mlsanityData to 14 Oct 2026

Ferrari: Federated Feature Unlearning via Optimizing Feature Sensitivity

arXiv 2405.17462 ↗First posted 23 May 2024cs.LGcited by 11

On the map: LLM safety and security → Federated unlearning and poisoning

Abstract (arXiv)

The advent of Federated Learning (FL) highlights the practical necessity for the right to be forgotten for all clients, allowing them to request data deletion from the machine learning models service provider. This necessity has spurred a growing demand for Federated Unlearning (FU). Feature unlearning has gained considerable attention due to its applications in unlearning sensitive, backdoor, and biased features. Existing methods employ the influence function to achieve feature unlearning, which is impractical for FL as it necessitates the participation of other clients, if not all, in the unlearning process. Furthermore, current research lacks an evaluation of the effectiveness of feature unlearning. To address these limitations, we define feature sensitivity in evaluating feature unlearning according to Lipschitz continuity. This metric characterizes the model outputs rate of change or sensitivity to perturbations in the input feature. We then propose an effective federated feature unlearning framework called Ferrari, which minimizes feature sensitivity. Extensive experimental results and theoretical analysis demonstrate the effectiveness of Ferrari across various feature unlearning scenarios, including sensitive, backdoor, and biased features. The code is publicly available at https://github.com/OngWinKent/Federated-Feature-Unlearning

Key facts. Cited by 11 papers in the map (data through 14 Oct 2026). Placed in Federated unlearning and poisoning, one of 12 directions in LLM safety and security. Builds on 63 of its 94 references that are in the map. First posted on arXiv 23 May 2024.

Builds on

63 of 94 references.

Closest ancestors · 9

Same direction, newest first

  1. 2024Federated Unlearning: A Survey on Methods, Design Guidelines, and Evaluation Metrics10 Jan
  2. 2023QuickDrop: Efficient Federated Unlearning by Integrated Dataset Distillation27 Nov
  3. 2023A Survey on Federated Unlearning: Challenges, Methods, and Future Directions31 Oct
  4. 2023Subspace based Federated Unlearning24 Feb
  5. 2022Federated Unlearning: How to Efficiently Erase a Client in FL?12 Jul
  6. 2022VeriFi: Towards Verifiable Federated Unlearning25 May
  7. 2022The Right to be Forgotten in Federated Learning: An Efficient Realization with Rapid Retraining14 Mar
  8. 2022Federated Unlearning with Knowledge Distillation24 Jan
  9. 2021Federated Unlearning via Class-Discriminative Pruning22 Oct

Other references · 54

  1. 2015Deep Residual Learning for Image Recognitioncited by 52,096
  2. 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,399
  3. 2016Communication-Efficient Learning of Deep Networks from Decentralized Datacited by 7,669
  4. 2016Grad-CAM: Visual Explanations from Deep Networks via Gradient-based Localizationcited by 6,733
  5. 2017Fashion-MNIST: a Novel Image Dataset for Benchmarking Machine Learning Algorithmscited by 4,349
  6. 2014Deep Learning Face Attributes in the Wildcited by 3,693
  7. 2019A Survey on Bias and Fairness in Machine Learningcited by 1,917
  8. 2019Machine Unlearningcited by 1,061
  9. 2018How To Backdoor Federated Learningcited by 765
  10. 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 618
  11. 2019Certified Data Removal from Machine Learning Modelscited by 535
  12. 2020Amnesiac Machine Learningcited by 319
38 more
  1. 2022A Survey of Machine Unlearningcited by 312
  2. 2023Large Language Model Unlearningcited by 302
  3. 2023Towards Unbounded Machine Unlearningcited by 268
  4. 2019The Secret Revealer: Generative Model-Inversion Attacks Against Deep Neural Networkscited by 246
  5. 2021Machine Unlearning of Features and Labelscited by 229
  6. 2021Fast Yet Effective Machine Unlearningcited by 217
  7. 2023Unlearn What You Want to Forget: Efficient Unlearning for LLMscited by 215
  8. 2020When Machine Unlearning Jeopardizes Privacycited by 198
  9. 2015Federated Optimization:Distributed Optimization Beyond the Datacentercited by 195
  10. 2022Can Bad Teaching Induce Forgetting? Unlearning in Deep Networks using an Incompetent Teachercited by 194
  11. 2021Unlearnable Examples: Making Personal Data Unexploitablecited by 193
  12. 2017Spectral Norm Regularization for Improving the Generalizability of Deep Learningcited by 182
  13. 2018Evaluating the Robustness of Neural Networks: An Extreme Value Theory Approachcited by 182
  14. 2023Fast Machine Unlearning Without Retraining Through Selective Synaptic Dampeningcited by 181
  15. 2020Forgetting Outside the Box: Scrubbing Deep Networks of Information Accessible from Input-Output Observationscited by 180
  16. 2021On the Necessity of Auditable Algorithmic Definitions for Machine Unlearningcited by 171
  17. 2020Mixed-Privacy Forgetting in Deep Networkscited by 163
  18. 2023Boundary Unlearningcited by 134
  19. 2023Machine Unlearning: Solutions and Challengescited by 93
  20. 2022Towards Adversarial Evaluations for Inexact Machine Unlearningcited by 84
  21. 2023Fast Model Debias with Machine Unlearningcited by 72
  22. 2022FedRecover: Recovering from Poisoning Attacks in Federated Learning using Historical Informationcited by 58
  23. 2020Formalizing Data Deletion in the Context of the Right to be Forgottencited by 50
  24. 2024Machine Unlearning for Image-to-Image Generative Modelscited by 47
  25. 2021Unsupervised Learning of Debiased Representations with Pseudo-Attributescited by 44
  26. 2022Are Your Sensitive Attributes Private? Novel Model Inversion Attribute Inference Attacks on Classification Modelscited by 43
  27. 2022Federated Unlearning for On-Device Recommendationcited by 43
  28. 2022Hidden Poison: Machine Unlearning Enables Camouflaged Poisoning Attackscited by 43
  29. 2023Learn to Unlearn for Deep Neural Networks: Minimizing Unlearning Interference with Gradient Projectioncited by 37
  30. 2023Backdoor Attacks and Defenses in Federated Learning: Survey, Challenges and Future Research Directionscited by 33
  31. 2023Towards Machine Unlearning Benchmarks: Forgetting the Personal Identities in Facial Recognition Systemscited by 28
  32. 2023Some Fundamental Aspects about Lipschitz Continuity of Neural Networkscited by 26
  33. 2018Lipschitz regularized Deep Neural Networks generalize and are adversarially robustcited by 19
  34. 2022Efficient Attribute Unlearning: Towards Selective Removal of Input Attributes from Feature Representationscited by 17
  35. 2023Feature Unlearning for Pre-trained GANs and VAEscited by 16
  36. 2024New Job, New Gender? Measuring the Social Bias in Image Generation Modelscited by 16
  37. 2023Get Rid Of Your Trail: Remotely Erasing Backdoors in Federated Learningcited by 13
  38. 2023Gradient Surgery for One-shot Unlearning on Generative Modelcited by 12

50 most cited of 54 All 54 (JSON)

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2024: 2; 2025: 5; 2026: 4.

11 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2025Certifying the Right to Be Forgotten: Primal-Dual Optimization for Sample and Label Unlearning in Vertical Federated Learning
  2. 2024Goldfish: An Efficient Federated Unlearning Framework
  3. 2023Exploring Federated Unlearning: Review, Comparison, and Insights
  4. 2024Fast-FedUL: A Training-Free Federated Unlearning with Provable Skew Resilience
  5. 2022SIFU: Sequential Informed Federated Unlearning for Efficient and Provable Client Unlearning in Federated Optimization
  6. 2024Streamlined Federated Unlearning: Unite as One to Be Highly Efficient
  7. 2025NoT: Federated Unlearning via Weight Negation
  8. 2026FUPareto: Bridging the Forgetting-Utility Gap in Federated Unlearning via Pareto Augmented Optimization