Is Retain Set All You Need in Machine Unlearning? Restoring Performance of Unlearned Models with Out-Of-Distribution Images
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
In this paper, we introduce Selective-distillation for Class and Architecture-agnostic unleaRning (SCAR), a novel approximate unlearning method. SCAR efficiently eliminates specific information while preserving the model's test accuracy without using a retain set, which is a key component in state-of-the-art approximate unlearning algorithms. Our approach utilizes a modified Mahalanobis distance to guide the unlearning of the feature vectors of the instances to be forgotten, aligning them to the nearest wrong class distribution. Moreover, we propose a distillation-trick mechanism that distills the knowledge of the original model into the unlearning model with out-of-distribution images for retaining the original model's test performance without using any retain set. Importantly, we propose a self-forget version of SCAR that unlearns without having access to the forget set. We experimentally verified the effectiveness of our method, on three public datasets, comparing it with state-of-the-art methods. Our method obtains performance higher than methods that operate without the retain set and comparable w.r.t the best methods that rely on the retain set.
Key facts. Cited by 18 papers in the map (data through 13 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 48 of its 68 references that are in the map. First posted on arXiv 19 Apr 2024.
Builds on
48 of 68 references.
Closest ancestors · 12
Same direction, newest first
- 2023DUCK: Distance-based Unlearning via Centroid Kinematics4 Dec
- 2023MultiDelete for Multimodal Machine Unlearning18 Nov
- 2023Machine Unlearning: Solutions and Challenges14 Aug
- 2023Exploring the Landscape of Machine Unlearning: A Comprehensive Survey and Taxonomy10 May
- 2023Model Sparsity Can Simplify Machine Unlearning11 Apr
- 2023Boundary Unlearning21 Mar
- 2023Towards Unbounded Machine Unlearning20 Feb
- 2022A Survey of Machine Unlearning6 Sep
- 2022An Introduction to Machine Unlearning2 Sep
- 2022Adversarial Unlearning: Reducing Confidence Along Adversarial Directions3 Jun
- 2022Can Bad Teaching Induce Forgetting? Unlearning in Deep Networks using an Incompetent Teacher17 May
- 2021Fast Yet Effective Machine Unlearning17 Nov
Other references · 36
- 2015Deep Residual Learning for Image Recognitioncited by 51,950
- 2014Microsoft COCO: Common Objects in Contextcited by 17,550
- 2015Distilling the Knowledge in a Neural Networkcited by 10,180
- 2017On Calibration of Modern Neural Networkscited by 4,902
- 2016A Baseline for Detecting Misclassified and Out-of-Distribution Examples in Neural Networkscited by 2,371
- 2016iCaRL: Incremental Classifier and Representation Learningcited by 2,323
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,273
- 2019Machine Unlearningcited by 1,056
- 2014Deep Neural Networks are Easily Fooled: High Confidence Predictions for Unrecognizable Imagescited by 774
- 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 617
- 2019Certified Data Removal from Machine Learning Modelscited by 532
- 2018ML-Leaks: Model and Data Independent Membership Inference Attacks and Defenses on Machine Learning Modelscited by 497
24 more
- 2020Generalized ODIN: Detecting Out-of-distribution Image without Learning from Out-of-distribution Datacited by 408
- 2020Amnesiac Machine Learningcited by 319
- 2020Descent-to-Delete: Gradient-Based Methods for Machine Unlearningcited by 310
- 2020Systematic Evaluation of Privacy Risks of Machine Learning Modelscited by 290
- 2021Exploring the Limits of Out-of-Distribution Detectioncited by 283
- 2019The Secret Revealer: Generative Model-Inversion Attacks Against Deep Neural Networkscited by 246
- 2020Forgetting Outside the Box: Scrubbing Deep Networks of Information Accessible from Input-Output Observationscited by 180
- 2020DeltaGrad: Rapid retraining of machine learning modelscited by 149
- 2020A Survey of Privacy Attacks in Machine Learningcited by 145
- 2020Continual Prototype Evolution: Learning Online from Non-Stationary Data Streamscited by 144
- 2019Privacy Risks of Securing Machine Learning Models against Adversarial Examplescited by 141
- 2023Squeeze, Recover and Relabel: Dataset Condensation at ImageNet Scale From A New Perspectivecited by 137
- 2019Fairness in Deep Learning: A Computational Perspectivecited by 123
- 2022Variational Model Inversion Attackscited by 75
- 2022PUMA: Performance Unchanged Model Augmentation for Training Data Removalcited by 58
- 2022Label-Only Model Inversion Attacks via Boundary Repulsioncited by 56
- 2020Towards Probabilistic Verification of Machine Unlearningcited by 50
- 2021Exploiting Explanations for Model Inversion Attackscited by 49
- 2021Mosaicking to Distill: Knowledge Distillation from Out-of-Domain Datacited by 31
- 2021Single Layer Predictive Normalized Maximum Likelihood for Out-of-Distribution Detectioncited by 23
- 2020Selective Forgetting of Deep Networks at a Finer Level than Samplescited by 13
- 2023Safe-CLIP: Removing NSFW Concepts from Vision-and-Language Modelscited by 12
- 2023Adapt then Unlearn: Exploring Parameter Space Semantics for Unlearning in Generative Adversarial Networkscited by 11
- 2020Class Clown: Data Redaction in Machine Unlearning at Enterprise Scalecited by 10
Built on by
Citing papers per year: 2024: 1; 2025: 11; 2026: 6.
18 papers.
Sort:
By area:
- 2025Learning to Unlearn while Retaining: Combating Gradient Conflicts in Machine Unlearningcited by 19
- 2025Are We Truly Forgetting? A Critical Re-examination of Machine Unlearning Evaluation Protocolscited by 18
- 2024MUNBa: Machine Unlearning via Nash Bargainingcited by 17
- 2025A Certified Unlearning Approach without Access to Source Datacited by 9
- 2025Go Beyond Your Means: Unlearning with Per-Sample Gradient Orthogonalizationcited by 7
- 2026FG-OrIU: Towards Better Forgetting via Feature-Gradient Orthogonality for Incremental Unlearningcited by 6
- 2025Deep Contrastive Unlearning for Language Modelscited by 4
- 2025System-Aware Unlearning Algorithms: Use Lesser, Forget Fastercited by 4
- 2026Erase at the Core: Representation Unlearning for Machine Unlearningcited by 4
- 2026Class Unlearning via Depth-Aware Removal of Forget-Specific Directionscited by 4
- 2026Co-occurring Associated REtained concepts in Diffusion Unlearningcited by 4
- 2025On the Necessity of Output Distribution Reweighting for Effective Class Unlearningcited by 3
6 more
- 2025A Unified Framework for Diffusion Model Unlearning with f-Divergencecited by 2
- 2025IMU: Influence-guided Machine Unlearningcited by 1
- 2025TraceHiding: Scalable Machine Unlearning for Mobility Datacited by 0
- 2025Emergent AI Surveillance: Overlearned Person Re-Identification and Its Mitigation in Law Enforcement Contextcited by 0
- 2026f-FUM: Federated Unlearning via min--max and f-divergencecited by 0
- 2026Retain-Neutral Surrogates for Min-Max Unlearningcited by 0
- 2026Co-occurring Associated REtained concepts in Diffusion Unlearning23 Jun 2026
- 2026Retain-Neutral Surrogates for Min-Max Unlearning7 May 2026
- 2026Class Unlearning via Depth-Aware Removal of Forget-Specific Directions16 Apr 2026
- 2026f-FUM: Federated Unlearning via min--max and f-divergence5 Feb 2026
- 2026Erase at the Core: Representation Unlearning for Machine Unlearning5 Feb 2026
- 2026FG-OrIU: Towards Better Forgetting via Feature-Gradient Orthogonality for Incremental Unlearning20 Jan 2026
- 2025Emergent AI Surveillance: Overlearned Person Re-Identification and Its Mitigation in Law Enforcement Context7 Oct 2025
- 2025A Unified Framework for Diffusion Model Unlearning with f-Divergence25 Sep 2025
- 2025TraceHiding: Scalable Machine Unlearning for Mobility Data21 Sep 2025
- 2025IMU: Influence-guided Machine Unlearning3 Aug 2025
- 2025On the Necessity of Output Distribution Reweighting for Effective Class Unlearning25 Jun 2025
- 2025A Certified Unlearning Approach without Access to Source Data6 Jun 2025
6 more
- 2025System-Aware Unlearning Algorithms: Use Lesser, Forget Faster6 Jun 2025
- 2025Deep Contrastive Unlearning for Language Models19 Mar 2025
- 2025Are We Truly Forgetting? A Critical Re-examination of Machine Unlearning Evaluation Protocols10 Mar 2025
- 2025Learning to Unlearn while Retaining: Combating Gradient Conflicts in Machine Unlearning8 Mar 2025
- 2025Go Beyond Your Means: Unlearning with Per-Sample Gradient Orthogonalization4 Mar 2025
- 2024MUNBa: Machine Unlearning via Nash Bargaining23 Nov 2024
- 2025Learning to Unlearn while Retaining: Combating Gradient Conflicts in Machine Unlearningcited by 19
- 2025Are We Truly Forgetting? A Critical Re-examination of Machine Unlearning Evaluation Protocolscited by 18
- 2024MUNBa: Machine Unlearning via Nash Bargainingcited by 17
- 2025A Certified Unlearning Approach without Access to Source Datacited by 9
- 2025Go Beyond Your Means: Unlearning with Per-Sample Gradient Orthogonalizationcited by 7
- 2026FG-OrIU: Towards Better Forgetting via Feature-Gradient Orthogonality for Incremental Unlearningcited by 6
- 2025Deep Contrastive Unlearning for Language Modelscited by 4
- 2025System-Aware Unlearning Algorithms: Use Lesser, Forget Fastercited by 4
- 2026Erase at the Core: Representation Unlearning for Machine Unlearningcited by 4
- 2026Class Unlearning via Depth-Aware Removal of Forget-Specific Directionscited by 4
- 2025On the Necessity of Output Distribution Reweighting for Effective Class Unlearningcited by 3
- 2025IMU: Influence-guided Machine Unlearningcited by 1
12 most cited of 15 All 15 (JSON)
- 2026Retain-Neutral Surrogates for Min-Max Unlearning7 May 2026
- 2026Class Unlearning via Depth-Aware Removal of Forget-Specific Directions16 Apr 2026
- 2026f-FUM: Federated Unlearning via min--max and f-divergence5 Feb 2026
- 2026Erase at the Core: Representation Unlearning for Machine Unlearning5 Feb 2026
- 2026FG-OrIU: Towards Better Forgetting via Feature-Gradient Orthogonality for Incremental Unlearning20 Jan 2026
- 2025TraceHiding: Scalable Machine Unlearning for Mobility Data21 Sep 2025
- 2025IMU: Influence-guided Machine Unlearning3 Aug 2025
- 2025On the Necessity of Output Distribution Reweighting for Effective Class Unlearning25 Jun 2025
- 2025A Certified Unlearning Approach without Access to Source Data6 Jun 2025
- 2025System-Aware Unlearning Algorithms: Use Lesser, Forget Faster6 Jun 2025
- 2025Deep Contrastive Unlearning for Language Models19 Mar 2025
- 2025Are We Truly Forgetting? A Critical Re-examination of Machine Unlearning Evaluation Protocols10 Mar 2025
12 newest of 15 All 15 (JSON)
Similar, not cited
Close in wording, no citation either way
- 2026Reference-Guided Machine Unlearning
- 2026Models Designed to Forget: Machine Unlearning via Key Deletion
- 2023Unlearning via Sparse Representations
- 2026PURGE: Projected Unlearning via Retain-Guided Erasure
- 2026Source-Free Class Relearning: Diagnosing Forgetting in Class Unlearning
- 2024Efficient Knowledge Deletion from Trained Models through Layer-wise Partial Machine Unlearning
- 2024Remaining-data-free Machine Unlearning by Suppressing Sample Contribution
- 2023Deep Unlearning: Fast and Efficient Gradient-free Approach to Class Forgetting