mlsanityData to 7 Oct 2026

Communication Efficient and Provable Federated Unlearning

arXiv 2401.11018 ↗First posted 19 Jan 2024cs.LG cs.DCcited by 16

On the map: LLM safety and security → Federated unlearning and poisoning

Abstract (arXiv)

We study federated unlearning, a novel problem to eliminate the impact of specific clients or data points on the global model learned via federated learning (FL). This problem is driven by the right to be forgotten and the privacy challenges in FL. We introduce a new framework for exact federated unlearning that meets two essential criteria: textitcommunication efficiency and textitexact unlearning provability. To our knowledge, this is the first work to tackle both aspects coherently. We start by giving a rigorous definition of textitexact federated unlearning, which guarantees that the unlearned model is statistically indistinguishable from the one trained without the deleted data. We then pinpoint the key property that enables fast exact federated unlearning: total variation (TV) stability, which measures the sensitivity of the model parameters to slight changes in the dataset. Leveraging this insight, we develop a TV-stable FL algorithm called textttFATS, which modifies the classical textttunderlineFedunderlineAvg algorithm for underlineTV underlineStability and employs local SGD with periodic averaging to lower the communication round. We also design efficient unlearning algorithms for textttFATS under two settings: client-level and sample-level unlearning. We provide theoretical guarantees for our learning and unlearning algorithms, proving that they achieve exact federated unlearning with reasonable convergence rates for both the original and unlearned models. We empirically validate our framework on 6 benchmark datasets, and show its superiority over state-of-the-art methods in terms of accuracy, communication cost, computation cost, and unlearning efficacy.

Key facts. Cited by 16 papers in the map (data through 7 Oct 2026). Placed in Federated unlearning and poisoning, one of 12 directions in LLM safety and security. Builds on 17 of its 30 references that are in the map. First posted on arXiv 19 Jan 2024.

Builds on

17 of 30 references.

Closest ancestors · 1

Same direction, newest first

  1. 2022The Right to be Forgotten in Federated Learning: An Efficient Realization with Rapid Retraining14 Mar

Other references · 16

  1. 2016Communication-Efficient Learning of Deep Networks from Decentralized Datacited by 7,592
  2. 2017Fashion-MNIST: a Novel Image Dataset for Benchmarking Machine Learning Algorithmscited by 4,283
  3. 2019Advances and Open Problems in Federated Learningcited by 3,021
  4. 2016Membership Inference Attacks against Machine Learning Modelscited by 2,221
  5. 2019Machine Unlearningcited by 1,020
  6. 2019Deep Leakage from Gradientscited by 1,004
  7. 2019Measuring the Effects of Non-Identical Data Distribution for Federated Visual Classificationcited by 836
  8. 2018LEAF: A Benchmark for Federated Settingscited by 780
  9. 2019Certified Data Removal from Machine Learning Modelscited by 512
  10. 2020Flower: A Friendly Federated Learning Research Frameworkcited by 449
  11. 2019Making AI Forget You: Data Deletion in Machine Learningcited by 447
  12. 2021Remember What You Want to Forget: Algorithms for Machine Unlearningcited by 360
4 more
  1. 2020Descent-to-Delete: Gradient-Based Methods for Machine Unlearningcited by 303
  2. 2021Unrolling SGD: Understanding Factors Influencing Machine Unlearningcited by 274
  3. 2018Beyond Inferring Class Representatives: User-Level Privacy Leakage From Federated Learningcited by 242
  4. 2021Machine Unlearning via Algorithmic Stabilitycited by 128

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2024: 4; 2025: 7; 2026: 5.

16 papers.

Sort:

By area: