MEOW: MEMOry Supervised LLM Unlearning Via Inverted Facts
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
Large Language Models (LLMs) can memorize sensitive information, raising concerns about potential misuse. LLM Unlearning, a post-hoc approach to remove this information from trained LLMs, offers a promising solution to mitigate these risks. However, previous practices face three key challenges: 1. Utility: successful unlearning often causes catastrophic collapse on unrelated tasks. 2. Efficiency: many methods either involve adding similarly sized models, which slows down unlearning or inference, or require retain data that are difficult to obtain. 3. Robustness: even effective methods may still leak data via extraction techniques. To address these challenges, we propose MEOW, a simple yet effective gradient descent-based unlearning method. Specifically, we use an offline LLM to generate a set of inverted facts. Then, we design a new metric, MEMO, to quantify memorization in LLMs. Finally, based on the signals provided by MEMO, we select the most appropriate set of inverted facts and finetune the model based on them. We evaluate MEOW on the commonly used unlearn benchmark, ToFU, with Llama2-7B-Chat and Phi-1.5B, and test it on both NLU and NLG tasks. Results demonstrate significant improvement of MEOW in forget quality without substantial loss in model utility. Meanwhile, MEOW does not exhibit significant degradation in NLU or NLG capabilities, and there is even a slight improvement in NLU performance.
Key facts. Cited by 16 papers in the map (data through 7 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 36 of its 60 references that are in the map. First posted on arXiv 18 Sep 2024.
Builds on
36 of 60 references.
Closest ancestors · 9
Same direction, newest first
- 2024Large Language Model Unlearning via Embedding-Corrupted Prompts12 Jun
- 2024SOUL: Unlocking the Power of Second-Order Optimization for LLM Unlearning28 Apr
- 2024The Frontier of Data Erasure: Machine Unlearning for Large Language Models23 Mar
- 2024TOFU: A Task of Fictitious Unlearning for LLMs11 Jan
- 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generation19 Oct
- 2023In-Context Unlearning: Language Models as Few Shot Unlearners11 Oct
- 2022Knowledge Unlearning for Mitigating Privacy Risks in Language Models4 Oct
- 2021Remember What You Want to Forget: Algorithms for Machine Unlearning4 Mar
- 2021Machine Unlearning via Algorithmic Stability25 Feb
Other references · 27
- 2023GPT-4 Technical Reportcited by 18,132
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 7,916
- 2018Think you have Solved Question Answering? Try ARC, the AI2 Reasoning Challengecited by 4,710
- 2016Pointer Sentinel Mixture Modelscited by 2,992
- 2019PIQA: Reasoning about Physical Commonsense in Natural Languagecited by 2,818
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,221
- 2020Extracting Training Data from Large Language Modelscited by 2,144
- 2023Pythia: A Suite for Analyzing Large Language Models Across Training and Scalingcited by 1,734
- 2018The Secret Sharer: Evaluating and Testing Unintended Memorization in Neural Networkscited by 847
- 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 599
- 2023Textbooks Are All You Need II: phi-1.5 technical reportcited by 559
- 2019Neural Text Generation with Unlikelihood Trainingcited by 489
15 more
- 2021MAUVE: Measuring the Gap Between Neural Text and Human Text using Divergence Frontierscited by 466
- 2019Making AI Forget You: Data Deletion in Machine Learningcited by 447
- 2023Scalable Extraction of Training Data from (Production) Language Modelscited by 415
- 2022Deduplicating Training Data Mitigates Privacy Risks in Language Modelscited by 309
- 2020Descent-to-Delete: Gradient-Based Methods for Machine Unlearningcited by 303
- 2022What Does it Mean for a Language Model to Preserve Privacy?cited by 194
- 2024AEGIS: Online Adaptive AI Content Safety Moderation with Ensemble of LLM Expertscited by 126
- 2021Federated Unlearning via Class-Discriminative Pruningcited by 108
- 2016De-identification of Patient Notes with Recurrent Neural Networkscited by 88
- 2023Use of LLMs for Illicit Purposes: Threats, Prevention Measures, and Vulnerabilitiescited by 76
- 2020Federated Unlearningcited by 27
- 2022Making Recommender Systems Forget: Learning and Unlearning for Erasable Recommendationcited by 27
- 2023Netflix and Forget: Efficient and Exact Machine Unlearning from Bi-linear Recommendationscited by 12
- 2024Machine Unlearning for Recommendation Systems: An Insightcited by 9
- 2024Prompt Injection Attacks in Defended Systemscited by 4
Built on by
Citing papers per year: 2024: 2; 2025: 10; 2026: 4.
16 papers.
Sort:
By area:
- 2024Simplicity Prevails: Rethinking Negative Preference Optimization for LLM Unlearningcited by 160
- 2025OpenUnlearning: Accelerating LLM Unlearning via Unified Benchmarking of Methods and Metricscited by 80
- 2024LLM Unlearning via Loss Adjustment with Only Forget Datacited by 71
- 2025Exploring Criteria of Loss Reweighting to Enhance LLM Unlearningcited by 39
- 2025ReLearn: Unlearning via Learning for Large Language Modelscited by 20
- 2025GUARD: Generation-time LLM Unlearning via Adaptive Restriction and Detectioncited by 17
- 2025OBLIVIATE: Robust and Practical Machine Unlearning for Large Language Modelscited by 9
- 2025DRAGON: Guard LLM Unlearning in Context via Negative Detection and Reasoningcited by 7
- 2026Explainable LLM Unlearning Through Reasoningcited by 7
- 2025Wisdom is Knowing What not to Say: Hallucination-Free LLMs Unlearning via Attention Shiftingcited by 5
- 2025Probing the Robustness of Large Language Models Safety to Latent Perturbationscited by 4
- 2026REBEL: Hidden Knowledge Recovery via Evolutionary-Based Evaluation Loopcited by 4
4 more
- 2026Position: The Term "Machine Unlearning" Is Overused in LLMscited by 3
- 2025ZJUKLAB at SemEval-2025 Task 4: Unlearning via Model Mergingcited by 2
- 2025A Survey on Unlearning in Large Language Modelscited by 2
- 2026EvoMU: Evolutionary Machine Unlearningcited by 0
- 2026Position: The Term "Machine Unlearning" Is Overused in LLMs8 May 2026
- 2026Explainable LLM Unlearning Through Reasoning8 Feb 2026
- 2026REBEL: Hidden Knowledge Recovery via Evolutionary-Based Evaluation Loop5 Feb 2026
- 2026EvoMU: Evolutionary Machine Unlearning2 Feb 2026
- 2025DRAGON: Guard LLM Unlearning in Context via Negative Detection and Reasoning8 Nov 2025
- 2025A Survey on Unlearning in Large Language Models29 Oct 2025
- 2025Wisdom is Knowing What not to Say: Hallucination-Free LLMs Unlearning via Attention Shifting20 Oct 2025
- 2025Probing the Robustness of Large Language Models Safety to Latent Perturbations19 Jun 2025
- 2025OpenUnlearning: Accelerating LLM Unlearning via Unified Benchmarking of Methods and Metrics14 Jun 2025
- 2025GUARD: Generation-time LLM Unlearning via Adaptive Restriction and Detection19 May 2025
- 2025Exploring Criteria of Loss Reweighting to Enhance LLM Unlearning17 May 2025
- 2025OBLIVIATE: Robust and Practical Machine Unlearning for Large Language Models7 May 2025
4 more
- 2025ZJUKLAB at SemEval-2025 Task 4: Unlearning via Model Merging27 Mar 2025
- 2025ReLearn: Unlearning via Learning for Large Language Models16 Feb 2025
- 2024LLM Unlearning via Loss Adjustment with Only Forget Data14 Oct 2024
- 2024Simplicity Prevails: Rethinking Negative Preference Optimization for LLM Unlearning9 Oct 2024
- 2025OpenUnlearning: Accelerating LLM Unlearning via Unified Benchmarking of Methods and Metricscited by 80
- 2024LLM Unlearning via Loss Adjustment with Only Forget Datacited by 71
- 2025Exploring Criteria of Loss Reweighting to Enhance LLM Unlearningcited by 39
- 2025ReLearn: Unlearning via Learning for Large Language Modelscited by 20
- 2025GUARD: Generation-time LLM Unlearning via Adaptive Restriction and Detectioncited by 17
- 2025OBLIVIATE: Robust and Practical Machine Unlearning for Large Language Modelscited by 9
- 2025Wisdom is Knowing What not to Say: Hallucination-Free LLMs Unlearning via Attention Shiftingcited by 5
- 2026REBEL: Hidden Knowledge Recovery via Evolutionary-Based Evaluation Loopcited by 4
- 2026Position: The Term "Machine Unlearning" Is Overused in LLMscited by 3
- 2025ZJUKLAB at SemEval-2025 Task 4: Unlearning via Model Mergingcited by 2
- 2025A Survey on Unlearning in Large Language Modelscited by 2
- 2026EvoMU: Evolutionary Machine Unlearningcited by 0
- 2026Position: The Term "Machine Unlearning" Is Overused in LLMs8 May 2026
- 2026REBEL: Hidden Knowledge Recovery via Evolutionary-Based Evaluation Loop5 Feb 2026
- 2026EvoMU: Evolutionary Machine Unlearning2 Feb 2026
- 2025A Survey on Unlearning in Large Language Models29 Oct 2025
- 2025Wisdom is Knowing What not to Say: Hallucination-Free LLMs Unlearning via Attention Shifting20 Oct 2025
- 2025OpenUnlearning: Accelerating LLM Unlearning via Unified Benchmarking of Methods and Metrics14 Jun 2025
- 2025GUARD: Generation-time LLM Unlearning via Adaptive Restriction and Detection19 May 2025
- 2025Exploring Criteria of Loss Reweighting to Enhance LLM Unlearning17 May 2025
- 2025OBLIVIATE: Robust and Practical Machine Unlearning for Large Language Models7 May 2025
- 2025ZJUKLAB at SemEval-2025 Task 4: Unlearning via Model Merging27 Mar 2025
- 2025ReLearn: Unlearning via Learning for Large Language Models16 Feb 2025
- 2024LLM Unlearning via Loss Adjustment with Only Forget Data14 Oct 2024