Forget Vectors at Play: Universal Input Perturbations Driving Machine Unlearning in Image Classification
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
Machine unlearning (MU), which seeks to erase the influence of specific unwanted data from already-trained models, is becoming increasingly vital in model editing, particularly to comply with evolving data regulations like the ``right to be forgotten''. Conventional approaches are predominantly model-based, typically requiring retraining or fine-tuning the model's weights to meet unlearning requirements. In this work, we approach the MU problem from a novel input perturbation-based perspective, where the model weights remain intact throughout the unlearning process. We demonstrate the existence of a proactive input-based unlearning strategy, referred to forget vector, which can be generated as an input-agnostic data perturbation and remains as effective as model-based approximate unlearning approaches. We also explore forget vector arithmetic, whereby multiple class-specific forget vectors are combined through simple operations (e.g., linear combinations) to generate new forget vectors for unseen unlearning tasks, such as forgetting arbitrary subsets across classes. Extensive experiments validate the effectiveness and adaptability of the forget vector, showcasing its competitive performance relative to state-of-the-art model-based methods. Codes are available at https://github.com/Changchangsun/Forget-Vector.
Key facts. Cited by 6 papers in the map (data through 7 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 59 of its 71 references that are in the map. First posted on arXiv 21 Dec 2024.
Builds on
59 of 71 references.
Closest ancestors · 19
Same direction, newest first
- 2024MUSE: Machine Unlearning Six-Way Evaluation for Language Models8 Jul
- 2024Machine Unlearning: A Comprehensive Survey13 May
- 2024Dissecting Language Models: Machine Unlearning via Selective Pruning2 Mar
- 2024Loss-Free Machine Unlearning29 Feb
- 2024Rethinking Machine Unlearning for Large Language Models13 Feb
- 2024Selective Forgetting: Advancing Machine Unlearning Techniques and Evaluation in Language Models8 Feb
- 2024Machine Unlearning in Large Language Models3 Feb
- 2023Deep Unlearning: Fast and Efficient Gradient-free Approach to Class Forgetting1 Dec
- 2023Fast Model Debias with Machine Unlearning19 Oct
- 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generation19 Oct
- 2023Fast Machine Unlearning Without Retraining Through Selective Synaptic Dampening15 Aug
- 2023KGA: A General Machine Unlearning Framework Based on Knowledge Gap Alignment11 May
7 more
- 2023Model Sparsity Can Simplify Machine Unlearning11 Apr
- 2023Towards Unbounded Machine Unlearning20 Feb
- 2022Evaluating Machine Unlearning via Epistemic Uncertainty23 Aug
- 2021On the Necessity of Auditable Algorithmic Definitions for Machine Unlearning22 Oct
- 2021Unrolling SGD: Understanding Factors Influencing Machine Unlearning27 Sep
- 2021Machine Unlearning of Features and Labels26 Aug
- 2021Adaptive Machine Unlearning8 Jun
Other references · 40
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 29,915
- 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,267
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2016Towards Evaluating the Robustness of Neural Networkscited by 2,976
- 2019Benchmarking Neural Network Robustness to Common Corruptions and Perturbationscited by 2,857
- 2013Estimating or Propagating Gradients Through Stochastic Neurons for Conditional Computationcited by 2,031
- 2020The Many Faces of Robustness: A Critical Analysis of Out-of-Distribution Generalizationcited by 1,842
- 2022Visual Prompt Tuningcited by 1,674
- 2022Editing Models with Task Arithmeticcited by 1,076
- 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 599
28 more
- 2019Certified Data Removal from Machine Learning Modelscited by 512
- 2020Amnesiac Machine Learningcited by 305
- 2020Systematic Evaluation of Privacy Risks of Machine Learning Modelscited by 273
- 2022Exploring Visual Prompts for Adapting Large-Scale Modelscited by 271
- 2020Approximate Data Deletion from Machine Learning Modelscited by 250
- 2024Defensive Unlearning with Adversarial Training for Robust Concept Erasure in Diffusion Modelscited by 164
- 2020Mixed-Privacy Forgetting in Deep Networkscited by 158
- 2018Adversarial Reprogramming of Neural Networkscited by 115
- 2023Explicit Visual Prompting for Low-Level Structure Segmentationscited by 113
- 2018Visual Domain Adaptation with Manifold Embedded Distribution Alignmentcited by 91
- 2021Voice2Series: Reprogramming Acoustic Models for Time Series Classificationcited by 91
- 2022Understanding and Improving Visual Prompting: A Label-Mapping Perspectivecited by 86
- 2020Transfer Learning without Knowing: Reprogramming Black-box Machine Learning Models with Scarce Data and Limited Resourcescited by 83
- 2023BlackVIP: Black-Box Visual Prompting for Robust Transfer Learningcited by 70
- 2021Clustering-friendly Representation Learning via Instance Discrimination and Feature Decorrelationcited by 65
- 2022Model Reprogramming: Resource-Efficient Cross-Domain Machine Learningcited by 64
- 2021Learning Representation for Clustering via Prototype Scattering and Positive Samplingcited by 58
- 2024Machine Unlearning for Image-to-Image Generative Modelscited by 47
- 2022Hidden Poison: Machine Unlearning Enables Camouflaged Poisoning Attackscited by 37
- 2022Fairness Reprogrammingcited by 33
- 2024Towards Effective and General Graph Unlearning via Mutual Evolutioncited by 29
- 2024IDEA: A Flexible Framework of Certified Unlearning for Graph Neural Networkscited by 22
- 2022Machine Unlearning of Federated Clusterscited by 21
- 2022Reprogramming Pretrained Language Models for Antibody Sequence Infillingcited by 20
- 2023Machine Unlearning in Learned Databases: An Experimental Analysiscited by 17
- 2023TransHP: Image Classification with Hierarchical Promptingcited by 16
- 2024Exploring the Transferability of Visual Prompting for Multimodal Large Language Modelscited by 15
- 2024Visual Prompting for Generalized Few-shot Segmentation: A Multi-scale Approachcited by 15
Built on by
Citing papers per year: 2025: 4; 2026: 2.
6 papers.
- 2025The Right to be Forgotten in Pruning: Unveil Machine Unlearning on Sparse Modelscited by 5
- 2025Exploring Nonlinear Pathway in Parameter Space for Machine Unlearningcited by 4
- 2025Tackling Fake Forgetting through Uncertainty Quantificationcited by 3
- 2025LLM Unlearning on Noisy Forget Sets: A Study of Incomplete, Rewritten, and Watermarked Datacited by 1
- 2026AIM: Anchor Identity Features, Then Match for Multimodal Large Language Model Unlearningcited by 1
- 2026On-the-go Forgetting without Explicit Unlearning via ERASEcited by 0
- 2026On-the-go Forgetting without Explicit Unlearning via ERASE5 Sep 2026
- 2026AIM: Anchor Identity Features, Then Match for Multimodal Large Language Model Unlearning28 Aug 2026
- 2025LLM Unlearning on Noisy Forget Sets: A Study of Incomplete, Rewritten, and Watermarked Data10 Oct 2025
- 2025The Right to be Forgotten in Pruning: Unveil Machine Unlearning on Sparse Models24 Jul 2025
- 2025Exploring Nonlinear Pathway in Parameter Space for Machine Unlearning16 May 2025
- 2025Tackling Fake Forgetting through Uncertainty Quantification31 Jan 2025