mlsanityData to 7 Oct 2026

Attribute-to-Delete: Machine Unlearning via Datamodel Matching

arXiv 2410.23232 ↗First posted 30 Oct 2024cs.LGcited by 18

On the map: LLM safety and security → Machine unlearning

Abstract (arXiv)

Machine unlearning -- efficiently removing the effect of a small "forget set" of training data on a pre-trained machine learning model -- has recently attracted significant research interest. Despite this interest, however, recent work shows that existing machine unlearning techniques do not hold up to thorough evaluation in non-convex settings. In this work, we introduce a new machine unlearning technique that exhibits strong empirical performance even in such challenging settings. Our starting point is the perspective that the goal of unlearning is to produce a model whose outputs are statistically indistinguishable from those of a model re-trained on all but the forget set. This perspective naturally suggests a reduction from the unlearning problem to that of data attribution, where the goal is to predict the effect of changing the training set on a model's outputs. Thus motivated, we propose the following meta-algorithm, which we call Datamodel Matching (DMM): given a trained model, we (a) use data attribution to predict the output of the model if it were re-trained on all but the forget set points; then (b) fine-tune the pre-trained model to match these predicted outputs. In a simple convex setting, we show how this approach provably outperforms a variety of iterative unlearning algorithms. Empirically, we use a combination of existing evaluations and a new metric based on the KL-divergence to show that even in non-convex settings, DMM achieves strong unlearning performance relative to existing algorithms. An added benefit of DMM is that it is a meta-algorithm, in the sense that future advances in data attribution translate directly into better unlearning algorithms, pointing to a clear direction for future progress in unlearning.

Key facts. Cited by 18 papers in the map (data through 7 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 41 of its 55 references that are in the map. First posted on arXiv 30 Oct 2024.

Builds on

41 of 55 references.

Closest ancestors · 15

Same direction, newest first

  1. 2024Machine Unlearning Fails to Remove Data Poisoning Attacks25 Jun
  2. 2024Inexact Unlearning Needs More Careful Evaluations to Avoid a False Sense of Privacy2 Mar
  3. 2024Corrective Machine Unlearning21 Feb
  4. 2023Fast-NTK: Parameter-Efficient Unlearning for Large-Scale Models22 Dec
  5. 2023Large Language Model Unlearning14 Oct
  6. 2023In-Context Unlearning: Language Models as Few Shot Unlearners11 Oct
  7. 2023Who's Harry Potter? Approximate Unlearning in LLMs3 Oct
  8. 2023Model Sparsity Can Simplify Machine Unlearning11 Apr
  9. 2023Towards Unbounded Machine Unlearning20 Feb
  10. 2022Algorithms that Approximate Data Removal: New Results and Limitations25 Sep
  11. 2022Towards Adversarial Evaluations for Inexact Machine Unlearning17 Jan
  12. 2021On the Necessity of Auditable Algorithmic Definitions for Machine Unlearning22 Oct
3 more
  1. 2021Machine Unlearning of Features and Labels26 Aug
  2. 2021Certifiable Machine Unlearning for Linear Models29 Jun
  3. 2021Adaptive Machine Unlearning8 Jun

Other references · 26

  1. 2015Distilling the Knowledge in a Neural Networkcited by 10,076
  2. 2017Understanding Black-box Predictions via Influence Functionscited by 1,714
  3. 2021Membership Inference Attacks From First Principlescited by 839
  4. 2017Renyi Differential Privacycited by 643
  5. 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 599
  6. 2019Certified Data Removal from Machine Learning Modelscited by 512
  7. 2024The WMDP Benchmark: Measuring and Reducing Malicious Use With Unlearningcited by 488
  8. 2019Does Learning Require Memorization? A Short Tale about a Long Tailcited by 452
  9. 2019Making AI Forget You: Data Deletion in Machine Learningcited by 447
  10. 2021Large Language Models Can Be Strong Differentially Private Learnerscited by 405
  11. 2023Ablating Concepts in Text-to-Image Diffusion Modelscited by 312
  12. 2023Studying Large Language Model Generalization with Influence Functionscited by 311
14 more
  1. 2020Amnesiac Machine Learningcited by 305
  2. 2020Descent-to-Delete: Gradient-Based Methods for Machine Unlearningcited by 303
  3. 2023MQuAKE: Assessing Knowledge Editing in Language Models via Multi-Hop Questionscited by 292
  4. 2023TRAK: Attributing Model Behavior at Scalecited by 273
  5. 2020Approximate Data Deletion from Machine Learning Modelscited by 250
  6. 2022Datamodels: Predicting Predictions from Training Datacited by 186
  7. 2023Handbook of Convergence Theorems for (Stochastic) Gradient Methodscited by 158
  8. 2020BREEDS: Benchmarks for Subpopulation Shiftcited by 155
  9. 2020DeltaGrad: Rapid retraining of machine learning modelscited by 143
  10. 2022Training Data Influence Analysis and Estimation: A Surveycited by 134
  11. 2024DsDm: Model-Aware Dataset Selection with Datamodelscited by 103
  12. 2022Linear Adversarial Concept Erasurecited by 98
  13. 2024What is Your Data Worth to GPT? LLM-Scale Data Valuation with Influence Functionscited by 88
  14. 2024Training Data Attribution via Approximate Unrolled Differentiationcited by 33

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2025: 9; 2026: 9.

18 papers.

Sort:

By area: