A Closer Look at Machine Unlearning for Large Language Models
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
Large language models (LLMs) may memorize sensitive or copyrighted content, raising privacy and legal concerns. Due to the high cost of retraining from scratch, researchers attempt to employ machine unlearning to remove specific content from LLMs while preserving the overall performance. In this paper, we discuss several issues in machine unlearning for LLMs and provide our insights on possible approaches. To address the issue of inadequate evaluation of model outputs after unlearning, we introduce three additional metrics to evaluate token diversity, sentence semantics, and factual correctness. We then categorize unlearning methods into untargeted and targeted, and discuss their issues respectively. Specifically, the behavior that untargeted unlearning attempts to approximate is unpredictable and may involve hallucinations, and existing regularization is insufficient for targeted unlearning. To alleviate these issues, we propose using the objective of maximizing entropy (ME) for untargeted unlearning and incorporate answer preservation (AP) loss as regularization for targeted unlearning. Experimental results across three scenarios, i.e., fictitious unlearning, continual unlearning, and real-world unlearning, demonstrate the effectiveness of our approaches. The code is available at https://github.com/sail-sg/closer-look-LLM-unlearning.
Key facts. Cited by 55 papers in the map (data through 13 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 51 of its 65 references that are in the map. First posted on arXiv 10 Oct 2024.
Builds on
51 of 65 references.
Closest ancestors · 27
Same direction, newest first
- 2024Learn while Unlearn: An Iterative Unlearning Framework for Generative Language Models25 Jul
- 2024Learning to Refuse: Towards Mitigating Privacy Risks in LLMs14 Jul
- 2024MUSE: Machine Unlearning Six-Way Evaluation for Language Models8 Jul
- 2024To Forget or Not? Towards Practical Knowledge Unlearning for Large Language Models2 Jul
- 2024Soft Prompting for Unlearning in Large Language Models17 Jun
- 2024RWKU: Benchmarking Real-World Knowledge Unlearning for Large Language Models16 Jun
- 2024Reversing the Forget-Retain Objectives: An Efficient LLM Unlearning Framework from Logit Difference12 Jun
- 2024Large Language Model Unlearning via Embedding-Corrupted Prompts12 Jun
- 2024RKLD: Reverse KL-Divergence-based Knowledge Distillation for Unlearning Personal Information in Large Language Models4 Jun
- 2024SOUL: Unlocking the Power of Second-Order Optimization for LLM Unlearning28 Apr
- 2024Offset Unlearning for Large Language Models17 Apr
- 2024Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearning8 Apr
15 more
- 2024Second-Order Information Matters: Revisiting Machine Unlearning for Large Language Models13 Mar
- 2024Guardrail Baselines for Unlearning in LLMs5 Mar
- 2024Machine Unlearning of Pre-trained Large Language Models23 Feb
- 2024Towards Safer Large Language Models through Machine Unlearning15 Feb
- 2024Rethinking Machine Unlearning for Large Language Models13 Feb
- 2024Selective Forgetting: Advancing Machine Unlearning Techniques and Evaluation in Language Models8 Feb
- 2024Fast Exact Unlearning for In-Context Learning Data for LLMs1 Feb
- 2024TOFU: A Task of Fictitious Unlearning for LLMs11 Jan
- 2023Knowledge Unlearning for LLMs: Tasks, Methods, and Challenges27 Nov
- 2023Large Language Model Unlearning14 Oct
- 2023In-Context Unlearning: Language Models as Few Shot Unlearners11 Oct
- 2023Who's Harry Potter? Approximate Unlearning in LLMs3 Oct
- 2023Right to be Forgotten in the Era of Large Language Models: Implications, Challenges, and Solutions8 Jul
- 2022Knowledge Unlearning for Mitigating Privacy Risks in Language Models4 Oct
- 2022A Survey of Machine Unlearning6 Sep
Other references · 24
- 2021Training Verifiers to Solve Math Word Problemscited by 9,916
- 2019Sentence-BERT: Sentence Embeddings using Siamese BERT-Networkscited by 9,107
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 7,986
- 2020Measuring Massive Multitask Language Understandingcited by 7,876
- 2018Think you have Solved Question Answering? Try ARC, the AI2 Reasoning Challengecited by 4,798
- 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,949
- 2017TriviaQA: A Large Scale Distantly Supervised Challenge Dataset for Reading Comprehensioncited by 2,925
- 2023A Survey on Hallucination in Large Language Models: Principles, Taxonomy, Challenges, and Open Questionscited by 1,594
- 2019Machine Unlearningcited by 1,056
- 2017SemEval-2017 Task 1: Semantic Textual Similarity - Multilingual and Cross-lingual Focused Evaluationcited by 998
- 2022Quantifying Memorization Across Neural Language Modelscited by 763
- 2024The WMDP Benchmark: Measuring and Reducing Malicious Use With Unlearningcited by 498
12 more
- 2024Hallucination is Inevitable: An Innate Limitation of Large Language Modelscited by 331
- 2022Deduplicating Training Data Mitigates Privacy Risks in Language Modelscited by 314
- 2022Are Large Pre-Trained Language Models Leaking Your Personal Information?cited by 200
- 2023Beyond Memorization: Violating Privacy Via Inference with Large Language Modelscited by 173
- 2024Tamper-Resistant Safeguards for Open-Weight LLMscited by 136
- 2018Generating Informative and Diverse Conversational Responses via Adversarial Information Maximizationcited by 115
- 2022Preventing Verbatim Memorization in Language Models Gives a False Sense of Privacycited by 99
- 2024Eraser: Jailbreaking Defense in Large Language Models via Unlearning Harmful Knowledgecited by 49
- 2024Instruction Tuning With Loss Over Instructionscited by 40
- 2023Knowledge Sanitization of Large Language Modelscited by 36
- 2024From Theft to Bomb-Making: The Ripple Effect of Unlearning in Defending Against Jailbreak Attackscited by 29
- 2024Accurate and Nuanced Open-QA Evaluation Through Textual Entailmentcited by 12
Built on by
Citing papers per year: 2025: 27; 2026: 28.
55 papers.
Sort:
By area:
- 2025Unlearning Isn't Deletion: Investigating Reversibility of Machine Unlearning in LLMscited by 41
- 2025A Comprehensive Survey of Machine Unlearning Techniques for Large Language Modelscited by 32
- 2025Security Concerns for Large Language Models: A Surveycited by 29
- 2025CTRAP: Embedding Collapse Trap to Safeguard Large Language Models from Harmful Fine-Tuningcited by 11
- 2025Constrained Entropic Unlearning: A Primal-Dual Framework for Large Language Modelscited by 10
- 2025SoK: Machine Unlearning for Large Language Modelscited by 10
- 2025Leak@k: Unlearning Does Not Make LLMs Forget Under Probabilistic Decodingcited by 9
- 2025Improving LLM Unlearning Robustness via Random Perturbationscited by 7
- 2025AI Supply Chains: An Emerging Ecosystem of AI Actors, Products, and Servicescited by 7
- 2025DualOptim: Enhancing Efficacy and Stability in Machine Unlearning with Dual Optimizerscited by 6
- 2025Step-by-Step Reasoning Attack: Revealing 'Erased' Knowledge in Large Language Modelscited by 6
- 2026Attention Smoothing Is All You Need For Unlearningcited by 6
38 more
- 2025UniErase: Towards Balanced and Precise Unlearning in Language Modelscited by 5
- 2025Proximalized Preference Optimization for Diverse Feedback Types: A Decomposed Perspective on DPOcited by 5
- 2025LLM Unlearning Without an Expert Curated Datasetcited by 5
- 2025Wisdom is Knowing What not to Say: Hallucination-Free LLMs Unlearning via Attention Shiftingcited by 5
- 2025Curvature-Aware Safety Restoration In LLMs Fine-Tuningcited by 5
- 2025Forgetting: A New Mechanism Towards Better Large Language Model Fine-tuningcited by 4
- 2025Understanding the Dilemma of Unlearning for Large Language Modelscited by 4
- 2026Reinforcement Unlearning via Group Relative Policy Optimizationcited by 4
- 2026REBEL: Hidden Knowledge Recovery via Evolutionary-Based Evaluation Loopcited by 4
- 2025GRAIL: Gradient-Based Adaptive Unlearning for Privacy and Copyright in LLMscited by 3
- 2026Position: The Term "Machine Unlearning" Is Overused in LLMscited by 3
- 2025Direct Token Optimization: A Self-contained Approach to Large Language Model Unlearningcited by 2
- 2026STaR: Sensitive Trajectory Regulation for Unlearning in Large Reasoning Modelscited by 2
- 2026Multi-Head Attention Is a Multi-Player Gamecited by 2
- 2025MIAT: Maneuver-Intention-Aware Transformer for Spatio-Temporal Trajectory Predictioncited by 1
- 2025Unlearning at Scale: State-Exact Trace-Preserving Deletion in Billion-Parameter Language Modelscited by 1
- 2025Standard vs. Modular Sampling: Best Practices for Reliable LLM Unlearningcited by 1
- 2025LLM Unlearning Under the Microscope: A Full-Stack View on Methods and Metricscited by 1
- 2026Beyond Forgetting: Representation Misdirection Elicits Controllable Side Behaviors and Capabilitiescited by 1
- 2026Rethinking Benign Relearning: Syntax as the Hidden Driver of Unlearning Failurescited by 1
- 2026KUDA: Knowledge Unlearning by Deviating Representation for Large Language Modelscited by 1
- 2026Which Concepts to Forget and How to Refuse? Decomposing Concepts for Continual Unlearning in Large Vision-Language Modelscited by 1
- 2026Secure Forgetting: A Framework for Privacy-Driven Unlearning in Large Language Model (LLM)-Based Agentscited by 1
- 2026Subspace Control: Turning Constrained Model Steering into Controllable Spectral Optimizationcited by 1
- 2026Position: AI Safety Requires Effective Controllabilitycited by 1
- 2026Modular Pretraining Enables Access Controlcited by 1
- 2026Beyond Binary Rewards: A Comparative Study of Reward Design for Reinforcement Unlearningcited by 1
- 2025Lifting Data-Tracing Machine Unlearning to Knowledge-Tracing for Foundation Modelscited by 0
- 2025Controllable Machine Unlearning via Gradient Pivotingcited by 0
- 2025RapidUn: Influence-Driven Parameter Reweighting for Efficient Large Language Model Unlearningcited by 0
- 2026Shadow Unlearning: A Neuro-Semantic Approach to Fidelity-Preserving Faceless Forgetting in LLMscited by 0
- 2026FIT to Forget: Robust Continual Unlearning for Large Language Modelscited by 0
- 2026EvoMU: Evolutionary Machine Unlearningcited by 0
- 2026Exclusive Unlearningcited by 0
- 2026Machine Unlearning for Masked Diffusion Language Modelscited by 0
- 2026DualOptim+: Bridging Shared and Decoupled Optimizer States for Better Machine Unlearning in Large Language Modelscited by 0
- 2026Stochastic Meta-Unlearning: Bridging Language Backbone and Multimodal Unlearningcited by 0
- 2026Spectral Saliency for Machine Unlearningcited by 0
50 most cited of 55 All 55 (JSON)
- 2026Do LLMs Really Forget? Hidden-State Leakage in Model Unlearning and How to Fix it29 Sep 2026
- 2026PruneForget: Joint Unlearning and Pruning of Vision Models26 Sep 2026
- 2026Neuralyzing the Trace: Selective Representation-Level Unlearning with Contrastive Sparse Autoencoders25 Sep 2026
- 2026CUNO: Curriculum and Preference Optimization for Stable Graph Unlearning under Mass Deletion8 Sep 2026
- 2026On-the-go Forgetting without Explicit Unlearning via ERASE5 Sep 2026
- 2026Spectral Saliency for Machine Unlearning16 Aug 2026
- 2026Beyond Binary Rewards: A Comparative Study of Reward Design for Reinforcement Unlearning30 Jul 2026
- 2026Stochastic Meta-Unlearning: Bridging Language Backbone and Multimodal Unlearning21 Jul 2026
- 2026Modular Pretraining Enables Access Control9 Jul 2026
- 2026Position: AI Safety Requires Effective Controllability26 May 2026
- 2026DualOptim+: Bridging Shared and Decoupled Optimizer States for Better Machine Unlearning in Large Language Models20 May 2026
- 2026Machine Unlearning for Masked Diffusion Language Models18 May 2026
38 more
- 2026Position: The Term "Machine Unlearning" Is Overused in LLMs8 May 2026
- 2026Exclusive Unlearning7 Apr 2026
- 2026Subspace Control: Turning Constrained Model Steering into Controllable Spectral Optimization5 Apr 2026
- 2026Secure Forgetting: A Framework for Privacy-Driven Unlearning in Large Language Model (LLM)-Based Agents1 Apr 2026
- 2026Which Concepts to Forget and How to Refuse? Decomposing Concepts for Continual Unlearning in Large Vision-Language Models23 Mar 2026
- 2026Attention Smoothing Is All You Need For Unlearning1 Mar 2026
- 2026KUDA: Knowledge Unlearning by Deviating Representation for Large Language Models22 Feb 2026
- 2026REBEL: Hidden Knowledge Recovery via Evolutionary-Based Evaluation Loop5 Feb 2026
- 2026Rethinking Benign Relearning: Syntax as the Hidden Driver of Unlearning Failures3 Feb 2026
- 2026EvoMU: Evolutionary Machine Unlearning2 Feb 2026
- 2026Multi-Head Attention Is a Multi-Player Game31 Jan 2026
- 2026Beyond Forgetting: Representation Misdirection Elicits Controllable Side Behaviors and Capabilities29 Jan 2026
- 2026FIT to Forget: Robust Continual Unlearning for Large Language Models29 Jan 2026
- 2026Reinforcement Unlearning via Group Relative Policy Optimization28 Jan 2026
- 2026STaR: Sensitive Trajectory Regulation for Unlearning in Large Reasoning Models14 Jan 2026
- 2026Shadow Unlearning: A Neuro-Semantic Approach to Fidelity-Preserving Faceless Forgetting in LLMs7 Jan 2026
- 2025RapidUn: Influence-Driven Parameter Reweighting for Efficient Large Language Model Unlearning4 Dec 2025
- 2025Curvature-Aware Safety Restoration In LLMs Fine-Tuning22 Nov 2025
- 2025Leak@k: Unlearning Does Not Make LLMs Forget Under Probabilistic Decoding7 Nov 2025
- 2025Controllable Machine Unlearning via Gradient Pivoting22 Oct 2025
- 2025Wisdom is Knowing What not to Say: Hallucination-Free LLMs Unlearning via Attention Shifting20 Oct 2025
- 2025LLM Unlearning Under the Microscope: A Full-Stack View on Methods and Metrics8 Oct 2025
- 2025Direct Token Optimization: A Self-contained Approach to Large Language Model Unlearning30 Sep 2025
- 2025Understanding the Dilemma of Unlearning for Large Language Models29 Sep 2025
- 2025Standard vs. Modular Sampling: Best Practices for Reliable LLM Unlearning29 Aug 2025
- 2025Unlearning at Scale: State-Exact Trace-Preserving Deletion in Billion-Parameter Language Models17 Aug 2025
- 2025LLM Unlearning Without an Expert Curated Dataset8 Aug 2025
- 2025Forgetting: A New Mechanism Towards Better Large Language Model Fine-tuning6 Aug 2025
- 2025Step-by-Step Reasoning Attack: Revealing 'Erased' Knowledge in Large Language Models14 Jun 2025
- 2025Lifting Data-Tracing Machine Unlearning to Knowledge-Tracing for Foundation Models12 Jun 2025
- 2025SoK: Machine Unlearning for Large Language Models10 Jun 2025
- 2025Constrained Entropic Unlearning: A Primal-Dual Framework for Large Language Models5 Jun 2025
- 2025Proximalized Preference Optimization for Diverse Feedback Types: A Decomposed Perspective on DPO29 May 2025
- 2025Security Concerns for Large Language Models: A Survey24 May 2025
- 2025Unlearning Isn't Deletion: Investigating Reversibility of Machine Unlearning in LLMs22 May 2025
- 2025CTRAP: Embedding Collapse Trap to Safeguard Large Language Models from Harmful Fine-Tuning22 May 2025
- 2025UniErase: Towards Balanced and Precise Unlearning in Language Models21 May 2025
- 2025AI Supply Chains: An Emerging Ecosystem of AI Actors, Products, and Services28 Apr 2025
50 newest of 55 All 55 (JSON)
- 2025Unlearning Isn't Deletion: Investigating Reversibility of Machine Unlearning in LLMscited by 41
- 2025A Comprehensive Survey of Machine Unlearning Techniques for Large Language Modelscited by 32
- 2025CTRAP: Embedding Collapse Trap to Safeguard Large Language Models from Harmful Fine-Tuningcited by 11
- 2025Constrained Entropic Unlearning: A Primal-Dual Framework for Large Language Modelscited by 10
- 2025SoK: Machine Unlearning for Large Language Modelscited by 10
- 2025Leak@k: Unlearning Does Not Make LLMs Forget Under Probabilistic Decodingcited by 9
- 2025Improving LLM Unlearning Robustness via Random Perturbationscited by 7
- 2025DualOptim: Enhancing Efficacy and Stability in Machine Unlearning with Dual Optimizerscited by 6
- 2026Attention Smoothing Is All You Need For Unlearningcited by 6
- 2025UniErase: Towards Balanced and Precise Unlearning in Language Modelscited by 5
- 2025LLM Unlearning Without an Expert Curated Datasetcited by 5
- 2025Wisdom is Knowing What not to Say: Hallucination-Free LLMs Unlearning via Attention Shiftingcited by 5
12 most cited of 39 All 39 (JSON)
- 2026Do LLMs Really Forget? Hidden-State Leakage in Model Unlearning and How to Fix it29 Sep 2026
- 2026PruneForget: Joint Unlearning and Pruning of Vision Models26 Sep 2026
- 2026Neuralyzing the Trace: Selective Representation-Level Unlearning with Contrastive Sparse Autoencoders25 Sep 2026
- 2026On-the-go Forgetting without Explicit Unlearning via ERASE5 Sep 2026
- 2026Spectral Saliency for Machine Unlearning16 Aug 2026
- 2026Beyond Binary Rewards: A Comparative Study of Reward Design for Reinforcement Unlearning30 Jul 2026
- 2026DualOptim+: Bridging Shared and Decoupled Optimizer States for Better Machine Unlearning in Large Language Models20 May 2026
- 2026Position: The Term "Machine Unlearning" Is Overused in LLMs8 May 2026
- 2026Exclusive Unlearning7 Apr 2026
- 2026Subspace Control: Turning Constrained Model Steering into Controllable Spectral Optimization5 Apr 2026
- 2026Attention Smoothing Is All You Need For Unlearning1 Mar 2026
- 2026KUDA: Knowledge Unlearning by Deviating Representation for Large Language Models22 Feb 2026
12 newest of 39 All 39 (JSON)
- 2025Step-by-Step Reasoning Attack: Revealing 'Erased' Knowledge in Large Language Modelscited by 6
- 2026STaR: Sensitive Trajectory Regulation for Unlearning in Large Reasoning Modelscited by 2
- 2026Secure Forgetting: A Framework for Privacy-Driven Unlearning in Large Language Model (LLM)-Based Agentscited by 1
- 2026Secure Forgetting: A Framework for Privacy-Driven Unlearning in Large Language Model (LLM)-Based Agents1 Apr 2026
- 2026STaR: Sensitive Trajectory Regulation for Unlearning in Large Reasoning Models14 Jan 2026
- 2025Step-by-Step Reasoning Attack: Revealing 'Erased' Knowledge in Large Language Models14 Jun 2025
- 2026Machine Unlearning for Masked Diffusion Language Modelscited by 0
- 2026Machine Unlearning for Masked Diffusion Language Models18 May 2026
- 2025Security Concerns for Large Language Models: A Surveycited by 29
- 2025AI Supply Chains: An Emerging Ecosystem of AI Actors, Products, and Servicescited by 7
- 2025Forgetting: A New Mechanism Towards Better Large Language Model Fine-tuningcited by 4
- 2026Multi-Head Attention Is a Multi-Player Gamecited by 2
- 2025MIAT: Maneuver-Intention-Aware Transformer for Spatio-Temporal Trajectory Predictioncited by 1
- 2026Position: AI Safety Requires Effective Controllabilitycited by 1
- 2026Modular Pretraining Enables Access Controlcited by 1
- 2026Modular Pretraining Enables Access Control9 Jul 2026
- 2026Position: AI Safety Requires Effective Controllability26 May 2026
- 2026Multi-Head Attention Is a Multi-Player Game31 Jan 2026
- 2025Forgetting: A New Mechanism Towards Better Large Language Model Fine-tuning6 Aug 2025
- 2025Security Concerns for Large Language Models: A Survey24 May 2025
- 2025AI Supply Chains: An Emerging Ecosystem of AI Actors, Products, and Services28 Apr 2025
- 2025MIAT: Maneuver-Intention-Aware Transformer for Spatio-Temporal Trajectory Prediction7 Apr 2025
Similar, not cited
Close in wording, no citation either way
- 2026Unlearning in LLMs: Methods, Evaluation, and Open Challenges
- 2024Catastrophic Failure of LLM Unlearning via Quantization
- 2024Machine Unlearning in Large Language Models
- 2025A Survey on Unlearning in Large Language Models
- 2025Unlearning That Lasts: Utility-Preserving, Robust, and Almost Irreversible Forgetting in LLMs
- 2025Not Every Token Needs Forgetting: Selective Unlearning to Limit Change in Utility in Large Language Model Unlearning
- 2025Scalable and Robust LLM Unlearning by Correcting Responses with Retrieved Exclusions
- 2024Towards Effective Evaluations and Comparisons for LLM Unlearning Methods