Decoupled Distillation to Erase: A General Unlearning Method for Any Class-centric Tasks
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
In this work, we present DEcoupLEd Distillation To Erase (DELETE), a general and strong unlearning method for any class-centric tasks. To derive this, we first propose a theoretical framework to analyze the general form of unlearning loss and decompose it into forgetting and retention terms. Through the theoretical framework, we point out that a class of previous methods could be mainly formulated as a loss that implicitly optimizes the forgetting term while lacking supervision for the retention term, disturbing the distribution of pre-trained model and struggling to adequately preserve knowledge of the remaining classes. To address it, we refine the retention term using "dark knowledge" and propose a mask distillation unlearning method. By applying a mask to separate forgetting logits from retention logits, our approach optimizes both the forgetting and refined retention components simultaneously, retaining knowledge of the remaining classes while ensuring thorough forgetting of the target class. Without access to the remaining data or intervention (i.e., used in some works), we achieve state-of-the-art performance across various benchmarks. What's more, DELETE is a general solution that can be applied to various downstream tasks, including face recognition, backdoor defense, and semantic segmentation with great performance.
Key facts. Cited by 28 papers in the map (data through 7 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 55 of its 69 references that are in the map. First posted on arXiv 31 Mar 2025.
Builds on
55 of 69 references.
Closest ancestors · 13
Same direction, newest first
- 2024Label-Agnostic Forgetting: A Supervision-Free Unlearning in Deep Models31 Mar
- 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generation19 Oct
- 2023Fast Machine Unlearning Without Retraining Through Selective Synaptic Dampening15 Aug
- 2023Fair Machine Unlearning: Data Removal while Mitigating Disparities27 Jul
- 2023Boundary Unlearning21 Mar
- 2023Towards Unbounded Machine Unlearning20 Feb
- 2023Learning to Unlearn: Instance-wise Unlearning for Pre-trained Classifiers27 Jan
- 2022A Survey of Machine Unlearning6 Sep
- 2022Can Bad Teaching Induce Forgetting? Unlearning in Deep Networks using an Incompetent Teacher17 May
- 2021Fast Yet Effective Machine Unlearning17 Nov
- 2021On the Necessity of Auditable Algorithmic Definitions for Machine Unlearning22 Oct
- 2021Unrolling SGD: Understanding Factors Influencing Machine Unlearning27 Sep
1 more
Other references · 42
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 29,915
- 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,267
- 2021Swin Transformer: Hierarchical Vision Transformer using Shifted Windowscited by 12,082
- 2015Distilling the Knowledge in a Neural Networkcited by 10,076
- 2016Grad-CAM: Visual Explanations from Deep Networks via Gradient-based Localizationcited by 6,690
- 2019DistilBERT, a distilled version of BERT: smaller, faster, cheaper and lightercited by 4,243
- 2022LAION-5B: An open large-scale dataset for training next generation image-text modelscited by 4,131
- 2018Encoder-Decoder with Atrous Separable Convolution for Semantic Image Segmentationcited by 3,210
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,221
- 2014FitNets: Hints for Thin Deep Netscited by 1,619
- 2020Knowledge Distillation: A Surveycited by 1,578
30 more
- 2017BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chaincited by 1,052
- 2019Machine Unlearningcited by 1,020
- 2017VGGFace2: A dataset for recognising faces across pose and agecited by 911
- 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 599
- 2018Fine-Pruning: Defending Against Backdooring Attacks on Deep Neural Networkscited by 550
- 2023Erasing Concepts from Diffusion Modelscited by 530
- 2022Safe Latent Diffusion: Mitigating Inappropriate Degeneration in Diffusion Modelscited by 501
- 2019Making AI Forget You: Data Deletion in Machine Learningcited by 447
- 2022Decoupled Knowledge Distillationcited by 380
- 2021Neural Attention Distillation: Erasing Backdoor Triggers from Deep Neural Networkscited by 313
- 2025VBench-2.0: Advancing Video Generation Benchmark Suite for Intrinsic Faithfulnesscited by 289
- 2020Systematic Evaluation of Privacy Risks of Machine Learning Modelscited by 273
- 2020Approximate Data Deletion from Machine Learning Modelscited by 250
- 2023Glaze: Protecting Artists from Style Mimicry by Text-to-Image Modelscited by 200
- 2019Distilling Object Detectors with Fine-grained Feature Imitationcited by 188
- 2020Machine Unlearning for Random Forestscited by 125
- 2020Machine Unlearning: Linear Filtration for Logit-based Classifierscited by 89
- 2019Defending Neural Backdoors via Generative Distribution Modelingcited by 82
- 2024Selective Hourglass Mapping for Universal Image Restoration Based on Diffusion Modelcited by 73
- 2022Backdoor Defense with Machine Unlearningcited by 61
- 2018MLCapsule: Guarded Offline Deployment of Machine Learning as a Servicecited by 29
- 2024Continual Forgetting for Pre-trained Vision Modelscited by 29
- 2024An Economic Framework for 6-DoF Grasp Detectioncited by 23
- 2023Estimator Meets Equilibrium Perspective: A Rectified Straight Through Estimator for Binary Neural Networks Trainingcited by 19
- 2024Dexterous Grasp Transformercited by 18
- 2023DiffuVolume: Diffusion Model for Volume based Stereo Matchingcited by 16
- 2024Bridge Past and Future: Overcoming Information Asymmetry in Incremental Object Detectioncited by 16
- 2024Rethinking Few-shot Class-incremental Learning: Learning from Yourselfcited by 13
- 2024GRIDS: Grouped Multiple-Degradation Restoration with Image Degradation Similaritycited by 12
- 2024SpatialDreamer: Self-supervised Stereo Video Synthesis from Monocular Inputcited by 11
Built on by
Citing papers per year: 2025: 9; 2026: 19.
28 papers.
Sort:
By area:
- 2025Exploring the Limits of Vision-Language-Action Manipulations in Cross-task Generalizationcited by 31
- 2026Machine Unlearning under Retain-Forget Entanglementcited by 10
- 2025The Right to be Forgotten in Pruning: Unveil Machine Unlearning on Sparse Modelscited by 5
- 2025POUR: A Provably Optimal Method for Unlearning Representations via Neural Collapsecited by 5
- 2025Unlearning's Blind Spots: Over-Unlearning and Prototypical Relearning Attackcited by 3
- 2025Distilling LLM Prior to Flow Model for Generalizable Agent's Imagination in Object Goal Navigationcited by 3
- 2026Models Designed to Forget: Machine Unlearning via Key Deletioncited by 3
- 2026SALMUBench: A Benchmark for Sensitive Association-Level Multimodal Unlearningcited by 3
- 2026Class Unlearning via Depth-Aware Removal of Forget-Specific Directionscited by 3
- 2026Before Forgetting, Learn to Remember: Revisiting Foundational Learning Failures in LVLM Unlearning Benchmarkscited by 3
- 2026Erase at the Core: Representation Unlearning for Machine Unlearningcited by 2
- 2025One-Point Contraction: Erasing Representational Separability toward Irreversible Deep Forgettingcited by 1
16 more
- 2026SPARE: Self-distillation for PARameter-Efficient Removalcited by 1
- 2026Easy to Learn, Yet Hard to Forget: Towards Robust Unlearning Under Biascited by 1
- 2026Attack by Unlearning: Unlearning-Induced Adversarial Attacks on Graph Neural Networkscited by 1
- 2025Preserving Privacy Without Compromising Accuracy: Machine Unlearning for Handwritten Text Recognitioncited by 0
- 2025PRUNE: A Patching Based Repair Framework for Certifiable Unlearning of Neural Networkscited by 0
- 2025Leveraging Distribution Matching to Make Approximate Machine Unlearning Fastercited by 0
- 2026Machine Unlearning in Low-Dimensional Feature Subspacecited by 0
- 2026Stake the Points: Structure-Faithful Instance Unlearningcited by 0
- 2026Classification-Head Bias in Class-Level Machine Unlearning: Diagnosis, Mitigation, and Evaluationcited by 0
- 2026SoK: Unlearnability and Unlearning for Model Dememorizationcited by 0
- 2026BARRIER: Bounded Activation Regions for Robust Information Erasurecited by 0
- 2026TrustErase: Auditable Instant Machine Unlearning with Passport-Embedded Representationscited by 0
- 2026IREU: Identity-Related Encoder-Only Unlearning for Customized Portrait Generationcited by 0
- 2026DECAF: De-Clustering for Adaptive Representational Unlearningcited by 0
- 2026On-the-go Forgetting without Explicit Unlearning via ERASEcited by 0
- 2026Unmerge: Efficient Machine Unlearning via Task Arithmeticcited by 0
- 2026Unmerge: Efficient Machine Unlearning via Task Arithmetic30 Sep 2026
- 2026On-the-go Forgetting without Explicit Unlearning via ERASE5 Sep 2026
- 2026DECAF: De-Clustering for Adaptive Representational Unlearning27 Jul 2026
- 2026IREU: Identity-Related Encoder-Only Unlearning for Customized Portrait Generation29 Jun 2026
- 2026TrustErase: Auditable Instant Machine Unlearning with Passport-Embedded Representations15 Jun 2026
- 2026BARRIER: Bounded Activation Regions for Robust Information Erasure15 May 2026
- 2026SoK: Unlearnability and Unlearning for Model Dememorization12 May 2026
- 2026Classification-Head Bias in Class-Level Machine Unlearning: Diagnosis, Mitigation, and Evaluation9 May 2026
- 2026Before Forgetting, Learn to Remember: Revisiting Foundational Learning Failures in LVLM Unlearning Benchmarks5 May 2026
- 2026Class Unlearning via Depth-Aware Removal of Forget-Specific Directions16 Apr 2026
- 2026Machine Unlearning under Retain-Forget Entanglement27 Mar 2026
- 2026SALMUBench: A Benchmark for Sensitive Association-Level Multimodal Unlearning27 Mar 2026
16 more
- 2026Attack by Unlearning: Unlearning-Induced Adversarial Attacks on Graph Neural Networks19 Mar 2026
- 2026Models Designed to Forget: Machine Unlearning via Key Deletion16 Mar 2026
- 2026Stake the Points: Structure-Faithful Instance Unlearning13 Mar 2026
- 2026Easy to Learn, Yet Hard to Forget: Towards Robust Unlearning Under Bias25 Feb 2026
- 2026Erase at the Core: Representation Unlearning for Machine Unlearning5 Feb 2026
- 2026SPARE: Self-distillation for PARameter-Efficient Removal4 Feb 2026
- 2026Machine Unlearning in Low-Dimensional Feature Subspace30 Jan 2026
- 2025POUR: A Provably Optimal Method for Unlearning Representations via Neural Collapse24 Nov 2025
- 2025Distilling LLM Prior to Flow Model for Generalizable Agent's Imagination in Object Goal Navigation13 Aug 2025
- 2025The Right to be Forgotten in Pruning: Unveil Machine Unlearning on Sparse Models24 Jul 2025
- 2025Leveraging Distribution Matching to Make Approximate Machine Unlearning Faster13 Jul 2025
- 2025One-Point Contraction: Erasing Representational Separability toward Irreversible Deep Forgetting10 Jul 2025
- 2025Unlearning's Blind Spots: Over-Unlearning and Prototypical Relearning Attack2 Jun 2025
- 2025Exploring the Limits of Vision-Language-Action Manipulations in Cross-task Generalization21 May 2025
- 2025PRUNE: A Patching Based Repair Framework for Certifiable Unlearning of Neural Networks10 May 2025
- 2025Preserving Privacy Without Compromising Accuracy: Machine Unlearning for Handwritten Text Recognition11 Apr 2025
- 2026Machine Unlearning under Retain-Forget Entanglementcited by 10
- 2025The Right to be Forgotten in Pruning: Unveil Machine Unlearning on Sparse Modelscited by 5
- 2025POUR: A Provably Optimal Method for Unlearning Representations via Neural Collapsecited by 5
- 2025Unlearning's Blind Spots: Over-Unlearning and Prototypical Relearning Attackcited by 3
- 2026Models Designed to Forget: Machine Unlearning via Key Deletioncited by 3
- 2026SALMUBench: A Benchmark for Sensitive Association-Level Multimodal Unlearningcited by 3
- 2026Class Unlearning via Depth-Aware Removal of Forget-Specific Directionscited by 3
- 2026Erase at the Core: Representation Unlearning for Machine Unlearningcited by 2
- 2025One-Point Contraction: Erasing Representational Separability toward Irreversible Deep Forgettingcited by 1
- 2026Easy to Learn, Yet Hard to Forget: Towards Robust Unlearning Under Biascited by 1
- 2025Preserving Privacy Without Compromising Accuracy: Machine Unlearning for Handwritten Text Recognitioncited by 0
- 2025PRUNE: A Patching Based Repair Framework for Certifiable Unlearning of Neural Networkscited by 0
12 most cited of 23 All 23 (JSON)
- 2026Unmerge: Efficient Machine Unlearning via Task Arithmetic30 Sep 2026
- 2026On-the-go Forgetting without Explicit Unlearning via ERASE5 Sep 2026
- 2026DECAF: De-Clustering for Adaptive Representational Unlearning27 Jul 2026
- 2026IREU: Identity-Related Encoder-Only Unlearning for Customized Portrait Generation29 Jun 2026
- 2026TrustErase: Auditable Instant Machine Unlearning with Passport-Embedded Representations15 Jun 2026
- 2026BARRIER: Bounded Activation Regions for Robust Information Erasure15 May 2026
- 2026SoK: Unlearnability and Unlearning for Model Dememorization12 May 2026
- 2026Classification-Head Bias in Class-Level Machine Unlearning: Diagnosis, Mitigation, and Evaluation9 May 2026
- 2026Class Unlearning via Depth-Aware Removal of Forget-Specific Directions16 Apr 2026
- 2026Machine Unlearning under Retain-Forget Entanglement27 Mar 2026
- 2026SALMUBench: A Benchmark for Sensitive Association-Level Multimodal Unlearning27 Mar 2026
- 2026Models Designed to Forget: Machine Unlearning via Key Deletion16 Mar 2026
12 newest of 23 All 23 (JSON)
- 2026SPARE: Self-distillation for PARameter-Efficient Removalcited by 1
- 2026SPARE: Self-distillation for PARameter-Efficient Removal4 Feb 2026