The Right to be Forgotten in Pruning: Unveil Machine Unlearning on Sparse Models
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
Machine unlearning aims to efficiently eliminate the memory about deleted data from trained models and address the right to be forgotten. Despite the success of existing unlearning algorithms, unlearning in sparse models has not yet been well studied. In this paper, we empirically find that the deleted data has an impact on the pruned topology in a sparse model. Motivated by the observation and the right to be forgotten, we define a new terminology ``un-pruning" to eliminate the impact of deleted data on model pruning. Then we propose an un-pruning algorithm to approximate the pruned topology driven by retained data. We remark that any existing unlearning algorithm can be integrated with the proposed un-pruning workflow and the error of un-pruning is upper-bounded in theory. Also, our un-pruning algorithm can be applied to both structured sparse models and unstructured sparse models. In the experiment, we further find that Membership Inference Attack (MIA) accuracy is unreliable for assessing whether a model has forgotten deleted data, as a small change in the amount of deleted data can produce arbitrary MIA results. Accordingly, we devise new performance metrics for sparse models to evaluate the success of un-pruning. Lastly, we conduct extensive experiments to verify the efficacy of un-pruning with various pruning methods and unlearning algorithms. Our code is released at https://github.com/NKUShaw/SparseModels .
Key facts. Cited by 7 papers in the map (data through 14 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 73 of its 92 references that are in the map. First posted on arXiv 24 Jul 2025.
Builds on
73 of 92 references.
Closest ancestors · 24
Same direction, newest first
- 2025LLM Unlearning Reveals a Stronger-Than-Expected Coreset Effect in Current Benchmarks14 Apr
- 2025Decoupled Distillation to Erase: A General Unlearning Method for Any Class-centric Tasks31 Mar
- 2025LoTUS: Large-Scale Machine Unlearning with a Taste of Uncertainty24 Mar
- 2025Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyond7 Feb
- 2024Forget Vectors at Play: Universal Input Perturbations Driving Machine Unlearning in Image Classification21 Dec
- 2024SEUF: Is Unlearning One Expert Enough for Mixture-of-Experts LLMs?27 Nov
- 2024Simplicity Prevails: Rethinking Negative Preference Optimization for LLM Unlearning9 Oct
- 2024Unified Gradient-Based Machine Unlearning with Remain Geometry Enhancement29 Sep
- 2024Towards Certified Unlearning for Deep Neural Networks1 Aug
- 2024What makes unlearning hard and what to do about it3 Jun
- 2024Machine Unlearning: A Comprehensive Survey13 May
- 2024Certified Machine Unlearning via Noisy Stochastic Gradient Descent25 Mar
12 more
- 2024Rethinking Machine Unlearning for Large Language Models13 Feb
- 2024Langevin Unlearning: A New Perspective of Noisy Gradient Descent for Machine Unlearning18 Jan
- 2023Certified Minimax Unlearning with Generalization Rates and Deletion Capacity16 Dec
- 2023Large Language Model Unlearning14 Oct
- 2023Fast Machine Unlearning Without Retraining Through Selective Synaptic Dampening15 Aug
- 2023Model Sparsity Can Simplify Machine Unlearning11 Apr
- 2023Towards Unbounded Machine Unlearning20 Feb
- 2022Can Bad Teaching Induce Forgetting? Unlearning in Deep Networks using an Incompetent Teacher17 May
- 2021Unrolling SGD: Understanding Factors Influencing Machine Unlearning27 Sep
- 2021Hard to Forget: Poisoning Attacks on Certified Machine Unlearning17 Sep
- 2021Certifiable Machine Unlearning for Linear Models29 Jun
- 2021Machine Unlearning via Algorithmic Stability25 Feb
Other references · 49
- 2016Overcoming catastrophic forgetting in neural networkscited by 4,787
- 2015Deep Compression: Compressing Deep Neural Networks with Pruning, Trained Quantization and Huffman Codingcited by 2,329
- 2018The Lottery Ticket Hypothesis: Finding Sparse, Trainable Neural Networkscited by 2,262
- 2019Similarity of Neural Network Representations Revisitedcited by 1,755
- 2016Pruning Filters for Efficient ConvNetscited by 1,143
- 2019Machine Unlearningcited by 1,061
- 2017Channel Pruning for Accelerating Very Deep Neural Networkscited by 702
- 2017Learning Efficient Convolutional Networks through Network Slimmingcited by 676
- 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 618
- 2018Rethinking the Value of Network Pruningcited by 599
- 2016Learning Structured Sparsity in Deep Neural Networkscited by 541
- 2017Computing Nonvacuous Generalization Bounds for Deep (Stochastic) Neural Networks with Many More Parameters than Training Datacited by 533
37 more
- 2019Making AI Forget You: Data Deletion in Machine Learningcited by 465
- 2020Amnesiac Machine Learningcited by 319
- 2018Soft Filter Pruning for Accelerating Deep Convolutional Neural Networkscited by 315
- 2020Descent-to-Delete: Gradient-Based Methods for Machine Unlearningcited by 311
- 2021Pruning and Quantization for Deep Neural Network Acceleration: A Surveycited by 263
- 2016Network Trimming: A Data-Driven Neuron Pruning Approach towards Efficient Deep Architecturescited by 221
- 2019Deconstructing Lottery Tickets: Zeros, Signs, and the Supermaskcited by 207
- 2023A Survey on Deep Neural Network Pruning-Taxonomy, Comparison, Analysis, and Recommendationscited by 202
- 2020When Machine Unlearning Jeopardizes Privacycited by 198
- 2024Do Membership Inference Attacks Work on Large Language Models?cited by 195
- 2023Outlier Weighed Layerwise Sparsity (OWL): A Missing Secret Sauce for Pruning LLMs to High Sparsitycited by 165
- 2020DeltaGrad: Rapid retraining of machine learning modelscited by 149
- 2022Reconstructing Training Data from Trained Neural Networkscited by 133
- 2020Machine Unlearning for Random Forestscited by 131
- 2023Similarity of Neural Network Models: A Survey of Functional and Representational Measurescited by 131
- 2023Structured Pruning for Deep Convolutional Neural Networks: A surveycited by 122
- 2018A Systematic DNN Weight Pruning Framework using Alternating Direction Method of Multiplierscited by 120
- 2019Are All Layers Created Equal?cited by 94
- 2024Blind Baselines Beat Membership Inference Attacks for Foundation Modelscited by 69
- 2022Advancing Model Pruning via Bi-level Optimizationcited by 56
- 2024Direct Unlearning Optimization for Robust and Safe Text-to-Image Modelscited by 50
- 2024Membership Inference Attacks Cannot Prove that a Model Was Trained On Your Datacited by 50
- 2024A Survey on Transformer Compressioncited by 46
- 2018ADMM-NN: An Algorithm-Hardware Co-Design Framework of DNNs Using Alternating Direction Method of Multiplierscited by 42
- 2019The intriguing role of module criticality in the generalization of deep networkscited by 40
- 2022Prospect Pruning: Finding Trainable Weights at Initialization using Meta-Gradientscited by 34
- 2021SOSP: Efficiently Capturing Global Correlations by Second-Order Structured Pruningcited by 30
- 2023Gradient-Free Structured Pruning with Unlabeled Datacited by 26
- 2022Data-Efficient Structured Pruning via Submodular Optimizationcited by 23
- 2024SparseLLM: Towards Global Pruning for Pre-trained Language Modelscited by 23
- 2020Online Forgetting Process for Linear Regression Modelscited by 21
- 2023Can Unstructured Pruning Reduce the Depth in Deep Neural Networks?cited by 20
- 2022Trainability Preserving Neural Pruningcited by 16
- 2025NoT: Federated Unlearning via Weight Negationcited by 15
- 2021Reviving Purpose Limitation and Data Minimisation in Data-Driven Systemscited by 11
- 2023GOHSP: A Unified Framework of Graph and Optimization-based Heterogeneous Structured Pruning for Vision Transformercited by 10
- 2024No Free Prune: Information-Theoretic Barriers to Pruning at Initializationcited by 8
Built on by
Citing papers per year: 2025: 1; 2026: 6.
7 papers.
- 2026Forget-It-All: Multi-Concept Machine Unlearning via Concept-Aware Neuron Maskingcited by 4
- 2025Efficient Knowledge Graph Unlearning with Zeroth-order Informationcited by 3
- 2026Beyond Forgetting: Representation Misdirection Elicits Controllable Side Behaviors and Capabilitiescited by 1
- 2026Roots Beneath the Cut: Uncovering the Risk of Concept Revival in Pruning-Based Unlearning for Diffusion Modelscited by 1
- 2026PruneForget: Joint Unlearning and Pruning of Vision Modelscited by 0
- 2026Compositional Concepts Erasing: Disentangling Object-Style via Domain Manifold Unlearningcited by 0
- 2026RA2: Retain-Anchored Attraction Preserves Forget-Adjacent Utility in LLM Unlearningcited by 0
- 2026RA2: Retain-Anchored Attraction Preserves Forget-Adjacent Utility in LLM Unlearning14 Oct 2026
- 2026Compositional Concepts Erasing: Disentangling Object-Style via Domain Manifold Unlearning10 Oct 2026
- 2026PruneForget: Joint Unlearning and Pruning of Vision Models26 Sep 2026
- 2026Roots Beneath the Cut: Uncovering the Risk of Concept Revival in Pruning-Based Unlearning for Diffusion Models28 Feb 2026
- 2026Beyond Forgetting: Representation Misdirection Elicits Controllable Side Behaviors and Capabilities29 Jan 2026
- 2026Forget-It-All: Multi-Concept Machine Unlearning via Concept-Aware Neuron Masking7 Jan 2026
- 2025Efficient Knowledge Graph Unlearning with Zeroth-order Information19 Aug 2025
Similar, not cited
Close in wording, no citation either way
- 2025When to Forget? Complexity Trade-offs in Machine Unlearning
- 2024Challenging Forgets: Unveiling the Worst-Case Forget Sets in Machine Unlearning
- 2024Machine Unlearning with Minimal Gradient Dependence for High Unlearning Ratios
- 2023Unlearning via Sparse Representations
- 2026Easy to Learn, Yet Hard to Forget: Towards Robust Unlearning Under Bias
- 2024nabla τ: Gradient-based and Task-Agnostic machine Unlearning
- 2024Efficient Knowledge Deletion from Trained Models through Layer-wise Partial Machine Unlearning
- 2024Attribute-to-Delete: Machine Unlearning via Datamodel Matching