Targeted Unlearning with Single Layer Unlearning Gradient
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
Machine unlearning methods aim to remove sensitive or unwanted content from trained models, but typically demand extensive model updates at significant computational cost while potentially degrading model performance on both related and unrelated tasks. We propose Single Layer Unlearning Gradient (SLUG) as an efficient method to unlearn targeted information by updating a single critical layer using a one-time gradient computation. SLUG uses layer importance and gradient alignment metrics to identify the optimal layer for targeted information removal while preserving the model utility. We demonstrate the effectiveness of SLUG for CLIP, Stable Diffusion, and vision-language models (VLMs) in removing concrete (e.g., identities and objects) and abstract concepts (e.g., artistic styles). On the UnlearnCanvas benchmark, SLUG achieves comparable unlearning performance to existing methods while requiring significantly less computational resources. Our proposed approach offers a practical solution for targeted unlearning that is computationally efficient and precise. Our code is available at https://github.com/CSIPlab/SLUG.
Key facts. Cited by 16 papers in the map (data through 7 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 44 of its 65 references that are in the map. First posted on arXiv 16 Jul 2024.
Builds on
44 of 65 references.
Closest ancestors · 11
Same direction, newest first
- 2024Scissorhands: Scrub Data Influence via Connection Sensitivity in Networks11 Jan
- 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generation19 Oct
- 2023Fast Machine Unlearning Without Retraining Through Selective Synaptic Dampening15 Aug
- 2023Exploring the Landscape of Machine Unlearning: A Comprehensive Survey and Taxonomy10 May
- 2023Model Sparsity Can Simplify Machine Unlearning11 Apr
- 2023Towards Unbounded Machine Unlearning20 Feb
- 2022A Survey of Machine Unlearning6 Sep
- 2022Can Bad Teaching Induce Forgetting? Unlearning in Deep Networks using an Incompetent Teacher17 May
- 2022Towards Adversarial Evaluations for Inexact Machine Unlearning17 Jan
- 2021Unrolling SGD: Understanding Factors Influencing Machine Unlearning27 Sep
- 2021Machine Unlearning of Features and Labels26 Aug
Other references · 33
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
- 2023Visual Instruction Tuningcited by 7,792
- 2016Overcoming catastrophic forgetting in neural networkscited by 4,718
- 2023Improved Baselines with Visual Instruction Tuningcited by 4,362
- 2014Deep Learning Face Attributes in the Wildcited by 3,679
- 2021CLIPScore: A Reference-free Evaluation Metric for Image Captioningcited by 2,388
- 2013Visualizing and Understanding Convolutional Networkscited by 2,278
- 2023MMBench: Is Your Multi-modal Model an All-around Player?cited by 2,105
- 2023MME: A Comprehensive Evaluation Benchmark for Multimodal Large Language Modelscited by 1,624
- 2021LAION-400M: Open Dataset of CLIP-Filtered 400 Million Image-Text Pairscited by 1,544
- 2022Reproducible scaling laws for contrastive language-image learningcited by 1,163
- 2022Diffusion Models: A Comprehensive Survey of Methods and Applicationscited by 1,107
21 more
- 2022Editing Models with Task Arithmeticcited by 1,076
- 2023Vision-Language Models for Vision Tasks: A Surveycited by 834
- 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 599
- 2023Erasing Concepts from Diffusion Modelscited by 530
- 2019Certified Data Removal from Machine Learning Modelscited by 512
- 2023Unified Concept Editing in Diffusion Modelscited by 377
- 2023Ablating Concepts in Text-to-Image Diffusion Modelscited by 312
- 2024MACE: Mass Concept Erasure in Diffusion Modelscited by 298
- 2023Forget-Me-Not: Learning to Forget in Text-to-Image Diffusion Modelscited by 297
- 2023To Generate or Not? Safety-Driven Unlearned Diffusion Models Are Still Easy To Generate Unsafe Images ... For Nowcited by 204
- 2020Forgetting Outside the Box: Scrubbing Deep Networks of Information Accessible from Input-Output Observationscited by 171
- 2023One-Dimensional Adapter to Rule Them All: Concepts, Diffusion Models and Erasing Applicationscited by 164
- 2024Defensive Unlearning with Adversarial Training for Robust Concept Erasure in Diffusion Modelscited by 164
- 2023Prompting4Debugging: Red-Teaming Text-to-Image Diffusion Models by Finding Problematic Promptscited by 161
- 2022What do Vision Transformers Learn? A Visual Explorationcited by 75
- 2024Get What You Want, Not What You Don't: Image Content Suppression for Text-to-Image Diffusion Modelscited by 62
- 2023Localizing and Editing Knowledge in Text-to-Image Generative Modelscited by 52
- 2023ChatGPT: A Meta-Analysis after 2.5 Monthscited by 50
- 2024Machine Unlearning for Image-to-Image Generative Modelscited by 47
- 2022Certified Graph Unlearningcited by 46
- 2024Concept Arithmetics for Circumventing Concept Inhibition in Diffusion Modelscited by 11
Built on by
Citing papers per year: 2024: 2; 2025: 2; 2026: 12.
16 papers.
Sort:
By area:
- 2025Erased but Not Forgotten: How Backdoors Compromise Concept Erasurecited by 9
- 2026VLA-Forget: Vision-Language-Action Unlearning for Embodied Foundation Modelscited by 9
- 2024LVMark: Robust Watermark for Latent Video Diffusion Modelscited by 8
- 2025SAEmnesia: Erasing Concepts in Diffusion Models with Supervised Sparse Autoencoderscited by 8
- 2026Multimodal Unlearning Across Vision, Language, Video, and Audio: Survey of Methods, Datasets, and Benchmarkscited by 6
- 2024Zero-shot Class Unlearning via Layer-wise Relevance Analysis and Neuronal Path Perturbationcited by 3
- 2026RAZOR: Ratio-Aware Layer Editing for Targeted Unlearning in Vision Transformers and Diffusion Modelscited by 3
- 2026Models Designed to Forget: Machine Unlearning via Key Deletioncited by 3
- 2026Object Hallucination-Free Reinforcement Unlearning for Vision-Language Modelscited by 3
- 2026Selective Fine-Tuning for Targeted and Robust Concept Unlearningcited by 2
- 2026CATA: Continual Machine Unlearning via Conflict-Averse Task Arithmeticcited by 2
- 2026SPARE: Self-distillation for PARameter-Efficient Removalcited by 1
4 more
- 2026On the Robustness of Machine Unlearning for Vision-Language Modelscited by 1
- 2026ICED: Concept-level Machine Unlearning via Interpretable Concept Decompositioncited by 0
- 2026InstantForget: Update-Free Backdoor Unlearning with Inference-Time Feature Resetcited by 0
- 2026Toward Fine-Grained Forgetting:Attribute Unlearning for Multimodal Large Language Modelscited by 0
- 2026Toward Fine-Grained Forgetting:Attribute Unlearning for Multimodal Large Language Models2 Aug 2026
- 2026Multimodal Unlearning Across Vision, Language, Video, and Audio: Survey of Methods, Datasets, and Benchmarks8 Jul 2026
- 2026InstantForget: Update-Free Backdoor Unlearning with Inference-Time Feature Reset14 Jun 2026
- 2026On the Robustness of Machine Unlearning for Vision-Language Models26 May 2026
- 2026CATA: Continual Machine Unlearning via Conflict-Averse Task Arithmetic18 May 2026
- 2026ICED: Concept-level Machine Unlearning via Interpretable Concept Decomposition14 May 2026
- 2026Object Hallucination-Free Reinforcement Unlearning for Vision-Language Models8 May 2026
- 2026VLA-Forget: Vision-Language-Action Unlearning for Embodied Foundation Models5 Apr 2026
- 2026Models Designed to Forget: Machine Unlearning via Key Deletion16 Mar 2026
- 2026RAZOR: Ratio-Aware Layer Editing for Targeted Unlearning in Vision Transformers and Diffusion Models16 Mar 2026
- 2026Selective Fine-Tuning for Targeted and Robust Concept Unlearning8 Feb 2026
- 2026SPARE: Self-distillation for PARameter-Efficient Removal4 Feb 2026
4 more
- 2025SAEmnesia: Erasing Concepts in Diffusion Models with Supervised Sparse Autoencoders23 Sep 2025
- 2025Erased but Not Forgotten: How Backdoors Compromise Concept Erasure29 Apr 2025
- 2024LVMark: Robust Watermark for Latent Video Diffusion Models12 Dec 2024
- 2024Zero-shot Class Unlearning via Layer-wise Relevance Analysis and Neuronal Path Perturbation31 Oct 2024
- 2026RAZOR: Ratio-Aware Layer Editing for Targeted Unlearning in Vision Transformers and Diffusion Modelscited by 3
- 2026Object Hallucination-Free Reinforcement Unlearning for Vision-Language Modelscited by 3
- 2026CATA: Continual Machine Unlearning via Conflict-Averse Task Arithmeticcited by 2
- 2026On the Robustness of Machine Unlearning for Vision-Language Modelscited by 1
- 2026ICED: Concept-level Machine Unlearning via Interpretable Concept Decompositioncited by 0
- 2026Toward Fine-Grained Forgetting:Attribute Unlearning for Multimodal Large Language Modelscited by 0
- 2026Toward Fine-Grained Forgetting:Attribute Unlearning for Multimodal Large Language Models2 Aug 2026
- 2026On the Robustness of Machine Unlearning for Vision-Language Models26 May 2026
- 2026CATA: Continual Machine Unlearning via Conflict-Averse Task Arithmetic18 May 2026
- 2026ICED: Concept-level Machine Unlearning via Interpretable Concept Decomposition14 May 2026
- 2026Object Hallucination-Free Reinforcement Unlearning for Vision-Language Models8 May 2026
- 2026RAZOR: Ratio-Aware Layer Editing for Targeted Unlearning in Vision Transformers and Diffusion Models16 Mar 2026
- 2025Erased but Not Forgotten: How Backdoors Compromise Concept Erasurecited by 9
- 2024LVMark: Robust Watermark for Latent Video Diffusion Modelscited by 8
- 2025SAEmnesia: Erasing Concepts in Diffusion Models with Supervised Sparse Autoencoderscited by 8
- 2026Selective Fine-Tuning for Targeted and Robust Concept Unlearningcited by 2
- 2026SPARE: Self-distillation for PARameter-Efficient Removalcited by 1
- 2026Selective Fine-Tuning for Targeted and Robust Concept Unlearning8 Feb 2026
- 2026SPARE: Self-distillation for PARameter-Efficient Removal4 Feb 2026
- 2025SAEmnesia: Erasing Concepts in Diffusion Models with Supervised Sparse Autoencoders23 Sep 2025
- 2025Erased but Not Forgotten: How Backdoors Compromise Concept Erasure29 Apr 2025
- 2024LVMark: Robust Watermark for Latent Video Diffusion Models12 Dec 2024
- 2026Multimodal Unlearning Across Vision, Language, Video, and Audio: Survey of Methods, Datasets, and Benchmarkscited by 6
- 2024Zero-shot Class Unlearning via Layer-wise Relevance Analysis and Neuronal Path Perturbationcited by 3
- 2026Models Designed to Forget: Machine Unlearning via Key Deletioncited by 3
- 2026Multimodal Unlearning Across Vision, Language, Video, and Audio: Survey of Methods, Datasets, and Benchmarks8 Jul 2026
- 2026Models Designed to Forget: Machine Unlearning via Key Deletion16 Mar 2026
- 2024Zero-shot Class Unlearning via Layer-wise Relevance Analysis and Neuronal Path Perturbation31 Oct 2024
Similar, not cited
Close in wording, no citation either way
- 2026Projected Gradient Unlearning for Text-to-Image Diffusion Models: Defending Against Concept Revival Attacks
- 2025UNO: Unlearning via Orthogonalization in Generative models
- 2026Forget Many, Forget Right: Scalable and Precise Concept Unlearning in Diffusion Models
- 2025Targeted Unlearning Using Perturbed Sign Gradient Methods With Applications On Medical Images
- 2024Unlearning Concepts in Diffusion Model via Concept Domain Correction and Concept Preserving Gradient
- 2025LoReUn: Data Itself Implicitly Provides Cues to Improve Machine Unlearning
- 2025Prompting Forgetting: Unlearning in GANs via Textual Guidance
- 2026eval-unlearn: Benchmarking unlearning in Text-to-Image Diffusion Models