Ferrari: Federated Feature Unlearning via Optimizing Feature Sensitivity
About
The advent of Federated Learning (FL) highlights the practical necessity for the right to be forgotten for all clients, allowing them to request data deletion from the machine learning models service provider. This necessity has spurred a growing demand for Federated Unlearning (FU). Feature unlearning has gained considerable attention due to its applications in unlearning sensitive, backdoor, and biased features. Existing methods employ the influence function to achieve feature unlearning, which is impractical for FL as it necessitates the participation of other clients, if not all, in the unlearning process. Furthermore, current research lacks an evaluation of the effectiveness of feature unlearning. To address these limitations, we define feature sensitivity in evaluating feature unlearning according to Lipschitz continuity. This metric characterizes the model outputs rate of change or sensitivity to perturbations in the input feature. We then propose an effective federated feature unlearning framework called Ferrari, which minimizes feature sensitivity. Extensive experimental results and theoretical analysis demonstrate the effectiveness of Ferrari across various feature unlearning scenarios, including sensitive, backdoor, and biased features. The code is publicly available at https://github.com/OngWinKent/Federated-Feature-Unlearning
Related benchmarks
| Task | Dataset | Result | Rank | |
|---|---|---|---|---|
| Biased Feature Unlearning | CMNIST Dr split (retain) | Accuracy84.31 | 6 | |
| Biased Feature Unlearning | CelebA Dr (retain) | Accuracy94.18 | 6 | |
| Biased Feature Unlearning | CMNIST (D_t) | Accuracy83.85 | 6 | |
| Biased Feature Unlearning | CelebA (D_t) | Accuracy94.62 | 6 | |
| Sensitive Feature Unlearning | CelebA (D_t) | Accuracy0.9226 | 6 | |
| Sensitive Feature Unlearning | Adult (D_t) | Accuracy81.02 | 6 | |
| Sensitive Feature Unlearning | Diabetes (D_t) | Accuracy (%)79.53 | 6 | |
| Sensitive Feature Unlearning | IMDB D_t | Accuracy89.15 | 6 | |
| Sensitive Feature Unlearning | CelebA | Attack Success Rate51.28 | 6 | |
| Sensitive Feature Unlearning | IMDB | ASR (%)43.75 | 6 |