Memorization in Self-Supervised Learning Improves Downstream Generalization
Not on the map. Why?
Abstract (arXiv)
Self-supervised learning (SSL) has recently received significant attention due to its ability to train high-performance encoders purely on unlabeled data-often scraped from the internet. This data can still be sensitive and empirical evidence suggests that SSL encoders memorize private information of their training data and can disclose them at inference time. Since existing theoretical definitions of memorization from supervised learning rely on labels, they do not transfer to SSL. To address this gap, we propose SSLMem, a framework for defining memorization within SSL. Our definition compares the difference in alignment of representations for data points and their augmented views returned by both encoders that were trained on these data points and encoders that were not. Through comprehensive empirical analysis on diverse encoder architectures and datasets we highlight that even though SSL relies on large datasets and strong augmentations-both known in supervised learning as regularization techniques that reduce overfitting-still significant fractions of training data points experience high memorization. Through our empirical results, we show that this memorization is essential for encoders to achieve higher generalization performance on different downstream tasks.
Key facts. Cited by 18 papers in the map (data through 14 Oct 2026). Builds on 40 of its 55 references that are in the map. First posted on arXiv 19 Jan 2024.
Builds on
40 of 55 references.
References · 40
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,399
- 2015U-Net: Convolutional Networks for Biomedical Image Segmentationcited by 19,713
- 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,599
- 2020A Simple Framework for Contrastive Learning of Visual Representationscited by 12,049
- 2014ImageNet Large Scale Visual Recognition Challengecited by 8,498
- 2021Masked Autoencoders Are Scalable Vision Learnerscited by 7,403
- 2021Emerging Properties in Self-Supervised Vision Transformerscited by 6,968
- 2020Exploring Simple Siamese Representation Learningcited by 2,866
- 2016Deep Learning with Differential Privacycited by 2,728
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,281
- 2020Extracting Training Data from Large Language Modelscited by 2,189
- 2016Understanding deep learning requires rethinking generalizationcited by 1,674
28 more
- 2018Unified Perceptual Parsing for Scene Understandingcited by 1,271
- 2016Semantic Understanding of Scenes through the ADE20K Datasetcited by 1,069
- 2021VICReg: Variance-Invariance-Covariance Regularization for Self-Supervised Learningcited by 1,057
- 2017A Closer Look at Memorization in Deep Networkscited by 942
- 2018The Secret Sharer: Evaluating and Testing Unintended Memorization in Neural Networkscited by 864
- 2019Benign Overfitting in Linear Regressioncited by 549
- 2021Deep Learning on a Data Diet: Finding Important Examples Early in Trainingcited by 533
- 2019A Theoretical Analysis of Contrastive Unsupervised Representation Learningcited by 530
- 2020What Neural Networks Memorize and Why: Discovering the Long Tail via Influence Estimationcited by 497
- 2019Does Learning Require Memorization? A Short Tale about a Long Tailcited by 460
- 2021Understanding Dimensional Collapse in Contrastive Self-supervised Learningcited by 378
- 2022Memorization Without Overfitting: Analyzing the Training Dynamics of Large Language Modelscited by 220
- 2021On Feature Decorrelation in Self-Supervised Learningcited by 160
- 2022The Privacy Onion Effect: Memorization is Relativecited by 136
- 2022Measuring Forgetting of Memorized Training Examplescited by 118
- 2022Chaos is a Ladder: A New Theoretical Understanding of Contrastive Learning via Augmentation Overlapcited by 105
- 2020When is Memorization of Irrelevant Training Data Necessary for High-Accuracy Learning?cited by 104
- 2021Towards the Generalization of Contrastive Self-Supervised Learningcited by 99
- 2022How Mask Matters: Towards Theoretical Understandings of Masked Autoencoderscited by 86
- 2021EncoderMI: Membership Inference against Pre-trained Encoders in Contrastive Learningcited by 73
- 2023Can Neural Network Memorization Be Localized?cited by 69
- 2023The SSL Interplay: Augmentations, Inductive Bias, and Generalizationcited by 40
- 2023InfoNCE Loss Provably Learns Cluster-Preserving Representationscited by 37
- 2022Contrasting the landscape of contrastive and non-contrastive learningcited by 24
- 2020For self-supervised learning, Rationality implies generalization, provablycited by 22
- 2023Do SSL Models Have D'ej`a Vu? A Case of Unintended Memorization in Self-supervised Learningcited by 19
- 2023ViP: A Differentially Private Foundation Model for Computer Visioncited by 17
- 2021On the Memorization Properties of Contrastive Learningcited by 4
Built on by
Citing papers per year: 2024: 3; 2025: 11; 2026: 4.
18 papers.
Sort:
By area:
- 2024Finding NeMo: Localizing Neurons Responsible For Memorization in Diffusion Modelscited by 37
- 2025Privacy Attacks on Image AutoRegressive Modelscited by 15
- 2024Localizing Memorization in SSL Vision Encoderscited by 9
- 2025Membership Inference Attacks on Sequence Modelscited by 6
- 2025Exploring Structural Degradation in Dense Representations for Self-supervised Learningcited by 5
- 2025Captured by Captions: On Memorization and its Mitigation in CLIP Modelscited by 4
- 2025LeakyCLIP: Extracting Training Data from CLIPcited by 4
- 2025Rethinking Benign Overfitting in Two-Layer Neural Networkscited by 2
- 2025Seal Your Backdoor with Variational Defensecited by 2
- 2025Demystifying Foreground-Background Memorization in Diffusion Modelscited by 2
- 2024MUC: Machine Unlearning for Contrastive Learning with Black-box Evaluationcited by 1
- 2025Memorization in Graph Neural Networkscited by 1
6 more
- 2025Localizing and Mitigating Memorization in Image Autoregressive Modelscited by 1
- 2025Enhancing Semantic Segmentation with Continual Self-Supervised Pre-trainingcited by 1
- 2026MultiMem: Measuring and Mitigating Memorization in Multi-Modal Contrastive Learningcited by 0
- 2026MGI: Member vs Generated Inferencecited by 0
- 2026Reducing information dependency does not cause training data privacy. Adversarially non-robust features docited by 0
- 2026Memorisation bias in medical AIcited by 0
- 2026Memorisation bias in medical AI15 Sep 2026
- 2026Reducing information dependency does not cause training data privacy. Adversarially non-robust features do14 Jul 2026
- 2026MGI: Member vs Generated Inference22 Jun 2026
- 2026MultiMem: Measuring and Mitigating Memorization in Multi-Modal Contrastive Learning20 Jun 2026
- 2025Exploring Structural Degradation in Dense Representations for Self-supervised Learning20 Oct 2025
- 2025Enhancing Semantic Segmentation with Continual Self-Supervised Pre-training22 Sep 2025
- 2025Localizing and Mitigating Memorization in Image Autoregressive Models30 Aug 2025
- 2025Memorization in Graph Neural Networks26 Aug 2025
- 2025Demystifying Foreground-Background Memorization in Diffusion Models16 Aug 2025
- 2025LeakyCLIP: Extracting Training Data from CLIP1 Aug 2025
- 2025Membership Inference Attacks on Sequence Models5 Jun 2025
- 2025Seal Your Backdoor with Variational Defense11 Mar 2025
6 more
- 2025Rethinking Benign Overfitting in Two-Layer Neural Networks17 Feb 2025
- 2025Captured by Captions: On Memorization and its Mitigation in CLIP Models11 Feb 2025
- 2025Privacy Attacks on Image AutoRegressive Models4 Feb 2025
- 2024Localizing Memorization in SSL Vision Encoders27 Sep 2024
- 2024MUC: Machine Unlearning for Contrastive Learning with Black-box Evaluation5 Jun 2024
- 2024Finding NeMo: Localizing Neurons Responsible For Memorization in Diffusion Models4 Jun 2024
- 2025Membership Inference Attacks on Sequence Modelscited by 6
- 2024MUC: Machine Unlearning for Contrastive Learning with Black-box Evaluationcited by 1
- 2026MGI: Member vs Generated Inferencecited by 0
- 2026MGI: Member vs Generated Inference22 Jun 2026
- 2025Membership Inference Attacks on Sequence Models5 Jun 2025
- 2024MUC: Machine Unlearning for Contrastive Learning with Black-box Evaluation5 Jun 2024
- 2024Localizing Memorization in SSL Vision Encoderscited by 9
- 2025Exploring Structural Degradation in Dense Representations for Self-supervised Learningcited by 5
- 2025Captured by Captions: On Memorization and its Mitigation in CLIP Modelscited by 4
- 2025Rethinking Benign Overfitting in Two-Layer Neural Networkscited by 2
- 2025Seal Your Backdoor with Variational Defensecited by 2
- 2025Memorization in Graph Neural Networkscited by 1
- 2025Localizing and Mitigating Memorization in Image Autoregressive Modelscited by 1
- 2025Enhancing Semantic Segmentation with Continual Self-Supervised Pre-trainingcited by 1
- 2026MultiMem: Measuring and Mitigating Memorization in Multi-Modal Contrastive Learningcited by 0
- 2026Reducing information dependency does not cause training data privacy. Adversarially non-robust features docited by 0
- 2026Memorisation bias in medical AIcited by 0
- 2026Memorisation bias in medical AI15 Sep 2026
- 2026Reducing information dependency does not cause training data privacy. Adversarially non-robust features do14 Jul 2026
- 2026MultiMem: Measuring and Mitigating Memorization in Multi-Modal Contrastive Learning20 Jun 2026
- 2025Exploring Structural Degradation in Dense Representations for Self-supervised Learning20 Oct 2025
- 2025Enhancing Semantic Segmentation with Continual Self-Supervised Pre-training22 Sep 2025
- 2025Localizing and Mitigating Memorization in Image Autoregressive Models30 Aug 2025
- 2025Memorization in Graph Neural Networks26 Aug 2025
- 2025Seal Your Backdoor with Variational Defense11 Mar 2025
- 2025Rethinking Benign Overfitting in Two-Layer Neural Networks17 Feb 2025
- 2025Captured by Captions: On Memorization and its Mitigation in CLIP Models11 Feb 2025
- 2024Localizing Memorization in SSL Vision Encoders27 Sep 2024