mlsanityData to 7 Oct 2026

Do Influence-Derived Data Perturbations Enable Machine Unlearning? A Controlled Study of Three Plausible Roles

arXiv 2609.12313 ↗First posted 11 Sep 2026cs.AIcited by 0

On the map: LLM safety and security → Machine unlearning

Abstract (arXiv)

We evaluate Deep Perturbation Learning (DPL), which perturbs training images and labels along influence-derived directions, in three roles in which prior work has positioned it for machine unlearning: a direct deletion signal (the strongest claim), a utility-preserving regularizer, and a warm start for adversarial unlearning. Evidence for the weaker roles has been used to support the stronger one, so we test each role separately under a matched protocol with exact-seed retraining baselines. An audit of the public implementation identifies two correctness issues: image directions are computed on augmented, normalized tensors but applied to raw images, and the label perturbation falls below float32 resolution, leaving labels unchanged. After correcting the image-perturbation pipeline, DPL fails the direct-deletion criterion on CIFAR-10/ResNet-18 in all three paired seeds. Its utility effects are inconsistent in sign across seeds, and once direction-computation time is counted it underperforms simple warm-start baselines. A one-seed Tiny ImageNet check likewise does not favor DPL as a regularizer or warm start; preprocessing inconsistencies in the released code make the direct comparison there inconclusive. These results cover random instance deletion only and do not rule out influence-based methods in other deletion regimes. We release a role-matched evaluation protocol and an audit checklist for perturbation-based deletion claims.

Key facts. No citing papers in the map yet (data through 7 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 34 of its 38 references that are in the map. First posted on arXiv 11 Sep 2026.

Builds on

34 of 38 references.

Closest ancestors · 17

Same direction, newest first

  1. 2025Rectifying Privacy and Efficacy Measurements in Machine Unlearning: A New Inference Attack Perspective16 Jun
  2. 2024Deep Unlearn: Benchmarking Machine Unlearning for Image Classification2 Oct
  3. 2024Are we making progress in unlearning? Findings from the first NeurIPS unlearning competition13 Jun
  4. 2024What makes unlearning hard and what to do about it3 Jun
  5. 2024A Reliable Cryptographic Framework for Empirical Machine Unlearning Evaluation17 Apr
  6. 2024Inexact Unlearning Needs More Careful Evaluations to Avoid a False Sense of Privacy2 Mar
  7. 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generation19 Oct
  8. 2023Fast Machine Unlearning Without Retraining Through Selective Synaptic Dampening15 Aug
  9. 2023Boundary Unlearning21 Mar
  10. 2023Towards Unbounded Machine Unlearning20 Feb
  11. 2022Can Bad Teaching Induce Forgetting? Unlearning in Deep Networks using an Incompetent Teacher17 May
  12. 2021Fast Yet Effective Machine Unlearning17 Nov
5 more
  1. 2021On the Necessity of Auditable Algorithmic Definitions for Machine Unlearning22 Oct
  2. 2021Unrolling SGD: Understanding Factors Influencing Machine Unlearning27 Sep
  3. 2021Machine Unlearning of Features and Labels26 Aug
  4. 2021Remember What You Want to Forget: Algorithms for Machine Unlearning4 Mar
  5. 2021Machine Unlearning via Algorithmic Stability25 Feb

Other references · 17

  1. 2014Explaining and Harnessing Adversarial Examplescited by 7,287
  2. 2016Membership Inference Attacks against Machine Learning Modelscited by 2,221
  3. 2017Understanding Black-box Predictions via Influence Functionscited by 1,714
  4. 2020Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attackscited by 1,442
  5. 2019Machine Unlearningcited by 1,020
  6. 2021Membership Inference Attacks From First Principlescited by 839
  7. 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 599
  8. 2019Certified Data Removal from Machine Learning Modelscited by 512
  9. 2019Making AI Forget You: Data Deletion in Machine Learningcited by 447
  10. 2019On Evaluating Adversarial Robustnesscited by 442
  11. 2020Amnesiac Machine Learningcited by 305
  12. 2020Descent-to-Delete: Gradient-Based Methods for Machine Unlearningcited by 303
5 more
  1. 2020Approximate Data Deletion from Machine Learning Modelscited by 250
  2. 2020Influence Functions in Deep Learning Are Fragilecited by 247
  3. 2022If Influence Functions are the Answer, Then What is the Question?cited by 142
  4. 2023Low-Cost High-Power Membership Inference Attackscited by 99
  5. 2024Revisiting inverse Hessian vector products for calculating influence functionscited by 8

Built on by

Not cited yet.