Towards Privacy-Guaranteed Label Unlearning in Vertical Federated Learning: Few-Shot Forgetting without Disclosure
On the map: LLM safety and security → Federated unlearning and poisoning
Abstract (arXiv)
This paper addresses the critical challenge of unlearning in Vertical Federated Learning (VFL), a setting that has received far less attention than its horizontal counterpart. Specifically, we propose the first method tailored to textitlabel unlearning in VFL, where labels play a dual role as both essential inputs and sensitive information. To this end, we employ a representation-level manifold mixup mechanism to generate synthetic embeddings for both unlearned and retained samples. This is to provide richer signals for the subsequent gradient-based label forgetting and recovery steps. These augmented embeddings are then subjected to gradient-based label forgetting, effectively removing the associated label information from the model. To recover performance on the retained data, we introduce a recovery-phase optimization step that refines the remaining embeddings. This design achieves effective label unlearning while maintaining computational efficiency. We validate our method through extensive experiments on diverse datasets, including MNIST, CIFAR-10, CIFAR-100, ModelNet, Brain Tumor MRI, COVID-19 Radiography, and Yahoo Answers demonstrate strong efficacy and scalability. Overall, this work establishes a new direction for unlearning in VFL, showing that re-imagining mixup as an efficient mechanism can unlock practical and utility-preserving unlearning. The code is publicly available at https://github.com/bryanhx/Towards-Privacy-Guaranteed-Label-Unlearning-in-Vertical-Federated-Learning
Key facts. Cited by 5 papers in the map (data through 7 Oct 2026). Placed in Federated unlearning and poisoning, one of 12 directions in LLM safety and security. Builds on 41 of its 68 references that are in the map. First posted on arXiv 14 Oct 2024.
Builds on
41 of 68 references.
Closest ancestors · 12
Same direction, newest first
- 2024Unlearning during Learning: An Efficient Federated Machine Unlearning Method24 May
- 2024Ferrari: Federated Feature Unlearning via Optimizing Feature Sensitivity23 May
- 2024Federated Unlearning: A Survey on Methods, Design Guidelines, and Evaluation Metrics10 Jan
- 2023QuickDrop: Efficient Federated Unlearning by Integrated Dataset Distillation27 Nov
- 2023SecureCut: Federated Gradient Boosting Decision Trees with Efficient Machine Unlearning22 Nov
- 2023A Survey on Federated Unlearning: Challenges, Methods, and Future Directions31 Oct
- 2023Subspace based Federated Unlearning24 Feb
- 2022Federated Unlearning: How to Efficiently Erase a Client in FL?12 Jul
- 2022VeriFi: Towards Verifiable Federated Unlearning25 May
- 2022The Right to be Forgotten in Federated Learning: An Efficient Realization with Rapid Retraining14 Mar
- 2022Federated Unlearning with Knowledge Distillation24 Jan
- 2021Federated Unlearning via Class-Discriminative Pruning22 Oct
Other references · 29
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,221
- 2019Machine Unlearningcited by 1,020
- 2019A Closer Look at Few-shot Classificationcited by 679
- 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 599
- 2019Certified Data Removal from Machine Learning Modelscited by 512
- 2020Amnesiac Machine Learningcited by 305
- 2023Towards Unbounded Machine Unlearningcited by 261
- 2021Fast Yet Effective Machine Unlearningcited by 209
- 2023Model Sparsity Can Simplify Machine Unlearningcited by 206
- 2022Can Bad Teaching Induce Forgetting? Unlearning in Deep Networks using an Incompetent Teachercited by 189
- 2021Unlearnable Examples: Making Personal Data Unexploitablecited by 188
- 2020MixText: Linguistically-Informed Interpolation of Hidden Space for Semi-Supervised Text Classificationcited by 186
17 more
- 2020When Machine Unlearning Jeopardizes Privacycited by 181
- 2023Fast Machine Unlearning Without Retraining Through Selective Synaptic Dampeningcited by 177
- 2020Forgetting Outside the Box: Scrubbing Deep Networks of Information Accessible from Input-Output Observationscited by 171
- 2020Mixed-Privacy Forgetting in Deep Networkscited by 158
- 2019Charting the Right Manifold: Manifold Mixup for Few-shot Learningcited by 135
- 2023Boundary Unlearningcited by 132
- 2022Zero-Shot Machine Unlearningcited by 125
- 2022Vertical Federated Learning: Concepts, Advances and Challengescited by 104
- 2022Towards Adversarial Evaluations for Inexact Machine Unlearningcited by 82
- 2022FedRecover: Recovering from Poisoning Attacks in Federated Learning using Historical Informationcited by 53
- 2020Formalizing Data Deletion in the Context of the Right to be Forgottencited by 46
- 2022Federated Unlearning for On-Device Recommendationcited by 39
- 2023Learn to Unlearn for Deep Neural Networks: Minimizing Unlearning Interference with Gradient Projectioncited by 37
- 2023Towards Machine Unlearning Benchmarks: Forgetting the Personal Identities in Facial Recognition Systemscited by 27
- 2022Few-Shot Unlearning by Model Inversioncited by 17
- 2023Get Rid Of Your Trail: Remotely Erasing Backdoors in Federated Learningcited by 12
- 2023CovarNav: Machine Unlearning via Model Inversion and Covariance Navigationcited by 2
Built on by
Citing papers per year: 2025: 2; 2026: 3.
5 papers.
- 2025Ten Challenging Problems in Federated Foundation Modelscited by 20
- 2025Certifying the Right to Be Forgotten: Primal-Dual Optimization for Sample and Label Unlearning in Vertical Federated Learningcited by 1
- 2026SoK: Unlearnability and Unlearning for Model Dememorizationcited by 0
- 2026Do Vision Models Truly Forget? New Findings from Representation-Level Certification of Visual Unlearning in Vertical Federated Learningcited by 0
- 2026Concept Score Relearning: A Unified Cross-Architecture Attack on Concept Erasurecited by 0
- 2026Concept Score Relearning: A Unified Cross-Architecture Attack on Concept Erasure27 Sep 2026
- 2026Do Vision Models Truly Forget? New Findings from Representation-Level Certification of Visual Unlearning in Vertical Federated Learning19 May 2026
- 2026SoK: Unlearnability and Unlearning for Model Dememorization12 May 2026
- 2025Certifying the Right to Be Forgotten: Primal-Dual Optimization for Sample and Label Unlearning in Vertical Federated Learning29 Dec 2025
- 2025Ten Challenging Problems in Federated Foundation Models14 Feb 2025