mlsanityData to 7 Oct 2026

Unified Gradient-Based Machine Unlearning with Remain Geometry Enhancement

arXiv 2409.19732 ↗First posted 29 Sep 2024cs.LG cs.AIcited by 43

On the map: LLM safety and security → Machine unlearning

Abstract (arXiv)

Machine unlearning (MU) has emerged to enhance the privacy and trustworthiness of deep neural networks. Approximate MU is a practical method for large-scale models. Our investigation into approximate MU starts with identifying the steepest descent direction, minimizing the output Kullback-Leibler divergence to exact MU inside a parameters' neighborhood. This probed direction decomposes into three components: weighted forgetting gradient ascent, fine-tuning retaining gradient descent, and a weight saliency matrix. Such decomposition derived from Euclidean metric encompasses most existing gradient-based MU methods. Nevertheless, adhering to Euclidean space may result in sub-optimal iterative trajectories due to the overlooked geometric structure of the output probability space. We suggest embedding the unlearning update into a manifold rendered by the remaining geometry, incorporating second-order Hessian from the remaining data. It helps prevent effective unlearning from interfering with the retained performance. However, computing the second-order Hessian for large-scale models is intractable. To efficiently leverage the benefits of Hessian modulation, we propose a fast-slow parameter update strategy to implicitly approximate the up-to-date salient unlearning direction. Free from specific modal constraints, our approach is adaptable across computer vision unlearning tasks, including classification and generation. Extensive experiments validate our efficacy and efficiency. Notably, our method successfully performs class-forgetting on ImageNet using DiT and forgets a class on CIFAR-10 using DDPM in just 50 steps, compared to thousands of steps required by previous methods.

Key facts. Cited by 43 papers in the map (data through 7 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 76 of its 98 references that are in the map. First posted on arXiv 29 Sep 2024.

Builds on

76 of 98 references.

Closest ancestors · 20

Same direction, newest first

  1. 2024Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearning8 Apr
  2. 2024Remaining-data-free Machine Unlearning by Suppressing Sample Contribution23 Feb
  3. 2024TOFU: A Task of Fictitious Unlearning for LLMs11 Jan
  4. 2023Learn to Unlearn for Deep Neural Networks: Minimizing Unlearning Interference with Gradient Projection7 Dec
  5. 2023Fast Model Debias with Machine Unlearning19 Oct
  6. 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generation19 Oct
  7. 2023Fast Machine Unlearning Without Retraining Through Selective Synaptic Dampening15 Aug
  8. 2023Machine Unlearning: Solutions and Challenges14 Aug
  9. 2023Fair Machine Unlearning: Data Removal while Mitigating Disparities27 Jul
  10. 2023Model Sparsity Can Simplify Machine Unlearning11 Apr
  11. 2023Towards Unbounded Machine Unlearning20 Feb
  12. 2022Can Bad Teaching Induce Forgetting? Unlearning in Deep Networks using an Incompetent Teacher17 May
8 more
  1. 2022Continual Learning and Private Unlearning24 Mar
  2. 2021Fast Yet Effective Machine Unlearning17 Nov
  3. 2021On the Necessity of Auditable Algorithmic Definitions for Machine Unlearning22 Oct
  4. 2021Unrolling SGD: Understanding Factors Influencing Machine Unlearning27 Sep
  5. 2021Machine Unlearning of Features and Labels26 Aug
  6. 2021Certifiable Machine Unlearning for Linear Models29 Jun
  7. 2021Remember What You Want to Forget: Algorithms for Machine Unlearning4 Mar
  8. 2021Machine Unlearning via Algorithmic Stability25 Feb

Other references · 56

  1. 2015Deep Residual Learning for Image Recognitioncited by 51,809
  2. 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 29,915
  3. 2020Denoising Diffusion Probabilistic Modelscited by 20,851
  4. 2015U-Net: Convolutional Networks for Biomedical Image Segmentationcited by 19,604
  5. 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
  6. 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,084
  7. 2021Swin Transformer: Hierarchical Vision Transformer using Shifted Windowscited by 12,082
  8. 2022Scalable Diffusion Models with Transformerscited by 5,931
  9. 2022Classifier-Free Diffusion Guidancecited by 5,717
  10. 2016Overcoming catastrophic forgetting in neural networkscited by 4,718
  11. 2022Locating and Editing Factual Associations in GPTcited by 2,609
  12. 2017Understanding Black-box Predictions via Influence Functionscited by 1,714
38 more
  1. 2021LAION-400M: Open Dataset of CLIP-Filtered 400 Million Image-Text Pairscited by 1,544
  2. 2019Machine Unlearningcited by 1,020
  3. 2018On First-Order Meta-Learning Algorithmscited by 1,003
  4. 2023A Comprehensive Survey of Continual Learning: Theory, Method and Applicationcited by 860
  5. 2021Membership Inference Attacks From First Principlescited by 839
  6. 2015Optimizing Neural Networks with Kronecker-factored Approximate Curvaturecited by 776
  7. 2023Extracting Training Data from Diffusion Modelscited by 723
  8. 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 599
  9. 2023Textbooks Are All You Need II: phi-1.5 technical reportcited by 559
  10. 2021Editing Factual Knowledge in Language Modelscited by 548
  11. 2023Erasing Concepts from Diffusion Modelscited by 530
  12. 2019Certified Data Removal from Machine Learning Modelscited by 512
  13. 2022Safe Latent Diffusion: Mitigating Inappropriate Degeneration in Diffusion Modelscited by 501
  14. 2019Making AI Forget You: Data Deletion in Machine Learningcited by 447
  15. 2014New insights and perspectives on the natural gradient methodcited by 435
  16. 2019Lookahead Optimizer: k steps forward, 1 step backcited by 333
  17. 2023Ablating Concepts in Text-to-Image Diffusion Modelscited by 312
  18. 2021Membership Inference Attacks on Machine Learning: A Surveycited by 306
  19. 2020Amnesiac Machine Learningcited by 305
  20. 2020Descent-to-Delete: Gradient-Based Methods for Machine Unlearningcited by 303
  21. 2023Forget-Me-Not: Learning to Forget in Text-to-Image Diffusion Modelscited by 297
  22. 2020Systematic Evaluation of Privacy Risks of Machine Learning Modelscited by 273
  23. 2022Red-Teaming the Stable Diffusion Safety Filtercited by 257
  24. 2020Approximate Data Deletion from Machine Learning Modelscited by 250
  25. 2018Online Structured Laplace Approximations For Overcoming Catastrophic Forgettingcited by 197
  26. 2020When Machine Unlearning Jeopardizes Privacycited by 181
  27. 2023Selective Amnesia: A Continual Learning Approach to Forgetting in Deep Generative Modelscited by 175
  28. 2020Membership Leakage in Label-Only Exposurescited by 156
  29. 2022Reconstructing Training Data with Informed Adversariescited by 143
  30. 2019Privacy Risks of Securing Machine Learning Models against Adversarial Examplescited by 136
  31. 2022The Shapley Value in Machine Learningcited by 97
  32. 2022Fisher SAM: Information Geometry and Sharpness Aware Minimisationcited by 84
  33. 2017On Quadratic Penalties in Elastic Weight Consolidationcited by 54
  34. 2018A Swiss Army Infinitesimal Jackknifecited by 51
  35. 2021Natural continual learning: success is a journey, not (just) a destinationcited by 46
  36. 2019Stochastic Newton and Cubic Newton Methods with Simple Local Linear-Quadratic Ratescited by 24
  37. 2019On Convergence of Distributed Approximate Newton Methods: Globalization, Sharper Bounds and Beyondcited by 18
  38. 2020Steepest Descent Neural Architecture Optimization: Escaping Local Optimum with Signed Neural Splittingcited by 14

50 most cited of 56 All 56 (JSON)

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2025: 23; 2026: 20.

43 papers.

Sort:

By area:

  1. 2025MMUnlearner: Reformulating Multimodal Machine Unlearning in the Era of Multimodal Large Language Modelscited by 29
  2. 2025MLLMEraser: Achieving Test-Time Unlearning in Multimodal Large Language Models through Activation Steeringcited by 9
  3. 2025DualOptim: Enhancing Efficacy and Stability in Machine Unlearning with Dual Optimizerscited by 6
  4. 2025A Unified Gradient-based Framework for Task-agnostic Continual Learning-Unlearningcited by 6
  5. 2025Targeted Forgetting of Image Subgroups in CLIP Modelscited by 6
  6. 2025Approximate Domain Unlearning for Vision-Language Modelscited by 6
  7. 2025The Right to be Forgotten in Pruning: Unveil Machine Unlearning on Sparse Modelscited by 5
  8. 2026FG-OrIU: Towards Better Forgetting via Feature-Gradient Orthogonality for Incremental Unlearningcited by 5
  9. 2025Exploring Nonlinear Pathway in Parameter Space for Machine Unlearningcited by 4
  10. 2025Reminiscence Attack on Residuals: Exploiting Approximate Machine Unlearning for Privacycited by 4
  11. 2025Tackling Fake Forgetting through Uncertainty Quantificationcited by 3
  12. 2025The Erasure Illusion: Stress-Testing the Generalization of LLM Forgetting Evaluationcited by 3
31 more
  1. 2026FaLW: A Forgetting-aware Loss Reweighting for Long-tailed Unlearningcited by 3
  2. 2026DUET: Distilled LLM Unlearning from an Efficiently Contextualized Teachercited by 3
  3. 2026Class Unlearning via Depth-Aware Removal of Forget-Specific Directionscited by 3
  4. 2025Sharpness-Aware Parameter Selection for Machine Unlearningcited by 2
  5. 2025Direct Token Optimization: A Self-contained Approach to Large Language Model Unlearningcited by 2
  6. 2025Apollo: A Posteriori Label-Only Membership Inference Attack Towards Machine Unlearningcited by 1
  7. 2025WARP: Weight Teleportation for Attack-Resilient Unlearning Protocolscited by 1
  8. 2025Towards Irreversible Machine Unlearning for Diffusion Modelscited by 1
  9. 2025Robust MLLM Unlearning via Visual Knowledge Distillationcited by 1
  10. 2026Designing to Forget: Deep Semi-parametric Models for Unlearningcited by 1
  11. 2026Forgetting That Sticks: Quantization-Permanent Unlearning via Circuit Attributioncited by 1
  12. 2025SHA256 at SemEval-2025 Task 4: Selective Amnesia -- Constrained Unlearning for Large Language Models via Knowledge Isolationcited by 0
  13. 2025Towards Mitigating Excessive Forgetting in LLM Unlearning via Entanglement-Guidance with Proxy Constraintcited by 0
  14. 2025TraceHiding: Scalable Machine Unlearning for Mobility Datacited by 0
  15. 2025Emergent AI Surveillance: Overlearned Person Re-Identification and Its Mitigation in Law Enforcement Contextcited by 0
  16. 2025Hierarchical Dual-Strategy Unlearning for Biomedical and Healthcare Intelligence Using Imperfect and Privacy-Sensitive Medical Datacited by 0
  17. 2025Beyond Memorization: Selective Learning for Copyright-Safe Diffusion Model Trainingcited by 0
  18. 2026Machine Unlearning in Low-Dimensional Feature Subspacecited by 0
  19. 2026Variance-Reduced (varepsilon,δ)-Unlearning using Forget Set Gradientscited by 0
  20. 2026Graph Federated Unlearning for Privacy Preservationcited by 0
  21. 2026SoK: Unlearnability and Unlearning for Model Dememorizationcited by 0
  22. 2026BARRIER: Bounded Activation Regions for Robust Information Erasurecited by 0
  23. 2026DualOptim+: Bridging Shared and Decoupled Optimizer States for Better Machine Unlearning in Large Language Modelscited by 0
  24. 2026A Full-Pipeline Framework for Evaluating Membership Inference Attacks in Machine Learningcited by 0
  25. 2026Characterizing Privacy-Audit Alignment in Behavioral Audit of Machine Unlearningcited by 0
  26. 2026LLM Unlearning for Cyber Defense: A Survey on Methods, Challenges, and Emerging Threatscited by 0
  27. 2026Spectral Saliency for Machine Unlearningcited by 0
  28. 2026Confess What You Know: Forget-Set Misalignment with Model Knowledge in LLM Unlearningcited by 0
  29. 2026When Retain Constraints Conflict: Mitigating Forget-Retain Interference in Tabular Datacited by 0
  30. 2026Open Vocabulary Domain Unlearningcited by 0
  31. 2026PruneForget: Joint Unlearning and Pruning of Vision Modelscited by 0

Similar, not cited

Close in wording, no citation either way

  1. 2026PECKER: A Precisely Efficient Critical Knowledge Erasure Recipe For Machine Unlearning in Diffusion Models
  2. 2025Adaptive-lambda Subtracted Importance Sampled Scores in Machine Unlearning for DDPMs and VAEs
  3. 2026Why Some Models Resist Unlearning: A Linear Stability Perspective
  4. 2025Targeted Unlearning Using Perturbed Sign Gradient Methods With Applications On Medical Images
  5. 2026AutoAnchor: Stable Diffusion Unlearning Using Cross-Attention as a Manifold Surrogate
  6. 2025UNO: Unlearning via Orthogonalization in Generative models
  7. 2024MUNBa: Machine Unlearning via Nash Bargaining
  8. 2024Model Integrity when Unlearning with T2I Diffusion Models