mlsanityData to 7 Oct 2026

A Survey on Unlearnable Data

arXiv 2503.23536 ↗First posted 30 Mar 2025cs.LG cs.AIcited by 5

Not on the map. Why?

Abstract (arXiv)

Unlearnable data (ULD) has emerged as an innovative defense technique to prevent machine learning models from learning meaningful patterns from specific data, thus protecting data privacy and security. By introducing perturbations to the training data, ULD degrades model performance, making it difficult for unauthorized models to extract useful representations. Despite the growing significance of ULD, existing surveys predominantly focus on related fields, such as adversarial attacks and machine unlearning, with little attention given to ULD as an independent area of study. This survey fills that gap by offering a comprehensive review of ULD, examining unlearnable data generation methods, public benchmarks, evaluation metrics, theoretical foundations and practical applications. We compare and contrast different ULD approaches, analyzing their strengths, limitations, and trade-offs related to unlearnability, imperceptibility, efficiency and robustness. Moreover, we discuss key challenges, such as balancing perturbation imperceptibility with model degradation and the computational complexity of ULD generation. Finally, we highlight promising future research directions to advance the effectiveness and applicability of ULD, underscoring its potential to become a crucial tool in the evolving landscape of data protection in machine learning.

Key facts. Cited by 5 papers in the map (data through 7 Oct 2026). Builds on 78 of its 144 references that are in the map. First posted on arXiv 30 Mar 2025.

Builds on

78 of 144 references.

References · 78

  1. 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
  2. 2020Language Models are Few-Shot Learnerscited by 32,199
  3. 2020Denoising Diffusion Probabilistic Modelscited by 20,851
  4. 2023GPT-4 Technical Reportcited by 18,132
  5. 2014Microsoft COCO: Common Objects in Contextcited by 17,498
  6. 2023LLaMA: Open and Efficient Foundation Language Modelscited by 13,958
  7. 2023Segment Anythingcited by 8,158
  8. 2014Explaining and Harnessing Adversarial Examplescited by 7,287
  9. 2020Scaling Laws for Neural Language Modelscited by 6,411
  10. 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
  11. 2018A Style-Based Generator Architecture for Generative Adversarial Networkscited by 5,986
  12. 2021Zero-Shot Text-to-Image Generationcited by 4,276
38 more
  1. 2022DreamBooth: Fine Tuning Text-to-Image Diffusion Models for Subject-Driven Generationcited by 3,286
  2. 2023A Survey of Large Language Modelscited by 2,537
  3. 2017Non-local Neural Networkscited by 2,290
  4. 2016Membership Inference Attacks against Machine Learning Modelscited by 2,221
  5. 2020Extracting Training Data from Large Language Modelscited by 2,144
  6. 2019Machine Unlearningcited by 1,020
  7. 2018ML-Leaks: Model and Data Independent Membership Inference Attacks and Defenses on Machine Learning Modelscited by 475
  8. 2024Sora: A Review on Background, Technology, Limitations, and Opportunities of Large Vision Modelscited by 467
  9. 2018Threat of Adversarial Attacks on Deep Learning in Computer Vision: A Surveycited by 459
  10. 2022Diffusion Art or Digital Forgery? Investigating Data Replication in Diffusion Modelscited by 418
  11. 2020Backdoor Learning: A Surveycited by 412
  12. 2022A Survey of Machine Unlearningcited by 298
  13. 2020Large image datasets: A pyrrhic win for computer vision?cited by 237
  14. 2022Multimodal Contrastive Learning with LIMoE: the Language-Image Mixture of Expertscited by 202
  15. 2021Unlearnable Examples: Making Personal Data Unexploitablecited by 188
  16. 2021A Survey on Neural Speech Synthesiscited by 182
  17. 2021On the Necessity of Auditable Algorithmic Definitions for Machine Unlearningcited by 164
  18. 2021ASVspoof 2021: accelerating progress in spoofed and deepfake speech detectioncited by 157
  19. 2021Advances in adversarial attacks and defenses in computer vision: A surveycited by 127
  20. 2020Backdoor Attacks and Countermeasures on Deep Learning: A Comprehensive Reviewcited by 120
  21. 2022BOME! Bilevel Optimization Made Easy: A Simple First-Order Approachcited by 103
  22. 2022Untargeted Backdoor Watermark: Towards Harmless and Stealthy Dataset Copyright Protectioncited by 80
  23. 2024Machine Unlearning in Generative AI: A Surveycited by 49
  24. 2023MetaCloak: Preventing Unauthorized Subject-driven Text-to-image Diffusion-based Synthesis via Meta-learningcited by 42
  25. 2022Transferable Unlearnable Examplescited by 41
  26. 2023Image Shortcut Squeezing: Countering Perturbative Availability Poisons with Compressioncited by 39
  27. 2023Unlearnable Examples for Diffusion Models: Protect Data from Unauthorized Exploitationcited by 37
  28. 2022Unlearnable Clusters: Towards Label-agnostic Unlearnable Examplescited by 35
  29. 2018Evaluating and Understanding the Robustness of Adversarial Logit Pairingcited by 34
  30. 2024Threats, Attacks, and Defenses in Machine Unlearning: A Surveycited by 34
  31. 2024Machine Unlearning: A Comprehensive Surveycited by 33
  32. 2024A Review on Machine Unlearningcited by 30
  33. 2022One-Pixel Shortcut: on the Learning Preference of Deep Neural Networkscited by 29
  34. 2022HINT: Hypernetwork Instruction Tuning for Efficient Zero- & Few-Shot Generalisationcited by 28
  35. 2023Learning the Unlearnable: Adversarial Augmentations Suppress Unlearnable Example Attackscited by 28
  36. 2023CUDA: Convolution-based Unlearnable Datasetscited by 26
  37. 2024Digger: Detecting Copyright Content Mis-usage in Large Language Model Trainingcited by 24
  38. 2023Stable Unlearnable Example: Enhancing the Robustness of Unlearnable Examples via Stable Error-Minimizing Noisecited by 23

50 most cited of 78 All 78 (JSON)

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2026: 5.

5 papers.