mlsanityData to 14 Oct 2026

SEPS: A Separability Measure for Robust Unlearning in LLMs

arXiv 2505.14832 ↗First posted 20 May 2025cs.CLcited by 5

On the map: LLM safety and security → Machine unlearning

Abstract (arXiv)

Machine unlearning aims to selectively remove targeted knowledge from Large Language Models (LLMs), ensuring they forget specified content while retaining essential information. Existing unlearning metrics assess whether a model correctly answers retain queries and rejects forget queries, but they fail to capture real-world scenarios where forget queries rarely appear in isolation. In fact, forget and retain queries often coexist within the same prompt, making mixed-query evaluation crucial. We introduce SEPS, an evaluation framework that explicitly measures a model's ability to both forget and retain information within a single prompt. Through extensive experiments across three benchmarks, we identify two key failure modes in existing unlearning methods: (1) untargeted unlearning indiscriminately erases both forget and retain content once a forget query appears, and (2) targeted unlearning overfits to single-query scenarios, leading to catastrophic failures when handling multiple queries. To address these issues, we propose Mixed Prompt (MP) unlearning, a strategy that integrates both forget and retain queries into a unified training objective. Our approach significantly improves unlearning effectiveness, demonstrating robustness even in complex settings with up to eight mixed forget and retain queries in a single prompt.

Key facts. Cited by 5 papers in the map (data through 14 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 47 of its 62 references that are in the map. First posted on arXiv 20 May 2025.

Builds on

47 of 62 references.

Closest ancestors · 20

Same direction, newest first

  1. 2024Towards Robust Evaluation of Unlearning in LLMs via Data Transformations23 Nov
  2. 2024Does Unlearning Truly Unlearn? A Black Box Evaluation of LLM Unlearning Methods18 Nov
  3. 2024Position: LLM Unlearning Benchmarks are Weak Measures of Progress3 Oct
  4. 2024MUSE: Machine Unlearning Six-Way Evaluation for Language Models8 Jul
  5. 2024Large Language Model Unlearning via Embedding-Corrupted Prompts12 Jun
  6. 2024Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearning8 Apr
  7. 2024Guardrail Baselines for Unlearning in LLMs5 Mar
  8. 2024Eight Methods to Evaluate Robust Unlearning in LLMs26 Feb
  9. 2024Towards Safer Large Language Models through Machine Unlearning15 Feb
  10. 2024TOFU: A Task of Fictitious Unlearning for LLMs11 Jan
  11. 2023Unlearn What You Want to Forget: Efficient Unlearning for LLMs31 Oct
  12. 2023In-Context Unlearning: Language Models as Few Shot Unlearners11 Oct
8 more
  1. 2023Who's Harry Potter? Approximate Unlearning in LLMs3 Oct
  2. 2023Tight Bounds for Machine Unlearning via Differential Privacy2 Sep
  3. 2022Knowledge Unlearning for Mitigating Privacy Risks in Language Models4 Oct
  4. 2022Can Bad Teaching Induce Forgetting? Unlearning in Deep Networks using an Incompetent Teacher17 May
  5. 2022Towards Adversarial Evaluations for Inexact Machine Unlearning17 Jan
  6. 2021On the Necessity of Auditable Algorithmic Definitions for Machine Unlearning22 Oct
  7. 2021Remember What You Want to Forget: Algorithms for Machine Unlearning4 Mar
  8. 2021Machine Unlearning via Algorithmic Stability25 Feb

Other references · 27

  1. 2023GPT-4 Technical Reportcited by 18,396
  2. 2024The Llama 3 Herd of Modelscited by 14,715
  3. 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
  4. 2015Distilling the Knowledge in a Neural Networkcited by 10,324
  5. 2019Sentence-BERT: Sentence Embeddings using Siamese BERT-Networkscited by 9,170
  6. 2023Judging LLM-as-a-Judge with MT-Bench and Chatbot Arenacited by 8,626
  7. 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 8,065
  8. 2023Qwen Technical Reportcited by 3,344
  9. 2014On the Properties of Neural Machine Translation: Encoder-Decoder Approachescited by 1,304
  10. 2019Machine Unlearningcited by 1,061
  11. 2017SemEval-2017 Task 1: Semantic Textual Similarity - Multilingual and Cross-lingual Focused Evaluationcited by 1,001
  12. 2021Membership Inference Attacks From First Principlescited by 878
15 more
  1. 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 618
  2. 2019Certified Data Removal from Machine Learning Modelscited by 535
  3. 2024The WMDP Benchmark: Measuring and Reducing Malicious Use With Unlearningcited by 509
  4. 2023Is ChatGPT a Good NLG Evaluator? A Preliminary Studycited by 422
  5. 2020Descent-to-Delete: Gradient-Based Methods for Machine Unlearningcited by 311
  6. 2020Mixed-Privacy Forgetting in Deep Networkscited by 163
  7. 2023Can Sensitive Information Be Deleted From LLMs? Objectives for Defending Against Extraction Attackscited by 158
  8. 2020Machine Unlearning for Random Forestscited by 131
  9. 2021Manipulating SGD with Data Ordering Attackscited by 74
  10. 2023Detecting Edit Failures In Large Language Models: An Improved Specificity Benchmarkcited by 62
  11. 2024Eraser: Jailbreaking Defense in Large Language Models via Unlearning Harmful Knowledgecited by 51
  12. 2024Learning to Edit: Aligning LLMs with Knowledge Editingcited by 43
  13. 2024Instruction Tuning With Loss Over Instructionscited by 40
  14. 2020Coded Machine Unlearningcited by 36
  15. 2024Large Language Models Still Exhibit Bias in Long Textcited by 16

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 1; 2026: 4.

5 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2025Unlearning That Lasts: Utility-Preserving, Robust, and Almost Irreversible Forgetting in LLMs
  2. 2025BLUR: A Benchmark for LLM Unlearning Robust to Forget-Retain Overlap
  3. 2026The Unlearning Mirage: A Dynamic Framework for Evaluating LLM Unlearning
  4. 2025Unlearning Isn't Deletion: Investigating Reversibility of Machine Unlearning in LLMs
  5. 2026Unlearning in LLMs: Methods, Evaluation, and Open Challenges
  6. 2025Understanding the Dilemma of Unlearning for Large Language Models
  7. 2026Learning What to Forget: Improving LLM Unlearning via Learned Token-Level Importance
  8. 2025Scalable and Robust LLM Unlearning by Correcting Responses with Retrieved Exclusions