Trustworthy Machine Learning via Memorization and the Granular Long-Tail: A Survey on Interactions, Tradeoffs, and Beyond
Not on the map. Why?
Abstract (arXiv)
The role of memorization in machine learning (ML) has garnered significant attention, particularly as modern models are empirically observed to memorize fragments of training data. Previous theoretical analyses, such as Feldman's seminal work, attribute memorization to the prevalence of long-tail distributions in training data, proving it unavoidable for samples that lie in the tail of the distribution. However, the intersection of memorization and trustworthy ML research reveals critical gaps. While prior research in memorization in trustworthy ML has solely focused on class imbalance, recent work starts to differentiate class-level rarity from atypical samples, which are valid and rare intra-class instances. However, a critical research gap remains: current frameworks conflate atypical samples with noisy and erroneous data, neglecting their divergent impacts on fairness, robustness, and privacy. In this work, we conduct a thorough survey of existing research and their findings on trustworthy ML and the role of memorization. More and beyond, we identify and highlight uncharted gaps and propose new revenues in this research direction. Since existing theoretical and empirical analyses lack the nuances to disentangle memorization's duality as both a necessity and a liability, we formalize three-level long-tail granularity - class imbalance, atypicality, and noise - to reveal how current frameworks misapply these levels, perpetuating flawed solutions. By systematizing this granularity, we draw a roadmap for future research. Trustworthy ML must reconcile the nuanced trade-offs between memorizing atypicality for fairness assurance and suppressing noise for robustness and privacy guarantee. Redefining memorization via this granularity reshapes the theoretical foundation for trustworthy ML, and further affords an empirical prerequisite for models that align performance with societal trust.
Key facts. Cited by 6 papers in the map (data through 7 Oct 2026). Builds on 163 of its 222 references that are in the map. First posted on arXiv 10 Mar 2025.
Builds on
163 of 222 references.
References · 163
- 2023GPT-4 Technical Reportcited by 18,132
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 13,958
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2017A Unified Approach to Interpreting Model Predictionscited by 6,488
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2016"Why Should I Trust You?": Explaining the Predictions of Any Classifiercited by 5,040
- 2019Unsupervised Cross-lingual Representation Learning at Scalecited by 3,907
- 2016Towards Evaluating the Robustness of Neural Networkscited by 2,976
- 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 2,914
- 2016Deep Learning with Differential Privacycited by 2,682
- 2013Deep Inside Convolutional Networks: Visualising Image Classification Models and Saliency Mapscited by 2,348
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,221
38 more
- 2020Extracting Training Data from Large Language Modelscited by 2,144
- 2016Equality of Opportunity in Supervised Learningcited by 2,000
- 2019A Survey on Bias and Fairness in Machine Learningcited by 1,911
- 2017Understanding Black-box Predictions via Influence Functionscited by 1,714
- 2016Understanding deep learning requires rethinking generalizationcited by 1,657
- 2019Theoretically Principled Trade-off between Robustness and Accuracycited by 1,510
- 2017Towards A Rigorous Science of Interpretable Machine Learningcited by 1,400
- 2019Certified Adversarial Robustness via Randomized Smoothingcited by 1,324
- 2019Class-Balanced Loss Based on Effective Number of Samplescited by 1,239
- 2018Co-teaching: Robust Training of Deep Neural Networks with Extremely Noisy Labelscited by 1,053
- 2018Generalized Cross Entropy Loss for Training Deep Neural Networks with Noisy Labelscited by 994
- 2017A Closer Look at Memorization in Deep Networkscited by 936
- 2018Reconciling modern machine learning practice and the bias-variance trade-offcited by 919
- 2018XNLI: Evaluating Cross-lingual Sentence Representationscited by 913
- 2018Robustness May Be at Odds with Accuracycited by 873
- 2021Membership Inference Attacks From First Principlescited by 839
- 2019Decoupling Representation and Classifier for Long-Tailed Recognitioncited by 806
- 2020The State and Fate of Linguistic Diversity and Inclusion in the NLP Worldcited by 789
- 2023Extracting Training Data from Diffusion Modelscited by 723
- 2023Siren's Song in the AI Ocean: A Survey on Hallucination in Large Language Modelscited by 695
- 2018An Empirical Study of Example Forgetting during Deep Neural Network Learningcited by 669
- 2018A Reductions Approach to Fair Classificationcited by 585
- 2024DeepSeek-VL2: Mixture-of-Experts Vision-Language Models for Advanced Multimodal Understandingcited by 559
- 2019Benign Overfitting in Linear Regressioncited by 544
- 2017A systematic study of the class imbalance problem in convolutional neural networkscited by 510
- 2018Exploiting Unintended Feature Leakage in Collaborative Learningcited by 509
- 2020Overfitting in adversarially robust deep learningcited by 504
- 2018Poison Frogs! Targeted Clean-Label Poisoning Attacks on Neural Networkscited by 500
- 2020What Neural Networks Memorize and Why: Discovering the Long Tail via Influence Estimationcited by 492
- 2018ML-Leaks: Model and Data Independent Membership Inference Attacks and Defenses on Machine Learning Modelscited by 475
- 2022Diffusion Models for Adversarial Purificationcited by 469
- 2017Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Modelscited by 459
- 2019Does Learning Require Memorization? A Short Tale about a Long Tailcited by 452
- 2020Early-Learning Regularization Prevents Memorization of Noisy Labelscited by 414
- 2020Fairness in Machine Learning: A Surveycited by 369
- 2016Semi-supervised Knowledge Transfer for Deep Learning from Private Training Datacited by 347
- 2019Differential Privacy Has Disparate Impact on Model Accuracycited by 316
- 2021Membership Inference Attacks on Machine Learning: A Surveycited by 306
50 most cited of 163 All 163 (JSON)
Built on by
Citing papers per year: 2025: 3; 2026: 3.
6 papers.
- 2025Robustness in Large Language Models: A Survey of Mitigation Strategies and Evaluation Metricscited by 12
- 2026Do LLMs Really Memorize Personally Identifiable Information? Revisiting PII Leakage with a Cue-Controlled Memorization Frameworkcited by 3
- 2026Characterizing Memorization in Diffusion Language Models: Generalized Extraction and Sampling Effectscited by 3
- 2025Shared Path: Unraveling Memorization in Multilingual LLMs through Language Similaritiescited by 2
- 2026APEX: Probing Neural Networks via Activation Perturbationcited by 1
- 2025Memorization in Graph Neural Networkscited by 0
- 2026Characterizing Memorization in Diffusion Language Models: Generalized Extraction and Sampling Effects2 Mar 2026
- 2026APEX: Probing Neural Networks via Activation Perturbation3 Feb 2026
- 2026Do LLMs Really Memorize Personally Identifiable Information? Revisiting PII Leakage with a Cue-Controlled Memorization Framework7 Jan 2026
- 2025Memorization in Graph Neural Networks26 Aug 2025
- 2025Robustness in Large Language Models: A Survey of Mitigation Strategies and Evaluation Metrics24 May 2025
- 2025Shared Path: Unraveling Memorization in Multilingual LLMs through Language Similarities21 May 2025