mlsanityData to 14 Oct 2026

Remaining-data-free Machine Unlearning by Suppressing Sample Contribution

arXiv 2402.15109 ↗First posted 23 Feb 2024cs.LGcited by 13

On the map: LLM safety and security → Machine unlearning

Abstract (arXiv)

Machine unlearning (MU) aims to remove the influence of specific training samples from a well-trained model, a task of growing importance due to the ``right to be forgotten.'' The unlearned model should approach the retrained model, where forgetting data do not contribute to the training process. Therefore, unlearning should withdraw their contribution from the pre-trained model. However, quantifying and disentangling sample's contribution to overall learning process is highly challenging, leading most existing MU approaches to adopt other heuristic strategies such as random labeling or knowledge distillation. These operations inevitably degrade model utility, requiring additional maintenance with remaining data. To advance MU towards better utility and efficiency for practical deployment, we seek to approximate sample contribution with only the pre-trained model. We theoretically and empirically reveal that sample's contribution during training manifests in the learned model's increased sensitivity to it. In light of this, we propose MU-Mis (Machine Unlearning by Minimizing input sensitivity), which directly suppresses the contribution of forgetting data. This straightforward suppression enables MU-Mis to successfully unlearn without degrading model utility on the remaining data, thereby eliminating the need for access to the remaining data. To the best of our knowledge, this is the first time that a remaining-data-free method can perform on par with top performing remaining-data-dependent methods.

Key facts. Cited by 13 papers in the map (data through 14 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 53 of its 82 references that are in the map. First posted on arXiv 23 Feb 2024.

Builds on

53 of 82 references.

Closest ancestors · 15

Same direction, newest first

  1. 2023Learn to Unlearn for Deep Neural Networks: Minimizing Unlearning Interference with Gradient Projection7 Dec
  2. 2023DUCK: Distance-based Unlearning via Centroid Kinematics4 Dec
  3. 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generation19 Oct
  4. 2023Fast Machine Unlearning Without Retraining Through Selective Synaptic Dampening15 Aug
  5. 2023Machine Unlearning: Solutions and Challenges14 Aug
  6. 2023Model Sparsity Can Simplify Machine Unlearning11 Apr
  7. 2023Boundary Unlearning21 Mar
  8. 2023Towards Unbounded Machine Unlearning20 Feb
  9. 2022Algorithms that Approximate Data Removal: New Results and Limitations25 Sep
  10. 2022Can Bad Teaching Induce Forgetting? Unlearning in Deep Networks using an Incompetent Teacher17 May
  11. 2022Deep Unlearning via Randomized Conditionally Independent Hessians15 Apr
  12. 2022Towards Adversarial Evaluations for Inexact Machine Unlearning17 Jan
3 more
  1. 2021Fast Yet Effective Machine Unlearning17 Nov
  2. 2021Unrolling SGD: Understanding Factors Influencing Machine Unlearning27 Sep
  3. 2021Machine Unlearning of Features and Labels26 Aug

Other references · 38

  1. 2015Deep Residual Learning for Image Recognitioncited by 52,096
  2. 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 30,186
  3. 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,364
  4. 2016Grad-CAM: Visual Explanations from Deep Networks via Gradient-based Localizationcited by 6,733
  5. 2016Overcoming catastrophic forgetting in neural networkscited by 4,787
  6. 2016Membership Inference Attacks against Machine Learning Modelscited by 2,281
  7. 2017Understanding Black-box Predictions via Influence Functionscited by 1,741
  8. 2017SmoothGrad: removing noise by adding noisecited by 1,109
  9. 2019Machine Unlearningcited by 1,061
  10. 2019Deep Leakage from Gradientscited by 1,021
  11. 2021Membership Inference Attacks From First Principlescited by 878
  12. 2020Prevalence of Neural Collapse during the terminal phase of deep learning trainingcited by 719
26 more
  1. 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 618
  2. 2020Estimating Training Data Influence by Tracing Gradient Descentcited by 580
  3. 2019Certified Data Removal from Machine Learning Modelscited by 535
  4. 2020What Neural Networks Memorize and Why: Discovering the Long Tail via Influence Estimationcited by 497
  5. 2019Does Learning Require Memorization? A Short Tale about a Long Tailcited by 460
  6. 2019Your Classifier is Secretly an Energy Based Model and You Should Treat it Like Onecited by 405
  7. 2020iDLG: Improved Deep Leakage from Gradientscited by 382
  8. 2020Amnesiac Machine Learningcited by 319
  9. 2020Descent-to-Delete: Gradient-Based Methods for Machine Unlearningcited by 311
  10. 2020Influence Functions in Deep Learning Are Fragilecited by 252
  11. 2020When Machine Unlearning Jeopardizes Privacycited by 198
  12. 2020Membership Leakage in Label-Only Exposurescited by 168
  13. 2021Counterfactual Memorization in Neural Language Modelscited by 156
  14. 2020DeltaGrad: Rapid retraining of machine learning modelscited by 149
  15. 2022If Influence Functions are the Answer, Then What is the Question?cited by 144
  16. 2022The Privacy Onion Effect: Memorization is Relativecited by 136
  17. 2022Training Data Influence Analysis and Estimation: A Surveycited by 135
  18. 2019Robust Learning with Jacobian Regularizationcited by 129
  19. 2020Traces of Class/Cross-Class Structure Pervade Deep Learning Spectracited by 94
  20. 2019Data Cleansing for Models Trained with SGDcited by 67
  21. 2022PUMA: Performance Unchanged Model Augmentation for Training Data Removalcited by 58
  22. 2018A Swiss Army Infinitesimal Jackknifecited by 54
  23. 2021HYDRA: Hypergradient Data Relevance Analysis for Interpreting Deep Neural Networkscited by 38
  24. 2021SSSE: Efficiently Erasing Samples from Trained Machine Learning Modelscited by 28
  25. 2023Memorization Through the Lens of Curvature of Loss Function Around Samplescited by 27
  26. 2021Quantifying and Localizing Usable Information Leakage from Neural Network Gradientscited by 2

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2024: 4; 2025: 2; 2026: 7.

13 papers.

Sort:

By area:

Similar, not cited

Close in wording, no citation either way

  1. 2026Forgetting Similar Samples: Can Machine Unlearning Do it Better?
  2. 2025Efficient Machine Unlearning by Model Splitting and Core Sample Selection
  3. 2024Challenging Forgets: Unveiling the Worst-Case Forget Sets in Machine Unlearning
  4. 2025When to Forget? Complexity Trade-offs in Machine Unlearning
  5. 2024Efficient Knowledge Deletion from Trained Models through Layer-wise Partial Machine Unlearning
  6. 2024Learning to Unlearn for Robust Machine Unlearning
  7. 2024An Information Theoretic Approach to Machine Unlearning
  8. 2025Towards Source-Free Machine Unlearning