Unlearning Evaluation through Subset Statistical Independence
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
Evaluating machine unlearning remains challenging, as existing methods typically require retraining reference models or performing membership inference attacks, both of which rely on prior access to training configuration or supervision labels, making them impractical in realistic scenarios. Motivated by the fact that most unlearning algorithms remove a small, random subset of the training data, we propose a subset-level evaluation framework based on statistical independence. Specifically, we design a tailored use of the Hilbert-Schmidt Independence Criterion to assess whether the model outputs on a given subset exhibit statistical dependence, without requiring model retraining or auxiliary classifiers. Our method provides a simple, standalone evaluation procedure that aligns with unlearning workflows. Extensive experiments demonstrate that our approach reliably distinguishes in-training from out-of-training subsets and clearly differentiates unlearning effectiveness, even when existing evaluations fall short.
Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 28 of its 45 references that are in the map. First posted on arXiv 28 Feb 2026.
Builds on
28 of 45 references.
Closest ancestors · 11
Same direction, newest first
- 2024A Reliable Cryptographic Framework for Empirical Machine Unlearning Evaluation17 Apr
- 2024Label-Agnostic Forgetting: A Supervision-Free Unlearning in Deep Models31 Mar
- 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generation19 Oct
- 2023Machine Unlearning: Solutions and Challenges14 Aug
- 2023Model Sparsity Can Simplify Machine Unlearning11 Apr
- 2023Towards Unbounded Machine Unlearning20 Feb
- 2022A Survey of Machine Unlearning6 Sep
- 2022Zero-Shot Machine Unlearning14 Jan
- 2021Fast Yet Effective Machine Unlearning17 Nov
- 2021Unrolling SGD: Understanding Factors Influencing Machine Unlearning27 Sep
- 2021Hard to Forget: Poisoning Attacks on Certified Machine Unlearning17 Sep
Other references · 17
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2015U-Net: Convolutional Networks for Biomedical Image Segmentationcited by 19,604
- 2018A Style-Based Generator Architecture for Generative Adversarial Networkscited by 5,986
- 2022Elucidating the Design Space of Diffusion-Based Generative Modelscited by 2,994
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,221
- 2017Understanding Black-box Predictions via Influence Functionscited by 1,714
- 2019StarGAN v2: Diverse Image Synthesis for Multiple Domainscited by 1,095
- 2019Machine Unlearningcited by 1,020
- 2014Striving for Simplicity: The All Convolutional Netcited by 983
- 2018ML-Leaks: Model and Data Independent Membership Inference Attacks and Defenses on Machine Learning Modelscited by 475
- 2019Stolen Memories: Leveraging Model Memorization for Calibrated White-Box Membership Inferencecited by 168
- 2019Privacy Risks of Securing Machine Learning Models against Adversarial Examplescited by 136
5 more
- 2020Learning Deep Kernels for Non-Parametric Two-Sample Testscited by 129
- 2022Backdoor Defense with Machine Unlearningcited by 61
- 2020Formalizing Data Deletion in the Context of the Right to be Forgottencited by 46
- 2025Backdoor Token Unlearning: Exposing and Defending Backdoors in Pretrained Language Modelscited by 6
- 2025TrojanTime: Backdoor Attacks on Time Series Classificationcited by 3
Built on by
Citing papers per year: 2026: 1.
1 paper.
- 2026Evaluating Machine Unlearning in ASRcited by 0
- 2026Evaluating Machine Unlearning in ASR28 Sep 2026