mlsanityData to 7 Oct 2026

Soft Prompting for Unlearning in Large Language Models

arXiv 2406.12038 ↗First posted 17 Jun 2024cs.CL cs.AI cs.LGcited by 42

On the map: LLM safety and security → Machine unlearning

Abstract (arXiv)

The widespread popularity of Large Language Models (LLMs), partly due to their unique ability to perform in-context learning, has also brought to light the importance of ethical and safety considerations when deploying these pre-trained models. In this work, we focus on investigating machine unlearning for LLMs motivated by data protection regulations. In contrast to the growing literature on fine-tuning methods to achieve unlearning, we focus on a comparatively lightweight alternative called soft prompting to realize the unlearning of a subset of training data. With losses designed to enforce forgetting as well as utility preservation, our framework Soft Prompting for Unlearning (SPUL) learns prompt tokens that can be appended to an arbitrary query to induce unlearning of specific examples at inference time without updating LLM parameters. We conduct a rigorous evaluation of the proposed method and our results indicate that SPUL can significantly improve the trade-off between utility and forgetting in the context of text classification and question answering with LLMs. We further validate our method using multiple LLMs to highlight the scalability of our framework and provide detailed insights into the choice of hyperparameters and the influence of the size of unlearning data. Our implementation is available at urlhttps://github.com/karuna-bhaila/llmunlearning.

Key facts. Cited by 42 papers in the map (data through 7 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 26 of its 38 references that are in the map. First posted on arXiv 17 Jun 2024.

Builds on

26 of 38 references.

Closest ancestors · 8

Same direction, newest first

  1. 2024Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearning8 Apr
  2. 2024Guardrail Baselines for Unlearning in LLMs5 Mar
  3. 2024TOFU: A Task of Fictitious Unlearning for LLMs11 Jan
  4. 2023Unlearn What You Want to Forget: Efficient Unlearning for LLMs31 Oct
  5. 2023In-Context Unlearning: Language Models as Few Shot Unlearners11 Oct
  6. 2023Who's Harry Potter? Approximate Unlearning in LLMs3 Oct
  7. 2022Knowledge Unlearning for Mitigating Privacy Risks in Language Models4 Oct
  8. 2021Remember What You Want to Forget: Algorithms for Machine Unlearning4 Mar

Other references · 18

  1. 2017Attention Is All You Needcited by 59,932
  2. 2023LLaMA: Open and Efficient Foundation Language Modelscited by 13,958
  3. 2018Think you have Solved Question Answering? Try ARC, the AI2 Reasoning Challengecited by 4,710
  4. 2021Prefix-Tuning: Optimizing Continuous Prompts for Generationcited by 3,878
  5. 2021The Power of Scale for Parameter-Efficient Prompt Tuningcited by 3,769
  6. 2022OPT: Open Pre-trained Transformer Language Modelscited by 3,464
  7. 2023QLoRA: Efficient Finetuning of Quantized LLMscited by 3,355
  8. 2022Locating and Editing Factual Associations in GPTcited by 2,609
  9. 2015Character-level Convolutional Networks for Text Classificationcited by 2,293
  10. 2016Membership Inference Attacks against Machine Learning Modelscited by 2,221
  11. 2019Machine Unlearningcited by 1,020
  12. 2017Crowdsourcing Multiple Choice Science Questionscited by 742
6 more
  1. 2021GPT Understands, Toocited by 715
  2. 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 599
  3. 2019Certified Data Removal from Machine Learning Modelscited by 512
  4. 2024The WMDP Benchmark: Measuring and Reducing Malicious Use With Unlearningcited by 488
  5. 2023Scalable Extraction of Training Data from (Production) Language Modelscited by 415
  6. 2022The Right to be Forgotten in Federated Learning: An Efficient Realization with Rapid Retrainingcited by 109

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2024: 3; 2025: 17; 2026: 22.

42 papers.

Sort:

By area:

  1. 2025OpenUnlearning: Accelerating LLM Unlearning via Unified Benchmarking of Methods and Metricscited by 80
  2. 2024LLM Unlearning via Loss Adjustment with Only Forget Datacited by 71
  3. 2024A Closer Look at Machine Unlearning for Large Language Modelscited by 54
  4. 2024Meta-Unlearning on Diffusion Models: Preventing Relearning Unlearned Conceptscited by 39
  5. 2025Exploring Criteria of Loss Reweighting to Enhance LLM Unlearningcited by 39
  6. 2025GUARD: Generation-time LLM Unlearning via Adaptive Restriction and Detectioncited by 17
  7. 2025Model Unlearning via Sparse Autoencoder Subspace Guided Projectionscited by 17
  8. 2025LLM Unlearning with LLM Beliefscited by 17
  9. 2025Does Machine Unlearning Truly Remove Knowledge?cited by 7
  10. 2025DRAGON: Guard LLM Unlearning in Context via Negative Detection and Reasoningcited by 7
  11. 2026Explainable LLM Unlearning Through Reasoningcited by 7
  12. 2026Attention Smoothing Is All You Need For Unlearningcited by 6
30 more
  1. 2025Wisdom is Knowing What not to Say: Hallucination-Free LLMs Unlearning via Attention Shiftingcited by 5
  2. 2025UniErase: Towards Balanced and Precise Unlearning in Language Modelscited by 4
  3. 2025Generative Model Unlearning: A Survey through Target Events, Unlearning Operators, and Evaluation Protocolscited by 4
  4. 2025Downgrade to Upgrade: Optimizer Simplification Enhances Robustness in LLM Unlearningcited by 4
  5. 2026REBEL: Hidden Knowledge Recovery via Evolutionary-Based Evaluation Loopcited by 4
  6. 2025Label Smoothing Improves Gradient Ascent in LLM Unlearningcited by 3
  7. 2026CAP: Controllable Alignment Prompting for Unlearning in LLMscited by 3
  8. 2025A Survey on Unlearning in Large Language Modelscited by 2
  9. 2025AUVIC: Adversarial Unlearning of Visual Concepts for Multi-modal Large Language Modelscited by 2
  10. 2026STaR: Sensitive Trajectory Regulation for Unlearning in Large Reasoning Modelscited by 2
  11. 2026Position: Capability Control Should be a Separate Goal From Alignmentcited by 2
  12. 2026Distinguishable Deletion: Unifying Knowledge Erasure and Refusal for Large Language Model Unlearningcited by 2
  13. 2025Beyond Sharp Minima: Robust LLM Unlearning via Feedback-Guided Multi-Point Optimizationcited by 1
  14. 2026The Unlearning Mirage: A Dynamic Framework for Evaluating LLM Unlearningcited by 1
  15. 2026Suppression Is Not Forgetting: Residual Recoverability in Visual Concept Unlearning for VLMscited by 1
  16. 2025Erase to Retain: Low Rank Adaptation Guided Selective Unlearning in Medical Segmentation Networkscited by 0
  17. 2025RapidUn: Influence-Driven Parameter Reweighting for Efficient Large Language Model Unlearningcited by 0
  18. 2026Shadow Unlearning: A Neuro-Semantic Approach to Fidelity-Preserving Faceless Forgetting in LLMscited by 0
  19. 2026EvoMU: Evolutionary Machine Unlearningcited by 0
  20. 2026Retain-Neutral Surrogates for Min-Max Unlearningcited by 0
  21. 2026ZeroUnlearn: Few-Shot Knowledge Unlearning in Large Language Modelscited by 0
  22. 2026ICCU: In-Context Continual Unlearning via Pattern-Induced Refusal Rulescited by 0
  23. 2026Towards Lightweight Reliability: Using Soft Prompts for Hallucination Mitigation in Large Language Modelscited by 0
  24. 2026Replay What Matters: Off-Policy Replay for Efficient LLM Reinforcement Unlearningcited by 0
  25. 2026SAGE: Retain-Aware Post-Hoc Sanitization of Final Unlearning Vectorcited by 0
  26. 2026CBD: API-Only LLM Black-Box Unlearning through Controlled Behavioral Divergencecited by 0
  27. 2026POPS: Recovering Unlearned Multi-Modality Knowledge in MLLMs with Prompt-Optimized Parameter Shakingcited by 0
  28. 2026LLM Unlearning for Cyber Defense: A Survey on Methods, Challenges, and Emerging Threatscited by 0
  29. 2026Stochastic Meta-Unlearning: Bridging Language Backbone and Multimodal Unlearningcited by 0
  30. 2026UnlearningSoup: Is Repeated Tuning Necessary for Large Language Model Unlearning?cited by 0