Not All Data Are Unlearned Equally
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
Machine unlearning is concerned with the task of removing knowledge learned from particular data points from a trained model. In the context of large language models (LLMs), unlearning has recently received increased attention, particularly for removing knowledge about named entities from models for privacy purposes. While various approaches have been proposed to address the unlearning problem, most existing approaches treat all data points to be unlearned equally, i.e., unlearning that Montreal is a city in Canada is treated exactly the same as unlearning the phone number of the first author of this paper. In this work, we show that this all data is equal assumption does not hold for LLM unlearning. We study how the success of unlearning depends on the frequency of the knowledge we want to unlearn in the pre-training data of a model and find that frequency strongly affects unlearning, i.e., more frequent knowledge is harder to unlearn. Additionally, we uncover a misalignment between probability and generation-based evaluations of unlearning and show that this problem worsens as models become larger. Overall, our experiments highlight the need for better evaluation practices and novel methods for LLM unlearning that take the training data of models into account.
Key facts. Cited by 12 papers in the map (data through 14 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 39 of its 60 references that are in the map. First posted on arXiv 7 Apr 2025.
Builds on
39 of 60 references.
References · 39
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
- 2014Microsoft COCO: Common Objects in Contextcited by 17,608
- 2023Segment Anythingcited by 8,234
- 2023DINOv2: Learning Robust Visual Features without Supervisioncited by 7,974
- 2014Fully Convolutional Networks for Semantic Segmentationcited by 4,859
- 2016DeepLab: Semantic Image Segmentation with Deep Convolutional Nets, Atrous Convolution, and Fully Connected CRFscited by 3,241
- 2024SAM 2: Segment Anything in Images and Videoscited by 2,863
- 2021Per-Pixel Classification is Not All You Need for Semantic Segmentationcited by 1,152
- 2019PANet: Few-Shot Image Semantic Segmentation with Prototype Alignmentcited by 449
- 2023Segment Anything in High Qualitycited by 376
- 2017One-Shot Learning for Semantic Segmentationcited by 337
- 2020Prior Guided Feature Enrichment Network for Few-Shot Segmentationcited by 271
27 more
- 2023Personalize Segment Anything Model with One Shotcited by 250
- 2021Hypercorrelation Squeeze for Few-Shot Segmentationcited by 193
- 2020Prototype Mixture Models for Few-shot Semantic Segmentationcited by 190
- 2019Feature Weighting and Boosting for Few-Shot Segmentationcited by 189
- 2023EfficientSAM: Leveraged Masked Image Pretraining for Efficient Segment Anythingcited by 188
- 2023RSPrompter: Learning to Prompt for Remote Sensing Instance Segmentation based on Visual Foundation Modelcited by 181
- 2018SG-One: Similarity Guidance Network for One-Shot Semantic Segmentationcited by 169
- 2019FSS-1000: A 1000-Class Dataset for Few-Shot Segmentationcited by 160
- 2023Matcher: Segment Anything with One Shot Using All-Purpose Feature Matchingcited by 142
- 2020Few-Shot Segmentation Without Meta-Learning: A Good Transductive Inference Is All You Need?cited by 135
- 2021Few-Shot Segmentation via Cycle-Consistent Transformercited by 133
- 2022Cost Aggregation with 4D Convolutional Swin Transformer for Few-Shot Segmentationcited by 114
- 2023SurgicalSAM: Efficient Class Promptable Surgical Instrument Segmentationcited by 104
- 2022Self-Support Few-Shot Semantic Segmentationcited by 96
- 2023Hierarchical Dense Correlation Distillation for Few-Shot Segmentationcited by 84
- 2024Open-Vocabulary SAM: Segment and Recognize Twenty-thousand Classes Interactivelycited by 75
- 2024VRP-SAM: SAM with Visual Reference Promptcited by 75
- 2021Mining Latent Classes for Few-shot Segmentationcited by 69
- 2022Dense Cross-Query-and-Support Attention Weighted Mask Aggregation for Few-Shot Segmentationcited by 65
- 2024Bridge the Points: Graph-based Few-shot Segment Anything Semanticallycited by 35
- 2024Hi-SAM: Marrying Segment Anything Model for Hierarchical Text Segmentationcited by 30
- 2020SimPropNet: Improved Similarity Propagation for Few-shot Image Segmentationcited by 27
- 2022Doubly Deformable Aggregation of Covariance Matrices for Few-shot Segmentationcited by 23
- 2023Visual and Textual Prior Guided Mask Assemble for Few-Shot Segmentation and Beyondcited by 19
- 2022MSI: Maximize Support-Set Information for Few-Shot Segmentationcited by 18
- 2024MAS-SAM: Segment Any Marine Animal with Aggregated Featurescited by 15
- 2024Boosting Few-Shot Semantic Segmentation Via Segment Anything Modelcited by 4
Built on by
Citing papers per year: 2025: 6; 2026: 6.
12 papers.
- 2025SoK: Machine Unlearning for Large Language Modelscited by 11
- 2025Leak@k: Unlearning Does Not Make LLMs Forget Under Probabilistic Decodingcited by 9
- 2026BalDRO: A Distributionally Robust Optimization based Framework for Large Language Model Unlearningcited by 8
- 2025Ready2Unlearn: A Learning-Time Approach for Preparing Models with Future Unlearning Readinesscited by 2
- 2025Direct Token Optimization: A Self-contained Approach to Large Language Model Unlearningcited by 2
- 2026A Mechanistic Perspective and Circuit-Guided Difficulty Metric for Unlearningcited by 2
- 2026LACUNA: A Testbed for Evaluating Localization Precision for LLM Unlearningcited by 2
- 2025Standard vs. Modular Sampling: Best Practices for Reliable LLM Unlearningcited by 1
- 2025What the "Spotless" Mind Remembers: How Knowledge Entanglement Shapes What Leaks After Unlearning in LLMscited by 1
- 2026Behemoth: Benchmarking Unlearning in LLMs Using Fully Synthetic Datacited by 0
- 2026OriginBlame: Record- and Token-Level Data Provenance for AI Training Datasetscited by 0
- 2026The More Popular, The Harder to Forget: Adaptive Popularity for LLM Unlearningcited by 0
- 2026The More Popular, The Harder to Forget: Adaptive Popularity for LLM Unlearning14 Aug 2026
- 2026LACUNA: A Testbed for Evaluating Localization Precision for LLM Unlearning2 Jul 2026
- 2026OriginBlame: Record- and Token-Level Data Provenance for AI Training Datasets19 May 2026
- 2026Behemoth: Benchmarking Unlearning in LLMs Using Fully Synthetic Data30 Jan 2026
- 2026A Mechanistic Perspective and Circuit-Guided Difficulty Metric for Unlearning14 Jan 2026
- 2026BalDRO: A Distributionally Robust Optimization based Framework for Large Language Model Unlearning14 Jan 2026
- 2025Leak@k: Unlearning Does Not Make LLMs Forget Under Probabilistic Decoding7 Nov 2025
- 2025What the "Spotless" Mind Remembers: How Knowledge Entanglement Shapes What Leaks After Unlearning in LLMs29 Oct 2025
- 2025Direct Token Optimization: A Self-contained Approach to Large Language Model Unlearning30 Sep 2025
- 2025Standard vs. Modular Sampling: Best Practices for Reliable LLM Unlearning29 Aug 2025
- 2025SoK: Machine Unlearning for Large Language Models10 Jun 2025
- 2025Ready2Unlearn: A Learning-Time Approach for Preparing Models with Future Unlearning Readiness16 May 2025
Similar, not cited
Close in wording, no citation either way
- 2024The Frontier of Data Erasure: Machine Unlearning for Large Language Models
- 2024Towards Effective Evaluations and Comparisons for LLM Unlearning Methods
- 2024Rethinking Machine Unlearning for Large Language Models
- 2024Catastrophic Failure of LLM Unlearning via Quantization
- 2024Unlearning in- vs. out-of-distribution data in LLMs under gradient-based method
- 2025A Comprehensive Survey of Machine Unlearning Techniques for Large Language Models
- 2026Unlearning in LLMs: Methods, Evaluation, and Open Challenges
- 2025Existing Large Language Model Unlearning Evaluations Are Inconclusive