Learn to Unlearn for Deep Neural Networks: Minimizing Unlearning Interference with Gradient Projection
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
Recent data-privacy laws have sparked interest in machine unlearning, which involves removing the effect of specific training samples from a learnt model as if they were never present in the original training dataset. The challenge of machine unlearning is to discard information about the ``forget'' data in the learnt model without altering the knowledge about the remaining dataset and to do so more efficiently than the naive retraining approach. To achieve this, we adopt a projected-gradient based learning method, named as Projected-Gradient Unlearning (PGU), in which the model takes steps in the orthogonal direction to the gradient subspaces deemed unimportant for the retaining dataset, so as to its knowledge is preserved. By utilizing Stochastic Gradient Descent (SGD) to update the model weights, our method can efficiently scale to any model and dataset size. We provide empirically evidence to demonstrate that our unlearning method can produce models that behave similar to models retrained from scratch across various metrics even when the training dataset is no longer accessible. Our code is available at https://github.com/hnanhtuan/projected_gradient_unlearning.
Key facts. Cited by 37 papers in the map (data through 7 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 31 of its 48 references that are in the map. First posted on arXiv 7 Dec 2023.
Builds on
31 of 48 references.
Closest ancestors · 5
Same direction, newest first
- 2022Deep Unlearning via Randomized Conditionally Independent Hessians15 Apr
- 2022Knowledge Removal in Sampling-based Bayesian Inference24 Mar
- 2022Markov Chain Monte Carlo-Based Machine Unlearning: Unlearning What Needs to be Forgotten28 Feb
- 2021Machine Unlearning of Features and Labels26 Aug
- 2021Remember What You Want to Forget: Algorithms for Machine Unlearning4 Mar
Other references · 26
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,267
- 2019A Survey on Bias and Fairness in Machine Learningcited by 1,911
- 2017Understanding Black-box Predictions via Influence Functionscited by 1,714
- 2016Understanding deep learning requires rethinking generalizationcited by 1,657
- 2019Machine Unlearningcited by 1,020
- 2014Striving for Simplicity: The All Convolutional Netcited by 983
- 2018The Secret Sharer: Evaluating and Testing Unintended Memorization in Neural Networkscited by 847
- 2021Membership Inference Attacks From First Principlescited by 839
- 2019Wide Neural Networks of Any Depth Evolve as Linear Models Under Gradient Descentcited by 732
- 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 599
- 2019Certified Data Removal from Machine Learning Modelscited by 512
14 more
- 2018Exploiting Unintended Feature Leakage in Collaborative Learningcited by 509
- 2020Label-Only Membership Inference Attackscited by 371
- 2021Gradient Projection Memory for Continual Learningcited by 338
- 2019White-box vs Black-box: Bayes Optimal Strategies for Membership Inferencecited by 265
- 2020Approximate Data Deletion from Machine Learning Modelscited by 250
- 2019Differentially Private Learning with Adaptive Clippingcited by 218
- 2021Numerical Composition of Differential Privacycited by 174
- 2020Forgetting Outside the Box: Scrubbing Deep Networks of Information Accessible from Input-Output Observationscited by 171
- 2020Mixed-Privacy Forgetting in Deep Networkscited by 158
- 2020Variational Bayesian Unlearningcited by 114
- 2020Machine Unlearning: Linear Filtration for Logit-based Classifierscited by 89
- 2022TRGP: Trust Region Gradient Projection for Continual Learningcited by 79
- 2022Mixed Differential Privacy in Computer Visioncited by 53
- 2020SPACE: Structured Compression and Sharing of Representational Space for Continual Learningcited by 15
Built on by
Citing papers per year: 2024: 10; 2025: 18; 2026: 9.
37 papers.
Sort:
By area:
- 2024Unified Gradient-Based Machine Unlearning with Remain Geometry Enhancementcited by 43
- 2025Learning to Unlearn while Retaining: Combating Gradient Conflicts in Machine Unlearningcited by 19
- 2025Tool Unlearning for Tool-Augmented LLMscited by 17
- 2024MU-Bench: A Multitask Multimodal Benchmark for Machine Unlearningcited by 16
- 2024Remaining-data-free Machine Unlearning by Suppressing Sample Contributioncited by 13
- 2024Ferrari: Federated Feature Unlearning via Optimizing Feature Sensitivitycited by 11
- 2025ESC: Erasing Space Concept for Knowledge Deletioncited by 9
- 2025MUBox: A Critical Evaluation Framework of Deep Machine Unlearningcited by 6
- 2025A Unified Gradient-based Framework for Task-agnostic Continual Learning-Unlearningcited by 6
- 2024Towards Privacy-Guaranteed Label Unlearning in Vertical Federated Learning: Few-Shot Forgetting without Disclosurecited by 5
- 2025Efficient Utility-Preserving Machine Unlearning with Implicit Gradient Surgerycited by 5
- 2024Unlearning Personal Data from a Single Imagecited by 4
25 more
- 2025Machine Unlearning under Overparameterizationcited by 4
- 2025Reminiscence Attack on Residuals: Exploiting Approximate Machine Unlearning for Privacycited by 4
- 2025Geometric-disentangelment Unlearningcited by 4
- 2025Group-robust Machine Unlearningcited by 3
- 2026RAZOR: Ratio-Aware Layer Editing for Targeted Unlearning in Vision Transformers and Diffusion Modelscited by 3
- 2024Discriminative Adversarial Unlearningcited by 2
- 2024Machine Unlearning using Forgetting Neural Networkscited by 2
- 2025Exploring Incremental Unlearning: Techniques, Challenges, and Future Directionscited by 2
- 2025Ready2Unlearn: A Learning-Time Approach for Preparing Models with Future Unlearning Readinesscited by 2
- 2024Parallel Unlearning in Inherited Model Networkscited by 1
- 2024Neural Corrective Machine Unrankingcited by 1
- 2025Zero-Shot Machine Unlearning with Proxy Adversarial Data Generationcited by 1
- 2025WARP: Weight Teleportation for Attack-Resilient Unlearning Protocolscited by 1
- 2026The BatchNorm Illusion: Diagnosing Normalization Artifacts in Machine Unlearning Evaluationcited by 1
- 2025Understanding Machine Unlearning Through the Lens of Mode Connectivitycited by 0
- 2025FedShard: Federated Unlearning with Efficiency Fairness and Performance Fairnesscited by 0
- 2025Controllable Machine Unlearning via Gradient Pivotingcited by 0
- 2025Beyond Memorization: Selective Learning for Copyright-Safe Diffusion Model Trainingcited by 0
- 2026textbfAGTAO: Robust and Stabilized LLM Unlearning via Adversarial Gating Training with Adaptive Orthogonalitycited by 0
- 2026Projected Gradient Unlearning for Text-to-Image Diffusion Models: Defending Against Concept Revival Attackscited by 0
- 2026BARRIER: Bounded Activation Regions for Robust Information Erasurecited by 0
- 2026Interference-Aware Multi-Task Unlearningcited by 0
- 2026Priority-Aware Learning-Unlearning Correction for Dynamic Decentralized LoRA Fine-Tuningcited by 0
- 2026Erased, but Not Gone: Output Forgetting Is Not True Forgettingcited by 0
- 2026Understanding Machine Unlearning Through the Lens of Mode Connectivitycited by 0
- 2026The BatchNorm Illusion: Diagnosing Normalization Artifacts in Machine Unlearning Evaluation8 Sep 2026
- 2026Understanding Machine Unlearning Through the Lens of Mode Connectivity27 Jul 2026
- 2026Erased, but Not Gone: Output Forgetting Is Not True Forgetting23 Jun 2026
- 2026Priority-Aware Learning-Unlearning Correction for Dynamic Decentralized LoRA Fine-Tuning22 Jun 2026
- 2026Interference-Aware Multi-Task Unlearning18 May 2026
- 2026BARRIER: Bounded Activation Regions for Robust Information Erasure15 May 2026
- 2026Projected Gradient Unlearning for Text-to-Image Diffusion Models: Defending Against Concept Revival Attacks22 Apr 2026
- 2026RAZOR: Ratio-Aware Layer Editing for Targeted Unlearning in Vision Transformers and Diffusion Models16 Mar 2026
- 2026textbfAGTAO: Robust and Stabilized LLM Unlearning via Adversarial Gating Training with Adaptive Orthogonality2 Feb 2026
- 2025Beyond Memorization: Selective Learning for Copyright-Safe Diffusion Model Training12 Dec 2025
- 2025WARP: Weight Teleportation for Attack-Resilient Unlearning Protocols29 Nov 2025
- 2025Geometric-disentangelment Unlearning21 Nov 2025
25 more
- 2025Efficient Utility-Preserving Machine Unlearning with Implicit Gradient Surgery25 Oct 2025
- 2025Controllable Machine Unlearning via Gradient Pivoting22 Oct 2025
- 2025FedShard: Federated Unlearning with Efficiency Fairness and Performance Fairness13 Aug 2025
- 2025Zero-Shot Machine Unlearning with Proxy Adversarial Data Generation29 Jul 2025
- 2025Reminiscence Attack on Residuals: Exploiting Approximate Machine Unlearning for Privacy28 Jul 2025
- 2025Machine Unlearning under Overparameterization28 May 2025
- 2025A Unified Gradient-based Framework for Task-agnostic Continual Learning-Unlearning21 May 2025
- 2025Ready2Unlearn: A Learning-Time Approach for Preparing Models with Future Unlearning Readiness16 May 2025
- 2025MUBox: A Critical Evaluation Framework of Deep Machine Unlearning13 May 2025
- 2025Understanding Machine Unlearning Through the Lens of Mode Connectivity8 Apr 2025
- 2025ESC: Erasing Space Concept for Knowledge Deletion3 Apr 2025
- 2025Group-robust Machine Unlearning12 Mar 2025
- 2025Learning to Unlearn while Retaining: Combating Gradient Conflicts in Machine Unlearning8 Mar 2025
- 2025Exploring Incremental Unlearning: Techniques, Challenges, and Future Directions23 Feb 2025
- 2025Tool Unlearning for Tool-Augmented LLMs3 Feb 2025
- 2024Neural Corrective Machine Unranking13 Nov 2024
- 2024Machine Unlearning using Forgetting Neural Networks29 Oct 2024
- 2024Towards Privacy-Guaranteed Label Unlearning in Vertical Federated Learning: Few-Shot Forgetting without Disclosure14 Oct 2024
- 2024Unified Gradient-Based Machine Unlearning with Remain Geometry Enhancement29 Sep 2024
- 2024Parallel Unlearning in Inherited Model Networks16 Aug 2024
- 2024Unlearning Personal Data from a Single Image16 Jul 2024
- 2024MU-Bench: A Multitask Multimodal Benchmark for Machine Unlearning21 Jun 2024
- 2024Ferrari: Federated Feature Unlearning via Optimizing Feature Sensitivity23 May 2024
- 2024Remaining-data-free Machine Unlearning by Suppressing Sample Contribution23 Feb 2024
- 2024Discriminative Adversarial Unlearning10 Feb 2024
- 2024Unified Gradient-Based Machine Unlearning with Remain Geometry Enhancementcited by 43
- 2025Learning to Unlearn while Retaining: Combating Gradient Conflicts in Machine Unlearningcited by 19
- 2024MU-Bench: A Multitask Multimodal Benchmark for Machine Unlearningcited by 16
- 2024Remaining-data-free Machine Unlearning by Suppressing Sample Contributioncited by 13
- 2024Ferrari: Federated Feature Unlearning via Optimizing Feature Sensitivitycited by 11
- 2025MUBox: A Critical Evaluation Framework of Deep Machine Unlearningcited by 6
- 2025A Unified Gradient-based Framework for Task-agnostic Continual Learning-Unlearningcited by 6
- 2024Towards Privacy-Guaranteed Label Unlearning in Vertical Federated Learning: Few-Shot Forgetting without Disclosurecited by 5
- 2025Efficient Utility-Preserving Machine Unlearning with Implicit Gradient Surgerycited by 5
- 2024Unlearning Personal Data from a Single Imagecited by 4
- 2025Machine Unlearning under Overparameterizationcited by 4
- 2025Reminiscence Attack on Residuals: Exploiting Approximate Machine Unlearning for Privacycited by 4
12 most cited of 32 All 32 (JSON)
- 2026The BatchNorm Illusion: Diagnosing Normalization Artifacts in Machine Unlearning Evaluation8 Sep 2026
- 2026Understanding Machine Unlearning Through the Lens of Mode Connectivity27 Jul 2026
- 2026Erased, but Not Gone: Output Forgetting Is Not True Forgetting23 Jun 2026
- 2026Priority-Aware Learning-Unlearning Correction for Dynamic Decentralized LoRA Fine-Tuning22 Jun 2026
- 2026Interference-Aware Multi-Task Unlearning18 May 2026
- 2026BARRIER: Bounded Activation Regions for Robust Information Erasure15 May 2026
- 2026textbfAGTAO: Robust and Stabilized LLM Unlearning via Adversarial Gating Training with Adaptive Orthogonality2 Feb 2026
- 2025WARP: Weight Teleportation for Attack-Resilient Unlearning Protocols29 Nov 2025
- 2025Geometric-disentangelment Unlearning21 Nov 2025
- 2025Efficient Utility-Preserving Machine Unlearning with Implicit Gradient Surgery25 Oct 2025
- 2025Controllable Machine Unlearning via Gradient Pivoting22 Oct 2025
- 2025FedShard: Federated Unlearning with Efficiency Fairness and Performance Fairness13 Aug 2025
12 newest of 32 All 32 (JSON)
- 2025Tool Unlearning for Tool-Augmented LLMscited by 17
- 2025Tool Unlearning for Tool-Augmented LLMs3 Feb 2025
- 2025ESC: Erasing Space Concept for Knowledge Deletioncited by 9
- 2025ESC: Erasing Space Concept for Knowledge Deletion3 Apr 2025