RAZOR: Ratio-Aware Layer Editing for Targeted Unlearning in Vision Transformers and Diffusion Models
On the map: Multimodal LLMs / vision-language models → MLLM jailbreaks and adversarial robustness
also in 2 more
Abstract (arXiv)
Transformer based diffusion and vision-language models have achieved remarkable success; yet, efficiently removing undesirable or sensitive information without retraining remains a central challenge for model safety and compliance. We introduce Ratio-Aware Zero/One-step Optimized Retentive unlearning (RAZOR), a lightweight, model-agnostic unlearning framework that generalizes forgetting updates to coordinated multi-layer and multi-head edits within transformer backbones. RAZOR identifies the most important layers and attention heads by measuring how much they contribute to forgetting the target data while preserving useful knowledge. Then, it updates these parts of the model using a carefully regularized rule to avoid harming overall performance. The set of edited components grows gradually, ensuring precise unlearning without over-editing or damaging unrelated capabilities. We evaluate RAZOR on CLIP, Stable Diffusion, and vision-language models (VLMs) using widely adopted unlearning benchmarks covering identity, style, and object erasure tasks. Our results show that RAZOR achieves highly accurate and stable forgetting, even under quantization. This approach offers stronger retention and better efficiency than prior methods. Notably, it also operates significant faster than conventional techniques. These results demonstrate that RAZOR is a practical and scalable solution for safe, adaptive unlearning in transformer-based vision models.
Key facts. Cited by 3 papers in the map (data through 7 Oct 2026). Placed in MLLM jailbreaks and adversarial robustness, one of 16 directions in Multimodal LLMs / vision-language models. Builds on 56 of its 71 references that are in the map. First posted on arXiv 16 Mar 2026.
Builds on
56 of 71 references.
References · 56
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
- 2023Visual Instruction Tuningcited by 7,792
- 2023Improved Baselines with Visual Instruction Tuningcited by 4,362
- 2014Deep Learning Face Attributes in the Wildcited by 3,679
- 2022Locating and Editing Factual Associations in GPTcited by 2,609
- 2022GPTQ: Accurate Post-Training Quantization for Generative Pre-trained Transformerscited by 1,838
- 2023MME: A Comprehensive Evaluation Benchmark for Multimodal Large Language Modelscited by 1,624
- 2021LAION-400M: Open Dataset of CLIP-Filtered 400 Million Image-Text Pairscited by 1,544
- 2020Gradient Surgery for Multi-Task Learningcited by 1,210
- 2022Reproducible scaling laws for contrastive language-image learningcited by 1,163
- 2019Machine Unlearningcited by 1,020
38 more
- 2021A Survey of Quantization Methods for Efficient Neural Network Inferencecited by 798
- 2023Erasing Concepts from Diffusion Modelscited by 530
- 2019Certified Data Removal from Machine Learning Modelscited by 512
- 2019Making AI Forget You: Data Deletion in Machine Learningcited by 447
- 2014New insights and perspectives on the natural gradient methodcited by 435
- 2023Unified Concept Editing in Diffusion Modelscited by 377
- 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generationcited by 376
- 2019Orthogonal Gradient Descent for Continual Learningcited by 361
- 2021Remember What You Want to Forget: Algorithms for Machine Unlearningcited by 360
- 2023Ablating Concepts in Text-to-Image Diffusion Modelscited by 312
- 2022A Survey of Machine Unlearningcited by 298
- 2023Forget-Me-Not: Learning to Forget in Text-to-Image Diffusion Modelscited by 297
- 2023Large Language Model Unlearningcited by 288
- 2021Unrolling SGD: Understanding Factors Influencing Machine Unlearningcited by 274
- 2023Towards Unbounded Machine Unlearningcited by 261
- 2023LEACE: Perfect linear concept erasure in closed formcited by 254
- 2023Model Sparsity Can Simplify Machine Unlearningcited by 206
- 2023Fast Machine Unlearning Without Retraining Through Selective Synaptic Dampeningcited by 177
- 2020Forgetting Outside the Box: Scrubbing Deep Networks of Information Accessible from Input-Output Observationscited by 171
- 2023One-Dimensional Adapter to Rule Them All: Concepts, Diffusion Models and Erasing Applicationscited by 164
- 2024The rising costs of training frontier AI modelscited by 91
- 2022Towards Adversarial Evaluations for Inexact Machine Unlearningcited by 82
- 2024Catastrophic Failure of LLM Unlearning via Quantizationcited by 76
- 2025SAeUron: Interpretable Concept Unlearning in Diffusion Models with Sparse Autoencoderscited by 75
- 2024Erasing Undesirable Influence in Diffusion Modelscited by 52
- 2024Scissorhands: Scrub Data Influence via Connection Sensitivity in Networkscited by 50
- 2023Exploring the Landscape of Machine Unlearning: A Comprehensive Survey and Taxonomycited by 44
- 2025Cross the Gap: Exposing the Intra-modal Misalignment in CLIP via Modality Inversioncited by 42
- 2023Learn to Unlearn for Deep Neural Networks: Minimizing Unlearning Interference with Gradient Projectioncited by 37
- 2024Revisiting Who's Harry Potter: Towards Targeted Unlearning from a Causal Intervention Perspectivecited by 33
- 2024A Review on Machine Unlearningcited by 30
- 2025Learning to Unlearn while Retaining: Combating Gradient Conflicts in Machine Unlearningcited by 19
- 2022The Cost of Training Machine Learning Models over Distributed Data Sourcescited by 18
- 2024Targeted Unlearning with Single Layer Unlearning Gradientcited by 16
- 2024Contrastive Unlearning: A Contrastive Approach to Machine Unlearningcited by 14
- 2024Loss-Free Machine Unlearningcited by 12
- 2025LoTUS: Large-Scale Machine Unlearning with a Taste of Uncertaintycited by 12
- 2025From Dormant to Deleted: Tamper-Resistant Unlearning Through Weight-Space Regularizationcited by 12
50 most cited of 56 All 56 (JSON)
Built on by
Citing papers per year: 2026: 3.
3 papers.
Similar, not cited
Close in wording, no citation either way
- 2026Unlearning the Unpromptable: Prompt-free Instance Unlearning in Diffusion Models
- 2026Stochastic Meta-Unlearning: Bridging Language Backbone and Multimodal Unlearning
- 2026SPARE: Self-distillation for PARameter-Efficient Removal
- 2025Continual Unlearning for Text-to-Image Diffusion Models: A Regularization Perspective
- 2025Sculpting Memory: Multi-Concept Forgetting in Diffusion Models via Dynamic Mask and Concept-Aware Optimization
- 2026One Modality to Forget Them All: Enhancing Cross-Modal Unlearning in Vision-Language Models
- 2025MLLMEraser: Achieving Test-Time Unlearning in Multimodal Large Language Models through Activation Steering
- 2026ICED: Concept-level Machine Unlearning via Interpretable Concept Decomposition