What makes unlearning hard and what to do about it
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
Machine unlearning is the problem of removing the effect of a subset of training data (the ''forget set'') from a trained model without damaging the model's utility e.g. to comply with users' requests to delete their data, or remove mislabeled, poisoned or otherwise problematic data. With unlearning research still being at its infancy, many fundamental open questions exist: Are there interpretable characteristics of forget sets that substantially affect the difficulty of the problem? How do these characteristics affect different state-of-the-art algorithms? With this paper, we present the first investigation aiming to answer these questions. We identify two key factors affecting unlearning difficulty and the performance of unlearning algorithms. Evaluation on forget sets that isolate these identified factors reveals previously-unknown behaviours of state-of-the-art algorithms that don't materialize on random forget sets. Based on our insights, we develop a framework coined Refined-Unlearning Meta-algorithm (RUM) that encompasses: (i) refining the forget set into homogenized subsets, according to different characteristics; and (ii) a meta-algorithm that employs existing algorithms to unlearn each subset and finally delivers a model that has unlearned the overall forget set. We find that RUM substantially improves top-performing unlearning algorithms. Overall, we view our work as an important step in (i) deepening our scientific understanding of unlearning and (ii) revealing new pathways to improving the state-of-the-art.
Key facts. Cited by 89 papers in the map (data through 7 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 31 of its 39 references that are in the map. First posted on arXiv 3 Jun 2024.
Builds on
31 of 39 references.
Closest ancestors · 9
Same direction, newest first
- 2024To Each (Textual Sequence) Its Own: Improving Memorized-Data Unlearning in Large Language Models6 May
- 2024Challenging Forgets: Unveiling the Worst-Case Forget Sets in Machine Unlearning12 Mar
- 2024Inexact Unlearning Needs More Careful Evaluations to Avoid a False Sense of Privacy2 Mar
- 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generation19 Oct
- 2023Model Sparsity Can Simplify Machine Unlearning11 Apr
- 2023Towards Unbounded Machine Unlearning20 Feb
- 2022A Survey of Machine Unlearning6 Sep
- 2021Unrolling SGD: Understanding Factors Influencing Machine Unlearning27 Sep
- 2021Machine Unlearning of Features and Labels26 Aug
Other references · 22
- 2018The Lottery Ticket Hypothesis: Finding Sparse, Trainable Neural Networkscited by 2,250
- 2017Understanding Black-box Predictions via Influence Functionscited by 1,714
- 2018Sanity Checks for Saliency Mapscited by 1,149
- 2017SmoothGrad: removing noise by adding noisecited by 1,097
- 2019Machine Unlearningcited by 1,020
- 2021Membership Inference Attacks From First Principlescited by 839
- 2018An Empirical Study of Example Forgetting during Deep Neural Network Learningcited by 669
- 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 599
- 2019Certified Data Removal from Machine Learning Modelscited by 512
- 2020What Neural Networks Memorize and Why: Discovering the Long Tail via Influence Estimationcited by 492
- 2019Does Learning Require Memorization? A Short Tale about a Long Tailcited by 452
- 2019Making AI Forget You: Data Deletion in Machine Learningcited by 447
10 more
- 2020Amnesiac Machine Learningcited by 305
- 2020Approximate Data Deletion from Machine Learning Modelscited by 250
- 2023Membership Inference Attacks against Language Models via Neighbourhood Comparisoncited by 249
- 2022The Privacy Onion Effect: Memorization is Relativecited by 128
- 2022Measuring Forgetting of Memorized Training Examplescited by 118
- 2021Federated Unlearning via Class-Discriminative Pruningcited by 108
- 2020Characterizing Structural Regularities of Labeled Data in Overparameterized Modelscited by 93
- 2021Sanity Checks for Lottery Tickets: Does Your Winning Ticket Really Win the Jackpot?cited by 52
- 2020Unraveling Meta-Learning: Understanding Feature Representations for Few-Shot Taskscited by 47
- 2019Distribution Density, Tails, and Outliers in Machine Learning: Metrics and Applicationscited by 43
Built on by
Citing papers per year: 2024: 12; 2025: 34; 2026: 43.
89 papers.
Sort:
By area:
- 2024Are we making progress in unlearning? Findings from the first NeurIPS unlearning competitioncited by 48
- 2024To Forget or Not? Towards Practical Knowledge Unlearning for Large Language Modelscited by 25
- 2025LUME: LLM Unlearning with Multitask Evaluationscited by 21
- 2025Are We Truly Forgetting? A Critical Re-examination of Machine Unlearning Evaluation Protocolscited by 16
- 2025From Dormant to Deleted: Tamper-Resistant Unlearning Through Weight-Space Regularizationcited by 12
- 2025LLM Unlearning Reveals a Stronger-Than-Expected Coreset Effect in Current Benchmarkscited by 11
- 2025Distillation Robustifies Unlearningcited by 11
- 2026Machine Unlearning under Retain-Forget Entanglementcited by 10
- 2024Underestimated Privacy Risks for Minority Populations in Large Language Model Unlearningcited by 9
- 2025MMTABREAL: Real-World Benchmark for Multimodal Table Understandingcited by 9
- 2026BalDRO: A Distributionally Robust Optimization based Framework for Large Language Model Unlearningcited by 8
- 2025Redirection for Erasing Memory (REM): Towards a universal unlearning method for corrupted datacited by 7
38 more
- 2024Improved Localized Machine Unlearning Through the Lens of Memorizationcited by 6
- 2025Trustworthy Machine Learning via Memorization and the Granular Long-Tail: A Survey on Interactions, Tradeoffs, and Beyondcited by 6
- 2025Not All Tokens Are Meant to Be Forgottencited by 6
- 2026Attention Smoothing Is All You Need For Unlearningcited by 6
- 2024Scalability of memorization-based machine unlearningcited by 5
- 2025Position: Bridge the Gaps between Machine Unlearning and AI Regulationcited by 5
- 2025The Right to be Forgotten in Pruning: Unveil Machine Unlearning on Sparse Modelscited by 5
- 2024Unlearning Personal Data from a Single Imagecited by 4
- 2024BTBR: A Bayesian-Theory-Driven Probabilistic-Fuzzy Framework for Implicit Bias Removal in Large Language Modelscited by 4
- 2025Leveraging Per-Instance Privacy for Machine Unlearningcited by 4
- 2025Reminiscence Attack on Residuals: Exploiting Approximate Machine Unlearning for Privacycited by 4
- 2025CoUn: Empowering Machine Unlearning via Contrastive Learningcited by 4
- 2026Contrastive Representation Shaping for LLM Unlearningcited by 4
- 2024MUSO: Achieving Exact Machine Unlearning in Over-Parameterized Regimescited by 3
- 2025Tackling Fake Forgetting through Uncertainty Quantificationcited by 3
- 2025Group-robust Machine Unlearningcited by 3
- 2025LoReUn: Data Itself Implicitly Provides Cues to Improve Machine Unlearningcited by 3
- 2026FaLW: A Forgetting-aware Loss Reweighting for Long-tailed Unlearningcited by 3
- 2026CAP: Controllable Alignment Prompting for Unlearning in LLMscited by 3
- 2026Visual-Noise Guided In-Context Distillation for Multimodal Large Language Model Unlearningcited by 3
- 2024Machine Unlearning using Forgetting Neural Networkscited by 2
- 2025Ready2Unlearn: A Learning-Time Approach for Preparing Models with Future Unlearning Readinesscited by 2
- 2025Towards Efficient and Exact Forgetting Services in Pre-Trained-Model-based Continual Learningcited by 2
- 2026A Mechanistic Perspective and Circuit-Guided Difficulty Metric for Unlearningcited by 2
- 2026Re-understanding Graph Unlearning through Memorizationcited by 2
- 2024MUC: Machine Unlearning for Contrastive Learning with Black-box Evaluationcited by 1
- 2024Instance-Level Difficulty: A Missing Perspective in Machine Unlearningcited by 1
- 2024Neural Corrective Machine Unrankingcited by 1
- 2025MIAT: Maneuver-Intention-Aware Transformer for Spatio-Temporal Trajectory Predictioncited by 1
- 2025A Neuro-inspired Interpretation of Unlearning in Large Language Models through Sample-level Unlearning Difficultycited by 1
- 2025Layered Unlearning for Adversarial Relearningcited by 1
- 2025One-Point Contraction: Erasing Representational Separability toward Irreversible Deep Forgettingcited by 1
- 2025CUFG: Curriculum Unlearning Guided by the Forgetting Gradientcited by 1
- 2025Beyond Sharp Minima: Robust LLM Unlearning via Feedback-Guided Multi-Point Optimizationcited by 1
- 2025WARP: Weight Teleportation for Attack-Resilient Unlearning Protocolscited by 1
- 2025REMISVFU: Vertical Federated Unlearning via Representation Misdirection for Intermediate Output Featurecited by 1
- 2026Statistical Roughness-Informed Machine Unlearningcited by 1
- 2026Interactionless Inverse Reinforcement Learning: A Data-Centric Framework for Durable Alignmentcited by 1
50 most cited of 89 All 89 (JSON)
- 2026When Is Deletion Ordering Tractable? From Update Dynamics to Permutation Structure1 Oct 2026
- 2026Unlearning Deceptive Behaviors in LLMs with Contrastive Forget Sets30 Sep 2026
- 2026Unmerge: Efficient Machine Unlearning via Task Arithmetic30 Sep 2026
- 2026Bounding Retraining Equivalence and the Deletion Floor in Materials Machine Unlearning28 Sep 2026
- 2026Correlation-Guided Fast Machine Unlearning via Hessian Analysis11 Sep 2026
- 2026Do Influence-Derived Data Perturbations Enable Machine Unlearning? A Controlled Study of Three Plausible Roles11 Sep 2026
- 2026CUNO: Curriculum and Preference Optimization for Stable Graph Unlearning under Mass Deletion8 Sep 2026
- 2026When Retain Constraints Conflict: Mitigating Forget-Retain Interference in Tabular Data6 Sep 2026
- 2026Entangled Representations Amplify Collateral Damage in Unlearning2 Sep 2026
- 2026Confess What You Know: Forget-Set Misalignment with Model Knowledge in LLM Unlearning1 Sep 2026
- 2026Forget or Fine-tune? A Comparative Study of Machine Unlearning Strategies for Noisy Label Correction30 Aug 2026
- 2026On the Plasticity Collapse in Continual Machine Unlearning30 Aug 2026
38 more
- 2026Learning to Unlearn: Machine Unlearning via Learning the Unlearning Behaviors17 Aug 2026
- 2026The More Popular, The Harder to Forget: Adaptive Popularity for LLM Unlearning14 Aug 2026
- 2026Understanding Machine Unlearning Through the Lens of Mode Connectivity27 Jul 2026
- 2026TILDE: TILt-based Distributional Erasure for Concept Unlearning7 Jul 2026
- 2026Obliviate: Efficient Unlearning in Recommender Systems30 Jun 2026
- 2026AI Engram: In Search of Memory Traces in Artificial Intelligence12 Jun 2026
- 2026How Hard Can It Be? Hardness-Aware Multi-Objective Unlearning1 Jun 2026
- 2026Multi-Objective Reference-Aligned Machine Unlearning29 May 2026
- 2026Forgetting Has Neighbors: Localized Collateral Forgetting in Machine Unlearning29 May 2026
- 2026De-attribute to Forget for LLM Unlearning29 May 2026
- 2026Visual-Noise Guided In-Context Distillation for Multimodal Large Language Model Unlearning26 May 2026
- 2026Interference-Aware Multi-Task Unlearning18 May 2026
- 2026SoK: Unlearnability and Unlearning for Model Dememorization12 May 2026
- 2026Retain-Neutral Surrogates for Min-Max Unlearning7 May 2026
- 2026CAP: Controllable Alignment Prompting for Unlearning in LLMs23 Apr 2026
- 2026Robust Continual Unlearning against Knowledge Erosion and Forgetting Reversal21 Apr 2026
- 2026Machine Unlearning under Retain-Forget Entanglement27 Mar 2026
- 2026Attack by Unlearning: Unlearning-Induced Adversarial Attacks on Graph Neural Networks19 Mar 2026
- 2026Attention Smoothing Is All You Need For Unlearning1 Mar 2026
- 2026Easy to Learn, Yet Hard to Forget: Towards Robust Unlearning Under Bias25 Feb 2026
- 2026You Don't Need All That Attention: Surgical Memorization Mitigation in Text-to-Image Diffusion Models23 Feb 2026
- 2026Benchmarking Unlearning for Vision Transformers23 Feb 2026
- 2026Interactionless Inverse Reinforcement Learning: A Data-Centric Framework for Durable Alignment16 Feb 2026
- 2026Statistical Roughness-Informed Machine Unlearning10 Feb 2026
- 2026Lethe: Principled Dual-Stream Update for Persistent Knowledge Erasure in Federated Unlearning30 Jan 2026
- 2026Contrastive Representation Shaping for LLM Unlearning29 Jan 2026
- 2026FIT to Forget: Robust Continual Unlearning for Large Language Models29 Jan 2026
- 2026FaLW: A Forgetting-aware Loss Reweighting for Long-tailed Unlearning26 Jan 2026
- 2026Re-understanding Graph Unlearning through Memorization21 Jan 2026
- 2026A Mechanistic Perspective and Circuit-Guided Difficulty Metric for Unlearning14 Jan 2026
- 2026BalDRO: A Distributionally Robust Optimization based Framework for Large Language Model Unlearning14 Jan 2026
- 2025REMISVFU: Vertical Federated Unlearning via Representation Misdirection for Intermediate Output Feature11 Dec 2025
- 2025Grokked Models are Better Unlearners3 Dec 2025
- 2025WARP: Weight Teleportation for Attack-Resilient Unlearning Protocols29 Nov 2025
- 2025SMS: Self-supervised Model Seeding for Verification of Machine Unlearning30 Sep 2025
- 2025Beyond Sharp Minima: Robust LLM Unlearning via Feedback-Guided Multi-Point Optimization24 Sep 2025
- 2025TraceHiding: Scalable Machine Unlearning for Mobility Data21 Sep 2025
- 2025CoUn: Empowering Machine Unlearning via Contrastive Learning19 Sep 2025
50 newest of 89 All 89 (JSON)
- 2024Are we making progress in unlearning? Findings from the first NeurIPS unlearning competitioncited by 48
- 2024To Forget or Not? Towards Practical Knowledge Unlearning for Large Language Modelscited by 25
- 2025LUME: LLM Unlearning with Multitask Evaluationscited by 21
- 2025Are We Truly Forgetting? A Critical Re-examination of Machine Unlearning Evaluation Protocolscited by 16
- 2025From Dormant to Deleted: Tamper-Resistant Unlearning Through Weight-Space Regularizationcited by 12
- 2025LLM Unlearning Reveals a Stronger-Than-Expected Coreset Effect in Current Benchmarkscited by 11
- 2025Distillation Robustifies Unlearningcited by 11
- 2026Machine Unlearning under Retain-Forget Entanglementcited by 10
- 2024Underestimated Privacy Risks for Minority Populations in Large Language Model Unlearningcited by 9
- 2026BalDRO: A Distributionally Robust Optimization based Framework for Large Language Model Unlearningcited by 8
- 2025Redirection for Erasing Memory (REM): Towards a universal unlearning method for corrupted datacited by 7
- 2024Improved Localized Machine Unlearning Through the Lens of Memorizationcited by 6
12 most cited of 76 All 76 (JSON)
- 2026Unlearning Deceptive Behaviors in LLMs with Contrastive Forget Sets30 Sep 2026
- 2026Unmerge: Efficient Machine Unlearning via Task Arithmetic30 Sep 2026
- 2026Bounding Retraining Equivalence and the Deletion Floor in Materials Machine Unlearning28 Sep 2026
- 2026Correlation-Guided Fast Machine Unlearning via Hessian Analysis11 Sep 2026
- 2026Do Influence-Derived Data Perturbations Enable Machine Unlearning? A Controlled Study of Three Plausible Roles11 Sep 2026
- 2026When Retain Constraints Conflict: Mitigating Forget-Retain Interference in Tabular Data6 Sep 2026
- 2026Entangled Representations Amplify Collateral Damage in Unlearning2 Sep 2026
- 2026Confess What You Know: Forget-Set Misalignment with Model Knowledge in LLM Unlearning1 Sep 2026
- 2026Forget or Fine-tune? A Comparative Study of Machine Unlearning Strategies for Noisy Label Correction30 Aug 2026
- 2026On the Plasticity Collapse in Continual Machine Unlearning30 Aug 2026
- 2026Learning to Unlearn: Machine Unlearning via Learning the Unlearning Behaviors17 Aug 2026
- 2026The More Popular, The Harder to Forget: Adaptive Popularity for LLM Unlearning14 Aug 2026
12 newest of 76 All 76 (JSON)
- 2025MMTABREAL: Real-World Benchmark for Multimodal Table Understandingcited by 9
- 2025Trustworthy Machine Learning via Memorization and the Granular Long-Tail: A Survey on Interactions, Tradeoffs, and Beyondcited by 6
- 2024BTBR: A Bayesian-Theory-Driven Probabilistic-Fuzzy Framework for Implicit Bias Removal in Large Language Modelscited by 4
- 2025MIAT: Maneuver-Intention-Aware Transformer for Spatio-Temporal Trajectory Predictioncited by 1
- 2026Attack by Unlearning: Unlearning-Induced Adversarial Attacks on Graph Neural Networkscited by 1
- 2025Uncovering Scaling Laws for Large Language Models via Inverse Problemscited by 0
- 2026AI Engram: In Search of Memory Traces in Artificial Intelligencecited by 0
- 2026When Is Deletion Ordering Tractable? From Update Dynamics to Permutation Structurecited by 0
- 2026When Is Deletion Ordering Tractable? From Update Dynamics to Permutation Structure1 Oct 2026
- 2026AI Engram: In Search of Memory Traces in Artificial Intelligence12 Jun 2026
- 2026Attack by Unlearning: Unlearning-Induced Adversarial Attacks on Graph Neural Networks19 Mar 2026
- 2025Uncovering Scaling Laws for Large Language Models via Inverse Problems9 Sep 2025
- 2025MMTABREAL: Real-World Benchmark for Multimodal Table Understanding27 May 2025
- 2025MIAT: Maneuver-Intention-Aware Transformer for Spatio-Temporal Trajectory Prediction7 Apr 2025
- 2025Trustworthy Machine Learning via Memorization and the Granular Long-Tail: A Survey on Interactions, Tradeoffs, and Beyond10 Mar 2025
- 2024BTBR: A Bayesian-Theory-Driven Probabilistic-Fuzzy Framework for Implicit Bias Removal in Large Language Models20 Aug 2024