Unified Gradient-Based Machine Unlearning with Remain Geometry Enhancement
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
Machine unlearning (MU) has emerged to enhance the privacy and trustworthiness of deep neural networks. Approximate MU is a practical method for large-scale models. Our investigation into approximate MU starts with identifying the steepest descent direction, minimizing the output Kullback-Leibler divergence to exact MU inside a parameters' neighborhood. This probed direction decomposes into three components: weighted forgetting gradient ascent, fine-tuning retaining gradient descent, and a weight saliency matrix. Such decomposition derived from Euclidean metric encompasses most existing gradient-based MU methods. Nevertheless, adhering to Euclidean space may result in sub-optimal iterative trajectories due to the overlooked geometric structure of the output probability space. We suggest embedding the unlearning update into a manifold rendered by the remaining geometry, incorporating second-order Hessian from the remaining data. It helps prevent effective unlearning from interfering with the retained performance. However, computing the second-order Hessian for large-scale models is intractable. To efficiently leverage the benefits of Hessian modulation, we propose a fast-slow parameter update strategy to implicitly approximate the up-to-date salient unlearning direction. Free from specific modal constraints, our approach is adaptable across computer vision unlearning tasks, including classification and generation. Extensive experiments validate our efficacy and efficiency. Notably, our method successfully performs class-forgetting on ImageNet using DiT and forgets a class on CIFAR-10 using DDPM in just 50 steps, compared to thousands of steps required by previous methods.
Key facts. Cited by 43 papers in the map (data through 7 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 76 of its 98 references that are in the map. First posted on arXiv 29 Sep 2024.
Builds on
76 of 98 references.
Closest ancestors · 20
Same direction, newest first
- 2024Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearning8 Apr
- 2024Remaining-data-free Machine Unlearning by Suppressing Sample Contribution23 Feb
- 2024TOFU: A Task of Fictitious Unlearning for LLMs11 Jan
- 2023Learn to Unlearn for Deep Neural Networks: Minimizing Unlearning Interference with Gradient Projection7 Dec
- 2023Fast Model Debias with Machine Unlearning19 Oct
- 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generation19 Oct
- 2023Fast Machine Unlearning Without Retraining Through Selective Synaptic Dampening15 Aug
- 2023Machine Unlearning: Solutions and Challenges14 Aug
- 2023Fair Machine Unlearning: Data Removal while Mitigating Disparities27 Jul
- 2023Model Sparsity Can Simplify Machine Unlearning11 Apr
- 2023Towards Unbounded Machine Unlearning20 Feb
- 2022Can Bad Teaching Induce Forgetting? Unlearning in Deep Networks using an Incompetent Teacher17 May
8 more
- 2022Continual Learning and Private Unlearning24 Mar
- 2021Fast Yet Effective Machine Unlearning17 Nov
- 2021On the Necessity of Auditable Algorithmic Definitions for Machine Unlearning22 Oct
- 2021Unrolling SGD: Understanding Factors Influencing Machine Unlearning27 Sep
- 2021Machine Unlearning of Features and Labels26 Aug
- 2021Certifiable Machine Unlearning for Linear Models29 Jun
- 2021Remember What You Want to Forget: Algorithms for Machine Unlearning4 Mar
- 2021Machine Unlearning via Algorithmic Stability25 Feb
Other references · 56
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 29,915
- 2020Denoising Diffusion Probabilistic Modelscited by 20,851
- 2015U-Net: Convolutional Networks for Biomedical Image Segmentationcited by 19,604
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
- 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,084
- 2021Swin Transformer: Hierarchical Vision Transformer using Shifted Windowscited by 12,082
- 2022Scalable Diffusion Models with Transformerscited by 5,931
- 2022Classifier-Free Diffusion Guidancecited by 5,717
- 2016Overcoming catastrophic forgetting in neural networkscited by 4,718
- 2022Locating and Editing Factual Associations in GPTcited by 2,609
- 2017Understanding Black-box Predictions via Influence Functionscited by 1,714
38 more
- 2021LAION-400M: Open Dataset of CLIP-Filtered 400 Million Image-Text Pairscited by 1,544
- 2019Machine Unlearningcited by 1,020
- 2018On First-Order Meta-Learning Algorithmscited by 1,003
- 2023A Comprehensive Survey of Continual Learning: Theory, Method and Applicationcited by 860
- 2021Membership Inference Attacks From First Principlescited by 839
- 2015Optimizing Neural Networks with Kronecker-factored Approximate Curvaturecited by 776
- 2023Extracting Training Data from Diffusion Modelscited by 723
- 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 599
- 2023Textbooks Are All You Need II: phi-1.5 technical reportcited by 559
- 2021Editing Factual Knowledge in Language Modelscited by 548
- 2023Erasing Concepts from Diffusion Modelscited by 530
- 2019Certified Data Removal from Machine Learning Modelscited by 512
- 2022Safe Latent Diffusion: Mitigating Inappropriate Degeneration in Diffusion Modelscited by 501
- 2019Making AI Forget You: Data Deletion in Machine Learningcited by 447
- 2014New insights and perspectives on the natural gradient methodcited by 435
- 2019Lookahead Optimizer: k steps forward, 1 step backcited by 333
- 2023Ablating Concepts in Text-to-Image Diffusion Modelscited by 312
- 2021Membership Inference Attacks on Machine Learning: A Surveycited by 306
- 2020Amnesiac Machine Learningcited by 305
- 2020Descent-to-Delete: Gradient-Based Methods for Machine Unlearningcited by 303
- 2023Forget-Me-Not: Learning to Forget in Text-to-Image Diffusion Modelscited by 297
- 2020Systematic Evaluation of Privacy Risks of Machine Learning Modelscited by 273
- 2022Red-Teaming the Stable Diffusion Safety Filtercited by 257
- 2020Approximate Data Deletion from Machine Learning Modelscited by 250
- 2018Online Structured Laplace Approximations For Overcoming Catastrophic Forgettingcited by 197
- 2020When Machine Unlearning Jeopardizes Privacycited by 181
- 2023Selective Amnesia: A Continual Learning Approach to Forgetting in Deep Generative Modelscited by 175
- 2020Membership Leakage in Label-Only Exposurescited by 156
- 2022Reconstructing Training Data with Informed Adversariescited by 143
- 2019Privacy Risks of Securing Machine Learning Models against Adversarial Examplescited by 136
- 2022The Shapley Value in Machine Learningcited by 97
- 2022Fisher SAM: Information Geometry and Sharpness Aware Minimisationcited by 84
- 2017On Quadratic Penalties in Elastic Weight Consolidationcited by 54
- 2018A Swiss Army Infinitesimal Jackknifecited by 51
- 2021Natural continual learning: success is a journey, not (just) a destinationcited by 46
- 2019Stochastic Newton and Cubic Newton Methods with Simple Local Linear-Quadratic Ratescited by 24
- 2019On Convergence of Distributed Approximate Newton Methods: Globalization, Sharper Bounds and Beyondcited by 18
- 2020Steepest Descent Neural Architecture Optimization: Escaping Local Optimum with Signed Neural Splittingcited by 14
50 most cited of 56 All 56 (JSON)
Built on by
Citing papers per year: 2025: 23; 2026: 20.
43 papers.
Sort:
By area:
- 2025MMUnlearner: Reformulating Multimodal Machine Unlearning in the Era of Multimodal Large Language Modelscited by 29
- 2025MLLMEraser: Achieving Test-Time Unlearning in Multimodal Large Language Models through Activation Steeringcited by 9
- 2025DualOptim: Enhancing Efficacy and Stability in Machine Unlearning with Dual Optimizerscited by 6
- 2025A Unified Gradient-based Framework for Task-agnostic Continual Learning-Unlearningcited by 6
- 2025Targeted Forgetting of Image Subgroups in CLIP Modelscited by 6
- 2025Approximate Domain Unlearning for Vision-Language Modelscited by 6
- 2025The Right to be Forgotten in Pruning: Unveil Machine Unlearning on Sparse Modelscited by 5
- 2026FG-OrIU: Towards Better Forgetting via Feature-Gradient Orthogonality for Incremental Unlearningcited by 5
- 2025Exploring Nonlinear Pathway in Parameter Space for Machine Unlearningcited by 4
- 2025Reminiscence Attack on Residuals: Exploiting Approximate Machine Unlearning for Privacycited by 4
- 2025Tackling Fake Forgetting through Uncertainty Quantificationcited by 3
- 2025The Erasure Illusion: Stress-Testing the Generalization of LLM Forgetting Evaluationcited by 3
31 more
- 2026FaLW: A Forgetting-aware Loss Reweighting for Long-tailed Unlearningcited by 3
- 2026DUET: Distilled LLM Unlearning from an Efficiently Contextualized Teachercited by 3
- 2026Class Unlearning via Depth-Aware Removal of Forget-Specific Directionscited by 3
- 2025Sharpness-Aware Parameter Selection for Machine Unlearningcited by 2
- 2025Direct Token Optimization: A Self-contained Approach to Large Language Model Unlearningcited by 2
- 2025Apollo: A Posteriori Label-Only Membership Inference Attack Towards Machine Unlearningcited by 1
- 2025WARP: Weight Teleportation for Attack-Resilient Unlearning Protocolscited by 1
- 2025Towards Irreversible Machine Unlearning for Diffusion Modelscited by 1
- 2025Robust MLLM Unlearning via Visual Knowledge Distillationcited by 1
- 2026Designing to Forget: Deep Semi-parametric Models for Unlearningcited by 1
- 2026Forgetting That Sticks: Quantization-Permanent Unlearning via Circuit Attributioncited by 1
- 2025SHA256 at SemEval-2025 Task 4: Selective Amnesia -- Constrained Unlearning for Large Language Models via Knowledge Isolationcited by 0
- 2025Towards Mitigating Excessive Forgetting in LLM Unlearning via Entanglement-Guidance with Proxy Constraintcited by 0
- 2025TraceHiding: Scalable Machine Unlearning for Mobility Datacited by 0
- 2025Emergent AI Surveillance: Overlearned Person Re-Identification and Its Mitigation in Law Enforcement Contextcited by 0
- 2025Hierarchical Dual-Strategy Unlearning for Biomedical and Healthcare Intelligence Using Imperfect and Privacy-Sensitive Medical Datacited by 0
- 2025Beyond Memorization: Selective Learning for Copyright-Safe Diffusion Model Trainingcited by 0
- 2026Machine Unlearning in Low-Dimensional Feature Subspacecited by 0
- 2026Variance-Reduced (varepsilon,δ)-Unlearning using Forget Set Gradientscited by 0
- 2026Graph Federated Unlearning for Privacy Preservationcited by 0
- 2026SoK: Unlearnability and Unlearning for Model Dememorizationcited by 0
- 2026BARRIER: Bounded Activation Regions for Robust Information Erasurecited by 0
- 2026DualOptim+: Bridging Shared and Decoupled Optimizer States for Better Machine Unlearning in Large Language Modelscited by 0
- 2026A Full-Pipeline Framework for Evaluating Membership Inference Attacks in Machine Learningcited by 0
- 2026Characterizing Privacy-Audit Alignment in Behavioral Audit of Machine Unlearningcited by 0
- 2026LLM Unlearning for Cyber Defense: A Survey on Methods, Challenges, and Emerging Threatscited by 0
- 2026Spectral Saliency for Machine Unlearningcited by 0
- 2026Confess What You Know: Forget-Set Misalignment with Model Knowledge in LLM Unlearningcited by 0
- 2026When Retain Constraints Conflict: Mitigating Forget-Retain Interference in Tabular Datacited by 0
- 2026Open Vocabulary Domain Unlearningcited by 0
- 2026PruneForget: Joint Unlearning and Pruning of Vision Modelscited by 0
- 2026PruneForget: Joint Unlearning and Pruning of Vision Models26 Sep 2026
- 2026Open Vocabulary Domain Unlearning25 Sep 2026
- 2026When Retain Constraints Conflict: Mitigating Forget-Retain Interference in Tabular Data6 Sep 2026
- 2026Confess What You Know: Forget-Set Misalignment with Model Knowledge in LLM Unlearning1 Sep 2026
- 2026Spectral Saliency for Machine Unlearning16 Aug 2026
- 2026LLM Unlearning for Cyber Defense: A Survey on Methods, Challenges, and Emerging Threats23 Jun 2026
- 2026Characterizing Privacy-Audit Alignment in Behavioral Audit of Machine Unlearning12 Jun 2026
- 2026A Full-Pipeline Framework for Evaluating Membership Inference Attacks in Machine Learning28 May 2026
- 2026DualOptim+: Bridging Shared and Decoupled Optimizer States for Better Machine Unlearning in Large Language Models20 May 2026
- 2026BARRIER: Bounded Activation Regions for Robust Information Erasure15 May 2026
- 2026Forgetting That Sticks: Quantization-Permanent Unlearning via Circuit Attribution14 May 2026
- 2026SoK: Unlearnability and Unlearning for Model Dememorization12 May 2026
31 more
- 2026Graph Federated Unlearning for Privacy Preservation4 May 2026
- 2026Class Unlearning via Depth-Aware Removal of Forget-Specific Directions16 Apr 2026
- 2026Designing to Forget: Deep Semi-parametric Models for Unlearning24 Mar 2026
- 2026Variance-Reduced (varepsilon,δ)-Unlearning using Forget Set Gradients16 Feb 2026
- 2026Machine Unlearning in Low-Dimensional Feature Subspace30 Jan 2026
- 2026DUET: Distilled LLM Unlearning from an Efficiently Contextualized Teacher29 Jan 2026
- 2026FaLW: A Forgetting-aware Loss Reweighting for Long-tailed Unlearning26 Jan 2026
- 2026FG-OrIU: Towards Better Forgetting via Feature-Gradient Orthogonality for Incremental Unlearning20 Jan 2026
- 2025The Erasure Illusion: Stress-Testing the Generalization of LLM Forgetting Evaluation22 Dec 2025
- 2025Robust MLLM Unlearning via Visual Knowledge Distillation12 Dec 2025
- 2025Beyond Memorization: Selective Learning for Copyright-Safe Diffusion Model Training12 Dec 2025
- 2025Towards Irreversible Machine Unlearning for Diffusion Models3 Dec 2025
- 2025WARP: Weight Teleportation for Attack-Resilient Unlearning Protocols29 Nov 2025
- 2025Hierarchical Dual-Strategy Unlearning for Biomedical and Healthcare Intelligence Using Imperfect and Privacy-Sensitive Medical Data23 Nov 2025
- 2025Approximate Domain Unlearning for Vision-Language Models9 Oct 2025
- 2025Emergent AI Surveillance: Overlearned Person Re-Identification and Its Mitigation in Law Enforcement Context7 Oct 2025
- 2025MLLMEraser: Achieving Test-Time Unlearning in Multimodal Large Language Models through Activation Steering5 Oct 2025
- 2025Direct Token Optimization: A Self-contained Approach to Large Language Model Unlearning30 Sep 2025
- 2025TraceHiding: Scalable Machine Unlearning for Mobility Data21 Sep 2025
- 2025Towards Mitigating Excessive Forgetting in LLM Unlearning via Entanglement-Guidance with Proxy Constraint28 Aug 2025
- 2025Reminiscence Attack on Residuals: Exploiting Approximate Machine Unlearning for Privacy28 Jul 2025
- 2025The Right to be Forgotten in Pruning: Unveil Machine Unlearning on Sparse Models24 Jul 2025
- 2025Apollo: A Posteriori Label-Only Membership Inference Attack Towards Machine Unlearning11 Jun 2025
- 2025Targeted Forgetting of Image Subgroups in CLIP Models3 Jun 2025
- 2025A Unified Gradient-based Framework for Task-agnostic Continual Learning-Unlearning21 May 2025
- 2025Exploring Nonlinear Pathway in Parameter Space for Machine Unlearning16 May 2025
- 2025DualOptim: Enhancing Efficacy and Stability in Machine Unlearning with Dual Optimizers22 Apr 2025
- 2025SHA256 at SemEval-2025 Task 4: Selective Amnesia -- Constrained Unlearning for Large Language Models via Knowledge Isolation17 Apr 2025
- 2025Sharpness-Aware Parameter Selection for Machine Unlearning8 Apr 2025
- 2025MMUnlearner: Reformulating Multimodal Machine Unlearning in the Era of Multimodal Large Language Models16 Feb 2025
- 2025Tackling Fake Forgetting through Uncertainty Quantification31 Jan 2025
- 2025DualOptim: Enhancing Efficacy and Stability in Machine Unlearning with Dual Optimizerscited by 6
- 2025A Unified Gradient-based Framework for Task-agnostic Continual Learning-Unlearningcited by 6
- 2025Targeted Forgetting of Image Subgroups in CLIP Modelscited by 6
- 2025The Right to be Forgotten in Pruning: Unveil Machine Unlearning on Sparse Modelscited by 5
- 2026FG-OrIU: Towards Better Forgetting via Feature-Gradient Orthogonality for Incremental Unlearningcited by 5
- 2025Exploring Nonlinear Pathway in Parameter Space for Machine Unlearningcited by 4
- 2025Reminiscence Attack on Residuals: Exploiting Approximate Machine Unlearning for Privacycited by 4
- 2025Tackling Fake Forgetting through Uncertainty Quantificationcited by 3
- 2025The Erasure Illusion: Stress-Testing the Generalization of LLM Forgetting Evaluationcited by 3
- 2026FaLW: A Forgetting-aware Loss Reweighting for Long-tailed Unlearningcited by 3
- 2026DUET: Distilled LLM Unlearning from an Efficiently Contextualized Teachercited by 3
- 2026Class Unlearning via Depth-Aware Removal of Forget-Specific Directionscited by 3
12 most cited of 36 All 36 (JSON)
- 2026PruneForget: Joint Unlearning and Pruning of Vision Models26 Sep 2026
- 2026When Retain Constraints Conflict: Mitigating Forget-Retain Interference in Tabular Data6 Sep 2026
- 2026Confess What You Know: Forget-Set Misalignment with Model Knowledge in LLM Unlearning1 Sep 2026
- 2026Spectral Saliency for Machine Unlearning16 Aug 2026
- 2026LLM Unlearning for Cyber Defense: A Survey on Methods, Challenges, and Emerging Threats23 Jun 2026
- 2026Characterizing Privacy-Audit Alignment in Behavioral Audit of Machine Unlearning12 Jun 2026
- 2026A Full-Pipeline Framework for Evaluating Membership Inference Attacks in Machine Learning28 May 2026
- 2026DualOptim+: Bridging Shared and Decoupled Optimizer States for Better Machine Unlearning in Large Language Models20 May 2026
- 2026BARRIER: Bounded Activation Regions for Robust Information Erasure15 May 2026
- 2026Forgetting That Sticks: Quantization-Permanent Unlearning via Circuit Attribution14 May 2026
- 2026SoK: Unlearnability and Unlearning for Model Dememorization12 May 2026
- 2026Graph Federated Unlearning for Privacy Preservation4 May 2026
12 newest of 36 All 36 (JSON)
- 2025MMUnlearner: Reformulating Multimodal Machine Unlearning in the Era of Multimodal Large Language Modelscited by 29
- 2025MLLMEraser: Achieving Test-Time Unlearning in Multimodal Large Language Models through Activation Steeringcited by 9
- 2025Approximate Domain Unlearning for Vision-Language Modelscited by 6
- 2026Open Vocabulary Domain Unlearningcited by 0
- 2026Open Vocabulary Domain Unlearning25 Sep 2026
- 2025Approximate Domain Unlearning for Vision-Language Models9 Oct 2025
- 2025MLLMEraser: Achieving Test-Time Unlearning in Multimodal Large Language Models through Activation Steering5 Oct 2025
- 2025MMUnlearner: Reformulating Multimodal Machine Unlearning in the Era of Multimodal Large Language Models16 Feb 2025
Similar, not cited
Close in wording, no citation either way
- 2026PECKER: A Precisely Efficient Critical Knowledge Erasure Recipe For Machine Unlearning in Diffusion Models
- 2025Adaptive-lambda Subtracted Importance Sampled Scores in Machine Unlearning for DDPMs and VAEs
- 2026Why Some Models Resist Unlearning: A Linear Stability Perspective
- 2025Targeted Unlearning Using Perturbed Sign Gradient Methods With Applications On Medical Images
- 2026AutoAnchor: Stable Diffusion Unlearning Using Cross-Attention as a Manifold Surrogate
- 2025UNO: Unlearning via Orthogonalization in Generative models
- 2024MUNBa: Machine Unlearning via Nash Bargaining
- 2024Model Integrity when Unlearning with T2I Diffusion Models