mlsanityData to 14 Oct 2026

MUBox: A Critical Evaluation Framework of Deep Machine Unlearning

arXiv 2505.08576 ↗First posted 13 May 2025cs.LG cs.CRcited by 6

On the map: LLM safety and security → Machine unlearning

Abstract (arXiv)

Recent legal frameworks have mandated the right to be forgotten, obligating the removal of specific data upon user requests. Machine Unlearning has emerged as a promising solution by selectively removing learned information from machine learning models. This paper presents MUBox, a comprehensive platform designed to evaluate unlearning methods in deep learning. MUBox integrates 23 advanced unlearning techniques, tested across six practical scenarios with 11 diverse evaluation metrics. It allows researchers and practitioners to (1) assess and compare the effectiveness of different machine unlearning methods across various scenarios; (2) examine the impact of current evaluation metrics on unlearning performance; and (3) conduct detailed comparative studies on machine unlearning in a unified framework. Leveraging MUBox, we systematically evaluate these unlearning methods in deep learning and uncover several key insights: (a) Even state-of-the-art unlearning methods, including those published in top-tier venues and winners of unlearning competitions, demonstrate inconsistent effectiveness across diverse scenarios. Prior research has predominantly focused on simplified settings, such as random forgetting and class-wise unlearning, highlighting the need for broader evaluations across more difficult unlearning tasks. (b) Assessing unlearning performance remains a non-trivial problem, as no single evaluation metric can comprehensively capture the effectiveness, efficiency, and preservation of model utility. Our findings emphasize the necessity of employing multiple metrics to achieve a balanced and holistic assessment of unlearning methods. (c) In the context of depoisoning, our evaluation reveals significant variability in the effectiveness of existing approaches, which is highly dependent on the specific type of poisoning attacks.

Key facts. Cited by 6 papers in the map (data through 14 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 37 of its 67 references that are in the map. First posted on arXiv 13 May 2025.

Builds on

37 of 67 references.

Closest ancestors · 19

Same direction, newest first

  1. 2024Gone but Not Forgotten: Improved Benchmarks for Machine Unlearning29 May
  2. 2024Label-Agnostic Forgetting: A Supervision-Free Unlearning in Deep Models31 Mar
  3. 2024Challenging Forgets: Unveiling the Worst-Case Forget Sets in Machine Unlearning12 Mar
  4. 2024Langevin Unlearning: A New Perspective of Noisy Gradient Descent for Machine Unlearning18 Jan
  5. 2023Certified Minimax Unlearning with Generalization Rates and Deletion Capacity16 Dec
  6. 2023Learn to Unlearn for Deep Neural Networks: Minimizing Unlearning Interference with Gradient Projection7 Dec
  7. 2023Fast Model Debias with Machine Unlearning19 Oct
  8. 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generation19 Oct
  9. 2023Fast Machine Unlearning Without Retraining Through Selective Synaptic Dampening15 Aug
  10. 2023Model Sparsity Can Simplify Machine Unlearning11 Apr
  11. 2023Boundary Unlearning21 Mar
  12. 2022Forget Unlearning: Towards True Data-Deletion in Machine Learning17 Oct
7 more
  1. 2022Algorithms that Approximate Data Removal: New Results and Limitations25 Sep
  2. 2022Can Bad Teaching Induce Forgetting? Unlearning in Deep Networks using an Incompetent Teacher17 May
  3. 2021Unrolling SGD: Understanding Factors Influencing Machine Unlearning27 Sep
  4. 2021Machine Unlearning of Features and Labels26 Aug
  5. 2021Adaptive Machine Unlearning8 Jun
  6. 2021Remember What You Want to Forget: Algorithms for Machine Unlearning4 Mar
  7. 2021Machine Unlearning via Algorithmic Stability25 Feb

Other references · 18

  1. 2015Deep Residual Learning for Image Recognitioncited by 52,096
  2. 2019Machine Unlearningcited by 1,061
  3. 2021MobileViT: Light-weight, General-purpose, and Mobile-friendly Vision Transformercited by 642
  4. 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 618
  5. 2019Certified Data Removal from Machine Learning Modelscited by 535
  6. 2019Making AI Forget You: Data Deletion in Machine Learningcited by 465
  7. 2020Amnesiac Machine Learningcited by 319
  8. 2020Descent-to-Delete: Gradient-Based Methods for Machine Unlearningcited by 311
  9. 2020Systematic Evaluation of Privacy Risks of Machine Learning Modelscited by 292
  10. 2020Approximate Data Deletion from Machine Learning Modelscited by 255
  11. 2020Forgetting Outside the Box: Scrubbing Deep Networks of Information Accessible from Input-Output Observationscited by 180
  12. 2019Stolen Memories: Leveraging Model Memorization for Calibrated White-Box Membership Inferencecited by 175
6 more
  1. 2020Mixed-Privacy Forgetting in Deep Networkscited by 163
  2. 2019Privacy Risks of Securing Machine Learning Models against Adversarial Examplescited by 141
  3. 2019Updates-Leak: Data Set Inference and Reconstruction Attacks in Online Learningcited by 122
  4. 2020Machine Unlearning: Linear Filtration for Logit-based Classifierscited by 95
  5. 2022PUMA: Performance Unchanged Model Augmentation for Training Data Removalcited by 58
  6. 2024Machine Unlearning for Image-to-Image Generative Modelscited by 47

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 2; 2026: 4.

6 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2024Deep Unlearn: Benchmarking Machine Unlearning for Image Classification
  2. 2024Instance-Level Difficulty: A Missing Perspective in Machine Unlearning
  3. 2024MU-Bench: A Multitask Multimodal Benchmark for Machine Unlearning
  4. 2025When to Forget? Complexity Trade-offs in Machine Unlearning
  5. 2023Exploring the Landscape of Machine Unlearning: A Comprehensive Survey and Taxonomy
  6. 2026Forgetting Similar Samples: Can Machine Unlearning Do it Better?
  7. 2025Are We Truly Forgetting? A Critical Re-examination of Machine Unlearning Evaluation Protocols
  8. 2023Towards Unbounded Machine Unlearning