Large Language Models Relearn Removed Concepts
Not on the map. Why?
Abstract (arXiv)
Advances in model editing through neuron pruning hold promise for removing undesirable concepts from large language models. However, it remains unclear whether models have the capacity to reacquire pruned concepts after editing. To investigate this, we evaluate concept relearning in models by tracking concept saliency and similarity in pruned neurons during retraining. Our findings reveal that models can quickly regain performance post-pruning by relocating advanced concepts to earlier layers and reallocating pruned concepts to primed neurons with similar semantics. This demonstrates that models exhibit polysemantic capacities and can blend old and new concepts in individual neurons. While neuron pruning provides interpretability into model concepts, our results highlight the challenges of permanent concept removal for improved model textitsafety. Monitoring concept reemergence and developing techniques to mitigate relearning of unsafe concepts will be important directions for more robust model editing. Overall, our work strongly demonstrates the resilience and fluidity of concept representations in LLMs post concept removal.
Key facts. Cited by 26 papers in the map (data through 7 Oct 2026). Builds on 11 of its 22 references that are in the map. First posted on arXiv 3 Jan 2024.
Builds on
11 of 22 references.
References · 11
- 2019DistilBERT, a distilled version of BERT: smaller, faster, cheaper and lightercited by 4,243
- 2013Distributed Representations of Words and Phrases and their Compositionalitycited by 3,462
- 2020Compositional Explanations of Neuronscited by 172
- 2018Identifying and Controlling Important Neurons in Neural Machine Translationcited by 110
- 2020Analyzing Individual Neurons in Pre-trained Language Modelscited by 97
- 2022The Unreasonable Effectiveness of Random Pruning: Return of the Most Naive Baseline for Sparse Trainingcited by 85
- 2021On the Pitfalls of Analyzing Individual Neurons in Language Modelscited by 61
- 2022Discovering Latent Concepts Learned in BERTcited by 56
- 2020Similarity Analysis of Contextual Word Representation Modelscited by 54
- 2018NeuroX: A Toolkit for Analyzing Individual Neurons in Neural Networkscited by 31
- 2018Studying the Plasticity in Deep Convolutional Neural Networks using Random Pruningcited by 6
Built on by
Citing papers per year: 2024: 9; 2025: 14; 2026: 3.
26 papers.
Sort:
By area:
- 2024Latent Adversarial Training Improves Robustness to Persistent Harmful Behaviors in LLMscited by 158
- 2024Eight Methods to Evaluate Robust Unlearning in LLMscited by 153
- 2024Detoxifying Large Language Models via Knowledge Editingcited by 86
- 2024Unlearning or Obfuscating? Jogging the Memory of Unlearned LLMs via Benign Relearningcited by 81
- 2025Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyondcited by 76
- 2025Unlearning Isn't Deletion: Investigating Reversibility of Machine Unlearning in LLMscited by 41
- 2025Model Tampering Attacks Enable More Rigorous Evaluations of LLM Capabilitiescited by 36
- 2024Mechanistic Unlearning: Robust Knowledge Unlearning and Editing via Mechanistic Localizationcited by 34
- 2024Gradient Routing: Masking Gradients to Localize Computation in Neural Networkscited by 28
- 2025Representation Bending for Large Language Model Safetycited by 28
- 2024Towards Effective Evaluations and Comparisons for LLM Unlearning Methodscited by 27
- 2024Editing Conceptual Knowledge for Large Language Modelscited by 21
14 more
- 2025Invariance Makes LLM Unlearning Resilient Even to Unanticipated Downstream Fine-Tuningcited by 20
- 2024InstructEdit: Instruction-based Knowledge Editing for Large Language Modelscited by 17
- 2025LLM Unlearning Reveals a Stronger-Than-Expected Coreset Effect in Current Benchmarkscited by 11
- 2025Precise In-Parameter Concept Erasure in Large Language Modelscited by 11
- 2025Distillation Robustifies Unlearningcited by 11
- 2025OBLIVIATE: Robust and Practical Machine Unlearning for Large Language Modelscited by 9
- 2025Improving LLM Unlearning Robustness via Random Perturbationscited by 6
- 2025Step-by-Step Reasoning Attack: Revealing 'Erased' Knowledge in Large Language Modelscited by 6
- 2025Robust LLM Unlearning with MUDMAN: Meta-Unlearning with Disruption Masking And Normalizationcited by 4
- 2025Neuroplasticity and Corruption in Model Mechanisms: A Case Study Of Indirect Object Identificationcited by 3
- 2025Collapse of Irrelevant Representations (CIR) Ensures Robust and Non-Disruptive LLM Unlearningcited by 3
- 2026Position: Don't Just "Fix it in Post": A Science of AI Must Study Training Dynamicscited by 2
- 2026Beyond Forgetting: Representation Misdirection Elicits Controllable Side Behaviors and Capabilitiescited by 1
- 2026FIT to Forget: Robust Continual Unlearning for Large Language Modelscited by 0
- 2026Position: Don't Just "Fix it in Post": A Science of AI Must Study Training Dynamics3 Jun 2026
- 2026Beyond Forgetting: Representation Misdirection Elicits Controllable Side Behaviors and Capabilities29 Jan 2026
- 2026FIT to Forget: Robust Continual Unlearning for Large Language Models29 Jan 2026
- 2025Collapse of Irrelevant Representations (CIR) Ensures Robust and Non-Disruptive LLM Unlearning15 Sep 2025
- 2025Step-by-Step Reasoning Attack: Revealing 'Erased' Knowledge in Large Language Models14 Jun 2025
- 2025Robust LLM Unlearning with MUDMAN: Meta-Unlearning with Disruption Masking And Normalization14 Jun 2025
- 2025Distillation Robustifies Unlearning6 Jun 2025
- 2025Invariance Makes LLM Unlearning Resilient Even to Unanticipated Downstream Fine-Tuning2 Jun 2025
- 2025Precise In-Parameter Concept Erasure in Large Language Models28 May 2025
- 2025Unlearning Isn't Deletion: Investigating Reversibility of Machine Unlearning in LLMs22 May 2025
- 2025OBLIVIATE: Robust and Practical Machine Unlearning for Large Language Models7 May 2025
- 2025LLM Unlearning Reveals a Stronger-Than-Expected Coreset Effect in Current Benchmarks14 Apr 2025
14 more
- 2025Representation Bending for Large Language Model Safety2 Apr 2025
- 2025Neuroplasticity and Corruption in Model Mechanisms: A Case Study Of Indirect Object Identification27 Feb 2025
- 2025Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyond7 Feb 2025
- 2025Model Tampering Attacks Enable More Rigorous Evaluations of LLM Capabilities3 Feb 2025
- 2025Improving LLM Unlearning Robustness via Random Perturbations31 Jan 2025
- 2024Mechanistic Unlearning: Robust Knowledge Unlearning and Editing via Mechanistic Localization16 Oct 2024
- 2024Gradient Routing: Masking Gradients to Localize Computation in Neural Networks6 Oct 2024
- 2024Latent Adversarial Training Improves Robustness to Persistent Harmful Behaviors in LLMs22 Jul 2024
- 2024Unlearning or Obfuscating? Jogging the Memory of Unlearned LLMs via Benign Relearning19 Jun 2024
- 2024Towards Effective Evaluations and Comparisons for LLM Unlearning Methods13 Jun 2024
- 2024Detoxifying Large Language Models via Knowledge Editing21 Mar 2024
- 2024Editing Conceptual Knowledge for Large Language Models10 Mar 2024
- 2024Eight Methods to Evaluate Robust Unlearning in LLMs26 Feb 2024
- 2024InstructEdit: Instruction-based Knowledge Editing for Large Language Models25 Feb 2024
- 2024Latent Adversarial Training Improves Robustness to Persistent Harmful Behaviors in LLMscited by 158
- 2024Eight Methods to Evaluate Robust Unlearning in LLMscited by 153
- 2024Unlearning or Obfuscating? Jogging the Memory of Unlearned LLMs via Benign Relearningcited by 81
- 2025Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyondcited by 76
- 2025Unlearning Isn't Deletion: Investigating Reversibility of Machine Unlearning in LLMscited by 41
- 2024Mechanistic Unlearning: Robust Knowledge Unlearning and Editing via Mechanistic Localizationcited by 34
- 2025Representation Bending for Large Language Model Safetycited by 28
- 2024Towards Effective Evaluations and Comparisons for LLM Unlearning Methodscited by 27
- 2025Invariance Makes LLM Unlearning Resilient Even to Unanticipated Downstream Fine-Tuningcited by 20
- 2025LLM Unlearning Reveals a Stronger-Than-Expected Coreset Effect in Current Benchmarkscited by 11
- 2025Distillation Robustifies Unlearningcited by 11
- 2025OBLIVIATE: Robust and Practical Machine Unlearning for Large Language Modelscited by 9
12 most cited of 17 All 17 (JSON)
- 2026Beyond Forgetting: Representation Misdirection Elicits Controllable Side Behaviors and Capabilities29 Jan 2026
- 2026FIT to Forget: Robust Continual Unlearning for Large Language Models29 Jan 2026
- 2025Collapse of Irrelevant Representations (CIR) Ensures Robust and Non-Disruptive LLM Unlearning15 Sep 2025
- 2025Robust LLM Unlearning with MUDMAN: Meta-Unlearning with Disruption Masking And Normalization14 Jun 2025
- 2025Distillation Robustifies Unlearning6 Jun 2025
- 2025Invariance Makes LLM Unlearning Resilient Even to Unanticipated Downstream Fine-Tuning2 Jun 2025
- 2025Unlearning Isn't Deletion: Investigating Reversibility of Machine Unlearning in LLMs22 May 2025
- 2025OBLIVIATE: Robust and Practical Machine Unlearning for Large Language Models7 May 2025
- 2025LLM Unlearning Reveals a Stronger-Than-Expected Coreset Effect in Current Benchmarks14 Apr 2025
- 2025Representation Bending for Large Language Model Safety2 Apr 2025
- 2025Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyond7 Feb 2025
- 2025Improving LLM Unlearning Robustness via Random Perturbations31 Jan 2025
12 newest of 17 All 17 (JSON)
- 2024Detoxifying Large Language Models via Knowledge Editingcited by 86
- 2025Model Tampering Attacks Enable More Rigorous Evaluations of LLM Capabilitiescited by 36
- 2024Gradient Routing: Masking Gradients to Localize Computation in Neural Networkscited by 28
- 2024Editing Conceptual Knowledge for Large Language Modelscited by 21
- 2024InstructEdit: Instruction-based Knowledge Editing for Large Language Modelscited by 17
- 2025Precise In-Parameter Concept Erasure in Large Language Modelscited by 11
- 2025Neuroplasticity and Corruption in Model Mechanisms: A Case Study Of Indirect Object Identificationcited by 3
- 2026Position: Don't Just "Fix it in Post": A Science of AI Must Study Training Dynamicscited by 2
- 2026Position: Don't Just "Fix it in Post": A Science of AI Must Study Training Dynamics3 Jun 2026
- 2025Precise In-Parameter Concept Erasure in Large Language Models28 May 2025
- 2025Neuroplasticity and Corruption in Model Mechanisms: A Case Study Of Indirect Object Identification27 Feb 2025
- 2025Model Tampering Attacks Enable More Rigorous Evaluations of LLM Capabilities3 Feb 2025
- 2024Gradient Routing: Masking Gradients to Localize Computation in Neural Networks6 Oct 2024
- 2024Detoxifying Large Language Models via Knowledge Editing21 Mar 2024
- 2024Editing Conceptual Knowledge for Large Language Models10 Mar 2024
- 2024InstructEdit: Instruction-based Knowledge Editing for Large Language Models25 Feb 2024