Towards Certified Unlearning for Deep Neural Networks
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
In the field of machine unlearning, certified unlearning has been extensively studied in convex machine learning models due to its high efficiency and strong theoretical guarantees. However, its application to deep neural networks (DNNs), known for their highly nonconvex nature, still poses challenges. To bridge the gap between certified unlearning and DNNs, we propose several simple techniques to extend certified unlearning methods to nonconvex objectives. To reduce the time complexity, we develop an efficient computation method by inverse Hessian approximation without compromising certification guarantees. In addition, we extend our discussion of certification to nonconvergence training and sequential unlearning, considering that real-world users can send unlearning requests at different time points. Extensive experiments on three real-world datasets demonstrate the efficacy of our method and the advantages of certified unlearning in DNNs.
Key facts. Cited by 28 papers in the map (data through 7 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 35 of its 51 references that are in the map. First posted on arXiv 1 Aug 2024.
Builds on
35 of 51 references.
Closest ancestors · 11
Same direction, newest first
- 2023Model Sparsity Can Simplify Machine Unlearning11 Apr
- 2023Towards Unbounded Machine Unlearning20 Feb
- 2022A Survey of Machine Unlearning6 Sep
- 2022An Introduction to Machine Unlearning2 Sep
- 2022Can Bad Teaching Induce Forgetting? Unlearning in Deep Networks using an Incompetent Teacher17 May
- 2022Deep Unlearning via Randomized Conditionally Independent Hessians15 Apr
- 2021Fast Yet Effective Machine Unlearning17 Nov
- 2021Machine Unlearning of Features and Labels26 Aug
- 2021Certifiable Machine Unlearning for Linear Models29 Jun
- 2021Remember What You Want to Forget: Algorithms for Machine Unlearning4 Mar
- 2021Machine Unlearning via Algorithmic Stability25 Feb
Other references · 24
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2019PyTorch: An Imperative Style, High-Performance Deep Learning Librarycited by 20,160
- 2017Understanding Black-box Predictions via Influence Functionscited by 1,714
- 2019Machine Unlearningcited by 1,020
- 2014Striving for Simplicity: The All Convolutional Netcited by 983
- 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 599
- 2019Certified Data Removal from Machine Learning Modelscited by 512
- 2019Making AI Forget You: Data Deletion in Machine Learningcited by 447
- 2020Descent-to-Delete: Gradient-Based Methods for Machine Unlearningcited by 303
- 2020Approximate Data Deletion from Machine Learning Modelscited by 250
- 2020Influence Functions in Deep Learning Are Fragilecited by 247
- 2018Improving the Gaussian Mechanism for Differential Privacy: Analytical Calibration and Optimal Denoisingcited by 216
12 more
- 2020When Machine Unlearning Jeopardizes Privacycited by 181
- 2020Mixed-Privacy Forgetting in Deep Networkscited by 158
- 2018Stochastic model-based minimization of weakly convex functionscited by 157
- 2021Graph Unlearningcited by 129
- 2020Machine Unlearning for Random Forestscited by 125
- 2020Variational Bayesian Unlearningcited by 114
- 2023GIF: A General Graph Unlearning Strategy via Influence Functioncited by 59
- 2020Coded Machine Unlearningcited by 35
- 2022Unlearning Graph Classifiers with Limited Data Resourcescited by 31
- 2017Proximally Guided Stochastic Subgradient Method for Nonsmooth, Nonconvex Problemscited by 30
- 2024IDEA: A Flexible Framework of Certified Unlearning for Graph Neural Networkscited by 22
- 2022Certified Data Removal in Sum-Product Networkscited by 2
Built on by
Citing papers per year: 2024: 2; 2025: 16; 2026: 10.
28 papers.
Sort:
By area:
- 2025Certified Unlearning for Neural Networkscited by 25
- 2024Rewind-to-Delete: Certified Machine Unlearning for Nonconvex Functionscited by 17
- 2025Tool Unlearning for Tool-Augmented LLMscited by 17
- 2025A Certified Unlearning Approach without Access to Source Datacited by 9
- 2025Rectifying Privacy and Efficacy Measurements in Machine Unlearning: A New Inference Attack Perspectivecited by 8
- 2025Targeted Forgetting of Image Subgroups in CLIP Modelscited by 6
- 2025Distributional Machine Unlearning via Selective Data Removalcited by 5
- 2025The Right to be Forgotten in Pruning: Unveil Machine Unlearning on Sparse Modelscited by 5
- 2025OFMU: Optimization-Driven Framework for Machine Unlearningcited by 4
- 2026The Unseen Threat: Residual Knowledge in Machine Unlearning under Perturbed Samplescited by 4
- 2026CREDIT: Certified Ownership Verification of Deep Neural Networks Against Model Extraction Attackscited by 4
- 2025Sharpness-Aware Parameter Selection for Machine Unlearningcited by 2
16 more
- 2025Efficient Unlearning with Privacy Guaranteescited by 1
- 2025Fully Decentralized Certified Unlearningcited by 1
- 2026Less Noise, Same Certificate: Retain Sensitivity for Unlearningcited by 1
- 2026Auditing of Unlearning Algorithmscited by 1
- 2024AdaProb: Efficient Machine Unlearning via Adaptive Probabilitycited by 0
- 2025Understanding Machine Unlearning Through the Lens of Mode Connectivitycited by 0
- 2025Mirror Mirror on the Wall, Have I Forgotten it All? A New Framework for Evaluating Machine Unlearningcited by 0
- 2025Soft Weighted Machine Unlearningcited by 0
- 2025Factor Decorrelation Enhanced Data Removal from Deep Predictive Modelscited by 0
- 2025Descend or Rewind? Stochastic Gradient Descent Unlearningcited by 0
- 2026Sequential Subspace Noise Injection Prevents Accuracy Collapse in Certified Unlearningcited by 0
- 2026A Robust Certified Machine Unlearning Method Under Distribution Shiftcited by 0
- 2026WIN-U: Woodbury-Informed Newton-Unlearning as a retain-free Machine Unlearning Frameworkcited by 0
- 2026Statistical Unlearning of Distributions: A Hypothesis Testing Approachcited by 0
- 2026Auditing Machine Unlearning: A Systematic Research on Whether Models Truly Forgetcited by 0
- 2026Understanding Machine Unlearning Through the Lens of Mode Connectivitycited by 0
- 2026Understanding Machine Unlearning Through the Lens of Mode Connectivity27 Jul 2026
- 2026Auditing of Unlearning Algorithms7 Jul 2026
- 2026Auditing Machine Unlearning: A Systematic Research on Whether Models Truly Forget15 Jun 2026
- 2026Statistical Unlearning of Distributions: A Hypothesis Testing Approach15 May 2026
- 2026WIN-U: Woodbury-Informed Newton-Unlearning as a retain-free Machine Unlearning Framework15 Apr 2026
- 2026Less Noise, Same Certificate: Retain Sensitivity for Unlearning3 Mar 2026
- 2026CREDIT: Certified Ownership Verification of Deep Neural Networks Against Model Extraction Attacks23 Feb 2026
- 2026The Unseen Threat: Residual Knowledge in Machine Unlearning under Perturbed Samples29 Jan 2026
- 2026A Robust Certified Machine Unlearning Method Under Distribution Shift11 Jan 2026
- 2026Sequential Subspace Noise Injection Prevents Accuracy Collapse in Certified Unlearning8 Jan 2026
- 2025Fully Decentralized Certified Unlearning9 Dec 2025
- 2025Descend or Rewind? Stochastic Gradient Descent Unlearning20 Nov 2025
16 more
- 2025Factor Decorrelation Enhanced Data Removal from Deep Predictive Models27 Sep 2025
- 2025OFMU: Optimization-Driven Framework for Machine Unlearning26 Sep 2025
- 2025The Right to be Forgotten in Pruning: Unveil Machine Unlearning on Sparse Models24 Jul 2025
- 2025Distributional Machine Unlearning via Selective Data Removal20 Jul 2025
- 2025Efficient Unlearning with Privacy Guarantees7 Jul 2025
- 2025Rectifying Privacy and Efficacy Measurements in Machine Unlearning: A New Inference Attack Perspective16 Jun 2025
- 2025Certified Unlearning for Neural Networks8 Jun 2025
- 2025A Certified Unlearning Approach without Access to Source Data6 Jun 2025
- 2025Targeted Forgetting of Image Subgroups in CLIP Models3 Jun 2025
- 2025Soft Weighted Machine Unlearning24 May 2025
- 2025Mirror Mirror on the Wall, Have I Forgotten it All? A New Framework for Evaluating Machine Unlearning13 May 2025
- 2025Understanding Machine Unlearning Through the Lens of Mode Connectivity8 Apr 2025
- 2025Sharpness-Aware Parameter Selection for Machine Unlearning8 Apr 2025
- 2025Tool Unlearning for Tool-Augmented LLMs3 Feb 2025
- 2024AdaProb: Efficient Machine Unlearning via Adaptive Probability4 Nov 2024
- 2024Rewind-to-Delete: Certified Machine Unlearning for Nonconvex Functions15 Sep 2024
- 2025Certified Unlearning for Neural Networkscited by 25
- 2024Rewind-to-Delete: Certified Machine Unlearning for Nonconvex Functionscited by 17
- 2025A Certified Unlearning Approach without Access to Source Datacited by 9
- 2025Rectifying Privacy and Efficacy Measurements in Machine Unlearning: A New Inference Attack Perspectivecited by 8
- 2025Targeted Forgetting of Image Subgroups in CLIP Modelscited by 6
- 2025Distributional Machine Unlearning via Selective Data Removalcited by 5
- 2025The Right to be Forgotten in Pruning: Unveil Machine Unlearning on Sparse Modelscited by 5
- 2025OFMU: Optimization-Driven Framework for Machine Unlearningcited by 4
- 2026The Unseen Threat: Residual Knowledge in Machine Unlearning under Perturbed Samplescited by 4
- 2025Sharpness-Aware Parameter Selection for Machine Unlearningcited by 2
- 2025Efficient Unlearning with Privacy Guaranteescited by 1
- 2025Fully Decentralized Certified Unlearningcited by 1
12 most cited of 25 All 25 (JSON)
- 2026Understanding Machine Unlearning Through the Lens of Mode Connectivity27 Jul 2026
- 2026Auditing of Unlearning Algorithms7 Jul 2026
- 2026Auditing Machine Unlearning: A Systematic Research on Whether Models Truly Forget15 Jun 2026
- 2026Statistical Unlearning of Distributions: A Hypothesis Testing Approach15 May 2026
- 2026WIN-U: Woodbury-Informed Newton-Unlearning as a retain-free Machine Unlearning Framework15 Apr 2026
- 2026Less Noise, Same Certificate: Retain Sensitivity for Unlearning3 Mar 2026
- 2026The Unseen Threat: Residual Knowledge in Machine Unlearning under Perturbed Samples29 Jan 2026
- 2026A Robust Certified Machine Unlearning Method Under Distribution Shift11 Jan 2026
- 2026Sequential Subspace Noise Injection Prevents Accuracy Collapse in Certified Unlearning8 Jan 2026
- 2025Fully Decentralized Certified Unlearning9 Dec 2025
- 2025Descend or Rewind? Stochastic Gradient Descent Unlearning20 Nov 2025
- 2025OFMU: Optimization-Driven Framework for Machine Unlearning26 Sep 2025
12 newest of 25 All 25 (JSON)
- 2025Tool Unlearning for Tool-Augmented LLMscited by 17
- 2025Tool Unlearning for Tool-Augmented LLMs3 Feb 2025