{"total":77,"rows":[{"id":"2401.06121","title":"TOFU: A Task of Fictitious Unlearning for LLMs","created":"2024-01-11","cited_by_count":533,"area":"safety"},{"id":"2407.15549","title":"Latent Adversarial Training Improves Robustness to Persistent Harmful Behaviors in LLMs","created":"2024-07-22","cited_by_count":173,"area":"safety"},{"id":"2402.16835","title":"Eight Methods to Evaluate Robust Unlearning in LLMs","created":"2024-02-26","cited_by_count":163,"area":"safety"},{"id":"2409.18025","title":"An Adversarial Perspective on Machine Unlearning for AI Safety","created":"2024-09-26","cited_by_count":123,"area":"safety"},{"id":"2312.07913","title":"A Survey of Text Watermarking in the Era of Large Language Models","created":"2023-12-13","cited_by_count":112,"area":"safety"},{"id":"2406.13356","title":"Unlearning or Obfuscating? Jogging the Memory of Unlearned LLMs via Benign Relearning","created":"2024-06-19","cited_by_count":84,"area":"safety"},{"id":"2410.16454","title":"Catastrophic Failure of LLM Unlearning via Quantization","created":"2024-10-21","cited_by_count":81,"area":"safety"},{"id":"2502.05374","title":"Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyond","created":"2025-02-07","cited_by_count":79,"area":"safety"},{"id":"2406.10890","title":"RWKU: Benchmarking Real-World Knowledge Unlearning for Large Language Models","created":"2024-06-16","cited_by_count":78,"area":"safety"},{"id":"2410.11143","title":"LLM Unlearning via Loss Adjustment with Only Forget Data","created":"2024-10-14","cited_by_count":75,"area":"safety"},{"id":"2410.02879","title":"Position: LLM Unlearning Benchmarks are Weak Measures of Progress","created":"2024-10-03","cited_by_count":63,"area":"safety"},{"id":"2505.16831","title":"Unlearning Isn't Deletion: Investigating Reversibility of Machine Unlearning in LLMs","created":"2025-05-22","cited_by_count":42,"area":"safety"},{"id":"2404.02062","title":"Digital Forgetting in Large Language Models: A Survey of Unlearning Methods","created":"2024-04-02","cited_by_count":40,"area":"safety"},{"id":"2402.05813","title":"Selective Forgetting: Advancing Machine Unlearning Techniques and Evaluation in Language Models","created":"2024-02-08","cited_by_count":39,"area":"safety"},{"id":"2505.11953","title":"Exploring Criteria of Loss Reweighting to Enhance LLM Unlearning","created":"2025-05-17","cited_by_count":39,"area":"safety"},{"id":"2404.11045","title":"Offset Unlearning for Large Language Models","created":"2024-04-17","cited_by_count":36,"area":"safety"},{"id":"2407.16997","title":"Revisiting Who's Harry Potter: Towards Targeted Unlearning from a Causal Intervention Perspective","created":"2024-07-24","cited_by_count":36,"area":"safety"},{"id":"2410.12949","title":"Mechanistic Unlearning: Robust Knowledge Unlearning and Editing via Mechanistic Localization","created":"2024-10-16","cited_by_count":35,"area":"safety"},{"id":"2408.06223","title":"On Effects of Steering Latent Representation for Large Language Model Unlearning","created":"2024-08-12","cited_by_count":32,"area":"safety"},{"id":"2406.11614","title":"Intrinsic Test of Unlearning Using Parametric Knowledge Traces","created":"2024-06-17","cited_by_count":29,"area":"safety"},{"id":"2406.09179","title":"Towards Effective Evaluations and Comparisons for LLM Unlearning Methods","created":"2024-06-13","cited_by_count":27,"area":"safety"},{"id":"2406.16257","title":"Towards Scalable Exact Machine Unlearning Using Parameter-Efficient Fine-Tuning","created":"2024-06-24","cited_by_count":27,"area":"safety"},{"id":"2408.10682","title":"Towards Robust Knowledge Unlearning: An Adversarial Framework for Assessing and Improving Unlearning Robustness in Large Language Models","created":"2024-08-20","cited_by_count":27,"area":"safety"},{"id":"2410.06606","title":"Dissecting Fine-Tuning Unlearning in Large Language Models","created":"2024-10-09","cited_by_count":26,"area":"safety"},{"id":"2410.17509","title":"WAGLE: Strategic Weight Attribution for Effective and Modular Unlearning in Large Language Models","created":"2024-10-23","cited_by_count":26,"area":"safety"},{"id":"2407.10058","title":"Learning to Refuse: Towards Mitigating Privacy Risks in LLMs","created":"2024-07-14","cited_by_count":23,"area":"safety"},{"id":"2411.02631","title":"Extracting Unlearned Information from LLMs with Activation Steering","created":"2024-11-04","cited_by_count":21,"area":"safety"},{"id":"2406.15796","title":"Unveiling Entity-Level Unlearning for Large Language Models: A Comprehensive Analysis","created":"2024-06-22","cited_by_count":14,"area":"safety"},{"id":"2410.15153","title":"Evaluating Deep Unlearning in Large Language Models","created":"2024-10-19","cited_by_count":14,"area":"safety"},{"id":"2406.09325","title":"REVS: Unlearning Sensitive Information in Language Models via Rank Editing in the Vocabulary Space","created":"2024-06-13","cited_by_count":13,"area":"safety"},{"id":"2410.02159","title":"Mitigating Memorization In Language Models","created":"2024-10-03","cited_by_count":12,"area":"safety"},{"id":"2504.10185","title":"LLM Unlearning Reveals a Stronger-Than-Expected Coreset Effect in Current Benchmarks","created":"2025-04-14","cited_by_count":12,"area":"safety"},{"id":"2506.06278","title":"Distillation Robustifies Unlearning","created":"2025-06-06","cited_by_count":11,"area":"safety"},{"id":"2509.02820","title":"Unlearning That Lasts: Utility-Preserving, Robust, and Almost Irreversible Forgetting in LLMs","created":"2025-09-02","cited_by_count":11,"area":"safety"},{"id":"2502.12658","title":"R.R.: Unveiling LLM Training Privacy through Recollection and Ranking","created":"2025-02-18","cited_by_count":10,"area":"safety"},{"id":"2505.16252","title":"Does Localization Inform Unlearning? A Rigorous Examination of Local Parameter Attribution for Knowledge Unlearning in Language Models","created":"2025-05-22","cited_by_count":10,"area":"safety"},{"id":"2506.05314","title":"Constrained Entropic Unlearning: A Primal-Dual Framework for Large Language Models","created":"2025-06-05","cited_by_count":10,"area":"safety"},{"id":"2501.19202","title":"Improving LLM Unlearning Robustness via Random Perturbations","created":"2025-01-31","cited_by_count":9,"area":"safety"},{"id":"2502.15082","title":"UPCORE: Utility-Preserving Coreset Selection for Balanced Unlearning","created":"2025-02-20","cited_by_count":7,"area":"safety"},{"id":"2509.20977","title":"CLUE: Conflict-guided Localization for LLM Unlearning Framework","created":"2025-09-25","cited_by_count":7,"area":"safety"},{"id":"2409.13054","title":"LLM Surgery: Efficient Knowledge Unlearning and Editing in Large Language Models","created":"2024-09-19","cited_by_count":5,"area":"safety"},{"id":"2502.19982","title":"Erasing Without Remembering: Implicit Knowledge Forgetting in Large Language Models","created":"2025-02-27","cited_by_count":5,"area":"safety"},{"id":"2505.14832","title":"SEPS: A Separability Measure for Robust Unlearning in LLMs","created":"2025-05-20","cited_by_count":5,"area":"safety"},{"id":"2506.10236","title":"Prompt Attacks Reveal Superficial Knowledge Removal in Unlearning Methods","created":"2025-06-11","cited_by_count":5,"area":"safety"},{"id":"2512.19025","title":"The Erasure Illusion: Stress-Testing the Generalization of LLM Forgetting Evaluation","created":"2025-12-22","cited_by_count":5,"area":"safety"},{"id":"2411.04388","title":"Unlearning in- vs. out-of-distribution data in LLMs under gradient-based method","created":"2024-11-07","cited_by_count":4,"area":"safety"},{"id":"2505.06027","title":"Unilogit: Robust Machine Unlearning for LLMs Using Uniform-Target Self-Distillation","created":"2025-05-09","cited_by_count":4,"area":"safety"},{"id":"2507.11128","title":"What Should LLMs Forget? Quantifying Personal Data in LLMs for Right-to-Be-Forgotten Requests","created":"2025-07-15","cited_by_count":4,"area":"safety"},{"id":"2509.24675","title":"Understanding the Dilemma of Unlearning for Large Language Models","created":"2025-09-29","cited_by_count":4,"area":"safety"},{"id":"2512.20794","title":"Investigating Model Editing for Unlearning in Large Language Models","created":"2025-12-23","cited_by_count":4,"area":"safety"},{"id":"2506.13181","title":"Align-then-Unlearn: Embedding Alignment for LLM Unlearning","created":"2025-06-16","cited_by_count":3,"area":"safety"},{"id":"2601.15111","title":"Auditing Language Model Unlearning via Information Decomposition","created":"2026-01-21","cited_by_count":3,"area":"safety"},{"id":"2508.01324","title":"Towards Evaluation for Real-World LLM Unlearning","created":"2025-08-02","cited_by_count":2,"area":"safety"},{"id":"2509.25973","title":"Scalable and Robust LLM Unlearning by Correcting Responses with Retrieved Exclusions","created":"2025-09-30","cited_by_count":2,"area":"safety"},{"id":"2510.07626","title":"LLM Unlearning Under the Microscope: A Full-Stack View on Methods and Metrics","created":"2025-10-08","cited_by_count":2,"area":"safety"},{"id":"2510.09007","title":"LLM Unlearning on Noisy Forget Sets: A Study of Incomplete, Rewritten, and Watermarked Data","created":"2025-10-10","cited_by_count":2,"area":"safety"},{"id":"2602.03787","title":"Inference-time Unlearning Using Conformal Prediction","created":"2026-02-03","cited_by_count":2,"area":"safety"},{"id":"2606.13873","title":"Natively Unlearnable Large Language Models","created":"2026-06-11","cited_by_count":2,"area":"safety"},{"id":"2505.09500","title":"Layered Unlearning for Adversarial Relearning","created":"2025-05-14","cited_by_count":1,"area":"safety"},{"id":"2506.15076","title":"Learning-Time Encoding Shapes Unlearning in LLMs","created":"2025-06-18","cited_by_count":1,"area":"safety"},{"id":"2508.20443","title":"Towards Mitigating Excessive Forgetting in LLM Unlearning via Entanglement-Guidance with Proxy Constraint","created":"2025-08-28","cited_by_count":1,"area":"safety"},{"id":"2602.21773","title":"Easy to Learn, Yet Hard to Forget: Towards Robust Unlearning Under Bias","created":"2026-02-25","cited_by_count":1,"area":"safety"},{"id":"2603.00823","title":"A Comprehensive Evaluation of LLM Unlearning Robustness under Multi-Turn Interaction","created":"2026-02-28","cited_by_count":1,"area":"safety"},{"id":"2604.13777","title":"From Anchors to Supervision: Memory-Graph Guided Corpus-Free Unlearning for Large Language Models","created":"2026-04-15","cited_by_count":1,"area":"safety"},{"id":"2605.24614","title":"Measuring the Depth of LLM Unlearning via Activation Patching","created":"2026-05-23","cited_by_count":1,"area":"safety"},{"id":"2608.11408","title":"Measure, Don't Optimize: Forecasting Recovery in LLM Unlearning","created":"2026-08-11","cited_by_count":1,"area":"safety"},{"id":"2504.12996","title":"SHA256 at SemEval-2025 Task 4: Selective Amnesia -- Constrained Unlearning for Large Language Models via Knowledge Isolation","created":"2025-04-17","cited_by_count":0,"area":"safety"},{"id":"2601.10566","title":"Representation-Aware Unlearning via Activation Signatures: From Suppression to Entity-Signature Erasure","created":"2026-01-15","cited_by_count":0,"area":"safety"},{"id":"2605.00364","title":"Unlearning What Matters: Token-Level Attribution for Precise Language Model Unlearning","created":"2026-05-01","cited_by_count":0,"area":"safety"},{"id":"2605.30919","title":"De-attribute to Forget for LLM Unlearning","created":"2026-05-29","cited_by_count":0,"area":"safety"},{"id":"2606.27683","title":"CBD: API-Only LLM Black-Box Unlearning through Controlled Behavioral Divergence","created":"2026-06-26","cited_by_count":0,"area":"safety"},{"id":"2607.03932","title":"MPSelectTune: Prompt-type Selection for Fine-tuning improves Concept Unlearning in LLMs","created":"2026-07-04","cited_by_count":0,"area":"safety"},{"id":"2607.16227","title":"LLM Unlearning for Cyber Defense: A Survey on Methods, Challenges, and Emerging Threats","created":"2026-06-23","cited_by_count":0,"area":"safety"},{"id":"2608.25429","title":"Distance Is Not Enough: Forget-Retain Alignment Gap Predicts LLM Relearning Robustness","created":"2026-08-26","cited_by_count":0,"area":"safety"},{"id":"2608.29943","title":"On the Recoverability of Private Information Unlearning in Large Language Models","created":"2026-08-30","cited_by_count":0,"area":"safety"},{"id":"2609.16229","title":"Test-Time Unlearning via Sparse Autoencoder","created":"2026-09-14","cited_by_count":0,"area":"safety"},{"id":"2609.36612","title":"Do LLMs Really Forget? Hidden-State Leakage in Model Unlearning and How to Fix it","created":"2026-09-29","cited_by_count":0,"area":"safety"}],"next_cursor":null}