mlsanityData to 7 Oct 2026

What makes unlearning hard and what to do about it

arXiv 2406.01257 ↗First posted 3 Jun 2024cs.LGcited by 89

On the map: LLM safety and security → Machine unlearning

Abstract (arXiv)

Machine unlearning is the problem of removing the effect of a subset of training data (the ''forget set'') from a trained model without damaging the model's utility e.g. to comply with users' requests to delete their data, or remove mislabeled, poisoned or otherwise problematic data. With unlearning research still being at its infancy, many fundamental open questions exist: Are there interpretable characteristics of forget sets that substantially affect the difficulty of the problem? How do these characteristics affect different state-of-the-art algorithms? With this paper, we present the first investigation aiming to answer these questions. We identify two key factors affecting unlearning difficulty and the performance of unlearning algorithms. Evaluation on forget sets that isolate these identified factors reveals previously-unknown behaviours of state-of-the-art algorithms that don't materialize on random forget sets. Based on our insights, we develop a framework coined Refined-Unlearning Meta-algorithm (RUM) that encompasses: (i) refining the forget set into homogenized subsets, according to different characteristics; and (ii) a meta-algorithm that employs existing algorithms to unlearn each subset and finally delivers a model that has unlearned the overall forget set. We find that RUM substantially improves top-performing unlearning algorithms. Overall, we view our work as an important step in (i) deepening our scientific understanding of unlearning and (ii) revealing new pathways to improving the state-of-the-art.

Key facts. Cited by 89 papers in the map (data through 7 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 31 of its 39 references that are in the map. First posted on arXiv 3 Jun 2024.

Builds on

31 of 39 references.

Closest ancestors · 9

Same direction, newest first

  1. 2024To Each (Textual Sequence) Its Own: Improving Memorized-Data Unlearning in Large Language Models6 May
  2. 2024Challenging Forgets: Unveiling the Worst-Case Forget Sets in Machine Unlearning12 Mar
  3. 2024Inexact Unlearning Needs More Careful Evaluations to Avoid a False Sense of Privacy2 Mar
  4. 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generation19 Oct
  5. 2023Model Sparsity Can Simplify Machine Unlearning11 Apr
  6. 2023Towards Unbounded Machine Unlearning20 Feb
  7. 2022A Survey of Machine Unlearning6 Sep
  8. 2021Unrolling SGD: Understanding Factors Influencing Machine Unlearning27 Sep
  9. 2021Machine Unlearning of Features and Labels26 Aug

Other references · 22

  1. 2018The Lottery Ticket Hypothesis: Finding Sparse, Trainable Neural Networkscited by 2,250
  2. 2017Understanding Black-box Predictions via Influence Functionscited by 1,714
  3. 2018Sanity Checks for Saliency Mapscited by 1,149
  4. 2017SmoothGrad: removing noise by adding noisecited by 1,097
  5. 2019Machine Unlearningcited by 1,020
  6. 2021Membership Inference Attacks From First Principlescited by 839
  7. 2018An Empirical Study of Example Forgetting during Deep Neural Network Learningcited by 669
  8. 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 599
  9. 2019Certified Data Removal from Machine Learning Modelscited by 512
  10. 2020What Neural Networks Memorize and Why: Discovering the Long Tail via Influence Estimationcited by 492
  11. 2019Does Learning Require Memorization? A Short Tale about a Long Tailcited by 452
  12. 2019Making AI Forget You: Data Deletion in Machine Learningcited by 447
10 more
  1. 2020Amnesiac Machine Learningcited by 305
  2. 2020Approximate Data Deletion from Machine Learning Modelscited by 250
  3. 2023Membership Inference Attacks against Language Models via Neighbourhood Comparisoncited by 249
  4. 2022The Privacy Onion Effect: Memorization is Relativecited by 128
  5. 2022Measuring Forgetting of Memorized Training Examplescited by 118
  6. 2021Federated Unlearning via Class-Discriminative Pruningcited by 108
  7. 2020Characterizing Structural Regularities of Labeled Data in Overparameterized Modelscited by 93
  8. 2021Sanity Checks for Lottery Tickets: Does Your Winning Ticket Really Win the Jackpot?cited by 52
  9. 2020Unraveling Meta-Learning: Understanding Feature Representations for Few-Shot Taskscited by 47
  10. 2019Distribution Density, Tails, and Outliers in Machine Learning: Metrics and Applicationscited by 43

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2024: 12; 2025: 34; 2026: 43.

89 papers.

Sort:

By area:

  1. 2024Are we making progress in unlearning? Findings from the first NeurIPS unlearning competitioncited by 48
  2. 2024To Forget or Not? Towards Practical Knowledge Unlearning for Large Language Modelscited by 25
  3. 2025LUME: LLM Unlearning with Multitask Evaluationscited by 21
  4. 2025Are We Truly Forgetting? A Critical Re-examination of Machine Unlearning Evaluation Protocolscited by 16
  5. 2025From Dormant to Deleted: Tamper-Resistant Unlearning Through Weight-Space Regularizationcited by 12
  6. 2025LLM Unlearning Reveals a Stronger-Than-Expected Coreset Effect in Current Benchmarkscited by 11
  7. 2025Distillation Robustifies Unlearningcited by 11
  8. 2026Machine Unlearning under Retain-Forget Entanglementcited by 10
  9. 2024Underestimated Privacy Risks for Minority Populations in Large Language Model Unlearningcited by 9
  10. 2025MMTABREAL: Real-World Benchmark for Multimodal Table Understandingcited by 9
  11. 2026BalDRO: A Distributionally Robust Optimization based Framework for Large Language Model Unlearningcited by 8
  12. 2025Redirection for Erasing Memory (REM): Towards a universal unlearning method for corrupted datacited by 7
38 more
  1. 2024Improved Localized Machine Unlearning Through the Lens of Memorizationcited by 6
  2. 2025Trustworthy Machine Learning via Memorization and the Granular Long-Tail: A Survey on Interactions, Tradeoffs, and Beyondcited by 6
  3. 2025Not All Tokens Are Meant to Be Forgottencited by 6
  4. 2026Attention Smoothing Is All You Need For Unlearningcited by 6
  5. 2024Scalability of memorization-based machine unlearningcited by 5
  6. 2025Position: Bridge the Gaps between Machine Unlearning and AI Regulationcited by 5
  7. 2025The Right to be Forgotten in Pruning: Unveil Machine Unlearning on Sparse Modelscited by 5
  8. 2024Unlearning Personal Data from a Single Imagecited by 4
  9. 2024BTBR: A Bayesian-Theory-Driven Probabilistic-Fuzzy Framework for Implicit Bias Removal in Large Language Modelscited by 4
  10. 2025Leveraging Per-Instance Privacy for Machine Unlearningcited by 4
  11. 2025Reminiscence Attack on Residuals: Exploiting Approximate Machine Unlearning for Privacycited by 4
  12. 2025CoUn: Empowering Machine Unlearning via Contrastive Learningcited by 4
  13. 2026Contrastive Representation Shaping for LLM Unlearningcited by 4
  14. 2024MUSO: Achieving Exact Machine Unlearning in Over-Parameterized Regimescited by 3
  15. 2025Tackling Fake Forgetting through Uncertainty Quantificationcited by 3
  16. 2025Group-robust Machine Unlearningcited by 3
  17. 2025LoReUn: Data Itself Implicitly Provides Cues to Improve Machine Unlearningcited by 3
  18. 2026FaLW: A Forgetting-aware Loss Reweighting for Long-tailed Unlearningcited by 3
  19. 2026CAP: Controllable Alignment Prompting for Unlearning in LLMscited by 3
  20. 2026Visual-Noise Guided In-Context Distillation for Multimodal Large Language Model Unlearningcited by 3
  21. 2024Machine Unlearning using Forgetting Neural Networkscited by 2
  22. 2025Ready2Unlearn: A Learning-Time Approach for Preparing Models with Future Unlearning Readinesscited by 2
  23. 2025Towards Efficient and Exact Forgetting Services in Pre-Trained-Model-based Continual Learningcited by 2
  24. 2026A Mechanistic Perspective and Circuit-Guided Difficulty Metric for Unlearningcited by 2
  25. 2026Re-understanding Graph Unlearning through Memorizationcited by 2
  26. 2024MUC: Machine Unlearning for Contrastive Learning with Black-box Evaluationcited by 1
  27. 2024Instance-Level Difficulty: A Missing Perspective in Machine Unlearningcited by 1
  28. 2024Neural Corrective Machine Unrankingcited by 1
  29. 2025MIAT: Maneuver-Intention-Aware Transformer for Spatio-Temporal Trajectory Predictioncited by 1
  30. 2025A Neuro-inspired Interpretation of Unlearning in Large Language Models through Sample-level Unlearning Difficultycited by 1
  31. 2025Layered Unlearning for Adversarial Relearningcited by 1
  32. 2025One-Point Contraction: Erasing Representational Separability toward Irreversible Deep Forgettingcited by 1
  33. 2025CUFG: Curriculum Unlearning Guided by the Forgetting Gradientcited by 1
  34. 2025Beyond Sharp Minima: Robust LLM Unlearning via Feedback-Guided Multi-Point Optimizationcited by 1
  35. 2025WARP: Weight Teleportation for Attack-Resilient Unlearning Protocolscited by 1
  36. 2025REMISVFU: Vertical Federated Unlearning via Representation Misdirection for Intermediate Output Featurecited by 1
  37. 2026Statistical Roughness-Informed Machine Unlearningcited by 1
  38. 2026Interactionless Inverse Reinforcement Learning: A Data-Centric Framework for Durable Alignmentcited by 1

50 most cited of 89 All 89 (JSON)