mlsanityData to 14 Oct 2026

Not All Data Are Unlearned Equally

arXiv 2504.05058 ↗First posted 7 Apr 2025cs.CLcited by 12

On the map: LLM safety and security → Machine unlearning

Abstract (arXiv)

Machine unlearning is concerned with the task of removing knowledge learned from particular data points from a trained model. In the context of large language models (LLMs), unlearning has recently received increased attention, particularly for removing knowledge about named entities from models for privacy purposes. While various approaches have been proposed to address the unlearning problem, most existing approaches treat all data points to be unlearned equally, i.e., unlearning that Montreal is a city in Canada is treated exactly the same as unlearning the phone number of the first author of this paper. In this work, we show that this all data is equal assumption does not hold for LLM unlearning. We study how the success of unlearning depends on the frequency of the knowledge we want to unlearn in the pre-training data of a model and find that frequency strongly affects unlearning, i.e., more frequent knowledge is harder to unlearn. Additionally, we uncover a misalignment between probability and generation-based evaluations of unlearning and show that this problem worsens as models become larger. Overall, our experiments highlight the need for better evaluation practices and novel methods for LLM unlearning that take the training data of models into account.

Key facts. Cited by 12 papers in the map (data through 14 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 39 of its 60 references that are in the map. First posted on arXiv 7 Apr 2025.

Builds on

39 of 60 references.

References · 39

  1. 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
  2. 2014Microsoft COCO: Common Objects in Contextcited by 17,608
  3. 2023Segment Anythingcited by 8,234
  4. 2023DINOv2: Learning Robust Visual Features without Supervisioncited by 7,974
  5. 2014Fully Convolutional Networks for Semantic Segmentationcited by 4,859
  6. 2016DeepLab: Semantic Image Segmentation with Deep Convolutional Nets, Atrous Convolution, and Fully Connected CRFscited by 3,241
  7. 2024SAM 2: Segment Anything in Images and Videoscited by 2,863
  8. 2021Per-Pixel Classification is Not All You Need for Semantic Segmentationcited by 1,152
  9. 2019PANet: Few-Shot Image Semantic Segmentation with Prototype Alignmentcited by 449
  10. 2023Segment Anything in High Qualitycited by 376
  11. 2017One-Shot Learning for Semantic Segmentationcited by 337
  12. 2020Prior Guided Feature Enrichment Network for Few-Shot Segmentationcited by 271
27 more
  1. 2023Personalize Segment Anything Model with One Shotcited by 250
  2. 2021Hypercorrelation Squeeze for Few-Shot Segmentationcited by 193
  3. 2020Prototype Mixture Models for Few-shot Semantic Segmentationcited by 190
  4. 2019Feature Weighting and Boosting for Few-Shot Segmentationcited by 189
  5. 2023EfficientSAM: Leveraged Masked Image Pretraining for Efficient Segment Anythingcited by 188
  6. 2023RSPrompter: Learning to Prompt for Remote Sensing Instance Segmentation based on Visual Foundation Modelcited by 181
  7. 2018SG-One: Similarity Guidance Network for One-Shot Semantic Segmentationcited by 169
  8. 2019FSS-1000: A 1000-Class Dataset for Few-Shot Segmentationcited by 160
  9. 2023Matcher: Segment Anything with One Shot Using All-Purpose Feature Matchingcited by 142
  10. 2020Few-Shot Segmentation Without Meta-Learning: A Good Transductive Inference Is All You Need?cited by 135
  11. 2021Few-Shot Segmentation via Cycle-Consistent Transformercited by 133
  12. 2022Cost Aggregation with 4D Convolutional Swin Transformer for Few-Shot Segmentationcited by 114
  13. 2023SurgicalSAM: Efficient Class Promptable Surgical Instrument Segmentationcited by 104
  14. 2022Self-Support Few-Shot Semantic Segmentationcited by 96
  15. 2023Hierarchical Dense Correlation Distillation for Few-Shot Segmentationcited by 84
  16. 2024Open-Vocabulary SAM: Segment and Recognize Twenty-thousand Classes Interactivelycited by 75
  17. 2024VRP-SAM: SAM with Visual Reference Promptcited by 75
  18. 2021Mining Latent Classes for Few-shot Segmentationcited by 69
  19. 2022Dense Cross-Query-and-Support Attention Weighted Mask Aggregation for Few-Shot Segmentationcited by 65
  20. 2024Bridge the Points: Graph-based Few-shot Segment Anything Semanticallycited by 35
  21. 2024Hi-SAM: Marrying Segment Anything Model for Hierarchical Text Segmentationcited by 30
  22. 2020SimPropNet: Improved Similarity Propagation for Few-shot Image Segmentationcited by 27
  23. 2022Doubly Deformable Aggregation of Covariance Matrices for Few-shot Segmentationcited by 23
  24. 2023Visual and Textual Prior Guided Mask Assemble for Few-Shot Segmentation and Beyondcited by 19
  25. 2022MSI: Maximize Support-Set Information for Few-Shot Segmentationcited by 18
  26. 2024MAS-SAM: Segment Any Marine Animal with Aggregated Featurescited by 15
  27. 2024Boosting Few-Shot Semantic Segmentation Via Segment Anything Modelcited by 4

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 6; 2026: 6.

12 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2024The Frontier of Data Erasure: Machine Unlearning for Large Language Models
  2. 2024Towards Effective Evaluations and Comparisons for LLM Unlearning Methods
  3. 2024Rethinking Machine Unlearning for Large Language Models
  4. 2024Catastrophic Failure of LLM Unlearning via Quantization
  5. 2024Unlearning in- vs. out-of-distribution data in LLMs under gradient-based method
  6. 2025A Comprehensive Survey of Machine Unlearning Techniques for Large Language Models
  7. 2026Unlearning in LLMs: Methods, Evaluation, and Open Challenges
  8. 2025Existing Large Language Model Unlearning Evaluations Are Inconclusive