mlsanityData to 7 Oct 2026

Forget Vectors at Play: Universal Input Perturbations Driving Machine Unlearning in Image Classification

arXiv 2412.16780 ↗First posted 21 Dec 2024cs.LG cs.CVcited by 6

On the map: LLM safety and security → Machine unlearning

Abstract (arXiv)

Machine unlearning (MU), which seeks to erase the influence of specific unwanted data from already-trained models, is becoming increasingly vital in model editing, particularly to comply with evolving data regulations like the ``right to be forgotten''. Conventional approaches are predominantly model-based, typically requiring retraining or fine-tuning the model's weights to meet unlearning requirements. In this work, we approach the MU problem from a novel input perturbation-based perspective, where the model weights remain intact throughout the unlearning process. We demonstrate the existence of a proactive input-based unlearning strategy, referred to forget vector, which can be generated as an input-agnostic data perturbation and remains as effective as model-based approximate unlearning approaches. We also explore forget vector arithmetic, whereby multiple class-specific forget vectors are combined through simple operations (e.g., linear combinations) to generate new forget vectors for unseen unlearning tasks, such as forgetting arbitrary subsets across classes. Extensive experiments validate the effectiveness and adaptability of the forget vector, showcasing its competitive performance relative to state-of-the-art model-based methods. Codes are available at https://github.com/Changchangsun/Forget-Vector.

Key facts. Cited by 6 papers in the map (data through 7 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 59 of its 71 references that are in the map. First posted on arXiv 21 Dec 2024.

Builds on

59 of 71 references.

Closest ancestors · 19

Same direction, newest first

  1. 2024MUSE: Machine Unlearning Six-Way Evaluation for Language Models8 Jul
  2. 2024Machine Unlearning: A Comprehensive Survey13 May
  3. 2024Dissecting Language Models: Machine Unlearning via Selective Pruning2 Mar
  4. 2024Loss-Free Machine Unlearning29 Feb
  5. 2024Rethinking Machine Unlearning for Large Language Models13 Feb
  6. 2024Selective Forgetting: Advancing Machine Unlearning Techniques and Evaluation in Language Models8 Feb
  7. 2024Machine Unlearning in Large Language Models3 Feb
  8. 2023Deep Unlearning: Fast and Efficient Gradient-free Approach to Class Forgetting1 Dec
  9. 2023Fast Model Debias with Machine Unlearning19 Oct
  10. 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generation19 Oct
  11. 2023Fast Machine Unlearning Without Retraining Through Selective Synaptic Dampening15 Aug
  12. 2023KGA: A General Machine Unlearning Framework Based on Knowledge Gap Alignment11 May
7 more
  1. 2023Model Sparsity Can Simplify Machine Unlearning11 Apr
  2. 2023Towards Unbounded Machine Unlearning20 Feb
  3. 2022Evaluating Machine Unlearning via Epistemic Uncertainty23 Aug
  4. 2021On the Necessity of Auditable Algorithmic Definitions for Machine Unlearning22 Oct
  5. 2021Unrolling SGD: Understanding Factors Influencing Machine Unlearning27 Sep
  6. 2021Machine Unlearning of Features and Labels26 Aug
  7. 2021Adaptive Machine Unlearning8 Jun

Other references · 40

  1. 2015Deep Residual Learning for Image Recognitioncited by 51,809
  2. 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 29,915
  3. 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,267
  4. 2014Explaining and Harnessing Adversarial Examplescited by 7,287
  5. 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
  6. 2016Towards Evaluating the Robustness of Neural Networkscited by 2,976
  7. 2019Benchmarking Neural Network Robustness to Common Corruptions and Perturbationscited by 2,857
  8. 2013Estimating or Propagating Gradients Through Stochastic Neurons for Conditional Computationcited by 2,031
  9. 2020The Many Faces of Robustness: A Critical Analysis of Out-of-Distribution Generalizationcited by 1,842
  10. 2022Visual Prompt Tuningcited by 1,674
  11. 2022Editing Models with Task Arithmeticcited by 1,076
  12. 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 599
28 more
  1. 2019Certified Data Removal from Machine Learning Modelscited by 512
  2. 2020Amnesiac Machine Learningcited by 305
  3. 2020Systematic Evaluation of Privacy Risks of Machine Learning Modelscited by 273
  4. 2022Exploring Visual Prompts for Adapting Large-Scale Modelscited by 271
  5. 2020Approximate Data Deletion from Machine Learning Modelscited by 250
  6. 2024Defensive Unlearning with Adversarial Training for Robust Concept Erasure in Diffusion Modelscited by 164
  7. 2020Mixed-Privacy Forgetting in Deep Networkscited by 158
  8. 2018Adversarial Reprogramming of Neural Networkscited by 115
  9. 2023Explicit Visual Prompting for Low-Level Structure Segmentationscited by 113
  10. 2018Visual Domain Adaptation with Manifold Embedded Distribution Alignmentcited by 91
  11. 2021Voice2Series: Reprogramming Acoustic Models for Time Series Classificationcited by 91
  12. 2022Understanding and Improving Visual Prompting: A Label-Mapping Perspectivecited by 86
  13. 2020Transfer Learning without Knowing: Reprogramming Black-box Machine Learning Models with Scarce Data and Limited Resourcescited by 83
  14. 2023BlackVIP: Black-Box Visual Prompting for Robust Transfer Learningcited by 70
  15. 2021Clustering-friendly Representation Learning via Instance Discrimination and Feature Decorrelationcited by 65
  16. 2022Model Reprogramming: Resource-Efficient Cross-Domain Machine Learningcited by 64
  17. 2021Learning Representation for Clustering via Prototype Scattering and Positive Samplingcited by 58
  18. 2024Machine Unlearning for Image-to-Image Generative Modelscited by 47
  19. 2022Hidden Poison: Machine Unlearning Enables Camouflaged Poisoning Attackscited by 37
  20. 2022Fairness Reprogrammingcited by 33
  21. 2024Towards Effective and General Graph Unlearning via Mutual Evolutioncited by 29
  22. 2024IDEA: A Flexible Framework of Certified Unlearning for Graph Neural Networkscited by 22
  23. 2022Machine Unlearning of Federated Clusterscited by 21
  24. 2022Reprogramming Pretrained Language Models for Antibody Sequence Infillingcited by 20
  25. 2023Machine Unlearning in Learned Databases: An Experimental Analysiscited by 17
  26. 2023TransHP: Image Classification with Hierarchical Promptingcited by 16
  27. 2024Exploring the Transferability of Visual Prompting for Multimodal Large Language Modelscited by 15
  28. 2024Visual Prompting for Generalized Few-shot Segmentation: A Multi-scale Approachcited by 15

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2025: 4; 2026: 2.

6 papers.