Erasing Without Remembering: Implicit Knowledge Forgetting in Large Language Models
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
In this paper, we investigate knowledge forgetting in large language models with a focus on its generalisation, ensuring that models forget not only specific training samples but also related implicit knowledge. To this end, we begin by identifying a broader unlearning scope that includes both target data and logically associated samples, including rephrased, subject-replaced, relation-reversed, and one-hop reasoned data. We then conduct a rigorous evaluation of 15 state-of-the-art methods across three datasets, revealing that unlearned models still recall paraphrased answers and retain target facts in their intermediate layers. This motivates us to take a preliminary step toward more generalised implicit knowledge forgetting by proposing PerMU, a novel probability perturbation-based unlearning paradigm. PerMU simulates adversarial unlearning samples to eliminate fact-related tokens from the logit distribution, collectively reducing the probabilities of all answer-associated tokens. Experiments are conducted on a diverse range of datasets, including TOFU, Harry Potter, ZsRE, WMDP, and MUSE, using models ranging from 1.3B to 13B in scale. The results demonstrate that PerMU delivers up to a 50.40% improvement in unlearning vanilla target data while maintaining a 40.73% boost in forgetting implicit knowledge. Our code can be found in https://github.com/MaybeLizzy/PERMU.
Key facts. Cited by 5 papers in the map (data through 7 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 46 of its 73 references that are in the map. First posted on arXiv 27 Feb 2025.
Builds on
46 of 73 references.
Closest ancestors · 28
Same direction, newest first
- 2024Evaluating Deep Unlearning in Large Language Models19 Oct
- 2024Mechanistic Unlearning: Robust Knowledge Unlearning and Editing via Mechanistic Localization16 Oct
- 2024LLM Unlearning via Loss Adjustment with Only Forget Data14 Oct
- 2024Simplicity Prevails: Rethinking Negative Preference Optimization for LLM Unlearning9 Oct
- 2024An Adversarial Perspective on Machine Unlearning for AI Safety26 Sep
- 2024MUSE: Machine Unlearning Six-Way Evaluation for Language Models8 Jul
- 2024Machine Unlearning Fails to Remove Data Poisoning Attacks25 Jun
- 2024Protecting Privacy Through Approximating Optimal Parameters for Sequence Unlearning in Language Models20 Jun
- 2024Textual Unlearning Gives a False Sense of Unlearning19 Jun
- 2024RWKU: Benchmarking Real-World Knowledge Unlearning for Large Language Models16 Jun
- 2024Reversing the Forget-Retain Objectives: An Efficient LLM Unlearning Framework from Logit Difference12 Jun
- 2024Large Language Model Unlearning via Embedding-Corrupted Prompts12 Jun
16 more
- 2024RKLD: Reverse KL-Divergence-based Knowledge Distillation for Unlearning Personal Information in Large Language Models4 Jun
- 2024SOUL: Unlocking the Power of Second-Order Optimization for LLM Unlearning28 Apr
- 2024Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearning8 Apr
- 2024Guardrail Baselines for Unlearning in LLMs5 Mar
- 2024Machine Unlearning of Pre-trained Large Language Models23 Feb
- 2024Rethinking Machine Unlearning for Large Language Models13 Feb
- 2024TOFU: A Task of Fictitious Unlearning for LLMs11 Jan
- 2023Knowledge Unlearning for LLMs: Tasks, Methods, and Challenges27 Nov
- 2023Unlearn What You Want to Forget: Efficient Unlearning for LLMs31 Oct
- 2023In-Context Unlearning: Language Models as Few Shot Unlearners11 Oct
- 2023Who's Harry Potter? Approximate Unlearning in LLMs3 Oct
- 2023Separate the Wheat from the Chaff: Model Deficiency Unlearning via Parameter-Efficient Module Operation16 Aug
- 2023Right to be Forgotten in the Era of Large Language Models: Implications, Challenges, and Solutions8 Jul
- 2022Forget Unlearning: Towards True Data-Deletion in Machine Learning17 Oct
- 2022Knowledge Unlearning for Mitigating Privacy Risks in Language Models4 Oct
- 2022Quark: Controllable Text Generation with Reinforced Unlearning26 May
Other references · 18
- 2023GPT-4 Technical Reportcited by 18,132
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 13,958
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 7,916
- 2022Locating and Editing Factual Associations in GPTcited by 2,609
- 2022Editing Models with Task Arithmeticcited by 1,076
- 2023Quantifying Language Models' Sensitivity to Spurious Features in Prompt Design or: How I learned to start worrying about prompt formattingcited by 778
- 2023Dissecting Recall of Factual Associations in Auto-Regressive Language Modelscited by 512
- 2024The WMDP Benchmark: Measuring and Reducing Malicious Use With Unlearningcited by 488
- 2019Making AI Forget You: Data Deletion in Machine Learningcited by 447
- 2017Zero-Shot Relation Extraction via Reading Comprehensioncited by 425
- 2023Editing Large Language Models: Problems, Methods, and Opportunitiescited by 367
- 2023Can Sensitive Information Be Deleted From LLMs? Objectives for Defending Against Extraction Attackscited by 156
6 more
- 2023Composing Parameter-Efficient Modules with Arithmetic Operationscited by 155
- 2018Generating Informative and Diverse Conversational Responses via Adversarial Information Maximizationcited by 114
- 2023f-Divergence Minimization for Sequence-Level Knowledge Distillationcited by 112
- 2024Knowledge Fusion of Large Language Modelscited by 110
- 2023DEPN: Detecting and Editing Privacy Neurons in Pretrained Language Modelscited by 75
- 2018The Adversarial Attack and Detection under the Fisher Information Metriccited by 18
Built on by
Citing papers per year: 2025: 2; 2026: 3.
5 papers.
- 2025A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deploymentcited by 110
- 2025SoK: Machine Unlearning for Large Language Modelscited by 9
- 2026CBD: API-Only LLM Black-Box Unlearning through Controlled Behavioral Divergencecited by 0
- 2026Making LLMs Truly Forget: Deep Unlearning by Searching, Selecting, and Severing Knowledge Pathscited by 0
- 2026TULIP: Targeted LLM Unlearning at Layers Identified Per-Inputcited by 0
- 2026TULIP: Targeted LLM Unlearning at Layers Identified Per-Input28 Sep 2026
- 2026Making LLMs Truly Forget: Deep Unlearning by Searching, Selecting, and Severing Knowledge Paths28 Sep 2026
- 2026CBD: API-Only LLM Black-Box Unlearning through Controlled Behavioral Divergence26 Jun 2026
- 2025SoK: Machine Unlearning for Large Language Models10 Jun 2025
- 2025A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deployment22 Apr 2025