Layer Attack Unlearning: Fast and Accurate Machine Unlearning via Layer Level Attack and Knowledge Distillation
On the map: LLM safety and security → Machine unlearning
also in 1 more
Abstract (arXiv)
Recently, serious concerns have been raised about the privacy issues related to training datasets in machine learning algorithms when including personal data. Various regulations in different countries, including the GDPR grant individuals to have personal data erased, known as 'the right to be forgotten' or 'the right to erasure'. However, there has been less research on effectively and practically deleting the requested personal data from the training set while not jeopardizing the overall machine learning performance. In this work, we propose a fast and novel machine unlearning paradigm at the layer level called layer attack unlearning, which is highly accurate and fast compared to existing machine unlearning algorithms. We introduce the Partial-PGD algorithm to locate the samples to forget efficiently. In addition, we only use the last layer of the model inspired by the Forward-Forward algorithm for unlearning process. Lastly, we use Knowledge Distillation (KD) to reliably learn the decision boundaries from the teacher using soft label information to improve accuracy performance. We conducted extensive experiments with SOTA machine unlearning models and demonstrated the effectiveness of our approach for accuracy and end-to-end unlearning performance.
Key facts. Cited by 11 papers in the map (data through 14 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 11 of its 21 references that are in the map. First posted on arXiv 28 Dec 2023.
Builds on
11 of 21 references.
Closest ancestors · 1
Same direction, newest first
Other references · 10
- 2015Deep Residual Learning for Image Recognitioncited by 52,096
- 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 30,186
- 2019PyTorch: An Imperative Style, High-Performance Deep Learning Librarycited by 20,305
- 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,364
- 2015Distilling the Knowledge in a Neural Networkcited by 10,324
- 2014Explaining and Harnessing Adversarial Examplescited by 7,364
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
- 2017Fashion-MNIST: a Novel Image Dataset for Benchmarking Machine Learning Algorithmscited by 4,349
- 2017VGGFace2: A dataset for recognising faces across pose and agecited by 914
- 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 618
Built on by
Citing papers per year: 2024: 4; 2025: 6; 2026: 1.
11 papers.
- 2024A Survey on Machine Unlearning: Techniques and New Emerged Privacy Riskscited by 15
- 2024An Information Theoretic Evaluation Metric For Strong Unlearningcited by 11
- 2025ESC: Erasing Space Concept for Knowledge Deletioncited by 9
- 2024BlockFUL: Enabling Unlearning in Blockchained Federated Learningcited by 3
- 2025Exploring Incremental Unlearning: Techniques, Challenges, and Future Directionscited by 2
- 2025Efficient Verified Machine Unlearning For Distillationcited by 2
- 2025NOVO: Unlearning-Compliant Vision Transformerscited by 2
- 2025FROC: A Unified Framework with Risk-Optimized Control for Machine Unlearning in LLMscited by 1
- 2024Game-Theoretic Machine Unlearning: Mitigating Extra Privacy Leakagecited by 0
- 2025Controllable Machine Unlearning via Gradient Pivotingcited by 0
- 2026BARRIER: Bounded Activation Regions for Robust Information Erasurecited by 0
- 2026BARRIER: Bounded Activation Regions for Robust Information Erasure15 May 2026
- 2025FROC: A Unified Framework with Risk-Optimized Control for Machine Unlearning in LLMs15 Dec 2025
- 2025Controllable Machine Unlearning via Gradient Pivoting22 Oct 2025
- 2025NOVO: Unlearning-Compliant Vision Transformers4 Jul 2025
- 2025ESC: Erasing Space Concept for Knowledge Deletion3 Apr 2025
- 2025Efficient Verified Machine Unlearning For Distillation28 Mar 2025
- 2025Exploring Incremental Unlearning: Techniques, Challenges, and Future Directions23 Feb 2025
- 2024Game-Theoretic Machine Unlearning: Mitigating Extra Privacy Leakage6 Nov 2024
- 2024A Survey on Machine Unlearning: Techniques and New Emerged Privacy Risks10 Jun 2024
- 2024An Information Theoretic Evaluation Metric For Strong Unlearning28 May 2024
- 2024BlockFUL: Enabling Unlearning in Blockchained Federated Learning26 Feb 2024
Similar, not cited
Close in wording, no citation either way
- 2023Learn to Unlearn: A Survey on Machine Unlearning
- 2024Learn What You Want to Unlearn: Unlearning Inversion Attacks against Machine Unlearning
- 2023Machine Unlearning: Solutions and Challenges
- 2024Silver Linings in the Shadows: Harnessing Membership Inference for Machine Unlearning
- 2025How Secure is Forgetting? Linking Machine Unlearning to Machine Learning Attacks
- 2024Machine Unlearning: Taxonomy, Metrics, Applications, Challenges, and Prospects
- 2024Releasing Malevolence from Benevolence: The Menace of Benign Data on Machine Unlearning
- 2026Mitigating Privacy Risk via Forget Set-Free Unlearning