MU-Bench: A Multitask Multimodal Benchmark for Machine Unlearning
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
Recent advancements in Machine Unlearning (MU) have introduced solutions to selectively remove certain training samples, such as those with outdated or sensitive information, from trained models. Despite these advancements, evaluation of MU methods have been inconsistent, employing different trained models and architectures, and sample removal strategies, which hampers accurate comparison. In addition, prior MU approaches have mainly focused on singular tasks or modalities, which is not comprehensive. To address these limitations, we develop MU-Bench, the first comprehensive benchmark for MU that (i) unifies the sets of deleted samples and trained models, and (ii) provides broad coverage of tasks and data modalities, including previously unexplored domains such as speech and video classification. Our evaluation show that RandLabel and SalUn are the most effective general MU approaches on MU-Bench, and BadT and SCRUB are capable of achieving random performance on the deletion set. We analyze several under-investigated aspects of unlearning, including scalability, the impacts of parameter-efficient fine-tuning and curriculum learning, and susceptibility to dataset biases. MU-Bench provides an easy-to-use package that includes dataset splits, models, and implementations, together with a leader board to enable unified and scalable MU research.
Key facts. Cited by 16 papers in the map (data through 7 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 92 of its 122 references that are in the map. First posted on arXiv 21 Jun 2024.
Builds on
92 of 122 references.
Closest ancestors · 32
Same direction, newest first
- 2024Single Image Unlearning: Efficient Machine Unlearning in Multimodal Large Language Models21 May
- 2024To Each (Textual Sequence) Its Own: Improving Memorized-Data Unlearning in Large Language Models6 May
- 2024Machine Unlearning for Document Classification29 Apr
- 2024SOUL: Unlocking the Power of Second-Order Optimization for LLM Unlearning28 Apr
- 2024Challenging Forgets: Unveiling the Worst-Case Forget Sets in Machine Unlearning12 Mar
- 2023Certified Minimax Unlearning with Generalization Rates and Deletion Capacity16 Dec
- 2023Learn to Unlearn for Deep Neural Networks: Minimizing Unlearning Interference with Gradient Projection7 Dec
- 2023MultiDelete for Multimodal Machine Unlearning18 Nov
- 2023Unlearn What You Want to Forget: Efficient Unlearning for LLMs31 Oct
- 2023Fast Model Debias with Machine Unlearning19 Oct
- 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generation19 Oct
- 2023Fast Machine Unlearning Without Retraining Through Selective Synaptic Dampening15 Aug
20 more
- 2023KGA: A General Machine Unlearning Framework Based on Knowledge Gap Alignment11 May
- 2023SAFE: Machine Unlearning With Shard Graphs25 Apr
- 2023Model Sparsity Can Simplify Machine Unlearning11 Apr
- 2023Boundary Unlearning21 Mar
- 2023Towards Unbounded Machine Unlearning20 Feb
- 2023Learning to Unlearn: Instance-wise Unlearning for Pre-trained Classifiers27 Jan
- 2022Deep Regression Unlearning15 Oct
- 2022Knowledge Unlearning for Mitigating Privacy Risks in Language Models4 Oct
- 2022Algorithms that Approximate Data Removal: New Results and Limitations25 Sep
- 2022Adversarial Unlearning: Reducing Confidence Along Adversarial Directions3 Jun
- 2022Quark: Controllable Text Generation with Reinforced Unlearning26 May
- 2022Can Bad Teaching Induce Forgetting? Unlearning in Deep Networks using an Incompetent Teacher17 May
- 2022Deep Unlearning via Randomized Conditionally Independent Hessians15 Apr
- 2022Continual Learning and Private Unlearning24 Mar
- 2022Towards Adversarial Evaluations for Inexact Machine Unlearning17 Jan
- 2022Zero-Shot Machine Unlearning14 Jan
- 2021Fast Yet Effective Machine Unlearning17 Nov
- 2021On the Necessity of Auditable Algorithmic Definitions for Machine Unlearning22 Oct
- 2021Adaptive Machine Unlearning8 Jun
- 2021Machine Unlearning via Algorithmic Stability25 Feb
Other references · 60
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,204
- 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 29,915
- 2019PyTorch: An Imperative Style, High-Performance Deep Learning Librarycited by 20,160
- 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,084
- 2021Swin Transformer: Hierarchical Vision Transformer using Shifted Windowscited by 12,082
- 2018MobileNetV2: Inverted Residuals and Linear Bottleneckscited by 4,773
- 2019DistilBERT, a distilled version of BERT: smaller, faster, cheaper and lightercited by 4,243
- 2022Robust Speech Recognition via Large-Scale Weak Supervisioncited by 3,972
- 2020wav2vec 2.0: A Framework for Self-Supervised Learning of Speech Representationscited by 3,853
- 2021The Power of Scale for Parameter-Efficient Prompt Tuningcited by 3,769
- 2022A ConvNet for the 2020scited by 3,545
38 more
- 2019Benchmarking Neural Network Robustness to Common Corruptions and Perturbationscited by 2,857
- 2021HuBERT: Self-Supervised Speech Representation Learning by Masked Prediction of Hidden Unitscited by 2,301
- 2019BioBERT: a pre-trained biomedical language representation model for biomedical text miningcited by 1,935
- 2018Don't Give Me the Details, Just the Summary! Topic-Aware Convolutional Neural Networks for Extreme Summarizationcited by 1,308
- 2022VideoMAE: Masked Autoencoders are Data-Efficient Learners for Self-Supervised Video Pre-Trainingcited by 1,305
- 2023FActScore: Fine-grained Atomic Evaluation of Factual Precision in Long Form Text Generationcited by 1,259
- 2021ViLT: Vision-and-Language Transformer Without Convolution or Region Supervisioncited by 1,224
- 2022Editing Models with Task Arithmeticcited by 1,076
- 2019Machine Unlearningcited by 1,020
- 2020Domain-Specific Language Model Pretraining for Biomedical Natural Language Processingcited by 996
- 2021Towards a Unified View of Parameter-Efficient Transfer Learningcited by 863
- 2018Speech Commands: A Dataset for Limited-Vocabulary Speech Recognitioncited by 741
- 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 599
- 2019SAMSum Corpus: A Human-annotated Dialogue Dataset for Abstractive Summarizationcited by 530
- 2023Erasing Concepts from Diffusion Modelscited by 530
- 2019Certified Data Removal from Machine Learning Modelscited by 512
- 2018A Corpus for Reasoning About Natural Language Grounded in Photographscited by 457
- 2019Making AI Forget You: Data Deletion in Machine Learningcited by 447
- 2023Unified Concept Editing in Diffusion Modelscited by 377
- 2023Ablating Concepts in Text-to-Image Diffusion Modelscited by 312
- 2020Amnesiac Machine Learningcited by 305
- 2020Descent-to-Delete: Gradient-Based Methods for Machine Unlearningcited by 303
- 2020Approximate Data Deletion from Machine Learning Modelscited by 250
- 2023Ring-A-Bell! How Reliable are Concept Removal Methods for Diffusion Models?cited by 239
- 2023Composing Parameter-Efficient Modules with Arithmetic Operationscited by 155
- 2020DeltaGrad: Rapid retraining of machine learning modelscited by 143
- 2017Intrinsic Motivation and Automatic Curricula via Asymmetric Self-Playcited by 139
- 2021Graph Unlearningcited by 129
- 2020Machine Unlearning for Random Forestscited by 125
- 2020Variational Bayesian Unlearningcited by 114
- 2022The Right to be Forgotten in Federated Learning: An Efficient Realization with Rapid Retrainingcited by 109
- 2021Federated Unlearning via Class-Discriminative Pruningcited by 108
- 2022Recommendation Unlearningcited by 71
- 2020Learn to Forget: Machine Unlearning via Neuron Maskingcited by 56
- 2024Machine Unlearning for Image-to-Image Generative Modelscited by 47
- 2023GNNDelete: A General Strategy for Unlearning in Graph Neural Networkscited by 43
- 2023Shared Adversarial Unlearning: Backdoor Mitigation by Unlearning Shared Adversarial Examplescited by 40
- 2022Hidden Poison: Machine Unlearning Enables Camouflaged Poisoning Attackscited by 37
50 most cited of 60 All 60 (JSON)
Built on by
Citing papers per year: 2024: 1; 2025: 8; 2026: 7.
16 papers.
Sort:
By area:
- 2025A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deploymentcited by 110
- 2025Tool Unlearning for Tool-Augmented LLMscited by 17
- 2024Deep Unlearn: Benchmarking Machine Unlearning for Image Classificationcited by 8
- 2025Speech Unlearningcited by 7
- 2026Multimodal Unlearning Across Vision, Language, Video, and Audio: Survey of Methods, Datasets, and Benchmarkscited by 6
- 2025FROG: Fair Removal on Graphscited by 4
- 2025Generative Model Unlearning: A Survey through Target Events, Unlearning Operators, and Evaluation Protocolscited by 4
- 2025SineProject: Machine Unlearning for Stable Vision Language Alignmentcited by 3
- 2025Do Students Debias Like Teachers? On the Distillability of Bias Mitigation Methodscited by 2
- 2026TRACER: Token ReAssignment for Concept ERasure in Generative Recommendationcited by 2
- 2026ICU-Bench:Benchmarking Continual Unlearning in Multimodal Large Language Modelscited by 1
- 2025Understanding Machine Unlearning Through the Lens of Mode Connectivitycited by 0
4 more
- 2026Benchmarking Unlearning for Vision Transformerscited by 0
- 2026Understanding Machine Unlearning Through the Lens of Mode Connectivitycited by 0
- 2026IP Protection in the Era of Visual Generative AI: A Surveycited by 0
- 2026Published Unlearning Numbers Move Per Checkpoint, and Not Because the Removed Data Survives: An Audit of 263 Released Batch-Normalized Checkpointscited by 0
- 2026Published Unlearning Numbers Move Per Checkpoint, and Not Because the Removed Data Survives: An Audit of 263 Released Batch-Normalized Checkpoints10 Sep 2026
- 2026IP Protection in the Era of Visual Generative AI: A Survey13 Aug 2026
- 2026Understanding Machine Unlearning Through the Lens of Mode Connectivity27 Jul 2026
- 2026Multimodal Unlearning Across Vision, Language, Video, and Audio: Survey of Methods, Datasets, and Benchmarks8 Jul 2026
- 2026TRACER: Token ReAssignment for Concept ERasure in Generative Recommendation5 Jun 2026
- 2026ICU-Bench:Benchmarking Continual Unlearning in Multimodal Large Language Models7 May 2026
- 2026Benchmarking Unlearning for Vision Transformers23 Feb 2026
- 2025SineProject: Machine Unlearning for Stable Vision Language Alignment23 Nov 2025
- 2025Do Students Debias Like Teachers? On the Distillability of Bias Mitigation Methods30 Oct 2025
- 2025Generative Model Unlearning: A Survey through Target Events, Unlearning Operators, and Evaluation Protocols26 Jul 2025
- 2025Speech Unlearning1 Jun 2025
- 2025A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deployment22 Apr 2025
4 more
- 2025Understanding Machine Unlearning Through the Lens of Mode Connectivity8 Apr 2025
- 2025FROG: Fair Removal on Graphs23 Mar 2025
- 2025Tool Unlearning for Tool-Augmented LLMs3 Feb 2025
- 2024Deep Unlearn: Benchmarking Machine Unlearning for Image Classification2 Oct 2024
- 2024Deep Unlearn: Benchmarking Machine Unlearning for Image Classificationcited by 8
- 2025Speech Unlearningcited by 7
- 2026Multimodal Unlearning Across Vision, Language, Video, and Audio: Survey of Methods, Datasets, and Benchmarkscited by 6
- 2025FROG: Fair Removal on Graphscited by 4
- 2025Generative Model Unlearning: A Survey through Target Events, Unlearning Operators, and Evaluation Protocolscited by 4
- 2026TRACER: Token ReAssignment for Concept ERasure in Generative Recommendationcited by 2
- 2025Understanding Machine Unlearning Through the Lens of Mode Connectivitycited by 0
- 2026Benchmarking Unlearning for Vision Transformerscited by 0
- 2026Understanding Machine Unlearning Through the Lens of Mode Connectivitycited by 0
- 2026Published Unlearning Numbers Move Per Checkpoint, and Not Because the Removed Data Survives: An Audit of 263 Released Batch-Normalized Checkpointscited by 0
- 2026Published Unlearning Numbers Move Per Checkpoint, and Not Because the Removed Data Survives: An Audit of 263 Released Batch-Normalized Checkpoints10 Sep 2026
- 2026Understanding Machine Unlearning Through the Lens of Mode Connectivity27 Jul 2026
- 2026Multimodal Unlearning Across Vision, Language, Video, and Audio: Survey of Methods, Datasets, and Benchmarks8 Jul 2026
- 2026TRACER: Token ReAssignment for Concept ERasure in Generative Recommendation5 Jun 2026
- 2026Benchmarking Unlearning for Vision Transformers23 Feb 2026
- 2025Generative Model Unlearning: A Survey through Target Events, Unlearning Operators, and Evaluation Protocols26 Jul 2025
- 2025Speech Unlearning1 Jun 2025
- 2025Understanding Machine Unlearning Through the Lens of Mode Connectivity8 Apr 2025
- 2025FROG: Fair Removal on Graphs23 Mar 2025
- 2024Deep Unlearn: Benchmarking Machine Unlearning for Image Classification2 Oct 2024
- 2025Tool Unlearning for Tool-Augmented LLMscited by 17
- 2025Tool Unlearning for Tool-Augmented LLMs3 Feb 2025