ESC: Erasing Space Concept for Knowledge Deletion
Not on the map. Why?
Abstract (arXiv)
As concerns regarding privacy in deep learning continue to grow, individuals are increasingly apprehensive about the potential exploitation of their personal knowledge in trained models. Despite several research efforts to address this, they often fail to consider the real-world demand from users for complete knowledge erasure. Furthermore, our investigation reveals that existing methods have a risk of leaking personal knowledge through embedding features. To address these issues, we introduce a novel concept of Knowledge Deletion (KD), an advanced task that considers both concerns, and provides an appropriate metric, named Knowledge Retention score (KR), for assessing knowledge retention in feature space. To achieve this, we propose a novel training-free erasing approach named Erasing Space Concept (ESC), which restricts the important subspace for the forgetting knowledge by eliminating the relevant activations in the feature. In addition, we suggest ESC with Training (ESC-T), which uses a learnable mask to better balance the trade-off between forgetting and preserving knowledge in KD. Our extensive experiments on various datasets and models demonstrate that our proposed methods achieve the fastest and state-of-the-art performance. Notably, our methods are applicable to diverse forgetting scenarios, such as facial domain setting, demonstrating the generalizability of our methods. The code is available at http://github.com/KU-VGI/ESC .
Key facts. Cited by 9 papers in the map (data through 7 Oct 2026). Builds on 39 of its 52 references that are in the map. First posted on arXiv 3 Apr 2025.
Builds on
39 of 52 references.
References · 39
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
- 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 29,915
- 2023GPT-4 Technical Reportcited by 18,132
- 2020A Simple Framework for Contrastive Learning of Visual Representationscited by 11,979
- 2014ImageNet Large Scale Visual Recognition Challengecited by 8,441
- 2021Masked Autoencoders Are Scalable Vision Learnerscited by 7,339
- 2016Grad-CAM: Visual Explanations from Deep Networks via Gradient-based Localizationcited by 6,690
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,221
- 2021Efficient Geometry-aware 3D Generative Adversarial Networkscited by 1,204
- 2019Machine Unlearningcited by 1,020
- 2019Deep Leakage from Gradientscited by 1,004
27 more
- 2014Striving for Simplicity: The All Convolutional Netcited by 983
- 2017VGGFace2: A dataset for recognising faces across pose and agecited by 911
- 2021Membership Inference Attacks From First Principlescited by 839
- 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 599
- 2018Do Better ImageNet Models Transfer Better?cited by 560
- 2019Making AI Forget You: Data Deletion in Machine Learningcited by 447
- 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generationcited by 376
- 2020Label-Only Membership Inference Attackscited by 371
- 2021Unrolling SGD: Understanding Factors Influencing Machine Unlearningcited by 274
- 2019White-box vs Black-box: Bayes Optimal Strategies for Membership Inferencecited by 265
- 2023Towards Unbounded Machine Unlearningcited by 261
- 2021Machine Unlearning of Features and Labelscited by 223
- 2021Fast Yet Effective Machine Unlearningcited by 209
- 2023Model Sparsity Can Simplify Machine Unlearningcited by 206
- 2022Can Bad Teaching Induce Forgetting? Unlearning in Deep Networks using an Incompetent Teachercited by 189
- 2017Machine Learning Models that Remember Too Muchcited by 165
- 2021On the Necessity of Auditable Algorithmic Definitions for Machine Unlearningcited by 164
- 2020Mixed-Privacy Forgetting in Deep Networkscited by 158
- 2023Boundary Unlearningcited by 132
- 2022The Right to be Forgotten in Federated Learning: An Efficient Realization with Rapid Retrainingcited by 109
- 2021Federated Unlearning via Class-Discriminative Pruningcited by 108
- 2023Learn to Unlearn for Deep Neural Networks: Minimizing Unlearning Interference with Gradient Projectioncited by 37
- 2023Make Encoder Great Again in 3D GAN Inversion through Geometry and Occlusion-Aware Encodingcited by 35
- 2023Deep Unlearning: Fast and Efficient Gradient-free Approach to Class Forgettingcited by 21
- 2024Generative Unlearning for Any Identitycited by 19
- 2023Layer Attack Unlearning: Fast and Accurate Machine Unlearning via Layer Level Attack and Knowledge Distillationcited by 10
- 2023Preserving Linear Separability in Continual Learning by Backward Feature Projectioncited by 6
Built on by
Citing papers per year: 2025: 1; 2026: 8.
9 papers.
- 2025Perturb a Model, Not an Image: Towards Robust Privacy Protection via Anti-Personalized Diffusion Modelscited by 2
- 2026Which Concepts to Forget and How to Refuse? Decomposing Concepts for Continual Unlearning in Large Vision-Language Modelscited by 1
- 2026PROBE: Diagnosing Residual Concept Capacity in Erased Text-to-Video Diffusion Modelscited by 1
- 2026Stake the Points: Structure-Faithful Instance Unlearningcited by 0
- 2026BARRIER: Bounded Activation Regions for Robust Information Erasurecited by 0
- 2026Erased, but Not Gone: Output Forgetting Is Not True Forgettingcited by 0
- 2026DECAF: De-Clustering for Adaptive Representational Unlearningcited by 0
- 2026SCOPE: Entanglement Frontier Escape for Source-Free Class Unlearningcited by 0
- 2026DARE to Mitigate Hallucination: Dual-path Auto-Regressive-aware Editingcited by 0
- 2026DARE to Mitigate Hallucination: Dual-path Auto-Regressive-aware Editing29 Sep 2026
- 2026SCOPE: Entanglement Frontier Escape for Source-Free Class Unlearning3 Aug 2026
- 2026DECAF: De-Clustering for Adaptive Representational Unlearning27 Jul 2026
- 2026Erased, but Not Gone: Output Forgetting Is Not True Forgetting23 Jun 2026
- 2026BARRIER: Bounded Activation Regions for Robust Information Erasure15 May 2026
- 2026PROBE: Diagnosing Residual Concept Capacity in Erased Text-to-Video Diffusion Models23 Mar 2026
- 2026Which Concepts to Forget and How to Refuse? Decomposing Concepts for Continual Unlearning in Large Vision-Language Models23 Mar 2026
- 2026Stake the Points: Structure-Faithful Instance Unlearning13 Mar 2026
- 2025Perturb a Model, Not an Image: Towards Robust Privacy Protection via Anti-Personalized Diffusion Models3 Nov 2025