Toward Robust Non-Transferable Learning: A Survey and Benchmark
Not on the map. Why?
Abstract (arXiv)
Over the past decades, researchers have primarily focused on improving the generalization abilities of models, with limited attention given to regulating such generalization. However, the ability of models to generalize to unintended data (e.g., harmful or unauthorized data) can be exploited by malicious adversaries in unforeseen ways, potentially resulting in violations of model ethics. Non-transferable learning (NTL), a task aimed at reshaping the generalization abilities of deep learning models, was proposed to address these challenges. While numerous methods have been proposed in this field, a comprehensive review of existing progress and a thorough analysis of current limitations remain lacking. In this paper, we bridge this gap by presenting the first comprehensive survey on NTL and introducing NTLBench, the first benchmark to evaluate NTL performance and robustness within a unified framework. Specifically, we first introduce the task settings, general framework, and criteria of NTL, followed by a summary of NTL approaches. Furthermore, we emphasize the often-overlooked issue of robustness against various attacks that can destroy the non-transferable mechanism established by NTL. Experiments conducted via NTLBench verify the limitations of existing NTL methods in robustness. Finally, we discuss the practical applications of NTL, along with its future directions and associated challenges.
Key facts. Cited by 7 papers in the map (data through 7 Oct 2026). Builds on 97 of its 129 references that are in the map. First posted on arXiv 19 Feb 2025.
Builds on
97 of 129 references.
References · 97
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
- 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 29,915
- 2022Training language models to follow instructions with human feedbackcited by 15,712
- 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,267
- 2021Swin Transformer: Hierarchical Vision Transformer using Shifted Windowscited by 12,082
- 2023Visual Instruction Tuningcited by 7,792
- 2016Grad-CAM: Visual Explanations from Deep Networks via Gradient-based Localizationcited by 6,690
- 2020Scaling Laws for Neural Language Modelscited by 6,411
- 2017Model-Agnostic Meta-Learning for Fast Adaptation of Deep Networkscited by 4,861
- 2016Wide Residual Networkscited by 3,057
- 2015Domain-Adversarial Training of Neural Networkscited by 3,023
38 more
- 2019Benchmarking Neural Network Robustness to Common Corruptions and Perturbationscited by 2,857
- 2019RandAugment: Practical automated data augmentation with a reduced search spacecited by 2,261
- 2014Conditional Generative Adversarial Netscited by 2,152
- 2020FixMatch: Simplifying Semi-Supervised Learning with Consistency and Confidencecited by 2,080
- 2017Arbitrary Style Transfer in Real-time with Adaptive Instance Normalizationcited by 1,998
- 2017Gradient Episodic Memory for Continual Learningcited by 1,871
- 2020The Many Faces of Robustness: A Critical Analysis of Out-of-Distribution Generalizationcited by 1,842
- 2018DARTS: Differentiable Architecture Searchcited by 1,782
- 2016Variational Inference: A Review for Statisticianscited by 1,466
- 2020Sharpness-Aware Minimization for Efficiently Improving Generalizationcited by 1,404
- 2018Moment Matching for Multi-Source Domain Adaptationcited by 1,327
- 2019Distributionally Robust Neural Networks for Group Shifts: On the Importance of Regularization for Worst-Case Generalizationcited by 1,232
- 2017Deep Hashing Network for Unsupervised Domain Adaptationcited by 1,181
- 2019A Comprehensive Survey on Transfer Learningcited by 1,154
- 2023Fine-tuning Aligned Language Models Compromises Safety, Even When Users Do Not Intend To!cited by 1,106
- 2019Machine Unlearningcited by 1,020
- 2017Deeper, Broader and Artier Domain Generalizationcited by 983
- 2018Regularized Evolution for Image Classifier Architecture Searchcited by 902
- 2020Do We Really Need to Access the Source Data? Source Hypothesis Transfer for Unsupervised Domain Adaptationcited by 844
- 2023BeaverTails: Towards Improved Safety Alignment of LLM via a Human-Preference Datasetcited by 828
- 2021Generalizing to Unseen Domains: A Survey on Domain Generalizationcited by 762
- 2018Recognition in Terra Incognitacited by 655
- 2017Exploring Generalization in Deep Learningcited by 595
- 2017Zero-Shot Learning -- A Comprehensive Evaluation of the Good, the Bad and the Uglycited by 536
- 2024TOFU: A Task of Fictitious Unlearning for LLMscited by 507
- 2017VisDA: The Visual Domain Adaptation Challengecited by 432
- 2021Towards Out-Of-Distribution Generalization: A Surveycited by 431
- 2019Contrastive Adaptation Network for Unsupervised Domain Adaptationcited by 407
- 2023A Comprehensive Survey on Test-Time Adaptation under Distribution Shiftscited by 353
- 2016Unsupervised Domain Adaptation with Residual Transfer Networkscited by 340
- 2021Self-Supervised Learning with Data Augmentations Provably Isolates Content from Stylecited by 308
- 2022A Survey of Machine Unlearningcited by 298
- 2023Shadow Alignment: The Ease of Subverting Safely-Aligned Language Modelscited by 284
- 2022Contrastive Test-Time Adaptationcited by 258
- 2015Domain Generalization for Object Recognition with Multi-task Autoencoderscited by 253
- 2021Trustworthy AI: From Principles to Practicescited by 206
- 2021Exploiting the Intrinsic Neighborhood Structure for Source-free Domain Adaptationcited by 176
- 2020Source Data-absent Unsupervised Domain Adaptation through Hypothesis Transfer and Labeling Transfercited by 173
50 most cited of 97 All 97 (JSON)
Built on by
Citing papers per year: 2025: 4; 2026: 3.
7 papers.
- 2025AdLift: Lifting Adversarial Perturbations to Safeguard 3D Gaussian Splatting Assets Against Instruction-Driven Editingcited by 9
- 2025Jailbreaking the Non-Transferable Barrier via Test-Time Data Disguisingcited by 8
- 2025Catch-Only-One: Non-Transferable Examples for Model-Specific Authorizationcited by 7
- 2025When Data-Free Knowledge Distillation Meets Non-Transferable Teacher: Escaping Out-of-Distribution Trap is All You Needcited by 5
- 2026Intellectual Property Protection for 3D Gaussian Splatting Assets: A Surveycited by 2
- 2026Immunizing 3D Gaussian Generative Models Against Unauthorized Fine-Tuning via Attribute-Space Trapscited by 1
- 2026Delving into the Temporal Challenges of Unified Video Protection Against Image-to-Video and Fine-Tuning-based Customizationcited by 1
- 2026Delving into the Temporal Challenges of Unified Video Protection Against Image-to-Video and Fine-Tuning-based Customization14 Jul 2026
- 2026Immunizing 3D Gaussian Generative Models Against Unauthorized Fine-Tuning via Attribute-Space Traps6 Apr 2026
- 2026Intellectual Property Protection for 3D Gaussian Splatting Assets: A Survey2 Feb 2026
- 2025AdLift: Lifting Adversarial Perturbations to Safeguard 3D Gaussian Splatting Assets Against Instruction-Driven Editing8 Dec 2025
- 2025Catch-Only-One: Non-Transferable Examples for Model-Specific Authorization13 Oct 2025
- 2025When Data-Free Knowledge Distillation Meets Non-Transferable Teacher: Escaping Out-of-Distribution Trap is All You Need5 Jul 2025
- 2025Jailbreaking the Non-Transferable Barrier via Test-Time Data Disguising21 Mar 2025