MUBox: A Critical Evaluation Framework of Deep Machine Unlearning
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
Recent legal frameworks have mandated the right to be forgotten, obligating the removal of specific data upon user requests. Machine Unlearning has emerged as a promising solution by selectively removing learned information from machine learning models. This paper presents MUBox, a comprehensive platform designed to evaluate unlearning methods in deep learning. MUBox integrates 23 advanced unlearning techniques, tested across six practical scenarios with 11 diverse evaluation metrics. It allows researchers and practitioners to (1) assess and compare the effectiveness of different machine unlearning methods across various scenarios; (2) examine the impact of current evaluation metrics on unlearning performance; and (3) conduct detailed comparative studies on machine unlearning in a unified framework. Leveraging MUBox, we systematically evaluate these unlearning methods in deep learning and uncover several key insights: (a) Even state-of-the-art unlearning methods, including those published in top-tier venues and winners of unlearning competitions, demonstrate inconsistent effectiveness across diverse scenarios. Prior research has predominantly focused on simplified settings, such as random forgetting and class-wise unlearning, highlighting the need for broader evaluations across more difficult unlearning tasks. (b) Assessing unlearning performance remains a non-trivial problem, as no single evaluation metric can comprehensively capture the effectiveness, efficiency, and preservation of model utility. Our findings emphasize the necessity of employing multiple metrics to achieve a balanced and holistic assessment of unlearning methods. (c) In the context of depoisoning, our evaluation reveals significant variability in the effectiveness of existing approaches, which is highly dependent on the specific type of poisoning attacks.
Key facts. Cited by 6 papers in the map (data through 14 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 37 of its 67 references that are in the map. First posted on arXiv 13 May 2025.
Builds on
37 of 67 references.
Closest ancestors · 19
Same direction, newest first
- 2024Gone but Not Forgotten: Improved Benchmarks for Machine Unlearning29 May
- 2024Label-Agnostic Forgetting: A Supervision-Free Unlearning in Deep Models31 Mar
- 2024Challenging Forgets: Unveiling the Worst-Case Forget Sets in Machine Unlearning12 Mar
- 2024Langevin Unlearning: A New Perspective of Noisy Gradient Descent for Machine Unlearning18 Jan
- 2023Certified Minimax Unlearning with Generalization Rates and Deletion Capacity16 Dec
- 2023Learn to Unlearn for Deep Neural Networks: Minimizing Unlearning Interference with Gradient Projection7 Dec
- 2023Fast Model Debias with Machine Unlearning19 Oct
- 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generation19 Oct
- 2023Fast Machine Unlearning Without Retraining Through Selective Synaptic Dampening15 Aug
- 2023Model Sparsity Can Simplify Machine Unlearning11 Apr
- 2023Boundary Unlearning21 Mar
- 2022Forget Unlearning: Towards True Data-Deletion in Machine Learning17 Oct
7 more
- 2022Algorithms that Approximate Data Removal: New Results and Limitations25 Sep
- 2022Can Bad Teaching Induce Forgetting? Unlearning in Deep Networks using an Incompetent Teacher17 May
- 2021Unrolling SGD: Understanding Factors Influencing Machine Unlearning27 Sep
- 2021Machine Unlearning of Features and Labels26 Aug
- 2021Adaptive Machine Unlearning8 Jun
- 2021Remember What You Want to Forget: Algorithms for Machine Unlearning4 Mar
- 2021Machine Unlearning via Algorithmic Stability25 Feb
Other references · 18
- 2015Deep Residual Learning for Image Recognitioncited by 52,096
- 2019Machine Unlearningcited by 1,061
- 2021MobileViT: Light-weight, General-purpose, and Mobile-friendly Vision Transformercited by 642
- 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 618
- 2019Certified Data Removal from Machine Learning Modelscited by 535
- 2019Making AI Forget You: Data Deletion in Machine Learningcited by 465
- 2020Amnesiac Machine Learningcited by 319
- 2020Descent-to-Delete: Gradient-Based Methods for Machine Unlearningcited by 311
- 2020Systematic Evaluation of Privacy Risks of Machine Learning Modelscited by 292
- 2020Approximate Data Deletion from Machine Learning Modelscited by 255
- 2020Forgetting Outside the Box: Scrubbing Deep Networks of Information Accessible from Input-Output Observationscited by 180
- 2019Stolen Memories: Leveraging Model Memorization for Calibrated White-Box Membership Inferencecited by 175
6 more
- 2020Mixed-Privacy Forgetting in Deep Networkscited by 163
- 2019Privacy Risks of Securing Machine Learning Models against Adversarial Examplescited by 141
- 2019Updates-Leak: Data Set Inference and Reconstruction Attacks in Online Learningcited by 122
- 2020Machine Unlearning: Linear Filtration for Logit-based Classifierscited by 95
- 2022PUMA: Performance Unchanged Model Augmentation for Training Data Removalcited by 58
- 2024Machine Unlearning for Image-to-Image Generative Modelscited by 47
Built on by
Citing papers per year: 2025: 2; 2026: 4.
6 papers.
- 2025KnowledgeSmith: Uncovering Knowledge Updating in LLMs with Model Editing and Unlearningcited by 3
- 2026A SISA-based Machine Unlearning Framework for Power Transformer Inter-Turn Short-Circuit Fault Localizationcited by 1
- 2026Reference-Guided Machine Unlearningcited by 1
- 2026The BatchNorm Illusion: Diagnosing Normalization Artifacts in Machine Unlearning Evaluationcited by 1
- 2025Leveraging Distribution Matching to Make Approximate Machine Unlearning Fastercited by 0
- 2026SUPREME: A Multi-GPU Framework for Reproducible Image Unlearning Method Evaluationcited by 0
- 2026The BatchNorm Illusion: Diagnosing Normalization Artifacts in Machine Unlearning Evaluation8 Sep 2026
- 2026SUPREME: A Multi-GPU Framework for Reproducible Image Unlearning Method Evaluation29 May 2026
- 2026Reference-Guided Machine Unlearning11 Mar 2026
- 2026A SISA-based Machine Unlearning Framework for Power Transformer Inter-Turn Short-Circuit Fault Localization7 Mar 2026
- 2025KnowledgeSmith: Uncovering Knowledge Updating in LLMs with Model Editing and Unlearning1 Oct 2025
- 2025Leveraging Distribution Matching to Make Approximate Machine Unlearning Faster13 Jul 2025
Similar, not cited
Close in wording, no citation either way
- 2024Deep Unlearn: Benchmarking Machine Unlearning for Image Classification
- 2024Instance-Level Difficulty: A Missing Perspective in Machine Unlearning
- 2024MU-Bench: A Multitask Multimodal Benchmark for Machine Unlearning
- 2025When to Forget? Complexity Trade-offs in Machine Unlearning
- 2023Exploring the Landscape of Machine Unlearning: A Comprehensive Survey and Taxonomy
- 2026Forgetting Similar Samples: Can Machine Unlearning Do it Better?
- 2025Are We Truly Forgetting? A Critical Re-examination of Machine Unlearning Evaluation Protocols
- 2023Towards Unbounded Machine Unlearning