UPCORE: Utility-Preserving Coreset Selection for Balanced Unlearning
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
User specifications or legal frameworks often require information to be removed from pretrained models, including large language models (LLMs). This requires deleting or "forgetting" a set of data points from an already-trained model, which typically degrades its performance on other data points. Thus, a balance must be struck between removing information and keeping the model's other abilities intact, with a failure to balance this trade-off leading to poor deletion or an unusable model. To this end, we propose UPCORE (Utility-Preserving Coreset Selection), a method-agnostic data selection framework for mitigating collateral damage during unlearning. Finding that the model damage is correlated with the variance of the model's representations on the forget set, we selectively prune the forget set to remove outliers, thereby minimizing model degradation after unlearning. Across three standard unlearning methods, UPCORE consistently achieves a superior balance between the competing objectives of deletion efficacy and model preservation. To better evaluate this trade-off, we introduce a new metric, measuring the area-under-the-curve (AUC) across standard metrics. Our results show that UPCORE improves both standard metrics and AUC, benefiting from positive transfer between the coreset and pruned points while reducing negative transfer from the forget set to points outside of it.
Key facts. Cited by 7 papers in the map (data through 7 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 46 of its 57 references that are in the map. First posted on arXiv 20 Feb 2025.
Builds on
46 of 57 references.
Closest ancestors · 10
Same direction, newest first
- 2024Towards Scalable Exact Machine Unlearning Using Parameter-Efficient Fine-Tuning24 Jun
- 2024Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearning8 Apr
- 2024Rethinking Machine Unlearning for Large Language Models13 Feb
- 2024TOFU: A Task of Fictitious Unlearning for LLMs11 Jan
- 2023Unlearn What You Want to Forget: Efficient Unlearning for LLMs31 Oct
- 2023Large Language Model Unlearning14 Oct
- 2023Who's Harry Potter? Approximate Unlearning in LLMs3 Oct
- 2023Right to be Forgotten in the Era of Large Language Models: Implications, Challenges, and Solutions8 Jul
- 2022Knowledge Unlearning for Mitigating Privacy Risks in Language Models4 Oct
- 2022A Survey of Machine Unlearning6 Sep
Other references · 36
- 2023GPT-4 Technical Reportcited by 18,132
- 2022Training language models to follow instructions with human feedbackcited by 15,712
- 2024The Llama 3 Herd of Modelscited by 14,192
- 2019Sentence-BERT: Sentence Embeddings using Siamese BERT-Networkscited by 9,049
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 7,916
- 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 2,914
- 2017TriviaQA: A Large Scale Distantly Supervised Challenge Dataset for Reading Comprehensioncited by 2,895
- 2022Locating and Editing Factual Associations in GPTcited by 2,609
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,221
- 2014On the Properties of Neural Machine Translation: Encoder-Decoder Approachescited by 1,303
- 2019Machine Unlearningcited by 1,020
- 2022Mass-Editing Memory in a Transformercited by 976
24 more
- 2018The Secret Sharer: Evaluating and Testing Unintended Memorization in Neural Networkscited by 847
- 2021Knowledge Neurons in Pretrained Transformerscited by 590
- 2021Editing Factual Knowledge in Language Modelscited by 548
- 2019Certified Data Removal from Machine Learning Modelscited by 512
- 2021Fast Model Editing at Scalecited by 491
- 2024The WMDP Benchmark: Measuring and Reducing Malicious Use With Unlearningcited by 488
- 2019Making AI Forget You: Data Deletion in Machine Learningcited by 447
- 2023Paraphrasing evades detectors of AI-generated text, but retrieval is an effective defensecited by 401
- 2025Layer by Layer: Uncovering Hidden Representations in Language Modelscited by 293
- 2021GRAD-MATCH: Gradient Matching based Data Subset Selection for Efficient Deep Model Trainingcited by 269
- 2020GLISTER: Generalization based Data Subset Selection for Efficient and Robust Learningcited by 224
- 2024Latent Adversarial Training Improves Robustness to Persistent Harmful Behaviors in LLMscited by 158
- 2023Can Sensitive Information Be Deleted From LLMs? Objectives for Defending Against Extraction Attackscited by 156
- 2020Editable Neural Networkscited by 154
- 2024SAFREE: Training-Free and Adaptive Guard for Safe Text-to-Image And Video Generationcited by 125
- 2024Know Your Limits: A Survey of Abstention in Large Language Modelscited by 116
- 2023Data Pruning via Moving-one-Sample-outcited by 67
- 2024GUARD: Role-playing to Generate Natural-language Jailbreakings to Test Guideline Adherence of Large Language Modelscited by 44
- 2023Privacy Side Channels in Machine Learning Systemscited by 38
- 2024FASTopic: Pretrained Transformer is a Fast, Adaptive, Stable, and Transferable Topic Modelcited by 34
- 2022Unlearning Graph Classifiers with Limited Data Resourcescited by 31
- 2024Fundamental Problems With Model Editing: How Should Rational Belief Revision Work in LLMs?cited by 24
- 2024Coreset Selection for Object Detectioncited by 18
- 2024Unforgettable Generalization in Language Modelscited by 4
Built on by
Citing papers per year: 2025: 6; 2026: 1.
7 papers.
- 2025A Coreset Selection of Coreset Selection Literature: Introduction and Recent Advancescited by 28
- 2025LLM Unlearning Reveals a Stronger-Than-Expected Coreset Effect in Current Benchmarkscited by 11
- 2025Unlearning Sensitive Information in Multimodal LLMs: Benchmark and Attack-Defense Evaluationcited by 11
- 2025SoK: Machine Unlearning for Large Language Modelscited by 9
- 2026Co-occurring Associated REtained concepts in Diffusion Unlearningcited by 4
- 2025A Survey on Unlearning in Large Language Modelscited by 2
- 2025LLM Unlearning on Noisy Forget Sets: A Study of Incomplete, Rewritten, and Watermarked Datacited by 1
- 2026Co-occurring Associated REtained concepts in Diffusion Unlearning23 Jun 2026
- 2025A Survey on Unlearning in Large Language Models29 Oct 2025
- 2025LLM Unlearning on Noisy Forget Sets: A Study of Incomplete, Rewritten, and Watermarked Data10 Oct 2025
- 2025SoK: Machine Unlearning for Large Language Models10 Jun 2025
- 2025A Coreset Selection of Coreset Selection Literature: Introduction and Recent Advances23 May 2025
- 2025Unlearning Sensitive Information in Multimodal LLMs: Benchmark and Attack-Defense Evaluation1 May 2025
- 2025LLM Unlearning Reveals a Stronger-Than-Expected Coreset Effect in Current Benchmarks14 Apr 2025