mlsanityData to 7 Oct 2026

Trustworthy Machine Learning via Memorization and the Granular Long-Tail: A Survey on Interactions, Tradeoffs, and Beyond

arXiv 2503.07501 ↗First posted 10 Mar 2025cs.LGcited by 6

Not on the map. Why?

Abstract (arXiv)

The role of memorization in machine learning (ML) has garnered significant attention, particularly as modern models are empirically observed to memorize fragments of training data. Previous theoretical analyses, such as Feldman's seminal work, attribute memorization to the prevalence of long-tail distributions in training data, proving it unavoidable for samples that lie in the tail of the distribution. However, the intersection of memorization and trustworthy ML research reveals critical gaps. While prior research in memorization in trustworthy ML has solely focused on class imbalance, recent work starts to differentiate class-level rarity from atypical samples, which are valid and rare intra-class instances. However, a critical research gap remains: current frameworks conflate atypical samples with noisy and erroneous data, neglecting their divergent impacts on fairness, robustness, and privacy. In this work, we conduct a thorough survey of existing research and their findings on trustworthy ML and the role of memorization. More and beyond, we identify and highlight uncharted gaps and propose new revenues in this research direction. Since existing theoretical and empirical analyses lack the nuances to disentangle memorization's duality as both a necessity and a liability, we formalize three-level long-tail granularity - class imbalance, atypicality, and noise - to reveal how current frameworks misapply these levels, perpetuating flawed solutions. By systematizing this granularity, we draw a roadmap for future research. Trustworthy ML must reconcile the nuanced trade-offs between memorizing atypicality for fairness assurance and suppressing noise for robustness and privacy guarantee. Redefining memorization via this granularity reshapes the theoretical foundation for trustworthy ML, and further affords an empirical prerequisite for models that align performance with societal trust.

Key facts. Cited by 6 papers in the map (data through 7 Oct 2026). Builds on 163 of its 222 references that are in the map. First posted on arXiv 10 Mar 2025.

Builds on

163 of 222 references.

References · 163

  1. 2023GPT-4 Technical Reportcited by 18,132
  2. 2023LLaMA: Open and Efficient Foundation Language Modelscited by 13,958
  3. 2014Explaining and Harnessing Adversarial Examplescited by 7,287
  4. 2017A Unified Approach to Interpreting Model Predictionscited by 6,488
  5. 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
  6. 2016"Why Should I Trust You?": Explaining the Predictions of Any Classifiercited by 5,040
  7. 2019Unsupervised Cross-lingual Representation Learning at Scalecited by 3,907
  8. 2016Towards Evaluating the Robustness of Neural Networkscited by 2,976
  9. 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 2,914
  10. 2016Deep Learning with Differential Privacycited by 2,682
  11. 2013Deep Inside Convolutional Networks: Visualising Image Classification Models and Saliency Mapscited by 2,348
  12. 2016Membership Inference Attacks against Machine Learning Modelscited by 2,221
38 more
  1. 2020Extracting Training Data from Large Language Modelscited by 2,144
  2. 2016Equality of Opportunity in Supervised Learningcited by 2,000
  3. 2019A Survey on Bias and Fairness in Machine Learningcited by 1,911
  4. 2017Understanding Black-box Predictions via Influence Functionscited by 1,714
  5. 2016Understanding deep learning requires rethinking generalizationcited by 1,657
  6. 2019Theoretically Principled Trade-off between Robustness and Accuracycited by 1,510
  7. 2017Towards A Rigorous Science of Interpretable Machine Learningcited by 1,400
  8. 2019Certified Adversarial Robustness via Randomized Smoothingcited by 1,324
  9. 2019Class-Balanced Loss Based on Effective Number of Samplescited by 1,239
  10. 2018Co-teaching: Robust Training of Deep Neural Networks with Extremely Noisy Labelscited by 1,053
  11. 2018Generalized Cross Entropy Loss for Training Deep Neural Networks with Noisy Labelscited by 994
  12. 2017A Closer Look at Memorization in Deep Networkscited by 936
  13. 2018Reconciling modern machine learning practice and the bias-variance trade-offcited by 919
  14. 2018XNLI: Evaluating Cross-lingual Sentence Representationscited by 913
  15. 2018Robustness May Be at Odds with Accuracycited by 873
  16. 2021Membership Inference Attacks From First Principlescited by 839
  17. 2019Decoupling Representation and Classifier for Long-Tailed Recognitioncited by 806
  18. 2020The State and Fate of Linguistic Diversity and Inclusion in the NLP Worldcited by 789
  19. 2023Extracting Training Data from Diffusion Modelscited by 723
  20. 2023Siren's Song in the AI Ocean: A Survey on Hallucination in Large Language Modelscited by 695
  21. 2018An Empirical Study of Example Forgetting during Deep Neural Network Learningcited by 669
  22. 2018A Reductions Approach to Fair Classificationcited by 585
  23. 2024DeepSeek-VL2: Mixture-of-Experts Vision-Language Models for Advanced Multimodal Understandingcited by 559
  24. 2019Benign Overfitting in Linear Regressioncited by 544
  25. 2017A systematic study of the class imbalance problem in convolutional neural networkscited by 510
  26. 2018Exploiting Unintended Feature Leakage in Collaborative Learningcited by 509
  27. 2020Overfitting in adversarially robust deep learningcited by 504
  28. 2018Poison Frogs! Targeted Clean-Label Poisoning Attacks on Neural Networkscited by 500
  29. 2020What Neural Networks Memorize and Why: Discovering the Long Tail via Influence Estimationcited by 492
  30. 2018ML-Leaks: Model and Data Independent Membership Inference Attacks and Defenses on Machine Learning Modelscited by 475
  31. 2022Diffusion Models for Adversarial Purificationcited by 469
  32. 2017Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Modelscited by 459
  33. 2019Does Learning Require Memorization? A Short Tale about a Long Tailcited by 452
  34. 2020Early-Learning Regularization Prevents Memorization of Noisy Labelscited by 414
  35. 2020Fairness in Machine Learning: A Surveycited by 369
  36. 2016Semi-supervised Knowledge Transfer for Deep Learning from Private Training Datacited by 347
  37. 2019Differential Privacy Has Disparate Impact on Model Accuracycited by 316
  38. 2021Membership Inference Attacks on Machine Learning: A Surveycited by 306

50 most cited of 163 All 163 (JSON)

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2025: 3; 2026: 3.

6 papers.