MTL-UE: Learning to Learn Nothing for Multi-Task Learning
Not on the map. Why?
Abstract (arXiv)
Most existing unlearnable strategies focus on preventing unauthorized users from training single-task learning (STL) models with personal data. Nevertheless, the paradigm has recently shifted towards multi-task data and multi-task learning (MTL), targeting generalist and foundation models that can handle multiple tasks simultaneously. Despite their growing importance, MTL data and models have been largely neglected while pursuing unlearnable strategies. This paper presents MTL-UE, the first unified framework for generating unlearnable examples for multi-task data and MTL models. Instead of optimizing perturbations for each sample, we design a generator-based structure that introduces label priors and class-wise feature embeddings which leads to much better attacking performance. In addition, MTL-UE incorporates intra-task and inter-task embedding regularization to increase inter-class separation and suppress intra-class variance which enhances the attack robustness greatly. Furthermore, MTL-UE is versatile with good supports for dense prediction tasks in MTL. It is also plug-and-play allowing integrating existing surrogate-dependent unlearnable methods with little adaptation. Extensive experiments show that MTL-UE achieves superior attacking performance consistently across 4 MTL datasets, 3 base UE methods, 5 model backbones, and 5 MTL task-weighting strategies.
Key facts. Cited by 11 papers in the map (data through 14 Oct 2026). Builds on 73 of its 95 references that are in the map. First posted on arXiv 8 May 2025.
Builds on
73 of 95 references.
References · 73
- 2015Deep Residual Learning for Image Recognitioncited by 52,096
- 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 30,186
- 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,364
- 2016Densely Connected Convolutional Networkscited by 6,720
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
- 2014Deep Learning Face Attributes in the Wildcited by 3,693
- 2017Understanding Black-box Predictions via Influence Functionscited by 1,741
- 2017Multi-Task Learning Using Uncertainty to Weigh Losses for Scene Geometry and Semanticscited by 1,358
- 2020Gradient Surgery for Multi-Task Learningcited by 1,256
- 2017BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chaincited by 1,106
- 2017ChestX-ray8: Hospital-scale Chest X-ray Database and Benchmarks on Weakly-Supervised Classification and Localization of Common Thorax Diseasescited by 972
- 2017A Survey on Multi-Task Learningcited by 840
38 more
- 2018Multi-Task Learning as Multi-Objective Optimizationcited by 821
- 2017An Overview of Multi-Task Learning in Deep Neural Networkscited by 803
- 2018End-to-End Multi-Task Learning with Attentioncited by 534
- 2016Cross-stitch Networks for Multi-task Learningcited by 467
- 2017Age Progression/Regression by Conditional Adversarial Autoencodercited by 429
- 2019Which Tasks Should Be Learned Together in Multi-task Learning?cited by 375
- 2019Pareto Multi-Task Learningcited by 224
- 2021Efficiently Identifying Task Groupings for Multi-Task Learningcited by 222
- 2022Multi-Task Learning as a Bargaining Gamecited by 215
- 2021Unlearnable Examples: Making Personal Data Unexploitablecited by 193
- 2020Dataset Security for Machine Learning: Data Poisoning, Backdoor Attacks, and Defensescited by 180
- 2018Dynamic Channel Pruning: Feature Boosting and Suppressioncited by 129
- 2021Adversarial Examples Make Strong Poisonscited by 119
- 2020Just How Toxic is Data Poisoning? A Unified Benchmark for Backdoor and Data Poisoning Attackscited by 116
- 2020Learning to Branch for Multi-Task Learningcited by 115
- 2021Reasonable Effectiveness of Random Weighting: A Litmus Test for Multi-Task Learningcited by 101
- 2018Is feature selection secure against training data poisoning?cited by 93
- 2019Learning to Confuse: Generating Training Time Adversarial Data with Auto-Encodercited by 70
- 2023Independent Component Alignment for Multi-Task Learningcited by 70
- 2021Multi-Task Learning in Natural Language Processing: An Overviewcited by 62
- 2021Availability Attacks Create Shortcutscited by 62
- 2022Towards Robust Rain Removal Against Adversarial Attacks: A Comprehensive Benchmark Analysis and Beyondcited by 48
- 2022Autoregressive Perturbations for Data Poisoningcited by 46
- 2023Backdoor Attacks Against Deep Image Compression via Adaptive Frequency Triggercited by 40
- 2023Image Shortcut Squeezing: Countering Perturbative Availability Poisons with Compressioncited by 39
- 2022Unlearnable Clusters: Towards Label-agnostic Unlearnable Examplescited by 36
- 2024Fair Resource Allocation in Multi-Task Learningcited by 35
- 2022Indiscriminate Poisoning Attacks on Unsupervised Contrastive Learningcited by 34
- 2023Learning the Unlearnable: Adversarial Augmentations Suppress Unlearnable Example Attackscited by 30
- 2022One-Pixel Shortcut: on the Learning Preference of Deep Neural Networkscited by 29
- 2025Two Heads are Better Than One: Test-time Scaling of Multi-agent Collaborative Reasoningcited by 29
- 2021LAFEAT: Piercing Through Adversarial Defenses with Latent Featurescited by 24
- 2023Exploring the Limits of Model-Targeted Indiscriminate Data Poisoning Attackscited by 23
- 2024Multimodal Unlearnable Examples: Protecting Data against Multimodal Contrastive Learningcited by 21
- 2024Transferable Adversarial Attacks on SAM and Its Downstream Modelscited by 21
- 2022Self-Ensemble Protection: Training Checkpoints Are Good Data Protectorscited by 19
- 2023Scalarization for Multi-Task and Multi-Domain Learning at Scalecited by 19
- 2024Purify Unlearnable Examples via Rate-Constrained Variational Autoencoderscited by 18
50 most cited of 73 All 73 (JSON)
Built on by
Citing papers per year: 2025: 4; 2026: 7.
11 papers.
- 2025LLM Unlearning with LLM Beliefscited by 17
- 2025Temporal Unlearnable Examples: Preventing Personal Video Data from Unauthorized Exploitation by Object Trackingcited by 9
- 2026AEGIS: Adversarial Target-Guided Retention-Data-Free Robust Concept Erasure from Diffusion Modelscited by 5
- 2026When Priors Backfire: On the Vulnerability of Unlearnable Examples to Pretrainingcited by 5
- 2025MambaTAD: When State-Space Models Meet Long-Range Temporal Action Detectioncited by 4
- 2026Why Do Unlearnable Examples Work: A Novel Perspective of Mutual Informationcited by 2
- 2026Mitigating Error Amplification in Fast Adversarial Trainingcited by 1
- 2025Learning to Generate Cross-Task Unexploitable Examplescited by 0
- 2026UTOPIA: Unlearnable Tabular Data via Decoupled Shortcut Embeddingcited by 0
- 2026StegaFFD: Privacy-Preserving Face Forgery Detection via Fine-Grained Steganographic Domain Liftingcited by 0
- 2026MUGEN: Generating Unlearnable Graph Examples for Multiple Learning Taskscited by 0
- 2026MUGEN: Generating Unlearnable Graph Examples for Multiple Learning Tasks1 Sep 2026
- 2026Mitigating Error Amplification in Fast Adversarial Training27 Apr 2026
- 2026When Priors Backfire: On the Vulnerability of Unlearnable Examples to Pretraining5 Mar 2026
- 2026Why Do Unlearnable Examples Work: A Novel Perspective of Mutual Information4 Mar 2026
- 2026StegaFFD: Privacy-Preserving Face Forgery Detection via Fine-Grained Steganographic Domain Lifting3 Mar 2026
- 2026UTOPIA: Unlearnable Tabular Data via Decoupled Shortcut Embedding7 Feb 2026
- 2026AEGIS: Adversarial Target-Guided Retention-Data-Free Robust Concept Erasure from Diffusion Models6 Feb 2026
- 2025Learning to Generate Cross-Task Unexploitable Examples15 Dec 2025
- 2025MambaTAD: When State-Space Models Meet Long-Range Temporal Action Detection22 Nov 2025
- 2025LLM Unlearning with LLM Beliefs22 Oct 2025
- 2025Temporal Unlearnable Examples: Preventing Personal Video Data from Unauthorized Exploitation by Object Tracking10 Jul 2025