Redirection for Erasing Memory (REM): Towards a universal unlearning method for corrupted data
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
Machine unlearning is studied for a multitude of tasks, but specialization of unlearning methods to particular tasks has made their systematic comparison challenging. To address this issue, we propose a conceptual space to characterize diverse corrupted data unlearning tasks in vision classifiers. This space is described by two dimensions, the discovery rate (the fraction of the corrupted data that are known at unlearning time) and the statistical regularity of the corrupted data (from random exemplars to shared concepts). Methods proposed previously have been targeted at portions of this space and-we show-fail predictably outside these regions. We propose a novel method, Redirection for Erasing Memory (REM), whose key feature is that corrupted data are redirected to dedicated neurons introduced at unlearning time and then discarded or deactivated to suppress the influence of corrupted data. REM performs strongly across the space of tasks, in contrast to prior SOTA methods that fail outside the regions for which they were designed.
Key facts. Cited by 7 papers in the map (data through 14 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 27 of its 31 references that are in the map. First posted on arXiv 23 May 2025.
Builds on
27 of 31 references.
Closest ancestors · 13
Same direction, newest first
- 2024Improved Localized Machine Unlearning Through the Lens of Memorization3 Dec
- 2024Are we making progress in unlearning? Findings from the first NeurIPS unlearning competition13 Jun
- 2024What makes unlearning hard and what to do about it3 Jun
- 2024Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearning8 Apr
- 2024Inexact Unlearning Needs More Careful Evaluations to Avoid a False Sense of Privacy2 Mar
- 2024Corrective Machine Unlearning21 Feb
- 2024Parameter-tuning-free data entry error unlearning with adaptive selective synaptic dampening6 Feb
- 2023Fast Machine Unlearning Without Retraining Through Selective Synaptic Dampening15 Aug
- 2023Towards Unbounded Machine Unlearning20 Feb
- 2022A Survey of Machine Unlearning6 Sep
- 2022Can Bad Teaching Induce Forgetting? Unlearning in Deep Networks using an Incompetent Teacher17 May
- 2022Towards Adversarial Evaluations for Inexact Machine Unlearning17 Jan
Other references · 14
- 2015Deep Residual Learning for Image Recognitioncited by 52,096
- 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 30,186
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 8,065
- 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 618
- 2020What Neural Networks Memorize and Why: Discovering the Long Tail via Influence Estimationcited by 497
- 2019Does Learning Require Memorization? A Short Tale about a Long Tailcited by 460
- 2020Descent-to-Delete: Gradient-Based Methods for Machine Unlearningcited by 311
- 2023Poisoning Web-Scale Training Datasets is Practicalcited by 290
- 2020Characterizing Structural Regularities of Labeled Data in Overparameterized Modelscited by 93
- 2023Can Neural Network Memorization Be Localized?cited by 69
- 2024Be like a Goldfish, Don't Memorize! Mitigating Memorization in Generative LLMscited by 50
- 2024Persistent Pre-Training Poisoning of LLMscited by 48
2 more
- 2022Repairing Neural Networks by Leaving the Right Past Behindcited by 27
- 2024Potion: Towards Poison Unlearningcited by 14
Built on by
Citing papers per year: 2025: 4; 2026: 3.
7 papers.
- 2025Beyond Data Filtering: Knowledge Localization for Capability Removal in LLMscited by 11
- 2026Is your algorithm unlearning or untraining?cited by 4
- 2025LLM Unlearning on Noisy Forget Sets: A Study of Incomplete, Rewritten, and Watermarked Datacited by 2
- 2026Position: Capability Control Should be a Separate Goal From Alignmentcited by 2
- 2025RippleBench: Capturing Ripple Effects Using Existing Knowledge Repositoriescited by 1
- 2025Subtract the Corruption: Training-Data-Free Corrective Machine Unlearning using Task Arithmeticcited by 0
- 2026Variance-Reduced (varepsilon,δ)-Unlearning using Forget Set Gradientscited by 0
- 2026Is your algorithm unlearning or untraining?9 Apr 2026
- 2026Variance-Reduced (varepsilon,δ)-Unlearning using Forget Set Gradients16 Feb 2026
- 2026Position: Capability Control Should be a Separate Goal From Alignment5 Feb 2026
- 2025Beyond Data Filtering: Knowledge Localization for Capability Removal in LLMs5 Dec 2025
- 2025RippleBench: Capturing Ripple Effects Using Existing Knowledge Repositories3 Dec 2025
- 2025Subtract the Corruption: Training-Data-Free Corrective Machine Unlearning using Task Arithmetic24 Nov 2025
- 2025LLM Unlearning on Noisy Forget Sets: A Study of Incomplete, Rewritten, and Watermarked Data10 Oct 2025
Similar, not cited
Close in wording, no citation either way
- 2025From Dormant to Deleted: Tamper-Resistant Unlearning Through Weight-Space Regularization
- 2026Models Designed to Forget: Machine Unlearning via Key Deletion
- 2026Reference-Guided Machine Unlearning
- 2026Why Some Models Resist Unlearning: A Linear Stability Perspective
- 2025One-Point Contraction: Erasing Representational Separability toward Irreversible Deep Forgetting
- 2024Erase to Enhance: Data-Efficient Machine Unlearning in MRI Reconstruction
- 2025POUR: A Provably Optimal Method for Unlearning Representations via Neural Collapse
- 2023Deep Unlearning: Fast and Efficient Gradient-free Approach to Class Forgetting