Reference-Guided Machine Unlearning
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
Machine unlearning aims to remove the influence of specific training data from a model while preserving its general utility. In vision, many approximate unlearning methods pursue this goal through degradation-based heuristics, such as loss maximization or random labeling. Yet making a model worse on forget samples is not the same as making it behave as if those examples had never been seen: these signals can be poorly conditioned, destabilize optimization, and harm generalization. We argue that approximate unlearning should instead prioritize distributional indistinguishability, aligning the model's predictive behavior on forget data with that on truly unseen data. Motivated by this principle, we propose Reference-Guided Unlearning (ReGUn), a vision unlearning framework that uses disjoint held-out data to construct a principled, class-conditioned reference distribution for distillation. Rather than explicitly degrading predictions on forget examples, ReGUn guides them toward non-member behavior through held-out supervision. Across multiple architectures, natural image datasets, and forget fractions, ReGUn achieves a competitive forgetting--utility trade-off relative to standard approximate baselines while closely matching retrain-like membership inference behavior. As one instantiation of this principle, the results suggest that simple objectives designed around indistinguishability can provide an effective alternative to complex degradation-based unlearning procedures.
Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 34 of its 48 references that are in the map. First posted on arXiv 11 Mar 2026.
Builds on
34 of 48 references.
Closest ancestors · 20
Same direction, newest first
- 2026The Unseen Threat: Residual Knowledge in Machine Unlearning under Perturbed Samples29 Jan
- 2026FG-OrIU: Towards Better Forgetting via Feature-Gradient Orthogonality for Incremental Unlearning20 Jan
- 2025Ascent Fails to Forget30 Sep
- 2025CoUn: Empowering Machine Unlearning via Contrastive Learning19 Sep
- 2025Targeted Forgetting of Image Subgroups in CLIP Models3 Jun
- 2025MUBox: A Critical Evaluation Framework of Deep Machine Unlearning13 May
- 2025Learning to Unlearn while Retaining: Combating Gradient Conflicts in Machine Unlearning8 Mar
- 2024Attribute-to-Delete: Machine Unlearning via Datamodel Matching30 Oct
- 2024Are we making progress in unlearning? Findings from the first NeurIPS unlearning competition13 Jun
- 2024An Information Theoretic Approach to Machine Unlearning2 Feb
- 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generation19 Oct
- 2023Fast Machine Unlearning Without Retraining Through Selective Synaptic Dampening15 Aug
8 more
- 2023Model Sparsity Can Simplify Machine Unlearning11 Apr
- 2023Towards Unbounded Machine Unlearning20 Feb
- 2022A Survey of Machine Unlearning6 Sep
- 2022Can Bad Teaching Induce Forgetting? Unlearning in Deep Networks using an Incompetent Teacher17 May
- 2022Towards Adversarial Evaluations for Inexact Machine Unlearning17 Jan
- 2021Fast Yet Effective Machine Unlearning17 Nov
- 2021On the Necessity of Auditable Algorithmic Definitions for Machine Unlearning22 Oct
- 2021Unrolling SGD: Understanding Factors Influencing Machine Unlearning27 Sep
Other references · 14
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2021Swin Transformer: Hierarchical Vision Transformer using Shifted Windowscited by 12,082
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,221
- 2019Machine Unlearningcited by 1,020
- 2019When Does Label Smoothing Help?cited by 985
- 2021Membership Inference Attacks From First Principlescited by 839
- 2023Erasing Concepts from Diffusion Modelscited by 530
- 2019Certified Data Removal from Machine Learning Modelscited by 512
- 2020Amnesiac Machine Learningcited by 305
- 2020Descent-to-Delete: Gradient-Based Methods for Machine Unlearningcited by 303
- 2023Low-Cost High-Power Membership Inference Attackscited by 99
- 2022Recommendation Unlearningcited by 71
Built on by
Citing papers per year: 2026: 1.
1 paper.