mlsanityData to 7 Oct 2026

Learn to Unlearn for Deep Neural Networks: Minimizing Unlearning Interference with Gradient Projection

arXiv 2312.04095 ↗First posted 7 Dec 2023cs.LG cs.CVcited by 37

On the map: LLM safety and security → Machine unlearning

Abstract (arXiv)

Recent data-privacy laws have sparked interest in machine unlearning, which involves removing the effect of specific training samples from a learnt model as if they were never present in the original training dataset. The challenge of machine unlearning is to discard information about the ``forget'' data in the learnt model without altering the knowledge about the remaining dataset and to do so more efficiently than the naive retraining approach. To achieve this, we adopt a projected-gradient based learning method, named as Projected-Gradient Unlearning (PGU), in which the model takes steps in the orthogonal direction to the gradient subspaces deemed unimportant for the retaining dataset, so as to its knowledge is preserved. By utilizing Stochastic Gradient Descent (SGD) to update the model weights, our method can efficiently scale to any model and dataset size. We provide empirically evidence to demonstrate that our unlearning method can produce models that behave similar to models retrained from scratch across various metrics even when the training dataset is no longer accessible. Our code is available at https://github.com/hnanhtuan/projected_gradient_unlearning.

Key facts. Cited by 37 papers in the map (data through 7 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 31 of its 48 references that are in the map. First posted on arXiv 7 Dec 2023.

Builds on

31 of 48 references.

Closest ancestors · 5

Same direction, newest first

  1. 2022Deep Unlearning via Randomized Conditionally Independent Hessians15 Apr
  2. 2022Knowledge Removal in Sampling-based Bayesian Inference24 Mar
  3. 2022Markov Chain Monte Carlo-Based Machine Unlearning: Unlearning What Needs to be Forgotten28 Feb
  4. 2021Machine Unlearning of Features and Labels26 Aug
  5. 2021Remember What You Want to Forget: Algorithms for Machine Unlearning4 Mar

Other references · 26

  1. 2015Deep Residual Learning for Image Recognitioncited by 51,809
  2. 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,267
  3. 2019A Survey on Bias and Fairness in Machine Learningcited by 1,911
  4. 2017Understanding Black-box Predictions via Influence Functionscited by 1,714
  5. 2016Understanding deep learning requires rethinking generalizationcited by 1,657
  6. 2019Machine Unlearningcited by 1,020
  7. 2014Striving for Simplicity: The All Convolutional Netcited by 983
  8. 2018The Secret Sharer: Evaluating and Testing Unintended Memorization in Neural Networkscited by 847
  9. 2021Membership Inference Attacks From First Principlescited by 839
  10. 2019Wide Neural Networks of Any Depth Evolve as Linear Models Under Gradient Descentcited by 732
  11. 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 599
  12. 2019Certified Data Removal from Machine Learning Modelscited by 512
14 more
  1. 2018Exploiting Unintended Feature Leakage in Collaborative Learningcited by 509
  2. 2020Label-Only Membership Inference Attackscited by 371
  3. 2021Gradient Projection Memory for Continual Learningcited by 338
  4. 2019White-box vs Black-box: Bayes Optimal Strategies for Membership Inferencecited by 265
  5. 2020Approximate Data Deletion from Machine Learning Modelscited by 250
  6. 2019Differentially Private Learning with Adaptive Clippingcited by 218
  7. 2021Numerical Composition of Differential Privacycited by 174
  8. 2020Forgetting Outside the Box: Scrubbing Deep Networks of Information Accessible from Input-Output Observationscited by 171
  9. 2020Mixed-Privacy Forgetting in Deep Networkscited by 158
  10. 2020Variational Bayesian Unlearningcited by 114
  11. 2020Machine Unlearning: Linear Filtration for Logit-based Classifierscited by 89
  12. 2022TRGP: Trust Region Gradient Projection for Continual Learningcited by 79
  13. 2022Mixed Differential Privacy in Computer Visioncited by 53
  14. 2020SPACE: Structured Compression and Sharing of Representational Space for Continual Learningcited by 15

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2024: 10; 2025: 18; 2026: 9.

37 papers.

Sort:

By area:

  1. 2024Unified Gradient-Based Machine Unlearning with Remain Geometry Enhancementcited by 43
  2. 2025Learning to Unlearn while Retaining: Combating Gradient Conflicts in Machine Unlearningcited by 19
  3. 2025Tool Unlearning for Tool-Augmented LLMscited by 17
  4. 2024MU-Bench: A Multitask Multimodal Benchmark for Machine Unlearningcited by 16
  5. 2024Remaining-data-free Machine Unlearning by Suppressing Sample Contributioncited by 13
  6. 2024Ferrari: Federated Feature Unlearning via Optimizing Feature Sensitivitycited by 11
  7. 2025ESC: Erasing Space Concept for Knowledge Deletioncited by 9
  8. 2025MUBox: A Critical Evaluation Framework of Deep Machine Unlearningcited by 6
  9. 2025A Unified Gradient-based Framework for Task-agnostic Continual Learning-Unlearningcited by 6
  10. 2024Towards Privacy-Guaranteed Label Unlearning in Vertical Federated Learning: Few-Shot Forgetting without Disclosurecited by 5
  11. 2025Efficient Utility-Preserving Machine Unlearning with Implicit Gradient Surgerycited by 5
  12. 2024Unlearning Personal Data from a Single Imagecited by 4
25 more
  1. 2025Machine Unlearning under Overparameterizationcited by 4
  2. 2025Reminiscence Attack on Residuals: Exploiting Approximate Machine Unlearning for Privacycited by 4
  3. 2025Geometric-disentangelment Unlearningcited by 4
  4. 2025Group-robust Machine Unlearningcited by 3
  5. 2026RAZOR: Ratio-Aware Layer Editing for Targeted Unlearning in Vision Transformers and Diffusion Modelscited by 3
  6. 2024Discriminative Adversarial Unlearningcited by 2
  7. 2024Machine Unlearning using Forgetting Neural Networkscited by 2
  8. 2025Exploring Incremental Unlearning: Techniques, Challenges, and Future Directionscited by 2
  9. 2025Ready2Unlearn: A Learning-Time Approach for Preparing Models with Future Unlearning Readinesscited by 2
  10. 2024Parallel Unlearning in Inherited Model Networkscited by 1
  11. 2024Neural Corrective Machine Unrankingcited by 1
  12. 2025Zero-Shot Machine Unlearning with Proxy Adversarial Data Generationcited by 1
  13. 2025WARP: Weight Teleportation for Attack-Resilient Unlearning Protocolscited by 1
  14. 2026The BatchNorm Illusion: Diagnosing Normalization Artifacts in Machine Unlearning Evaluationcited by 1
  15. 2025Understanding Machine Unlearning Through the Lens of Mode Connectivitycited by 0
  16. 2025FedShard: Federated Unlearning with Efficiency Fairness and Performance Fairnesscited by 0
  17. 2025Controllable Machine Unlearning via Gradient Pivotingcited by 0
  18. 2025Beyond Memorization: Selective Learning for Copyright-Safe Diffusion Model Trainingcited by 0
  19. 2026textbfAGTAO: Robust and Stabilized LLM Unlearning via Adversarial Gating Training with Adaptive Orthogonalitycited by 0
  20. 2026Projected Gradient Unlearning for Text-to-Image Diffusion Models: Defending Against Concept Revival Attackscited by 0
  21. 2026BARRIER: Bounded Activation Regions for Robust Information Erasurecited by 0
  22. 2026Interference-Aware Multi-Task Unlearningcited by 0
  23. 2026Priority-Aware Learning-Unlearning Correction for Dynamic Decentralized LoRA Fine-Tuningcited by 0
  24. 2026Erased, but Not Gone: Output Forgetting Is Not True Forgettingcited by 0
  25. 2026Understanding Machine Unlearning Through the Lens of Mode Connectivitycited by 0