mlsanityData to 14 Oct 2026

Targeted Forgetting of Image Subgroups in CLIP Models

arXiv 2506.03117 ↗First posted 3 Jun 2025cs.CVcited by 6

On the map: LLM safety and security → Machine unlearning

Abstract (arXiv)

Foundation models (FMs) such as CLIP have demonstrated impressive zero-shot performance across various tasks by leveraging large-scale, unsupervised pre-training. However, they often inherit harmful or unwanted knowledge from noisy internet-sourced datasets, compromising their reliability in real-world applications. Existing model unlearning methods either rely on access to pre-trained datasets or focus on coarse-grained unlearning (e.g., entire classes), leaving a critical gap for fine-grained unlearning. In this paper, we address the challenging scenario of selectively forgetting specific portions of knowledge within a class, without access to pre-trained data, while preserving the model's overall performance. We propose a novel three-stage approach that progressively unlearns targeted knowledge while mitigating over-forgetting. It consists of (1) a forgetting stage to fine-tune the CLIP on samples to be forgotten, (2) a reminding stage to restore performance on retained samples, and (3) a restoring stage to recover zero-shot capabilities using model souping. Additionally, we introduce knowledge distillation to handle the distribution disparity between forgetting, retaining samples, and unseen pre-trained data. Extensive experiments on CIFAR-10, ImageNet-1K, and style datasets demonstrate that our approach effectively unlearns specific subgroups while maintaining strong zero-shot performance on semantically similar subgroups and other categories, significantly outperforming baseline unlearning methods, which lose effectiveness under the CLIP unlearning setting.

Key facts. Cited by 6 papers in the map (data through 14 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 42 of its 63 references that are in the map. First posted on arXiv 3 Jun 2025.

Builds on

42 of 63 references.

Closest ancestors · 15

Same direction, newest first

  1. 2024Unified Gradient-Based Machine Unlearning with Remain Geometry Enhancement29 Sep
  2. 2024Towards Certified Unlearning for Deep Neural Networks1 Aug
  3. 2024Learning to Unlearn for Robust Machine Unlearning15 Jul
  4. 2023Unlearning with Fisher Masking9 Oct
  5. 2023Who's Harry Potter? Approximate Unlearning in LLMs3 Oct
  6. 2023One-Shot Machine Unlearning with Mnemonic Code9 Jun
  7. 2023Model Sparsity Can Simplify Machine Unlearning11 Apr
  8. 2022Evaluating Machine Unlearning via Epistemic Uncertainty23 Aug
  9. 2022Deep Unlearning via Randomized Conditionally Independent Hessians15 Apr
  10. 2022Zero-Shot Machine Unlearning14 Jan
  11. 2021Fast Yet Effective Machine Unlearning17 Nov
  12. 2021Unrolling SGD: Understanding Factors Influencing Machine Unlearning27 Sep
3 more
  1. 2021Machine Unlearning of Features and Labels26 Aug
  2. 2021Remember What You Want to Forget: Algorithms for Machine Unlearning4 Mar
  3. 2021Machine Unlearning via Algorithmic Stability25 Feb

Other references · 27

  1. 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
  2. 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,380
  3. 2022LAION-5B: An open large-scale dataset for training next generation image-text modelscited by 4,152
  4. 2022Model soups: averaging weights of multiple fine-tuned models improves accuracy without increasing inference timecited by 1,396
  5. 2018Continual Lifelong Learning with Neural Networks: A Reviewcited by 1,330
  6. 2019Machine Unlearningcited by 1,061
  7. 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 618
  8. 2023Style Injection in Diffusion: A Training-free Approach for Adapting Large-scale Diffusion Models for Style Transfercited by 196
  9. 2019Towards Fairer Datasets: Filtering and Balancing the Distribution of the People Subtree in the ImageNet Hierarchycited by 156
  10. 2020BREEDS: Benchmarks for Subpopulation Shiftcited by 155
  11. 2023Squeeze, Recover and Relabel: Dataset Condensation at ImageNet Scale From A New Perspectivecited by 138
  12. 2023Towards Foundation Models for Scientific Machine Learning: Characterizing Scaling and Transfer Behaviorcited by 131
15 more
  1. 2020Variational Bayesian Unlearningcited by 117
  2. 2022CALIP: Zero-Shot Enhancement of CLIP with Parameter-free Attentioncited by 103
  3. 2022A Whac-A-Mole Dilemma: Shortcuts Come in Multiples Where Mitigating One Amplifies Otherscited by 85
  4. 2023CLIP for All Things Zero-Shot Sketch-Based Image Retrieval, Fine-Grained or Notcited by 79
  5. 2021What to Pre-Train on? Efficient Intermediate Task Selectioncited by 63
  6. 2023Domain Watermark: Effective and Harmless Dataset Copyright Protection is Closed at Handcited by 57
  7. 2021Improved Fine-Tuning by Better Leveraging Pre-Training Datacited by 36
  8. 2021Data-Efficient Language-Supervised Zero-Shot Learning with Self-Distillationcited by 22
  9. 2024Graph Unlearning with Efficient Partial Retrainingcited by 20
  10. 2024On Catastrophic Inheritance of Large Foundation Modelscited by 15
  11. 2024Discover and Mitigate Multiple Biased Subgroups in Image Classifierscited by 11
  12. 2021Bayesian Variational Federated Learning and Unlearning in Decentralized Networkscited by 9
  13. 2024Can CLIP Count Stars? An Empirical Study on Quantity Bias in CLIPcited by 9
  14. 2024Fisher Information-based Efficient Curriculum Federated Learning with Large Language Modelscited by 6
  15. 2024The Boy Who Survived: Removing Harry Potter from an LLM is harder than reportedcited by 4

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 1; 2026: 5.

6 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2024Zero-Shot Class Unlearning in CLIP with Synthetic Samples
  2. 2025Selective, Controlled and Domain-Agnostic Unlearning in Pretrained CLIP: A Training- and Data-Free Approach
  3. 2025Erasing CLIP Memories: Non-Destructive, Data-Free Zero-Shot class Unlearning in CLIP Models
  4. 2024CLIPErase: Efficient Unlearning of Visual-Textual Associations in CLIP
  5. 2023Unlearning via Sparse Representations
  6. 2025Memory Self-Regeneration: Uncovering Hidden Knowledge in Unlearned Models
  7. 2025UnGuide: Learning to Forget with LoRA-Guided Diffusion Models
  8. 2025Pre-Forgettable Models: Prompt Learning as a Native Mechanism for Unlearning