An Information Theoretic Approach to Machine Unlearning
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
To comply with AI and data regulations, the need to forget private or copyrighted information from trained machine learning models is increasingly important. The key challenge in unlearning is forgetting the necessary data in a timely manner, while preserving model performance. In this work, we address the zero-shot unlearning scenario, whereby an unlearning algorithm must be able to remove data given only a trained model and the data to be forgotten. We explore unlearning from an information theoretic perspective, connecting the influence of a sample to the information gain a model receives by observing it. From this, we derive a simple but principled zero-shot unlearning method based on the geometry of the model. Our approach takes the form of minimising the gradient of a learned function with respect to a small neighbourhood around a target forget point. This induces a smoothing effect, causing forgetting by moving the boundary of the classifier. We explore the intuition behind why this approach can jointly unlearn forget samples while preserving general model performance through a series of low-dimensional experiments. We perform extensive empirical evaluation of our method over a range of contemporary benchmarks, verifying that our method is competitive with state-of-the-art performance under the strict constraints of zero-shot unlearning. Code for the project can be found at https://github.com/jwf40/Information-Theoretic-Unlearning
Key facts. Cited by 15 papers in the map (data through 7 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 28 of its 43 references that are in the map. First posted on arXiv 2 Feb 2024.
Builds on
28 of 43 references.
Closest ancestors · 12
Same direction, newest first
- 2024TOFU: A Task of Fictitious Unlearning for LLMs11 Jan
- 2023Unlearning via Sparse Representations26 Nov
- 2023Fast Machine Unlearning Without Retraining Through Selective Synaptic Dampening15 Aug
- 2023Boundary Unlearning21 Mar
- 2023Towards Unbounded Machine Unlearning20 Feb
- 2022Can Bad Teaching Induce Forgetting? Unlearning in Deep Networks using an Incompetent Teacher17 May
- 2022Deep Unlearning via Randomized Conditionally Independent Hessians15 Apr
- 2022Zero-Shot Machine Unlearning14 Jan
- 2021Fast Yet Effective Machine Unlearning17 Nov
- 2021Machine Unlearning of Features and Labels26 Aug
- 2021Adaptive Machine Unlearning8 Jun
- 2021Remember What You Want to Forget: Algorithms for Machine Unlearning4 Mar
Other references · 16
- 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 29,915
- 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,267
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2019Optuna: A Next-generation Hyperparameter Optimization Frameworkcited by 2,455
- 2017Improved Training of Wasserstein GANscited by 2,223
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,221
- 2019Certified Adversarial Robustness via Randomized Smoothingcited by 1,324
- 2019Machine Unlearningcited by 1,020
- 2017A Closer Look at Memorization in Deep Networkscited by 936
- 2021Membership Inference Attacks From First Principlescited by 839
- 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 599
- 2019Does Learning Require Memorization? A Short Tale about a Long Tailcited by 452
4 more
- 2019Making AI Forget You: Data Deletion in Machine Learningcited by 447
- 2020Amnesiac Machine Learningcited by 305
- 2020Descent-to-Delete: Gradient-Based Methods for Machine Unlearningcited by 303
- 2021Spectral Bias in Practice: The Role of Function Frequency in Generalizationcited by 36
Built on by
Citing papers per year: 2024: 5; 2025: 5; 2026: 5.
15 papers.
Sort:
By area:
- 2024Parameter-tuning-free data entry error unlearning with adaptive selective synaptic dampeningcited by 9
- 2025A Certified Unlearning Approach without Access to Source Datacited by 9
- 2024Gone but Not Forgotten: Improved Benchmarks for Machine Unlearningcited by 8
- 2025An Unlearning Framework for Continual Learningcited by 5
- 2026CATA: Continual Machine Unlearning via Conflict-Averse Task Arithmeticcited by 2
- 2024MUC: Machine Unlearning for Contrastive Learning with Black-box Evaluationcited by 1
- 2024Parallel Unlearning in Inherited Model Networkscited by 1
- 2024Instance-Level Difficulty: A Missing Perspective in Machine Unlearningcited by 1
- 2025Efficient Machine Unlearning by Model Splitting and Core Sample Selectioncited by 1
- 2025IMU: Influence-guided Machine Unlearningcited by 1
- 2026Reference-Guided Machine Unlearningcited by 1
- 2025Conformal Unlearning: A New Paradigm for Unlearning in Conformal Predictorscited by 0
- 2026Why Forget-Only Unlearning Needs Memorization7 Oct 2026
- 2026Damnatio Memoriae: Adversarially and Selectively Forgetting Identities in the Embedding Space of Face Recognition Models22 Sep 2026
- 2026CATA: Continual Machine Unlearning via Conflict-Averse Task Arithmetic18 May 2026
- 2026ICED: Concept-level Machine Unlearning via Interpretable Concept Decomposition14 May 2026
- 2026Reference-Guided Machine Unlearning11 Mar 2026
- 2025An Unlearning Framework for Continual Learning22 Sep 2025
- 2025Conformal Unlearning: A New Paradigm for Unlearning in Conformal Predictors5 Aug 2025
- 2025IMU: Influence-guided Machine Unlearning3 Aug 2025
- 2025A Certified Unlearning Approach without Access to Source Data6 Jun 2025
- 2025Efficient Machine Unlearning by Model Splitting and Core Sample Selection11 May 2025
- 2024Instance-Level Difficulty: A Missing Perspective in Machine Unlearning3 Oct 2024
- 2024Parallel Unlearning in Inherited Model Networks16 Aug 2024
- 2024Parameter-tuning-free data entry error unlearning with adaptive selective synaptic dampeningcited by 9
- 2025A Certified Unlearning Approach without Access to Source Datacited by 9
- 2024Gone but Not Forgotten: Improved Benchmarks for Machine Unlearningcited by 8
- 2025An Unlearning Framework for Continual Learningcited by 5
- 2024MUC: Machine Unlearning for Contrastive Learning with Black-box Evaluationcited by 1
- 2024Parallel Unlearning in Inherited Model Networkscited by 1
- 2024Instance-Level Difficulty: A Missing Perspective in Machine Unlearningcited by 1
- 2025Efficient Machine Unlearning by Model Splitting and Core Sample Selectioncited by 1
- 2025IMU: Influence-guided Machine Unlearningcited by 1
- 2026Reference-Guided Machine Unlearningcited by 1
- 2025Conformal Unlearning: A New Paradigm for Unlearning in Conformal Predictorscited by 0
- 2026Why Forget-Only Unlearning Needs Memorizationcited by 0
- 2026Why Forget-Only Unlearning Needs Memorization7 Oct 2026
- 2026Reference-Guided Machine Unlearning11 Mar 2026
- 2025An Unlearning Framework for Continual Learning22 Sep 2025
- 2025Conformal Unlearning: A New Paradigm for Unlearning in Conformal Predictors5 Aug 2025
- 2025IMU: Influence-guided Machine Unlearning3 Aug 2025
- 2025A Certified Unlearning Approach without Access to Source Data6 Jun 2025
- 2025Efficient Machine Unlearning by Model Splitting and Core Sample Selection11 May 2025
- 2024Instance-Level Difficulty: A Missing Perspective in Machine Unlearning3 Oct 2024
- 2024Parallel Unlearning in Inherited Model Networks16 Aug 2024
- 2024MUC: Machine Unlearning for Contrastive Learning with Black-box Evaluation5 Jun 2024
- 2024Gone but Not Forgotten: Improved Benchmarks for Machine Unlearning29 May 2024
- 2024Parameter-tuning-free data entry error unlearning with adaptive selective synaptic dampening6 Feb 2024