mlsanityData to 14 Oct 2026

Perturbation-Induced Linearization: Constructing Unlearnable Data with Solely Linear Classifiers

arXiv 2601.19967 ↗First posted 27 Jan 2026cs.LG cs.AIcited by 1

Not on the map. Why?

Abstract (arXiv)

Collecting web data to train deep models has become increasingly common, raising concerns about unauthorized data usage. To mitigate this issue, unlearnable examples introduce imperceptible perturbations into data, preventing models from learning effectively. However, existing methods typically rely on deep neural networks as surrogate models for perturbation generation, resulting in significant computational costs. In this work, we propose Perturbation-Induced Linearization (PIL), a computationally efficient yet effective method that generates perturbations using only linear surrogate models. PIL achieves comparable or better performance than existing surrogate-based methods while reducing computational time dramatically. We further reveal a key mechanism underlying unlearnable examples: inducing linearization to deep models, which explains why PIL can achieve competitive results in a very short time. Beyond this, we provide an analysis about the property of unlearnable examples under percentage-based partial perturbation. Our work not only provides a practical approach for data protection but also offers insights into what makes unlearnable examples effective.

Key facts. Cited by 1 paper in the map (data through 14 Oct 2026). Builds on 33 of its 39 references that are in the map. First posted on arXiv 27 Jan 2026.

Builds on

33 of 39 references.

References · 33

  1. 2015Deep Residual Learning for Image Recognitioncited by 52,096
  2. 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,364
  3. 2014ImageNet Large Scale Visual Recognition Challengecited by 8,498
  4. 2014Explaining and Harnessing Adversarial Examplescited by 7,364
  5. 2016Densely Connected Convolutional Networkscited by 6,720
  6. 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
  7. 2013Intriguing properties of neural networkscited by 5,155
  8. 2018MobileNetV2: Inverted Residuals and Linear Bottleneckscited by 4,795
  9. 2016Towards Evaluating the Robustness of Neural Networkscited by 2,998
  10. 2018Neural Tangent Kernel: Convergence and Generalization in Neural Networkscited by 2,621
  11. 2020Shortcut Learning in Deep Neural Networkscited by 1,969
  12. 2016Adversarial examples in the physical worldcited by 1,769
21 more
  1. 2020Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attackscited by 1,451
  2. 2018Recognition in Terra Incognitacited by 658
  3. 2020Large image datasets: A pyrrhic win for computer vision?cited by 237
  4. 2019Probing Neural Network Comprehension of Natural Language Argumentscited by 214
  5. 2018ReCoRD: Bridging the Gap between Human and Machine Commonsense Reading Comprehensioncited by 200
  6. 2021Unlearnable Examples: Making Personal Data Unexploitablecited by 193
  7. 2021Adversarial Examples Make Strong Poisonscited by 119
  8. 2019Learning to Confuse: Generating Training Time Adversarial Data with Auto-Encodercited by 70
  9. 2021Availability Attacks Create Shortcutscited by 62
  10. 2021Better Safe Than Sorry: Preventing Delusive Adversaries with Adversarial Trainingcited by 59
  11. 2022Autoregressive Perturbations for Data Poisoningcited by 46
  12. 2023Image Shortcut Squeezing: Countering Perturbative Availability Poisons with Compressioncited by 39
  13. 2022Robust Unlearnable Examples: Protecting Data Against Adversarial Learningcited by 35
  14. 2022One-Pixel Shortcut: on the Learning Preference of Deep Neural Networkscited by 29
  15. 2023CUDA: Convolution-based Unlearnable Datasetscited by 26
  16. 2023What Can We Learn from Unlearnable Datasets?cited by 21
  17. 2022Self-Ensemble Protection: Training Checkpoints Are Good Data Protectorscited by 19
  18. 2024Provably Unlearnable Data Examplescited by 18
  19. 2023Unlearnable Examples Give a False Sense of Security: Piercing through Unexploitable Data with Learnable Examplescited by 17
  20. 2024Nonlinear Transformations Against Unlearnable Datasetscited by 5
  21. 2022Generative Poisoning Using Random Discriminatorscited by 3

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2026: 1.

1 paper.