Variance-Reduced (varepsilon,δ)-Unlearning using Forget Set Gradients
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
In machine unlearning, (varepsilon,δ)-unlearning is a popular framework that provides formal guarantees on the effectiveness of the removal of a subset of training data, the forget set, from a trained model. For strongly convex objectives, existing first-order methods achieve (varepsilon,δ)-unlearning, but they only use the forget set to calibrate injected noise, never as a direct optimization signal. In contrast, efficient empirical heuristics often exploit the forget samples (e.g., via gradient ascent) but come with no formal unlearning guarantees. We bridge this gap by presenting the Variance-Reduced Unlearning (VRU) algorithm. To the best of our knowledge, VRU is the first first-order algorithm that directly includes forget set gradients in its update rule, while provably satisfying ((varepsilon,δ)-unlearning. We establish the convergence of VRU and show that incorporating the forget set yields strictly improved rates, i.e. a better dependence on the achieved error compared to existing first-order (varepsilon,δ)-unlearning methods. Moreover, we prove that, in a low-error regime, VRU asymptotically outperforms any first-order method that ignores the forget set.Experiments corroborate our theory, showing consistent gains over both state-of-the-art certified unlearning methods and over empirical baselines that explicitly leverage the forget set.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 44 of its 53 references that are in the map. First posted on arXiv 16 Feb 2026.
Builds on
44 of 53 references.
Closest ancestors · 28
Same direction, newest first
- 2025Label Smoothing Improves Gradient Ascent in LLM Unlearning25 Oct
- 2025Provable Unlearning with Gradient Ascent on Two-Layer ReLU Neural Networks16 Oct
- 2025Ascent Fails to Forget30 Sep
- 2025Certified Unlearning for Neural Networks8 Jun
- 2025Leveraging Per-Instance Privacy for Machine Unlearning24 May
- 2025Redirection for Erasing Memory (REM): Towards a universal unlearning method for corrupted data23 May
- 2025Certified Data Removal Under High-dimensional Settings12 May
- 2025When to Forget? Complexity Trade-offs in Machine Unlearning24 Feb
- 2024The Utility and Complexity of in- and out-of-Distribution Machine Unlearning12 Dec
- 2024Mechanistic Unlearning: Robust Knowledge Unlearning and Editing via Mechanistic Localization16 Oct
- 2024Unified Gradient-Based Machine Unlearning with Remain Geometry Enhancement29 Sep
- 2024Rewind-to-Delete: Certified Machine Unlearning for Nonconvex Functions15 Sep
16 more
- 2024MUSE: Machine Unlearning Six-Way Evaluation for Language Models8 Jul
- 2024Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearning8 Apr
- 2024Hessian-Free Online Certified Unlearning2 Apr
- 2024Inexact Unlearning Needs More Careful Evaluations to Avoid a False Sense of Privacy2 Mar
- 2024Machine Unlearning of Pre-trained Large Language Models23 Feb
- 2024Langevin Unlearning: A New Perspective of Noisy Gradient Descent for Machine Unlearning18 Jan
- 2024TOFU: A Task of Fictitious Unlearning for LLMs11 Jan
- 2023Unlearn What You Want to Forget: Efficient Unlearning for LLMs31 Oct
- 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generation19 Oct
- 2023Large Language Model Unlearning14 Oct
- 2023Tight Bounds for Machine Unlearning via Differential Privacy2 Sep
- 2023From Adaptive Query Release to Machine Unlearning20 Jul
- 2023Towards Unbounded Machine Unlearning20 Feb
- 2022Forget Unlearning: Towards True Data-Deletion in Machine Learning17 Oct
- 2021Remember What You Want to Forget: Algorithms for Machine Unlearning4 Mar
- 2021Machine Unlearning via Algorithmic Stability25 Feb
Other references · 16
- 2018Neural Tangent Kernel: Convergence and Generalization in Neural Networkscited by 2,597
- 2019Machine Unlearningcited by 1,020
- 2021Membership Inference Attacks From First Principlescited by 839
- 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 599
- 2016Linear Convergence of Gradient and Proximal-Gradient Methods Under the Polyak-Lojasiewicz Conditioncited by 526
- 2019Certified Data Removal from Machine Learning Modelscited by 512
- 2024The WMDP Benchmark: Measuring and Reducing Malicious Use With Unlearningcited by 488
- 2019Making AI Forget You: Data Deletion in Machine Learningcited by 447
- 2018Lipschitz regularity of deep neural networks: analysis and efficient estimationcited by 413
- 2020Descent-to-Delete: Gradient-Based Methods for Machine Unlearningcited by 303
- 2020Loss landscapes and optimization in over-parameterized non-linear systems and neural networkscited by 231
- 2020Forgetting Outside the Box: Scrubbing Deep Networks of Information Accessible from Input-Output Observationscited by 171
4 more
- 2020Mixed-Privacy Forgetting in Deep Networkscited by 158
- 2023Handbook of Convergence Theorems for (Stochastic) Gradient Methodscited by 158
- 2022SIFU: Sequential Informed Federated Unlearning for Efficient and Provable Client Unlearning in Federated Optimizationcited by 16
- 2024Scalable and Certifiable Graph Unlearning: Overcoming the Approximation Error Barriercited by 13
Built on by
Not cited yet.