mlsanityData to 13 Oct 2026

Is Retain Set All You Need in Machine Unlearning? Restoring Performance of Unlearned Models with Out-Of-Distribution Images

arXiv 2404.12922 ↗First posted 19 Apr 2024cs.CV cs.AI cs.LGcited by 18

On the map: LLM safety and security → Machine unlearning

Abstract (arXiv)

In this paper, we introduce Selective-distillation for Class and Architecture-agnostic unleaRning (SCAR), a novel approximate unlearning method. SCAR efficiently eliminates specific information while preserving the model's test accuracy without using a retain set, which is a key component in state-of-the-art approximate unlearning algorithms. Our approach utilizes a modified Mahalanobis distance to guide the unlearning of the feature vectors of the instances to be forgotten, aligning them to the nearest wrong class distribution. Moreover, we propose a distillation-trick mechanism that distills the knowledge of the original model into the unlearning model with out-of-distribution images for retaining the original model's test performance without using any retain set. Importantly, we propose a self-forget version of SCAR that unlearns without having access to the forget set. We experimentally verified the effectiveness of our method, on three public datasets, comparing it with state-of-the-art methods. Our method obtains performance higher than methods that operate without the retain set and comparable w.r.t the best methods that rely on the retain set.

Key facts. Cited by 18 papers in the map (data through 13 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 48 of its 68 references that are in the map. First posted on arXiv 19 Apr 2024.

Builds on

48 of 68 references.

Closest ancestors · 12

Same direction, newest first

  1. 2023DUCK: Distance-based Unlearning via Centroid Kinematics4 Dec
  2. 2023MultiDelete for Multimodal Machine Unlearning18 Nov
  3. 2023Machine Unlearning: Solutions and Challenges14 Aug
  4. 2023Exploring the Landscape of Machine Unlearning: A Comprehensive Survey and Taxonomy10 May
  5. 2023Model Sparsity Can Simplify Machine Unlearning11 Apr
  6. 2023Boundary Unlearning21 Mar
  7. 2023Towards Unbounded Machine Unlearning20 Feb
  8. 2022A Survey of Machine Unlearning6 Sep
  9. 2022An Introduction to Machine Unlearning2 Sep
  10. 2022Adversarial Unlearning: Reducing Confidence Along Adversarial Directions3 Jun
  11. 2022Can Bad Teaching Induce Forgetting? Unlearning in Deep Networks using an Incompetent Teacher17 May
  12. 2021Fast Yet Effective Machine Unlearning17 Nov

Other references · 36

  1. 2015Deep Residual Learning for Image Recognitioncited by 51,950
  2. 2014Microsoft COCO: Common Objects in Contextcited by 17,550
  3. 2015Distilling the Knowledge in a Neural Networkcited by 10,180
  4. 2017On Calibration of Modern Neural Networkscited by 4,902
  5. 2016A Baseline for Detecting Misclassified and Out-of-Distribution Examples in Neural Networkscited by 2,371
  6. 2016iCaRL: Incremental Classifier and Representation Learningcited by 2,323
  7. 2016Membership Inference Attacks against Machine Learning Modelscited by 2,273
  8. 2019Machine Unlearningcited by 1,056
  9. 2014Deep Neural Networks are Easily Fooled: High Confidence Predictions for Unrecognizable Imagescited by 774
  10. 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 617
  11. 2019Certified Data Removal from Machine Learning Modelscited by 532
  12. 2018ML-Leaks: Model and Data Independent Membership Inference Attacks and Defenses on Machine Learning Modelscited by 497
24 more
  1. 2020Generalized ODIN: Detecting Out-of-distribution Image without Learning from Out-of-distribution Datacited by 408
  2. 2020Amnesiac Machine Learningcited by 319
  3. 2020Descent-to-Delete: Gradient-Based Methods for Machine Unlearningcited by 310
  4. 2020Systematic Evaluation of Privacy Risks of Machine Learning Modelscited by 290
  5. 2021Exploring the Limits of Out-of-Distribution Detectioncited by 283
  6. 2019The Secret Revealer: Generative Model-Inversion Attacks Against Deep Neural Networkscited by 246
  7. 2020Forgetting Outside the Box: Scrubbing Deep Networks of Information Accessible from Input-Output Observationscited by 180
  8. 2020DeltaGrad: Rapid retraining of machine learning modelscited by 149
  9. 2020A Survey of Privacy Attacks in Machine Learningcited by 145
  10. 2020Continual Prototype Evolution: Learning Online from Non-Stationary Data Streamscited by 144
  11. 2019Privacy Risks of Securing Machine Learning Models against Adversarial Examplescited by 141
  12. 2023Squeeze, Recover and Relabel: Dataset Condensation at ImageNet Scale From A New Perspectivecited by 137
  13. 2019Fairness in Deep Learning: A Computational Perspectivecited by 123
  14. 2022Variational Model Inversion Attackscited by 75
  15. 2022PUMA: Performance Unchanged Model Augmentation for Training Data Removalcited by 58
  16. 2022Label-Only Model Inversion Attacks via Boundary Repulsioncited by 56
  17. 2020Towards Probabilistic Verification of Machine Unlearningcited by 50
  18. 2021Exploiting Explanations for Model Inversion Attackscited by 49
  19. 2021Mosaicking to Distill: Knowledge Distillation from Out-of-Domain Datacited by 31
  20. 2021Single Layer Predictive Normalized Maximum Likelihood for Out-of-Distribution Detectioncited by 23
  21. 2020Selective Forgetting of Deep Networks at a Finer Level than Samplescited by 13
  22. 2023Safe-CLIP: Removing NSFW Concepts from Vision-and-Language Modelscited by 12
  23. 2023Adapt then Unlearn: Exploring Parameter Space Semantics for Unlearning in Generative Adversarial Networkscited by 11
  24. 2020Class Clown: Data Redaction in Machine Unlearning at Enterprise Scalecited by 10

Built on by

Cited by year (2026 to 13 Oct)

Citing papers per year: 2024: 1; 2025: 11; 2026: 6.

18 papers.

Sort:

By area:

Similar, not cited

Close in wording, no citation either way

  1. 2026Reference-Guided Machine Unlearning
  2. 2026Models Designed to Forget: Machine Unlearning via Key Deletion
  3. 2023Unlearning via Sparse Representations
  4. 2026PURGE: Projected Unlearning via Retain-Guided Erasure
  5. 2026Source-Free Class Relearning: Diagnosing Forgetting in Class Unlearning
  6. 2024Efficient Knowledge Deletion from Trained Models through Layer-wise Partial Machine Unlearning
  7. 2024Remaining-data-free Machine Unlearning by Suppressing Sample Contribution
  8. 2023Deep Unlearning: Fast and Efficient Gradient-free Approach to Class Forgetting