DUSK: Do Not Unlearn Shared Knowledge
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
Large language models (LLMs) are increasingly deployed in real-world applications, raising concerns about the unauthorized use of copyrighted or sensitive data. Machine unlearning aims to remove such 'forget' data while preserving utility and information from the 'retain' set. However, existing evaluations typically assume that forget and retain sets are fully disjoint, overlooking realistic scenarios where they share overlapping content. For instance, a news article may need to be unlearned, even though the same event, such as an earthquake in Japan, is also described factually on Wikipedia. Effective unlearning should remove the specific phrasing of the news article while preserving publicly supported facts. In this paper, we introduce DUSK, a benchmark designed to evaluate unlearning methods under realistic data overlap. DUSK constructs document sets that describe the same factual content in different styles, with some shared information appearing across all sets and other content remaining unique to each. When one set is designated for unlearning, an ideal method should remove its unique content while preserving shared facts. We define seven evaluation metrics to assess whether unlearning methods can achieve this selective removal. Our evaluation of nine recent unlearning methods reveals a key limitation: while most can remove surface-level text, they often fail to erase deeper, context-specific knowledge without damaging shared content. We release DUSK as a public benchmark to support the development of more precise and reliable unlearning techniques for real-world applications.
Key facts. Cited by 4 papers in the map (data through 14 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 48 of its 64 references that are in the map. First posted on arXiv 21 May 2025.
Builds on
48 of 64 references.
Closest ancestors · 25
Same direction, newest first
- 2025SEPS: A Separability Measure for Robust Unlearning in LLMs20 May
- 2025A Comprehensive Survey of Machine Unlearning Techniques for Large Language Models22 Feb
- 2024Towards Robust Evaluation of Unlearning in LLMs via Data Transformations23 Nov
- 2024Does Unlearning Truly Unlearn? A Black Box Evaluation of LLM Unlearning Methods18 Nov
- 2024Protecting Privacy in Multimodal Large Language Models with MLLMU-Bench29 Oct
- 2024Catastrophic Failure of LLM Unlearning via Quantization21 Oct
- 2024Mechanistic Unlearning: Robust Knowledge Unlearning and Editing via Mechanistic Localization16 Oct
- 2024Position: LLM Unlearning Benchmarks are Weak Measures of Progress3 Oct
- 2024On Large Language Model Continual Unlearning14 Jul
- 2024MUSE: Machine Unlearning Six-Way Evaluation for Language Models8 Jul
- 2024Large Language Model Unlearning via Embedding-Corrupted Prompts12 Jun
- 2024An Information Theoretic Evaluation Metric For Strong Unlearning28 May
13 more
- 2024To Each (Textual Sequence) Its Own: Improving Memorized-Data Unlearning in Large Language Models6 May
- 2024SOUL: Unlocking the Power of Second-Order Optimization for LLM Unlearning28 Apr
- 2024Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearning8 Apr
- 2024Guardrail Baselines for Unlearning in LLMs5 Mar
- 2024Eight Methods to Evaluate Robust Unlearning in LLMs26 Feb
- 2024Rethinking Machine Unlearning for Large Language Models13 Feb
- 2024TOFU: A Task of Fictitious Unlearning for LLMs11 Jan
- 2023Unlearn What You Want to Forget: Efficient Unlearning for LLMs31 Oct
- 2023In-Context Unlearning: Language Models as Few Shot Unlearners11 Oct
- 2023Who's Harry Potter? Approximate Unlearning in LLMs3 Oct
- 2023Towards Unbounded Machine Unlearning20 Feb
- 2022Knowledge Unlearning for Mitigating Privacy Risks in Language Models4 Oct
- 2022A Survey of Machine Unlearning6 Sep
Other references · 23
- 2023GPT-4 Technical Reportcited by 18,396
- 2024The Llama 3 Herd of Modelscited by 14,715
- 2015Distilling the Knowledge in a Neural Networkcited by 10,324
- 2021Training Verifiers to Solve Math Word Problemscited by 10,109
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 8,065
- 2020Measuring Massive Multitask Language Understandingcited by 7,963
- 2018Think you have Solved Question Answering? Try ARC, the AI2 Reasoning Challengecited by 4,886
- 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,975
- 2017TriviaQA: A Large Scale Distantly Supervised Challenge Dataset for Reading Comprehensioncited by 2,955
- 2020Extracting Training Data from Large Language Modelscited by 2,189
- 2022Editing Models with Task Arithmeticcited by 1,120
- 2017SemEval-2017 Task 1: Semantic Textual Similarity - Multilingual and Cross-lingual Focused Evaluationcited by 1,001
11 more
- 2021BBQ: A Hand-Built Bias Benchmark for Question Answeringcited by 701
- 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 618
- 2019Certified Data Removal from Machine Learning Modelscited by 535
- 2024The WMDP Benchmark: Measuring and Reducing Malicious Use With Unlearningcited by 509
- 2023Scalable Extraction of Training Data from (Production) Language Modelscited by 434
- 2023Detecting Pretraining Data from Large Language Modelscited by 387
- 2020Machine Unlearning for Random Forestscited by 131
- 2024Min-K%++: Improved Baseline for Detecting Pre-Training Data from Large Language Modelscited by 103
- 2024Evaluating Copyright Takedown Methods for Language Modelscited by 43
- 2025Representation Bending for Large Language Model Safetycited by 30
- 2024Large Language Models Still Exhibit Bias in Long Textcited by 16
Built on by
Citing papers per year: 2025: 1; 2026: 3.
4 papers.
- 2025SoK: Machine Unlearning for Large Language Modelscited by 11
- 2026BalDRO: A Distributionally Robust Optimization based Framework for Large Language Model Unlearningcited by 8
- 2026Position: The Term "Machine Unlearning" Is Overused in LLMscited by 3
- 2026Extracting Forgotten Prompts from Targeted Unlearned Modelscited by 0
- 2026Extracting Forgotten Prompts from Targeted Unlearned Models3 Sep 2026
- 2026Position: The Term "Machine Unlearning" Is Overused in LLMs8 May 2026
- 2026BalDRO: A Distributionally Robust Optimization based Framework for Large Language Model Unlearning14 Jan 2026
- 2025SoK: Machine Unlearning for Large Language Models10 Jun 2025
Similar, not cited
Close in wording, no citation either way
- 2024To Forget or Not? Towards Practical Knowledge Unlearning for Large Language Models
- 2026Anatomy of Unlearning: The Dual Impact of Fact Salience and Model Fine-Tuning
- 2024Unveiling Entity-Level Unlearning for Large Language Models: A Comprehensive Analysis
- 2025A Survey on Unlearning in Large Language Models
- 2024A Closer Look at Machine Unlearning for Large Language Models
- 2024RESTOR: Knowledge Recovery in Machine Unlearning
- 2024Textual Unlearning Gives a False Sense of Unlearning
- 2025Concept Unlearning in Large Language Models via Self-Constructed Knowledge Triplets