. 2024CURE4Rec: A Benchmark for Recommendation Unlearning with Deeper Influencecited by 6
  11. 2024Attack and Reset for Unlearning: Exploiting Adversarial Noise toward Machine Unlearning through Parameter Re-initializationcited by 5
  12. 2024Towards Privacy-Guaranteed Label Unlearning in Vertical Federated Learning: Few-Shot Forgetting without Disclosurecited by 5
15 more
  1. 2025"Alexa, can you forget me?" Machine Unlearning Benchmark in Spoken Language Understandingcited by 5
  2. 2024Unlearning Personal Data from a Single Imagecited by 4
  3. 2024Zero-shot Class Unlearning via Layer-wise Relevance Analysis and Neuronal Path Perturbationcited by 3
  4. 2026An Illusion of Unlearning? Assessing Machine Unlearning Through Internal Representationscited by 3
  5. 2024ViT-MUL: A Baseline Study on Recent Machine Unlearning Methods Applied to Vision Transformerscited by 1
  6. 2025ToFU: Transforming How Federated Learning Systems Forget User Datacited by 1
  7. 2025CURE: Centroid-guided Unsupervised Representation Erasure for Facial Recognition Systemscited by 1
  8. 2025FAME: Fictional Actors for Multilingual Erasurecited by 1
  9. 2026Robust Continual Unlearning against Knowledge Erosion and Forgetting Reversalcited by 1
  10. 2025Grokked Models are Better Unlearnerscited by 0
  11. 2026Classification-Head Bias in Class-Level Machine Unlearning: Diagnosis, Mitigation, and Evaluationcited by 0
  12. 2026Interference-Aware Multi-Task Unlearningcited by 0
  13. 2026REMEDI: A Benchmark for Retention and Unlearning Evaluation in Multi-label Clinical Disease Inferencecited by 0
  14. 2026Cross-Domain Generalization in Machine Unlearning via Label-Conditioned Energy Magnitude Regularizationcited by 0
  15. 2026Damnatio Memoriae: Adversarially and Selectively Forgetting Identities in the Embedding Space of Face Recognition Modelscited by 0