Go Beyond Your Means: Unlearning with Per-Sample Gradient Orthogonalization
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
Machine unlearning aims to remove the influence of problematic training data after a model has been trained. The primary challenge in machine unlearning is ensuring that the process effectively removes specified data without compromising the model's overall performance on the remaining dataset. Many existing machine unlearning methods address this challenge by carefully balancing gradient ascent on the `unlearn' data with the gradient descent on a `retain' set that represents the training data. However, in many cases the training dataset is not fully available when we wish to unlearn some concepts, because models are released without their training datasets, and one may only have access to a textitsmall part of a training set. Here, we propose OrthoGrad, a novel approach that mitigates interference between the unlearn set and a small retain set rather than competing ascent and descent processes. Our method projects the gradient of the unlearn set onto the subspace orthogonal to all gradients in the retain batch, effectively avoiding any gradient interference. We demonstrate the effectiveness of OrthoGrad on multiple machine unlearning benchmarks, including automatic speech recognition, outperforming competing methods.
Key facts. Cited by 7 papers in the map (data through 14 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 64 of its 82 references that are in the map. First posted on arXiv 4 Mar 2025.
Builds on
64 of 82 references.
Closest ancestors · 17
Same direction, newest first
- 2024Learning to Unlearn for Robust Machine Unlearning15 Jul
- 2024Is Retain Set All You Need in Machine Unlearning? Restoring Performance of Unlearned Models with Out-Of-Distribution Images19 Apr
- 2024Threats, Attacks, and Defenses in Machine Unlearning: A Survey20 Mar
- 2024Challenging Forgets: Unveiling the Worst-Case Forget Sets in Machine Unlearning12 Mar
- 2024Inexact Unlearning Needs More Careful Evaluations to Avoid a False Sense of Privacy2 Mar
- 2024Scissorhands: Scrub Data Influence via Connection Sensitivity in Networks11 Jan
- 2023DUCK: Distance-based Unlearning via Centroid Kinematics4 Dec
- 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generation19 Oct
- 2023Fast Machine Unlearning Without Retraining Through Selective Synaptic Dampening15 Aug
- 2023Boundary Unlearning21 Mar
- 2023Towards Unbounded Machine Unlearning20 Feb
- 2022A Survey of Machine Unlearning6 Sep
5 more
- 2022Evaluating Machine Unlearning via Epistemic Uncertainty23 Aug
- 2022Deep Unlearning via Randomized Conditionally Independent Hessians15 Apr
- 2022Towards Adversarial Evaluations for Inexact Machine Unlearning17 Jan
- 2021Unrolling SGD: Understanding Factors Influencing Machine Unlearning27 Sep
- 2021Remember What You Want to Forget: Algorithms for Machine Unlearning4 Mar
Other references · 47
- 2015Deep Residual Learning for Image Recognitioncited by 52,096
- 2014Adam: A Method for Stochastic Optimizationcited by 37,240
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
- 2020Language Models are Few-Shot Learnerscited by 32,419
- 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 30,186
- 2019PyTorch: An Imperative Style, High-Performance Deep Learning Librarycited by 20,305
- 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,380
- 2022LAION-5B: An open large-scale dataset for training next generation image-text modelscited by 4,152
- 2022Robust Speech Recognition via Large-Scale Weak Supervisioncited by 4,057
- 2020Extracting Training Data from Large Language Modelscited by 2,189
- 2017Gradient Episodic Memory for Continual Learningcited by 1,898
- 2017Understanding Black-box Predictions via Influence Functionscited by 1,741
35 more
- 2016Progressive Neural Networkscited by 1,361
- 2017Multi-Task Learning Using Uncertainty to Weigh Losses for Scene Geometry and Semanticscited by 1,358
- 2020Gradient Surgery for Multi-Task Learningcited by 1,256
- 2018Efficient Lifelong Learning with A-GEMcited by 1,058
- 2017A Survey on Multi-Task Learningcited by 840
- 2017GradNorm: Gradient Normalization for Adaptive Loss Balancing in Deep Multitask Networkscited by 834
- 2018Multi-Task Learning as Multi-Objective Optimizationcited by 821
- 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 618
- 2019Certified Data Removal from Machine Learning Modelscited by 535
- 2018End-to-End Multi-Task Learning with Attentioncited by 534
- 2019Making AI Forget You: Data Deletion in Machine Learningcited by 465
- 2021Conflict-Averse Gradient Descent for Multi-task Learningcited by 459
- 2020Multi-Task Learning with Deep Neural Networks: A Surveycited by 375
- 2019Orthogonal Gradient Descent for Continual Learningcited by 369
- 2021Gradient Projection Memory for Continual Learningcited by 348
- 2020Amnesiac Machine Learningcited by 319
- 2020Descent-to-Delete: Gradient-Based Methods for Machine Unlearningcited by 311
- 2020Approximate Data Deletion from Machine Learning Modelscited by 255
- 2022Multi-Task Learning as a Bargaining Gamecited by 215
- 2020Just Pick a Sign: Optimizing Deep Multitask Models with Gradient Sign Dropoutcited by 201
- 2020Forgetting Outside the Box: Scrubbing Deep Networks of Information Accessible from Input-Output Observationscited by 180
- 2018Continual Learning of Context-dependent Processing in Neural Networkscited by 179
- 2020Gradient Vaccine: Investigating and Improving Multi-task Optimization in Massively Multilingual Modelscited by 169
- 2020Mixed-Privacy Forgetting in Deep Networkscited by 163
- 2019AdaShare: Learning What To Share For Efficient Deep Multi-Task Learningcited by 160
- 2022GitHub Copilot AI pair programmer: Asset or Liability?cited by 152
- 2021Graph Unlearningcited by 138
- 2022The Right to be Forgotten in Federated Learning: An Efficient Realization with Rapid Retrainingcited by 118
- 2021Federated Unlearning via Class-Discriminative Pruningcited by 115
- 2021RotoGrad: Gradient Homogenization in Multitask Learningcited by 83
- 2022PUMA: Performance Unchanged Model Augmentation for Training Data Removalcited by 58
- 2024Careless Whisper: Speech-to-Text Hallucination Harmscited by 53
- 2023GNNDelete: A General Strategy for Unlearning in Graph Neural Networkscited by 43
- 2024Bayesian Uncertainty for Gradient Aggregation in Multi-Task Learningcited by 11
- 2024GitHub Copilot: the perfect Code compLeeter?cited by 4
Built on by
Citing papers per year: 2025: 2; 2026: 5.
7 papers.
- 2025Geometric-disentangelment Unlearningcited by 4
- 2025COPA: Comparing the incomparable in multi-objective model evaluationcited by 3
- 2026Unlearning the Unpromptable: Prompt-free Instance Unlearning in Diffusion Modelscited by 1
- 2026Retain-Neutral Surrogates for Min-Max Unlearningcited by 0
- 2026Interference-Aware Multi-Task Unlearningcited by 0
- 2026Stress Testing Unlearning Algorithmscited by 0
- 2026Evaluating Machine Unlearning in ASRcited by 0
- 2026Evaluating Machine Unlearning in ASR28 Sep 2026
- 2026Stress Testing Unlearning Algorithms23 Aug 2026
- 2026Interference-Aware Multi-Task Unlearning18 May 2026
- 2026Retain-Neutral Surrogates for Min-Max Unlearning7 May 2026
- 2026Unlearning the Unpromptable: Prompt-free Instance Unlearning in Diffusion Models11 Mar 2026
- 2025Geometric-disentangelment Unlearning21 Nov 2025
- 2025COPA: Comparing the incomparable in multi-objective model evaluation18 Mar 2025
Similar, not cited
Close in wording, no citation either way
- 2024nabla τ: Gradient-based and Task-Agnostic machine Unlearning
- 2025Machine Unlearning under Overparameterization
- 2024A More Practical Approach to Machine Unlearning
- 2023Learn to Unlearn for Deep Neural Networks: Minimizing Unlearning Interference with Gradient Projection
- 2025UNO: Unlearning via Orthogonalization in Generative models
- 2025Learning to Unlearn while Retaining: Combating Gradient Conflicts in Machine Unlearning
- 2025Provable Unlearning with Gradient Ascent on Two-Layer ReLU Neural Networks
- 2024Machine Unlearning with Minimal Gradient Dependence for High Unlearning Ratios