Attack and Reset for Unlearning: Exploiting Adversarial Noise toward Machine Unlearning through Parameter Re-initialization
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
With growing concerns surrounding privacy and regulatory compliance, the concept of machine unlearning has gained prominence, aiming to selectively forget or erase specific learned information from a trained model. In response to this critical need, we introduce a novel approach called Attack-and-Reset for Unlearning (ARU). This algorithm leverages meticulously crafted adversarial noise to generate a parameter mask, effectively resetting certain parameters and rendering them unlearnable. ARU outperforms current state-of-the-art results on two facial machine-unlearning benchmark datasets, MUFAC and MUCAC. In particular, we present the steps involved in attacking and masking that strategically filter and re-initialize network parameters biased towards the forget set. Our work represents a significant advancement in rendering data unexploitable to deep learning models through parameter re-initialization, achieved by harnessing adversarial noise to craft a mask.
Key facts. Cited by 5 papers in the map (data through 7 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 19 of its 28 references that are in the map. First posted on arXiv 17 Jan 2024.
Builds on
19 of 28 references.
Closest ancestors · 7
Same direction, newest first
- 2023Towards Machine Unlearning Benchmarks: Forgetting the Personal Identities in Facial Recognition Systems3 Nov
- 2023Unlearning with Fisher Masking9 Oct
- 2023Towards Unbounded Machine Unlearning20 Feb
- 2022Can Bad Teaching Induce Forgetting? Unlearning in Deep Networks using an Incompetent Teacher17 May
- 2022Towards Adversarial Evaluations for Inexact Machine Unlearning17 Jan
- 2021Fast Yet Effective Machine Unlearning17 Nov
- 2021Adaptive Machine Unlearning8 Jun
Other references · 12
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2014Deep Learning Face Attributes in the Wildcited by 3,679
- 2019Machine Unlearningcited by 1,020
- 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 599
- 2019Certified Data Removal from Machine Learning Modelscited by 512
- 2020Amnesiac Machine Learningcited by 305
- 2021Unlearnable Examples: Making Personal Data Unexploitablecited by 188
- 2020Forgetting Outside the Box: Scrubbing Deep Networks of Information Accessible from Input-Output Observationscited by 171
- 2021Federated Unlearning via Class-Discriminative Pruningcited by 108
- 2022Hidden Poison: Machine Unlearning Enables Camouflaged Poisoning Attackscited by 37
- 2020Coded Machine Unlearningcited by 35
Built on by
Citing papers per year: 2024: 3; 2025: 2.
5 papers.
- 2024Alternate Preference Optimization for Unlearning Factual Knowledge in Large Language Modelscited by 32
- 2024Ferrari: Federated Feature Unlearning via Optimizing Feature Sensitivitycited by 11
- 2025AMUN: Adversarial Machine UNlearningcited by 2
- 2025AUVIC: Adversarial Unlearning of Visual Concepts for Multi-modal Large Language Modelscited by 2
- 2024ViT-MUL: A Baseline Study on Recent Machine Unlearning Methods Applied to Vision Transformerscited by 1
- 2025AUVIC: Adversarial Unlearning of Visual Concepts for Multi-modal Large Language Models14 Nov 2025
- 2025AMUN: Adversarial Machine UNlearning2 Mar 2025
- 2024Alternate Preference Optimization for Unlearning Factual Knowledge in Large Language Models20 Sep 2024
- 2024Ferrari: Federated Feature Unlearning via Optimizing Feature Sensitivity23 May 2024
- 2024ViT-MUL: A Baseline Study on Recent Machine Unlearning Methods Applied to Vision Transformers7 Feb 2024