Selective Forgetting in Task-Progressive Learning Through Machine Unlearning
Task-progressive learning (TPL) entails training a model sequentially on multiple tasks while mitigating the phenomenon of “catastrophic forgetting”, where new tasks erase previously learned knowledge. ATPL model can face security challenges, as some tasks are affected by so-called backdoors and adversarial attacks. These attacks exploit vulnerabilities in machine learning models by implanting malicious triggers or perturbing inputs to induce misclassification. This paper explores the role of machine unlearning in TPL to counter those attacks. We consider two common architectures: static and dynamic networks. In static architectures, each task is learned by applying weight update penalties through regularization without any change in neural architecture. In contrast, dynamic architectures expand the network for each task by freezing parameters. We explore the potential for machine unlearning in each scenario to counteract the specified attacks. Specifically, we demonstrate how mechanisms for selective forgetting can be adapted to the TPL models to efficiently “unlearn” tasks compromised by backdoor and adversarial attacks while preserving the knowledge of other tasks. We demonstrate our method using the MNIST image dataset.
Authors
- Johann Knechtel (ORCID: https://orcid.org/0000-0001-5093-2939)
- Ozgur Sinanoglu (ORCID: https://orcid.org/0000-0003-0782-0397)
- Rupesh Raj Karn (ORCID: https://orcid.org/0009-0008-3774-7016)
Institutions
- New York University (US)
Publication Details
- Published
- 2024-09-20
- DOI
- https://doi.org/10.1109/icmlc63072.2024.10935063
- Primary Topic
- Domain Adaptation and Few-Shot Learning
- Type
- article
- Field-Weighted Citation Impact
- 0.00