Machine Unlearning for Image-to-Image Generative Models
On the map: LLM safety and security → Vision-language and text-to-image safety
Abstract (arXiv)
Machine unlearning has emerged as a new paradigm to deliberately forget data samples from a given model in order to adhere to stringent regulations. However, existing machine unlearning methods have been primarily focused on classification models, leaving the landscape of unlearning for generative models relatively unexplored. This paper serves as a bridge, addressing the gap by providing a unifying framework of machine unlearning for image-to-image generative models. Within this framework, we propose a computationally-efficient algorithm, underpinned by rigorous theoretical analysis, that demonstrates negligible performance degradation on the retain samples, while effectively removing the information from the forget samples. Empirical studies on two large-scale datasets, ImageNet-1K and Places-365, further show that our algorithm does not rely on the availability of the retain samples, which further complies with data retention policy. To our best knowledge, this work is the first that represents systemic, theoretical, empirical explorations of machine unlearning specifically tailored for image-to-image generative models. Our code is available at https://github.com/jpmorganchase/l2l-generator-unlearning.
Key facts. Cited by 47 papers in the map (data through 7 Oct 2026). Placed in Vision-language and text-to-image safety, one of 12 directions in LLM safety and security. Builds on 60 of its 77 references that are in the map. First posted on arXiv 1 Feb 2024.
Builds on
60 of 77 references.
Closest ancestors · 3
Same direction, newest first
- 2023Generative Adversarial Networks Unlearning19 Aug
- 2023Gradient Surgery for One-shot Unlearning on Generative Model10 Jul
- 2023Data Redaction from Conditional Generative Models18 May
Other references · 57
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
- 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 29,915
- 2020Denoising Diffusion Probabilistic Modelscited by 20,851
- 2019PyTorch: An Imperative Style, High-Performance Deep Learning Librarycited by 20,160
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
- 2021Diffusion Models Beat GANs on Image Synthesiscited by 8,185
- 2021Masked Autoencoders Are Scalable Vision Learnerscited by 7,339
- 2022Photorealistic Text-to-Image Diffusion Models with Deep Language Understandingcited by 6,322
- 2018A Style-Based Generator Architecture for Generative Adversarial Networkscited by 5,986
- 2022Generative Adversarial Networkscited by 5,603
- 2023Adding Conditional Control to Text-to-Image Diffusion Modelscited by 5,466
- 2022LAION-5B: An open large-scale dataset for training next generation image-text modelscited by 4,131
38 more
- 2021On the Opportunities and Risks of Foundation Modelscited by 3,961
- 2019Analyzing and Improving the Image Quality of StyleGANcited by 3,580
- 2016Improved Techniques for Training GANscited by 2,938
- 2018Large Scale GAN Training for High Fidelity Natural Image Synthesiscited by 2,609
- 2023Sparks of Artificial General Intelligence: Early experiments with GPT-4cited by 2,579
- 2017Improved Training of Wasserstein GANscited by 2,223
- 2022VideoMAE: Masked Autoencoders are Data-Efficient Learners for Self-Supervised Video Pre-Trainingcited by 1,305
- 2021Palette: Image-to-Image Diffusion Modelscited by 1,296
- 2022Diffusion Models: A Comprehensive Survey of Methods and Applicationscited by 1,107
- 2022MaskGIT: Masked Generative Image Transformercited by 1,082
- 2020Improved Techniques for Training Score-Based Generative Modelscited by 1,036
- 2019Machine Unlearningcited by 1,020
- 2019An Introduction to Variational Autoencoderscited by 997
- 2016InfoGAN: Interpretable Representation Learning by Information Maximizing Generative Adversarial Netscited by 858
- 2023Extracting Training Data from Diffusion Modelscited by 723
- 2018MINE: Mutual Information Neural Estimationcited by 680
- 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 599
- 2019On Variational Bounds of Mutual Informationcited by 550
- 2023Erasing Concepts from Diffusion Modelscited by 530
- 2022Masked Autoencoders As Spatiotemporal Learnerscited by 428
- 2022Diffusion Art or Digital Forgery? Investigating Data Replication in Diffusion Modelscited by 418
- 2021GAN Inversion: A Surveycited by 366
- 2020Amnesiac Machine Learningcited by 305
- 2020Descent-to-Delete: Gradient-Based Methods for Machine Unlearningcited by 303
- 2022A Survey of Machine Unlearningcited by 298
- 2023Analyzing Leakage of Personally Identifiable Information in Language Modelscited by 278
- 2023Towards Unbounded Machine Unlearningcited by 261
- 2022EDICT: Exact Diffusion Inversion via Coupled Transformationscited by 256
- 2021Machine Unlearning of Features and Labelscited by 223
- 2022MAGE: MAsked Generative Encoder to Unify Representation Learning and Image Synthesiscited by 222
- 2022Memorization Without Overfitting: Analyzing the Training Dynamics of Large Language Modelscited by 218
- 2021Fast Yet Effective Machine Unlearningcited by 209
- 2021Autoregressive Diffusion Modelscited by 208
- 2023Solving Inverse Problems with Latent Diffusion Models via Hard Data Consistencycited by 180
- 2020Forgetting Outside the Box: Scrubbing Deep Networks of Information Accessible from Input-Output Observationscited by 171
- 2023Boundary Unlearningcited by 132
- 2022Zero-Shot Machine Unlearningcited by 125
- 2018To learn image super-resolution, use a GAN to learn how to do image degradation firstcited by 94
50 most cited of 57 All 57 (JSON)
Built on by
Citing papers per year: 2024: 17; 2025: 24; 2026: 6.
47 papers.
Sort:
By area:
- 2024SOUL: Unlocking the Power of Second-Order Optimization for LLM Unlearningcited by 104
- 2024Machine Unlearning in Generative AI: A Surveycited by 49
- 2024Machine Unlearning: A Comprehensive Surveycited by 33
- 2024Attacks and Defenses for Generative Diffusion Models: A Comprehensive Surveycited by 32
- 2024On Effects of Steering Latent Representation for Large Language Model Unlearningcited by 27
- 2024Pruning for Robust Concept Erasing in Diffusion Modelscited by 22
- 2024Learning to Unlearn for Robust Machine Unlearningcited by 19
- 2025Training-Free Safe Denoisers for Safe Use of Diffusion Modelscited by 19
- 2025Learning to Unlearn while Retaining: Combating Gradient Conflicts in Machine Unlearningcited by 19
- 2025Data Unlearning in Diffusion Modelscited by 18
- 2025Tool Unlearning for Tool-Augmented LLMscited by 17
- 2025LLM Unlearning with LLM Beliefscited by 17
35 more
- 2024MU-Bench: A Multitask Multimodal Benchmark for Machine Unlearningcited by 16
- 2024Targeted Unlearning with Single Layer Unlearning Gradientcited by 16
- 2025Are We Truly Forgetting? A Critical Re-examination of Machine Unlearning Evaluation Protocolscited by 16
- 2024Machine Unlearning Doesn't Do What You Think: Lessons for Generative AI Policy and Researchcited by 14
- 2024On the Limitations and Prospects of Machine Unlearning for Generative AIcited by 12
- 2024Ferrari: Federated Feature Unlearning via Optimizing Feature Sensitivitycited by 11
- 2024Replication in Visual Diffusion Models: A Survey and Outlookcited by 11
- 2025UIPE: Enhancing LLM Unlearning by Removing Knowledge Related to Forgetting Targetscited by 10
- 2025Speech Unlearningcited by 7
- 2024Forget Vectors at Play: Universal Input Perturbations Driving Machine Unlearning in Image Classificationcited by 6
- 2025MUBox: A Critical Evaluation Framework of Deep Machine Unlearningcited by 6
- 2025Towards Source-Free Machine Unlearningcited by 6
- 2026Multimodal Unlearning Across Vision, Language, Video, and Audio: Survey of Methods, Datasets, and Benchmarkscited by 6
- 2024Controllable Unlearning for Image-to-Image Generative Models via varepsilon-Constrained Optimizationcited by 5
- 2025"Alexa, can you forget me?" Machine Unlearning Benchmark in Spoken Language Understandingcited by 5
- 2025Unlearning Inversion Attacks for Graph Neural Networkscited by 4
- 2025Generative Model Unlearning: A Survey through Target Events, Unlearning Operators, and Evaluation Protocolscited by 4
- 2026The Unseen Threat: Residual Knowledge in Machine Unlearning under Perturbed Samplescited by 4
- 2025Human Motion Unlearningcited by 3
- 2026An Illusion of Unlearning? Assessing Machine Unlearning Through Internal Representationscited by 3
- 2024Erase to Enhance: Data-Efficient Machine Unlearning in MRI Reconstructioncited by 2
- 2024Accurate Forgetting for All-in-One Image Restoration Modelcited by 1
- 2025Realistic Image-to-Image Machine Unlearning via Decoupling and Knowledge Retentioncited by 1
- 2025RUB: Evaluating Residual Knowledge in Unlearned Modelscited by 1
- 2025SecureT2I: No More Unauthorized Manipulation on AI Generated Images from Promptscited by 1
- 2025ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Modelscited by 1
- 2025Coffee: Controllable Diffusion Fine-tuningcited by 1
- 2025Erasing CLIP Memories: Non-Destructive, Data-Free Zero-Shot class Unlearning in CLIP Modelscited by 1
- 2025GenEAva: Generating Cartoon Avatars with Fine-Grained Facial Expressions from Realistic Diffusion-based Facescited by 0
- 2025Unleashing Uncertainty: Efficient Machine Unlearning for Generative AIcited by 0
- 2025Controllable Machine Unlearning via Gradient Pivotingcited by 0
- 2025Adaptive-lambda Subtracted Importance Sampled Scores in Machine Unlearning for DDPMs and VAEscited by 0
- 2026Efficient Unlearning through Maximizing Relearning Convergence Delaycited by 0
- 2026SoK: Unlearnability and Unlearning for Model Dememorizationcited by 0
- 2026To forget is to preserve: Machine Unlearning for 3D medical image segmentationcited by 0
- 2026Multimodal Unlearning Across Vision, Language, Video, and Audio: Survey of Methods, Datasets, and Benchmarks8 Jul 2026
- 2026To forget is to preserve: Machine Unlearning for 3D medical image segmentation15 Jun 2026
- 2026SoK: Unlearnability and Unlearning for Model Dememorization12 May 2026
- 2026Efficient Unlearning through Maximizing Relearning Convergence Delay10 Apr 2026
- 2026An Illusion of Unlearning? Assessing Machine Unlearning Through Internal Representations9 Apr 2026
- 2026The Unseen Threat: Residual Knowledge in Machine Unlearning under Perturbed Samples29 Jan 2026
- 2025Erasing CLIP Memories: Non-Destructive, Data-Free Zero-Shot class Unlearning in CLIP Models16 Dec 2025
- 2025Adaptive-lambda Subtracted Importance Sampled Scores in Machine Unlearning for DDPMs and VAEs30 Nov 2025
- 2025Coffee: Controllable Diffusion Fine-tuning18 Nov 2025
- 2025LLM Unlearning with LLM Beliefs22 Oct 2025
- 2025Controllable Machine Unlearning via Gradient Pivoting22 Oct 2025
- 2025Unleashing Uncertainty: Efficient Machine Unlearning for Generative AI28 Aug 2025
35 more
- 2025Towards Source-Free Machine Unlearning20 Aug 2025
- 2025ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models29 Jul 2025
- 2025Generative Model Unlearning: A Survey through Target Events, Unlearning Operators, and Evaluation Protocols26 Jul 2025
- 2025SecureT2I: No More Unauthorized Manipulation on AI Generated Images from Prompts4 Jul 2025
- 2025Speech Unlearning1 Jun 2025
- 2025Unlearning Inversion Attacks for Graph Neural Networks1 Jun 2025
- 2025"Alexa, can you forget me?" Machine Unlearning Benchmark in Spoken Language Understanding21 May 2025
- 2025MUBox: A Critical Evaluation Framework of Deep Machine Unlearning13 May 2025
- 2025RUB: Evaluating Residual Knowledge in Unlearned Models21 Apr 2025
- 2025GenEAva: Generating Cartoon Avatars with Fine-Grained Facial Expressions from Realistic Diffusion-based Faces10 Apr 2025
- 2025Human Motion Unlearning24 Mar 2025
- 2025Are We Truly Forgetting? A Critical Re-examination of Machine Unlearning Evaluation Protocols10 Mar 2025
- 2025Learning to Unlearn while Retaining: Combating Gradient Conflicts in Machine Unlearning8 Mar 2025
- 2025UIPE: Enhancing LLM Unlearning by Removing Knowledge Related to Forgetting Targets6 Mar 2025
- 2025Data Unlearning in Diffusion Models2 Mar 2025
- 2025Training-Free Safe Denoisers for Safe Use of Diffusion Models11 Feb 2025
- 2025Realistic Image-to-Image Machine Unlearning via Decoupling and Knowledge Retention6 Feb 2025
- 2025Tool Unlearning for Tool-Augmented LLMs3 Feb 2025
- 2024Forget Vectors at Play: Universal Input Perturbations Driving Machine Unlearning in Image Classification21 Dec 2024
- 2024Machine Unlearning Doesn't Do What You Think: Lessons for Generative AI Policy and Research9 Dec 2024
- 2024Accurate Forgetting for All-in-One Image Restoration Model1 Sep 2024
- 2024On Effects of Steering Latent Representation for Large Language Model Unlearning12 Aug 2024
- 2024Attacks and Defenses for Generative Diffusion Models: A Comprehensive Survey6 Aug 2024
- 2024Controllable Unlearning for Image-to-Image Generative Models via varepsilon-Constrained Optimization3 Aug 2024
- 2024On the Limitations and Prospects of Machine Unlearning for Generative AI1 Aug 2024
- 2024Machine Unlearning in Generative AI: A Survey30 Jul 2024
- 2024Targeted Unlearning with Single Layer Unlearning Gradient16 Jul 2024
- 2024Learning to Unlearn for Robust Machine Unlearning15 Jul 2024
- 2024Replication in Visual Diffusion Models: A Survey and Outlook7 Jul 2024
- 2024MU-Bench: A Multitask Multimodal Benchmark for Machine Unlearning21 Jun 2024
- 2024Pruning for Robust Concept Erasing in Diffusion Models26 May 2024
- 2024Erase to Enhance: Data-Efficient Machine Unlearning in MRI Reconstruction24 May 2024
- 2024Ferrari: Federated Feature Unlearning via Optimizing Feature Sensitivity23 May 2024
- 2024Machine Unlearning: A Comprehensive Survey13 May 2024
- 2024SOUL: Unlocking the Power of Second-Order Optimization for LLM Unlearning28 Apr 2024
- 2024SOUL: Unlocking the Power of Second-Order Optimization for LLM Unlearningcited by 104
- 2024Machine Unlearning in Generative AI: A Surveycited by 49
- 2024Machine Unlearning: A Comprehensive Surveycited by 33
- 2024On Effects of Steering Latent Representation for Large Language Model Unlearningcited by 27
- 2024Learning to Unlearn for Robust Machine Unlearningcited by 19
- 2025Learning to Unlearn while Retaining: Combating Gradient Conflicts in Machine Unlearningcited by 19
- 2025LLM Unlearning with LLM Beliefscited by 17
- 2024MU-Bench: A Multitask Multimodal Benchmark for Machine Unlearningcited by 16
- 2024Targeted Unlearning with Single Layer Unlearning Gradientcited by 16
- 2025Are We Truly Forgetting? A Critical Re-examination of Machine Unlearning Evaluation Protocolscited by 16
- 2024Machine Unlearning Doesn't Do What You Think: Lessons for Generative AI Policy and Researchcited by 14
- 2024On the Limitations and Prospects of Machine Unlearning for Generative AIcited by 12
12 most cited of 35 All 35 (JSON)
- 2026Multimodal Unlearning Across Vision, Language, Video, and Audio: Survey of Methods, Datasets, and Benchmarks8 Jul 2026
- 2026To forget is to preserve: Machine Unlearning for 3D medical image segmentation15 Jun 2026
- 2026SoK: Unlearnability and Unlearning for Model Dememorization12 May 2026
- 2026Efficient Unlearning through Maximizing Relearning Convergence Delay10 Apr 2026
- 2026An Illusion of Unlearning? Assessing Machine Unlearning Through Internal Representations9 Apr 2026
- 2026The Unseen Threat: Residual Knowledge in Machine Unlearning under Perturbed Samples29 Jan 2026
- 2025Erasing CLIP Memories: Non-Destructive, Data-Free Zero-Shot class Unlearning in CLIP Models16 Dec 2025
- 2025LLM Unlearning with LLM Beliefs22 Oct 2025
- 2025Controllable Machine Unlearning via Gradient Pivoting22 Oct 2025
- 2025Towards Source-Free Machine Unlearning20 Aug 2025
- 2025ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models29 Jul 2025
- 2025Generative Model Unlearning: A Survey through Target Events, Unlearning Operators, and Evaluation Protocols26 Jul 2025
12 newest of 35 All 35 (JSON)
- 2024Attacks and Defenses for Generative Diffusion Models: A Comprehensive Surveycited by 32
- 2024Pruning for Robust Concept Erasing in Diffusion Modelscited by 22
- 2025Training-Free Safe Denoisers for Safe Use of Diffusion Modelscited by 19
- 2025Data Unlearning in Diffusion Modelscited by 18
- 2024Replication in Visual Diffusion Models: A Survey and Outlookcited by 11
- 2025SecureT2I: No More Unauthorized Manipulation on AI Generated Images from Promptscited by 1
- 2025Coffee: Controllable Diffusion Fine-tuningcited by 1
- 2025GenEAva: Generating Cartoon Avatars with Fine-Grained Facial Expressions from Realistic Diffusion-based Facescited by 0
- 2025Unleashing Uncertainty: Efficient Machine Unlearning for Generative AIcited by 0
- 2025Adaptive-lambda Subtracted Importance Sampled Scores in Machine Unlearning for DDPMs and VAEscited by 0
- 2025Adaptive-lambda Subtracted Importance Sampled Scores in Machine Unlearning for DDPMs and VAEs30 Nov 2025
- 2025Coffee: Controllable Diffusion Fine-tuning18 Nov 2025
- 2025Unleashing Uncertainty: Efficient Machine Unlearning for Generative AI28 Aug 2025
- 2025SecureT2I: No More Unauthorized Manipulation on AI Generated Images from Prompts4 Jul 2025
- 2025GenEAva: Generating Cartoon Avatars with Fine-Grained Facial Expressions from Realistic Diffusion-based Faces10 Apr 2025
- 2025Data Unlearning in Diffusion Models2 Mar 2025
- 2025Training-Free Safe Denoisers for Safe Use of Diffusion Models11 Feb 2025
- 2024Attacks and Defenses for Generative Diffusion Models: A Comprehensive Survey6 Aug 2024
- 2024Replication in Visual Diffusion Models: A Survey and Outlook7 Jul 2024
- 2024Pruning for Robust Concept Erasing in Diffusion Models26 May 2024
- 2025Tool Unlearning for Tool-Augmented LLMscited by 17
- 2025Tool Unlearning for Tool-Augmented LLMs3 Feb 2025
- 2025Unlearning Inversion Attacks for Graph Neural Networkscited by 4
- 2025Unlearning Inversion Attacks for Graph Neural Networks1 Jun 2025