Langevin Unlearning: A New Perspective of Noisy Gradient Descent for Machine Unlearning
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
Machine unlearning has raised significant interest with the adoption of laws ensuring the ``right to be forgotten''. Researchers have provided a probabilistic notion of approximate unlearning under a similar definition of Differential Privacy (DP), where privacy is defined as statistical indistinguishability to retraining from scratch. We propose Langevin unlearning, an unlearning framework based on noisy gradient descent with privacy guarantees for approximate unlearning problems. Langevin unlearning unifies the DP learning process and the privacy-certified unlearning process with many algorithmic benefits. These include approximate certified unlearning for non-convex problems, complexity saving compared to retraining, sequential and batch unlearning for multiple unlearning requests.
Key facts. Cited by 48 papers in the map (data through 7 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 33 of its 54 references that are in the map. First posted on arXiv 18 Jan 2024.
Builds on
33 of 54 references.
Closest ancestors · 7
Same direction, newest first
- 2023From Adaptive Query Release to Machine Unlearning20 Jul
- 2022Forget Unlearning: Towards True Data-Deletion in Machine Learning17 Oct
- 2022Challenges and Pitfalls of Bayesian Unlearning7 Jul
- 2022Markov Chain Monte Carlo-Based Machine Unlearning: Unlearning What Needs to be Forgotten28 Feb
- 2021Adaptive Machine Unlearning8 Jun
- 2021Remember What You Want to Forget: Algorithms for Machine Unlearning4 Mar
- 2021Machine Unlearning via Algorithmic Stability25 Feb
Other references · 26
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2019PyTorch: An Imperative Style, High-Performance Deep Learning Librarycited by 20,160
- 2016Deep Learning with Differential Privacycited by 2,682
- 2019Machine Unlearningcited by 1,020
- 2018The Secret Sharer: Evaluating and Testing Unintended Memorization in Neural Networkscited by 847
- 2017Renyi Differential Privacycited by 643
- 2015Train faster, generalize better: Stability of stochastic gradient descentcited by 547
- 2019Certified Data Removal from Machine Learning Modelscited by 512
- 2020Descent-to-Delete: Gradient-Based Methods for Machine Unlearningcited by 303
- 2013The Composition Theorem for Differential Privacycited by 290
- 2019Rapid Convergence of the Unadjusted Langevin Algorithm: Isoperimetry Sufficescited by 224
- 2015Non-asymptotic convergence analysis for the Unadjusted Langevin Algorithmcited by 195
14 more
- 2021Practical and Private (Deep) Learning without Sampling or Shufflingcited by 169
- 2020Variational Bayesian Unlearningcited by 114
- 2018Privacy Amplification by Iterationcited by 97
- 2021Differential Privacy Dynamics of Langevin Diffusion and Noisy Gradient Descentcited by 71
- 2018Sampling Can Be Faster Than Optimizationcited by 68
- 2022Privacy of Noisy Stochastic Gradient Descent: More Iterations without More Privacy Losscited by 60
- 2022Differentially Private Learning Needs Hidden State (Or Much Faster Convergence)cited by 45
- 2020Convergence of Langevin Monte Carlo in Chi-Squared and Renyi Divergencecited by 42
- 2020Projected Stochastic Gradient Langevin Algorithms for Constrained Sampling and Non-Convex Learningcited by 33
- 2023Towards a Complete Analysis of Langevin Monte Carlo: Beyond Poincar'e Inequalitycited by 31
- 2020Faster Differentially Private Samplers via R'enyi Divergence Analysis of Discretized Langevin MCMCcited by 27
- 2022Resolving the Mixing Time of the Langevin Algorithm to its Stationary Distribution for Log-Concave Samplingcited by 21
- 2022Differential Privacy Guarantees for Stochastic Gradient Langevin Dynamicscited by 18
- 2021Bayesian Inference Forgettingcited by 7
Built on by
Citing papers per year: 2024: 8; 2025: 27; 2026: 13.
48 papers.
Sort:
By area:
- 2024Machine Unlearning Fails to Remove Data Poisoning Attackscited by 35
- 2025Certified Unlearning for Neural Networkscited by 25
- 2024Boosting Alignment for Post-Unlearning Text-to-Image Generative Modelscited by 15
- 2024Certified Machine Unlearning via Noisy Stochastic Gradient Descentcited by 13
- 2025Do LLMs Really Forget? Evaluating Unlearning with Knowledge Correlation and Confidence Awarenesscited by 13
- 2025Ascent Fails to Forgetcited by 12
- 2024Underestimated Privacy Risks for Minority Populations in Large Language Model Unlearningcited by 9
- 2025A Certified Unlearning Approach without Access to Source Datacited by 9
- 2025Towards Reliable Forgetting: A Survey on Machine Unlearning Verificationcited by 8
- 2024Convergent Privacy Loss of Noisy-SGD without Convexity and Smoothnesscited by 6
- 2025MUBox: A Critical Evaluation Framework of Deep Machine Unlearningcited by 6
- 2024Understanding Fine-tuning in Approximate Unlearning: A Theoretical Perspectivecited by 5
36 more
- 2025Distributional Machine Unlearning via Selective Data Removalcited by 5
- 2025The Right to be Forgotten in Pruning: Unveil Machine Unlearning on Sparse Modelscited by 5
- 2024Provable unlearning in topic modeling and downstream taskscited by 4
- 2025Leveraging Per-Instance Privacy for Machine Unlearningcited by 4
- 2026The Unseen Threat: Residual Knowledge in Machine Unlearning under Perturbed Samplescited by 4
- 2024Privacy of SGD under Gaussian or Heavy-Tailed Noise: Guarantees without Gradient Clippingcited by 3
- 2025System-Aware Unlearning Algorithms: Use Lesser, Forget Fastercited by 3
- 2025Quantum-Inspired Audio Unlearning: Towards Privacy-Preserving Voice Biometricscited by 2
- 2025Efficient Unlearning with Privacy Guaranteescited by 1
- 2025One-Point Contraction: Erasing Representational Separability toward Irreversible Deep Forgettingcited by 1
- 2025LLM Unlearning using Gradient Ratio-Based Influence Estimation and Noise Injectioncited by 1
- 2025Backdoor Unlearning by Linear Task Decompositioncited by 1
- 2025WARP: Weight Teleportation for Attack-Resilient Unlearning Protocolscited by 1
- 2025Efficient Public Verification of Private ML via Regularizationcited by 1
- 2025Fully Decentralized Certified Unlearningcited by 1
- 2026Representation Unlearning: Forgetting through Information Compressioncited by 1
- 2026Less Noise, Same Certificate: Retain Sensitivity for Unlearningcited by 1
- 2026Auditing of Unlearning Algorithmscited by 1
- 2025Task-Agnostic Federation over Decentralized Data: Research Landscape and Visionscited by 0
- 2025Targeted Unlearning Using Perturbed Sign Gradient Methods With Applications On Medical Imagescited by 0
- 2025Privacy Amplification in Differentially Private Zeroth-Order Optimization with Hidden Statescited by 0
- 2025Machine Unlearning for Streaming Forgettingcited by 0
- 2025Graph Unlearning via Embedding Reconstruction -- A Range-Null Space Decomposition Approachcited by 0
- 2025The Measure of Deception: An Analysis of Data Forging in Machine Unlearningcited by 0
- 2025Factor Decorrelation Enhanced Data Removal from Deep Predictive Modelscited by 0
- 2025R'enyi Differential Privacy for Heavy-Tailed SDEs via Fractional Poincar'e Inequalitiescited by 0
- 2025Descend or Rewind? Stochastic Gradient Descent Unlearningcited by 0
- 2026Sequential Subspace Noise Injection Prevents Accuracy Collapse in Certified Unlearningcited by 0
- 2026Why Some Models Resist Unlearning: A Linear Stability Perspectivecited by 0
- 2026Variance-Reduced (varepsilon,δ)-Unlearning using Forget Set Gradientscited by 0
- 2026Certified Per-Instance Unlearning Using Individual Sensitivity Boundscited by 0
- 2026Behavioral Guarantees for Proxy-Based Unlearningcited by 0
- 2026Unlearning with Asymmetric Sources: Improved Unlearning-Utility Trade-off with Public Datacited by 0
- 2026SoK: Unlearnability and Unlearning for Model Dememorizationcited by 0
- 2026Statistical Unlearning of Distributions: A Hypothesis Testing Approachcited by 0
- 2026The Forgetting-Retention Dilemma: Certified Unlearning Theory in Continual Learningcited by 0
- 2026Auditing of Unlearning Algorithms7 Jul 2026
- 2026The Forgetting-Retention Dilemma: Certified Unlearning Theory in Continual Learning29 Jun 2026
- 2026Statistical Unlearning of Distributions: A Hypothesis Testing Approach15 May 2026
- 2026SoK: Unlearnability and Unlearning for Model Dememorization12 May 2026
- 2026Unlearning with Asymmetric Sources: Improved Unlearning-Utility Trade-off with Public Data11 May 2026
- 2026Behavioral Guarantees for Proxy-Based Unlearning11 May 2026
- 2026Less Noise, Same Certificate: Retain Sensitivity for Unlearning3 Mar 2026
- 2026Certified Per-Instance Unlearning Using Individual Sensitivity Bounds17 Feb 2026
- 2026Variance-Reduced (varepsilon,δ)-Unlearning using Forget Set Gradients16 Feb 2026
- 2026Why Some Models Resist Unlearning: A Linear Stability Perspective3 Feb 2026
- 2026The Unseen Threat: Residual Knowledge in Machine Unlearning under Perturbed Samples29 Jan 2026
- 2026Representation Unlearning: Forgetting through Information Compression29 Jan 2026
36 more
- 2026Sequential Subspace Noise Injection Prevents Accuracy Collapse in Certified Unlearning8 Jan 2026
- 2025Fully Decentralized Certified Unlearning9 Dec 2025
- 2025Efficient Public Verification of Private ML via Regularization3 Dec 2025
- 2025WARP: Weight Teleportation for Attack-Resilient Unlearning Protocols29 Nov 2025
- 2025Descend or Rewind? Stochastic Gradient Descent Unlearning20 Nov 2025
- 2025R'enyi Differential Privacy for Heavy-Tailed SDEs via Fractional Poincar'e Inequalities19 Nov 2025
- 2025Backdoor Unlearning by Linear Task Decomposition16 Oct 2025
- 2025Ascent Fails to Forget30 Sep 2025
- 2025Factor Decorrelation Enhanced Data Removal from Deep Predictive Models27 Sep 2025
- 2025The Measure of Deception: An Analysis of Data Forging in Machine Unlearning6 Sep 2025
- 2025LLM Unlearning using Gradient Ratio-Based Influence Estimation and Noise Injection8 Aug 2025
- 2025Graph Unlearning via Embedding Reconstruction -- A Range-Null Space Decomposition Approach4 Aug 2025
- 2025Quantum-Inspired Audio Unlearning: Towards Privacy-Preserving Voice Biometrics29 Jul 2025
- 2025The Right to be Forgotten in Pruning: Unveil Machine Unlearning on Sparse Models24 Jul 2025
- 2025Machine Unlearning for Streaming Forgetting21 Jul 2025
- 2025Distributional Machine Unlearning via Selective Data Removal20 Jul 2025
- 2025One-Point Contraction: Erasing Representational Separability toward Irreversible Deep Forgetting10 Jul 2025
- 2025Efficient Unlearning with Privacy Guarantees7 Jul 2025
- 2025Towards Reliable Forgetting: A Survey on Machine Unlearning Verification18 Jun 2025
- 2025Certified Unlearning for Neural Networks8 Jun 2025
- 2025A Certified Unlearning Approach without Access to Source Data6 Jun 2025
- 2025System-Aware Unlearning Algorithms: Use Lesser, Forget Faster6 Jun 2025
- 2025Do LLMs Really Forget? Evaluating Unlearning with Knowledge Correlation and Confidence Awareness6 Jun 2025
- 2025Privacy Amplification in Differentially Private Zeroth-Order Optimization with Hidden States30 May 2025
- 2025Targeted Unlearning Using Perturbed Sign Gradient Methods With Applications On Medical Images28 May 2025
- 2025Leveraging Per-Instance Privacy for Machine Unlearning24 May 2025
- 2025MUBox: A Critical Evaluation Framework of Deep Machine Unlearning13 May 2025
- 2025Task-Agnostic Federation over Decentralized Data: Research Landscape and Visions5 Mar 2025
- 2024Underestimated Privacy Risks for Minority Populations in Large Language Model Unlearning11 Dec 2024
- 2024Boosting Alignment for Post-Unlearning Text-to-Image Generative Models9 Dec 2024
- 2024Provable unlearning in topic modeling and downstream tasks19 Nov 2024
- 2024Understanding Fine-tuning in Approximate Unlearning: A Theoretical Perspective4 Oct 2024
- 2024Convergent Privacy Loss of Noisy-SGD without Convexity and Smoothness1 Oct 2024
- 2024Machine Unlearning Fails to Remove Data Poisoning Attacks25 Jun 2024
- 2024Certified Machine Unlearning via Noisy Stochastic Gradient Descent25 Mar 2024
- 2024Privacy of SGD under Gaussian or Heavy-Tailed Noise: Guarantees without Gradient Clipping4 Mar 2024
- 2024Machine Unlearning Fails to Remove Data Poisoning Attackscited by 35
- 2025Certified Unlearning for Neural Networkscited by 25
- 2024Certified Machine Unlearning via Noisy Stochastic Gradient Descentcited by 13
- 2025Do LLMs Really Forget? Evaluating Unlearning with Knowledge Correlation and Confidence Awarenesscited by 13
- 2025Ascent Fails to Forgetcited by 12
- 2024Underestimated Privacy Risks for Minority Populations in Large Language Model Unlearningcited by 9
- 2025A Certified Unlearning Approach without Access to Source Datacited by 9
- 2025Towards Reliable Forgetting: A Survey on Machine Unlearning Verificationcited by 8
- 2025MUBox: A Critical Evaluation Framework of Deep Machine Unlearningcited by 6
- 2024Understanding Fine-tuning in Approximate Unlearning: A Theoretical Perspectivecited by 5
- 2025Distributional Machine Unlearning via Selective Data Removalcited by 5
- 2025The Right to be Forgotten in Pruning: Unveil Machine Unlearning on Sparse Modelscited by 5
12 most cited of 39 All 39 (JSON)
- 2026Auditing of Unlearning Algorithms7 Jul 2026
- 2026The Forgetting-Retention Dilemma: Certified Unlearning Theory in Continual Learning29 Jun 2026
- 2026Statistical Unlearning of Distributions: A Hypothesis Testing Approach15 May 2026
- 2026SoK: Unlearnability and Unlearning for Model Dememorization12 May 2026
- 2026Unlearning with Asymmetric Sources: Improved Unlearning-Utility Trade-off with Public Data11 May 2026
- 2026Behavioral Guarantees for Proxy-Based Unlearning11 May 2026
- 2026Less Noise, Same Certificate: Retain Sensitivity for Unlearning3 Mar 2026
- 2026Certified Per-Instance Unlearning Using Individual Sensitivity Bounds17 Feb 2026
- 2026Variance-Reduced (varepsilon,δ)-Unlearning using Forget Set Gradients16 Feb 2026
- 2026Why Some Models Resist Unlearning: A Linear Stability Perspective3 Feb 2026
- 2026The Unseen Threat: Residual Knowledge in Machine Unlearning under Perturbed Samples29 Jan 2026
- 2026Representation Unlearning: Forgetting through Information Compression29 Jan 2026
12 newest of 39 All 39 (JSON)
- 2024Convergent Privacy Loss of Noisy-SGD without Convexity and Smoothnesscited by 6
- 2024Privacy of SGD under Gaussian or Heavy-Tailed Noise: Guarantees without Gradient Clippingcited by 3
- 2025Backdoor Unlearning by Linear Task Decompositioncited by 1
- 2025Efficient Public Verification of Private ML via Regularizationcited by 1
- 2025Task-Agnostic Federation over Decentralized Data: Research Landscape and Visionscited by 0
- 2025Privacy Amplification in Differentially Private Zeroth-Order Optimization with Hidden Statescited by 0
- 2025Factor Decorrelation Enhanced Data Removal from Deep Predictive Modelscited by 0
- 2025R'enyi Differential Privacy for Heavy-Tailed SDEs via Fractional Poincar'e Inequalitiescited by 0
- 2025Efficient Public Verification of Private ML via Regularization3 Dec 2025
- 2025R'enyi Differential Privacy for Heavy-Tailed SDEs via Fractional Poincar'e Inequalities19 Nov 2025
- 2025Backdoor Unlearning by Linear Task Decomposition16 Oct 2025
- 2025Factor Decorrelation Enhanced Data Removal from Deep Predictive Models27 Sep 2025
- 2025Privacy Amplification in Differentially Private Zeroth-Order Optimization with Hidden States30 May 2025
- 2025Task-Agnostic Federation over Decentralized Data: Research Landscape and Visions5 Mar 2025
- 2024Convergent Privacy Loss of Noisy-SGD without Convexity and Smoothness1 Oct 2024
- 2024Privacy of SGD under Gaussian or Heavy-Tailed Noise: Guarantees without Gradient Clipping4 Mar 2024