Ferrari: Federated Feature Unlearning via Optimizing Feature Sensitivity
On the map: LLM safety and security → Federated unlearning and poisoning
Abstract (arXiv)
The advent of Federated Learning (FL) highlights the practical necessity for the right to be forgotten for all clients, allowing them to request data deletion from the machine learning models service provider. This necessity has spurred a growing demand for Federated Unlearning (FU). Feature unlearning has gained considerable attention due to its applications in unlearning sensitive, backdoor, and biased features. Existing methods employ the influence function to achieve feature unlearning, which is impractical for FL as it necessitates the participation of other clients, if not all, in the unlearning process. Furthermore, current research lacks an evaluation of the effectiveness of feature unlearning. To address these limitations, we define feature sensitivity in evaluating feature unlearning according to Lipschitz continuity. This metric characterizes the model outputs rate of change or sensitivity to perturbations in the input feature. We then propose an effective federated feature unlearning framework called Ferrari, which minimizes feature sensitivity. Extensive experimental results and theoretical analysis demonstrate the effectiveness of Ferrari across various feature unlearning scenarios, including sensitive, backdoor, and biased features. The code is publicly available at https://github.com/OngWinKent/Federated-Feature-Unlearning
Key facts. Cited by 11 papers in the map (data through 14 Oct 2026). Placed in Federated unlearning and poisoning, one of 12 directions in LLM safety and security. Builds on 63 of its 94 references that are in the map. First posted on arXiv 23 May 2024.
Builds on
63 of 94 references.
Closest ancestors · 9
Same direction, newest first
- 2024Federated Unlearning: A Survey on Methods, Design Guidelines, and Evaluation Metrics10 Jan
- 2023QuickDrop: Efficient Federated Unlearning by Integrated Dataset Distillation27 Nov
- 2023A Survey on Federated Unlearning: Challenges, Methods, and Future Directions31 Oct
- 2023Subspace based Federated Unlearning24 Feb
- 2022Federated Unlearning: How to Efficiently Erase a Client in FL?12 Jul
- 2022VeriFi: Towards Verifiable Federated Unlearning25 May
- 2022The Right to be Forgotten in Federated Learning: An Efficient Realization with Rapid Retraining14 Mar
- 2022Federated Unlearning with Knowledge Distillation24 Jan
- 2021Federated Unlearning via Class-Discriminative Pruning22 Oct
Other references · 54
- 2015Deep Residual Learning for Image Recognitioncited by 52,096
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,399
- 2016Communication-Efficient Learning of Deep Networks from Decentralized Datacited by 7,669
- 2016Grad-CAM: Visual Explanations from Deep Networks via Gradient-based Localizationcited by 6,733
- 2017Fashion-MNIST: a Novel Image Dataset for Benchmarking Machine Learning Algorithmscited by 4,349
- 2014Deep Learning Face Attributes in the Wildcited by 3,693
- 2019A Survey on Bias and Fairness in Machine Learningcited by 1,917
- 2019Machine Unlearningcited by 1,061
- 2018How To Backdoor Federated Learningcited by 765
- 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 618
- 2019Certified Data Removal from Machine Learning Modelscited by 535
- 2020Amnesiac Machine Learningcited by 319
38 more
- 2022A Survey of Machine Unlearningcited by 312
- 2023Large Language Model Unlearningcited by 302
- 2023Towards Unbounded Machine Unlearningcited by 268
- 2019The Secret Revealer: Generative Model-Inversion Attacks Against Deep Neural Networkscited by 246
- 2021Machine Unlearning of Features and Labelscited by 229
- 2021Fast Yet Effective Machine Unlearningcited by 217
- 2023Unlearn What You Want to Forget: Efficient Unlearning for LLMscited by 215
- 2020When Machine Unlearning Jeopardizes Privacycited by 198
- 2015Federated Optimization:Distributed Optimization Beyond the Datacentercited by 195
- 2022Can Bad Teaching Induce Forgetting? Unlearning in Deep Networks using an Incompetent Teachercited by 194
- 2021Unlearnable Examples: Making Personal Data Unexploitablecited by 193
- 2017Spectral Norm Regularization for Improving the Generalizability of Deep Learningcited by 182
- 2018Evaluating the Robustness of Neural Networks: An Extreme Value Theory Approachcited by 182
- 2023Fast Machine Unlearning Without Retraining Through Selective Synaptic Dampeningcited by 181
- 2020Forgetting Outside the Box: Scrubbing Deep Networks of Information Accessible from Input-Output Observationscited by 180
- 2021On the Necessity of Auditable Algorithmic Definitions for Machine Unlearningcited by 171
- 2020Mixed-Privacy Forgetting in Deep Networkscited by 163
- 2023Boundary Unlearningcited by 134
- 2023Machine Unlearning: Solutions and Challengescited by 93
- 2022Towards Adversarial Evaluations for Inexact Machine Unlearningcited by 84
- 2023Fast Model Debias with Machine Unlearningcited by 72
- 2022FedRecover: Recovering from Poisoning Attacks in Federated Learning using Historical Informationcited by 58
- 2020Formalizing Data Deletion in the Context of the Right to be Forgottencited by 50
- 2024Machine Unlearning for Image-to-Image Generative Modelscited by 47
- 2021Unsupervised Learning of Debiased Representations with Pseudo-Attributescited by 44
- 2022Are Your Sensitive Attributes Private? Novel Model Inversion Attribute Inference Attacks on Classification Modelscited by 43
- 2022Federated Unlearning for On-Device Recommendationcited by 43
- 2022Hidden Poison: Machine Unlearning Enables Camouflaged Poisoning Attackscited by 43
- 2023Learn to Unlearn for Deep Neural Networks: Minimizing Unlearning Interference with Gradient Projectioncited by 37
- 2023Backdoor Attacks and Defenses in Federated Learning: Survey, Challenges and Future Research Directionscited by 33
- 2023Towards Machine Unlearning Benchmarks: Forgetting the Personal Identities in Facial Recognition Systemscited by 28
- 2023Some Fundamental Aspects about Lipschitz Continuity of Neural Networkscited by 26
- 2018Lipschitz regularized Deep Neural Networks generalize and are adversarially robustcited by 19
- 2022Efficient Attribute Unlearning: Towards Selective Removal of Input Attributes from Feature Representationscited by 17
- 2023Feature Unlearning for Pre-trained GANs and VAEscited by 16
- 2024New Job, New Gender? Measuring the Social Bias in Image Generation Modelscited by 16
- 2023Get Rid Of Your Trail: Remotely Erasing Backdoors in Federated Learningcited by 13
- 2023Gradient Surgery for One-shot Unlearning on Generative Modelcited by 12
50 most cited of 54 All 54 (JSON)
Built on by
Citing papers per year: 2024: 2; 2025: 5; 2026: 4.
11 papers.
- 2025Ten Challenging Problems in Federated Foundation Modelscited by 20
- 2025ForgetMe: Evaluating Selective Forgetting in Generative Modelscited by 11
- 2024Towards Privacy-Guaranteed Label Unlearning in Vertical Federated Learning: Few-Shot Forgetting without Disclosurecited by 5
- 2026EASE: Federated Multimodal Unlearning via Entanglement-Aware Anchor Closurecited by 5
- 2024FedQUIT: On-Device Federated Unlearning via a Quasi-Competent Virtual Teachercited by 2
- 2025Federated Unlearning Made Practical: Seamless Integration via Negated Pseudo-Gradientscited by 1
- 2025Federated Unlearning in the Wild: Rethinking Fairness and Data Discrepancycited by 0
- 2025Towards Robust Knowledge Removal in Federated Learning with High Data Heterogeneitycited by 0
- 2026Computation and Communication Efficient Federated Unlearning via On-server Gradient Conflict Mitigation and Expressioncited by 0
- 2026pFedUL: Layer-Aware Federated Unlearning for Personalized Federated Learningcited by 0
- 2026IREU: Identity-Related Encoder-Only Unlearning for Customized Portrait Generationcited by 0
- 2026IREU: Identity-Related Encoder-Only Unlearning for Customized Portrait Generation29 Jun 2026
- 2026pFedUL: Layer-Aware Federated Unlearning for Personalized Federated Learning15 Jun 2026
- 2026EASE: Federated Multimodal Unlearning via Entanglement-Aware Anchor Closure1 May 2026
- 2026Computation and Communication Efficient Federated Unlearning via On-server Gradient Conflict Mitigation and Expression14 Mar 2026
- 2025Towards Robust Knowledge Removal in Federated Learning with High Data Heterogeneity15 Oct 2025
- 2025Federated Unlearning in the Wild: Rethinking Fairness and Data Discrepancy8 Oct 2025
- 2025ForgetMe: Evaluating Selective Forgetting in Generative Models17 Apr 2025
- 2025Federated Unlearning Made Practical: Seamless Integration via Negated Pseudo-Gradients8 Apr 2025
- 2025Ten Challenging Problems in Federated Foundation Models14 Feb 2025
- 2024Towards Privacy-Guaranteed Label Unlearning in Vertical Federated Learning: Few-Shot Forgetting without Disclosure14 Oct 2024
- 2024FedQUIT: On-Device Federated Unlearning via a Quasi-Competent Virtual Teacher14 Aug 2024
Similar, not cited
Close in wording, no citation either way
- 2025Certifying the Right to Be Forgotten: Primal-Dual Optimization for Sample and Label Unlearning in Vertical Federated Learning
- 2024Goldfish: An Efficient Federated Unlearning Framework
- 2023Exploring Federated Unlearning: Review, Comparison, and Insights
- 2024Fast-FedUL: A Training-Free Federated Unlearning with Provable Skew Resilience
- 2022SIFU: Sequential Informed Federated Unlearning for Efficient and Provable Client Unlearning in Federated Optimization
- 2024Streamlined Federated Unlearning: Unite as One to Be Highly Efficient
- 2025NoT: Federated Unlearning via Weight Negation
- 2026FUPareto: Bridging the Forgetting-Utility Gap in Federated Unlearning via Pareto Augmented Optimization