mlsanityData to 7 Oct 2026

Distribution-Level Feature Distancing for Machine Unlearning: Towards a Better Trade-off Between Model Utility and Forgetting

arXiv 2409.14747 ↗First posted 23 Sep 2024cs.CV cs.AIcited by 7

On the map: LLM safety and security → Machine unlearning

Abstract (arXiv)

With the explosive growth of deep learning applications and increasing privacy concerns, the right to be forgotten has become a critical requirement in various AI industries. For example, given a facial recognition system, some individuals may wish to remove their personal data that might have been used in the training phase. Unfortunately, deep neural networks sometimes unexpectedly leak personal identities, making this removal challenging. While recent machine unlearning algorithms aim to enable models to forget specific data, we identify an unintended utility drop-correlation collapse-in which the essential correlations between image features and true labels weaken during the forgetting process. To address this challenge, we propose Distribution-Level Feature Distancing (DLFD), a novel method that efficiently forgets instances while preserving task-relevant feature correlations. Our method synthesizes data samples by optimizing the feature distribution to be distinctly different from that of forget samples, achieving effective results within a single training epoch. Through extensive experiments on facial recognition datasets, we demonstrate that our approach significantly outperforms state-of-the-art machine unlearning methods in both forgetting performance and model utility preservation.

Key facts. Cited by 7 papers in the map (data through 7 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 21 of its 34 references that are in the map. First posted on arXiv 23 Sep 2024.

Builds on

21 of 34 references.

Closest ancestors · 5

Same direction, newest first

  1. 2024Label-Agnostic Forgetting: A Supervision-Free Unlearning in Deep Models31 Mar
  2. 2023Towards Machine Unlearning Benchmarks: Forgetting the Personal Identities in Facial Recognition Systems3 Nov
  3. 2023Model Sparsity Can Simplify Machine Unlearning11 Apr
  4. 2023Learning to Unlearn: Instance-wise Unlearning for Pre-trained Classifiers27 Jan
  5. 2021Adaptive Machine Unlearning8 Jun

Other references · 16

  1. 2015Deep Residual Learning for Image Recognitioncited by 51,809
  2. 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
  3. 2016Densely Connected Convolutional Networkscited by 6,691
  4. 2019EfficientNet: Rethinking Model Scaling for Convolutional Neural Networkscited by 6,415
  5. 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
  6. 2013Sinkhorn Distances: Lightspeed Computation of Optimal Transportation Distancescited by 2,277
  7. 2017Improved Training of Wasserstein GANscited by 2,223
  8. 2016Membership Inference Attacks against Machine Learning Modelscited by 2,221
  9. 2020Extracting Training Data from Large Language Modelscited by 2,144
  10. 2019Adversarial Examples Are Not Bugs, They Are Featurescited by 950
  11. 2016Adversarial Machine Learning at Scalecited by 934
  12. 2019Big Transfer (BiT): General Visual Representation Learningcited by 766
4 more
  1. 2020Encoding in Style: a StyleGAN Encoder for Image-to-Image Translationcited by 727
  2. 2020Forgetting Outside the Box: Scrubbing Deep Networks of Information Accessible from Input-Output Observationscited by 171
  3. 2023Bag of Tricks for Training Data Extraction from Language Modelscited by 67
  4. 2022Unrestricted Black-box Adversarial Attack Using GAN with Limited Queriescited by 18

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2024: 1; 2025: 5; 2026: 1.

7 papers.