mlsanityData to 14 Oct 2026

Layer Attack Unlearning: Fast and Accurate Machine Unlearning via Layer Level Attack and Knowledge Distillation

arXiv 2312.16823 ↗First posted 28 Dec 2023cs.LG cs.CRcited by 11

On the map: LLM safety and security → Machine unlearning

also in 1 more
Abstract (arXiv)

Recently, serious concerns have been raised about the privacy issues related to training datasets in machine learning algorithms when including personal data. Various regulations in different countries, including the GDPR grant individuals to have personal data erased, known as 'the right to be forgotten' or 'the right to erasure'. However, there has been less research on effectively and practically deleting the requested personal data from the training set while not jeopardizing the overall machine learning performance. In this work, we propose a fast and novel machine unlearning paradigm at the layer level called layer attack unlearning, which is highly accurate and fast compared to existing machine unlearning algorithms. We introduce the Partial-PGD algorithm to locate the samples to forget efficiently. In addition, we only use the last layer of the model inspired by the Forward-Forward algorithm for unlearning process. Lastly, we use Knowledge Distillation (KD) to reliably learn the decision boundaries from the teacher using soft label information to improve accuracy performance. We conducted extensive experiments with SOTA machine unlearning models and demonstrated the effectiveness of our approach for accuracy and end-to-end unlearning performance.

Key facts. Cited by 11 papers in the map (data through 14 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 11 of its 21 references that are in the map. First posted on arXiv 28 Dec 2023.

Builds on

11 of 21 references.

Closest ancestors · 1

Same direction, newest first

  1. 2023Learning to Unlearn: Instance-wise Unlearning for Pre-trained Classifiers27 Jan

Other references · 10

  1. 2015Deep Residual Learning for Image Recognitioncited by 52,096
  2. 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 30,186
  3. 2019PyTorch: An Imperative Style, High-Performance Deep Learning Librarycited by 20,305
  4. 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,364
  5. 2015Distilling the Knowledge in a Neural Networkcited by 10,324
  6. 2014Explaining and Harnessing Adversarial Examplescited by 7,364
  7. 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
  8. 2017Fashion-MNIST: a Novel Image Dataset for Benchmarking Machine Learning Algorithmscited by 4,349
  9. 2017VGGFace2: A dataset for recognising faces across pose and agecited by 914
  10. 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 618

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2024: 4; 2025: 6; 2026: 1.

11 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2023Learn to Unlearn: A Survey on Machine Unlearning
  2. 2024Learn What You Want to Unlearn: Unlearning Inversion Attacks against Machine Unlearning
  3. 2023Machine Unlearning: Solutions and Challenges
  4. 2024Silver Linings in the Shadows: Harnessing Membership Inference for Machine Unlearning
  5. 2025How Secure is Forgetting? Linking Machine Unlearning to Machine Learning Attacks
  6. 2024Machine Unlearning: Taxonomy, Metrics, Applications, Challenges, and Prospects
  7. 2024Releasing Malevolence from Benevolence: The Menace of Benign Data on Machine Unlearning
  8. 2026Mitigating Privacy Risk via Forget Set-Free Unlearning