A Survey on Unlearnable Data
Not on the map. Why?
Abstract (arXiv)
Unlearnable data (ULD) has emerged as an innovative defense technique to prevent machine learning models from learning meaningful patterns from specific data, thus protecting data privacy and security. By introducing perturbations to the training data, ULD degrades model performance, making it difficult for unauthorized models to extract useful representations. Despite the growing significance of ULD, existing surveys predominantly focus on related fields, such as adversarial attacks and machine unlearning, with little attention given to ULD as an independent area of study. This survey fills that gap by offering a comprehensive review of ULD, examining unlearnable data generation methods, public benchmarks, evaluation metrics, theoretical foundations and practical applications. We compare and contrast different ULD approaches, analyzing their strengths, limitations, and trade-offs related to unlearnability, imperceptibility, efficiency and robustness. Moreover, we discuss key challenges, such as balancing perturbation imperceptibility with model degradation and the computational complexity of ULD generation. Finally, we highlight promising future research directions to advance the effectiveness and applicability of ULD, underscoring its potential to become a crucial tool in the evolving landscape of data protection in machine learning.
Key facts. Cited by 5 papers in the map (data through 7 Oct 2026). Builds on 78 of its 144 references that are in the map. First posted on arXiv 30 Mar 2025.
Builds on
78 of 144 references.
References · 78
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
- 2020Language Models are Few-Shot Learnerscited by 32,199
- 2020Denoising Diffusion Probabilistic Modelscited by 20,851
- 2023GPT-4 Technical Reportcited by 18,132
- 2014Microsoft COCO: Common Objects in Contextcited by 17,498
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 13,958
- 2023Segment Anythingcited by 8,158
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2020Scaling Laws for Neural Language Modelscited by 6,411
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2018A Style-Based Generator Architecture for Generative Adversarial Networkscited by 5,986
- 2021Zero-Shot Text-to-Image Generationcited by 4,276
38 more
- 2022DreamBooth: Fine Tuning Text-to-Image Diffusion Models for Subject-Driven Generationcited by 3,286
- 2023A Survey of Large Language Modelscited by 2,537
- 2017Non-local Neural Networkscited by 2,290
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,221
- 2020Extracting Training Data from Large Language Modelscited by 2,144
- 2019Machine Unlearningcited by 1,020
- 2018ML-Leaks: Model and Data Independent Membership Inference Attacks and Defenses on Machine Learning Modelscited by 475
- 2024Sora: A Review on Background, Technology, Limitations, and Opportunities of Large Vision Modelscited by 467
- 2018Threat of Adversarial Attacks on Deep Learning in Computer Vision: A Surveycited by 459
- 2022Diffusion Art or Digital Forgery? Investigating Data Replication in Diffusion Modelscited by 418
- 2020Backdoor Learning: A Surveycited by 412
- 2022A Survey of Machine Unlearningcited by 298
- 2020Large image datasets: A pyrrhic win for computer vision?cited by 237
- 2022Multimodal Contrastive Learning with LIMoE: the Language-Image Mixture of Expertscited by 202
- 2021Unlearnable Examples: Making Personal Data Unexploitablecited by 188
- 2021A Survey on Neural Speech Synthesiscited by 182
- 2021On the Necessity of Auditable Algorithmic Definitions for Machine Unlearningcited by 164
- 2021ASVspoof 2021: accelerating progress in spoofed and deepfake speech detectioncited by 157
- 2021Advances in adversarial attacks and defenses in computer vision: A surveycited by 127
- 2020Backdoor Attacks and Countermeasures on Deep Learning: A Comprehensive Reviewcited by 120
- 2022BOME! Bilevel Optimization Made Easy: A Simple First-Order Approachcited by 103
- 2022Untargeted Backdoor Watermark: Towards Harmless and Stealthy Dataset Copyright Protectioncited by 80
- 2024Machine Unlearning in Generative AI: A Surveycited by 49
- 2023MetaCloak: Preventing Unauthorized Subject-driven Text-to-image Diffusion-based Synthesis via Meta-learningcited by 42
- 2022Transferable Unlearnable Examplescited by 41
- 2023Image Shortcut Squeezing: Countering Perturbative Availability Poisons with Compressioncited by 39
- 2023Unlearnable Examples for Diffusion Models: Protect Data from Unauthorized Exploitationcited by 37
- 2022Unlearnable Clusters: Towards Label-agnostic Unlearnable Examplescited by 35
- 2018Evaluating and Understanding the Robustness of Adversarial Logit Pairingcited by 34
- 2024Threats, Attacks, and Defenses in Machine Unlearning: A Surveycited by 34
- 2024Machine Unlearning: A Comprehensive Surveycited by 33
- 2024A Review on Machine Unlearningcited by 30
- 2022One-Pixel Shortcut: on the Learning Preference of Deep Neural Networkscited by 29
- 2022HINT: Hypernetwork Instruction Tuning for Efficient Zero- & Few-Shot Generalisationcited by 28
- 2023Learning the Unlearnable: Adversarial Augmentations Suppress Unlearnable Example Attackscited by 28
- 2023CUDA: Convolution-based Unlearnable Datasetscited by 26
- 2024Digger: Detecting Copyright Content Mis-usage in Large Language Model Trainingcited by 24
- 2023Stable Unlearnable Example: Enhancing the Robustness of Unlearnable Examples via Stable Error-Minimizing Noisecited by 23
50 most cited of 78 All 78 (JSON)
Built on by
Citing papers per year: 2026: 5.
5 papers.
- 2026LLM Benchmark Datasets Should Be Contamination-Resistantcited by 2
- 2026UTOPIA: Unlearnable Tabular Data via Decoupled Shortcut Embeddingcited by 0
- 2026ChronoLock: Protecting Videos from Unauthorized Text-to-Video Personalizationcited by 0
- 2026Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecyclecited by 0
- 2026MUGEN: Generating Unlearnable Graph Examples for Multiple Learning Taskscited by 0
- 2026MUGEN: Generating Unlearnable Graph Examples for Multiple Learning Tasks1 Sep 2026
- 2026Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle5 Aug 2026
- 2026ChronoLock: Protecting Videos from Unauthorized Text-to-Video Personalization19 Jun 2026
- 2026LLM Benchmark Datasets Should Be Contamination-Resistant19 May 2026
- 2026UTOPIA: Unlearnable Tabular Data via Decoupled Shortcut Embedding7 Feb 2026