Do LLMs Really Forget? Evaluating Unlearning with Knowledge Correlation and Confidence Awareness
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
Machine unlearning techniques aim to mitigate unintended memorization in large language models (LLMs). However, existing approaches predominantly focus on the explicit removal of isolated facts, often overlooking latent inferential dependencies and the non-deterministic nature of knowledge within LLMs. Consequently, facts presumed forgotten may persist implicitly through correlated information. To address these challenges, we propose a knowledge unlearning evaluation framework that more accurately captures the implicit structure of real-world knowledge by representing relevant factual contexts as knowledge graphs with associated confidence scores. We further develop an inference-based evaluation protocol leveraging powerful LLMs as judges; these judges reason over the extracted knowledge subgraph to determine unlearning success. Our LLM judges utilize carefully designed prompts and are calibrated against human evaluations to ensure their trustworthiness and stability. Extensive experiments on our newly constructed benchmark demonstrate that our framework provides a more realistic and rigorous assessment of unlearning performance. Moreover, our findings reveal that current evaluation strategies tend to overestimate unlearning effectiveness. Our code is publicly available at https://github.com/Graph-COM/Knowledge_Unlearning.git.
Key facts. Cited by 14 papers in the map (data through 14 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 60 of its 64 references that are in the map. First posted on arXiv 6 Jun 2025.
Builds on
60 of 64 references.
Closest ancestors · 22
Same direction, newest first
- 2025A Comprehensive Survey of Machine Unlearning Techniques for Large Language Models22 Feb
- 2024Underestimated Privacy Risks for Minority Populations in Large Language Model Unlearning11 Dec
- 2024Evaluating Deep Unlearning in Large Language Models19 Oct
- 2024MUSE: Machine Unlearning Six-Way Evaluation for Language Models8 Jul
- 2024Machine Unlearning Fails to Remove Data Poisoning Attacks25 Jun
- 2024Unveiling Entity-Level Unlearning for Large Language Models: A Comprehensive Analysis22 Jun
- 2024RWKU: Benchmarking Real-World Knowledge Unlearning for Large Language Models16 Jun
- 2024Towards Effective Evaluations and Comparisons for LLM Unlearning Methods13 Jun
- 2024Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearning8 Apr
- 2024Digital Forgetting in Large Language Models: A Survey of Unlearning Methods2 Apr
- 2024Machine Unlearning of Pre-trained Large Language Models23 Feb
- 2024Rethinking Machine Unlearning for Large Language Models13 Feb
10 more
- 2024Langevin Unlearning: A New Perspective of Noisy Gradient Descent for Machine Unlearning18 Jan
- 2024TOFU: A Task of Fictitious Unlearning for LLMs11 Jan
- 2023Unlearn What You Want to Forget: Efficient Unlearning for LLMs31 Oct
- 2023Breaking the Trilemma of Privacy, Utility, Efficiency via Controllable Machine Unlearning28 Oct
- 2023Who's Harry Potter? Approximate Unlearning in LLMs3 Oct
- 2023Speak, Memory: An Archaeology of Books Known to ChatGPT/GPT-428 Apr
- 2023Towards Unbounded Machine Unlearning20 Feb
- 2022Privacy Adhering Machine Un-learning in NLP19 Dec
- 2022Knowledge Unlearning for Mitigating Privacy Risks in Language Models4 Oct
- 2022Quark: Controllable Text Generation with Reinforced Unlearning26 May
Other references · 38
- 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,380
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 14,132
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
- 2020Measuring Massive Multitask Language Understandingcited by 7,963
- 2023Efficient Memory Management for Large Language Model Serving with PagedAttentioncited by 5,944
- 2017On Calibration of Modern Neural Networkscited by 4,960
- 2021On the Opportunities and Risks of Foundation Modelscited by 4,033
- 2023Qwen Technical Reportcited by 3,344
- 2022Locating and Editing Factual Associations in GPTcited by 2,691
- 2024Qwen2 Technical Reportcited by 2,120
- 2019Language Models as Knowledge Bases?cited by 1,936
- 2022Challenging BIG-Bench Tasks and Whether Chain-of-Thought Can Solve Themcited by 1,807
26 more
- 2022Editing Models with Task Arithmeticcited by 1,120
- 2022Mass-Editing Memory in a Transformercited by 1,001
- 2023Just Ask for Calibration: Strategies for Eliciting Calibrated Confidence Scores from Language Models Fine-Tuned with Human Feedbackcited by 812
- 2017Convolutional 2D Knowledge Graph Embeddingscited by 730
- 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 618
- 2021Knowledge Neurons in Pretrained Transformerscited by 601
- 2021Editing Factual Knowledge in Language Modelscited by 553
- 2019Certified Data Removal from Machine Learning Modelscited by 535
- 2024The WMDP Benchmark: Measuring and Reducing Malicious Use With Unlearningcited by 509
- 2021Fast Model Editing at Scalecited by 498
- 2020Amnesiac Machine Learningcited by 319
- 2023MQuAKE: Assessing Knowledge Editing in Language Models via Multi-Hop Questionscited by 300
- 2023Can We Edit Factual Knowledge by In-Context Learning?cited by 285
- 2023A Survey of Confidence Estimation and Calibration in Large Language Modelscited by 256
- 2023Transformer-Patcher: One Mistake worth One Neuroncited by 197
- 2023Knowledge Editing for Large Language Models: A Surveycited by 194
- 2025Between Underthinking and Overthinking: An Empirical Study of Reasoning Length and correctness in LLMscited by 117
- 2022Calibrating Factual Knowledge in Pretrained Language Modelscited by 92
- 2024A Survey of Large Language Models for Financial Applications: Progress, Prospects and Challengescited by 90
- 2024Calibrating Language Models with Adaptive Temperature Scalingcited by 58
- 2024Evaluating Copyright Takedown Methods for Language Modelscited by 43
- 2022What Makes Graph Neural Networks Miscalibrated?cited by 40
- 2024Digger: Detecting Copyright Content Mis-usage in Large Language Model Trainingcited by 25
- 2024Retrieval-enhanced Knowledge Editing in Language Models for Multi-Hop Question Answeringcited by 20
- 2022A Review of Knowledge Graph Completioncited by 8
- 2024SWEA: Updating Factual Knowledge in Large Language Models via Subject Word Embedding Alteringcited by 7
Built on by
Citing papers per year: 2025: 4; 2026: 10.
14 papers.
Sort:
By area:
- 2025LLM-based Agents Suffer from Hallucinations: A Survey of Taxonomy, Methods, and Directionscited by 50
- 2025LLM Unlearning with LLM Beliefscited by 17
- 2025The Trojan Knowledge: Bypassing Commercial LLM Guardrails via Harmless Prompt Weaving and Adaptive Tree Searchcited by 7
- 2026REBEL: Hidden Knowledge Recovery via Evolutionary-Based Evaluation Loopcited by 4
- 2026MoEEdit: Efficient and Routing-Stable Knowledge Editing for Mixture-of-Experts LLMscited by 4
- 2026Position: The Term "Machine Unlearning" Is Overused in LLMscited by 3
- 2025GUARD: Guided Unlearning and Retention via Data Attribution for Large Language Modelscited by 2
- 2026Multilingual Unlearning in LLMs: Transfer, Dynamics, and Reversibilitycited by 2
- 2026GONE: Structural Knowledge Unlearning via Neighborhood-Expanded Distribution Shapingcited by 1
- 2026PrivUn: Unveiling Latent Ripple Effects and Shallow Forgetting in Privacy Unlearningcited by 1
- 2026EvoMU: Evolutionary Machine Unlearningcited by 0
- 2026One Turn Too Late: Learning When to Intervene Against Multi-Turn Malicious Intentcited by 0
- 2026Making LLMs Truly Forget: Deep Unlearning by Searching, Selecting, and Severing Knowledge Paths28 Sep 2026
- 2026Graph-Guided Selective Unlearning for Language Models: Controlling Support Routes Beyond Forget Seeds27 Aug 2026
- 2026Multilingual Unlearning in LLMs: Transfer, Dynamics, and Reversibility2 Jun 2026
- 2026Position: The Term "Machine Unlearning" Is Overused in LLMs8 May 2026
- 2026One Turn Too Late: Learning When to Intervene Against Multi-Turn Malicious Intent7 May 2026
- 2026PrivUn: Unveiling Latent Ripple Effects and Shallow Forgetting in Privacy Unlearning23 Apr 2026
- 2026GONE: Structural Knowledge Unlearning via Neighborhood-Expanded Distribution Shaping21 Feb 2026
- 2026MoEEdit: Efficient and Routing-Stable Knowledge Editing for Mixture-of-Experts LLMs11 Feb 2026
- 2026REBEL: Hidden Knowledge Recovery via Evolutionary-Based Evaluation Loop5 Feb 2026
- 2026EvoMU: Evolutionary Machine Unlearning2 Feb 2026
- 2025The Trojan Knowledge: Bypassing Commercial LLM Guardrails via Harmless Prompt Weaving and Adaptive Tree Search1 Dec 2025
- 2025LLM Unlearning with LLM Beliefs22 Oct 2025
- 2025LLM Unlearning with LLM Beliefscited by 17
- 2025The Trojan Knowledge: Bypassing Commercial LLM Guardrails via Harmless Prompt Weaving and Adaptive Tree Searchcited by 7
- 2026REBEL: Hidden Knowledge Recovery via Evolutionary-Based Evaluation Loopcited by 4
- 2026Position: The Term "Machine Unlearning" Is Overused in LLMscited by 3
- 2025GUARD: Guided Unlearning and Retention via Data Attribution for Large Language Modelscited by 2
- 2026Multilingual Unlearning in LLMs: Transfer, Dynamics, and Reversibilitycited by 2
- 2026GONE: Structural Knowledge Unlearning via Neighborhood-Expanded Distribution Shapingcited by 1
- 2026PrivUn: Unveiling Latent Ripple Effects and Shallow Forgetting in Privacy Unlearningcited by 1
- 2026EvoMU: Evolutionary Machine Unlearningcited by 0
- 2026Graph-Guided Selective Unlearning for Language Models: Controlling Support Routes Beyond Forget Seedscited by 0
- 2026Graph-Guided Selective Unlearning for Language Models: Controlling Support Routes Beyond Forget Seeds27 Aug 2026
- 2026Multilingual Unlearning in LLMs: Transfer, Dynamics, and Reversibility2 Jun 2026
- 2026Position: The Term "Machine Unlearning" Is Overused in LLMs8 May 2026
- 2026PrivUn: Unveiling Latent Ripple Effects and Shallow Forgetting in Privacy Unlearning23 Apr 2026
- 2026GONE: Structural Knowledge Unlearning via Neighborhood-Expanded Distribution Shaping21 Feb 2026
- 2026REBEL: Hidden Knowledge Recovery via Evolutionary-Based Evaluation Loop5 Feb 2026
- 2026EvoMU: Evolutionary Machine Unlearning2 Feb 2026
- 2025The Trojan Knowledge: Bypassing Commercial LLM Guardrails via Harmless Prompt Weaving and Adaptive Tree Search1 Dec 2025
- 2025LLM Unlearning with LLM Beliefs22 Oct 2025
- 2025GUARD: Guided Unlearning and Retention via Data Attribution for Large Language Models12 Jun 2025
Similar, not cited
Close in wording, no citation either way
- 2025Unlearning That Lasts: Utility-Preserving, Robust, and Almost Irreversible Forgetting in LLMs
- 2025Existing Large Language Model Unlearning Evaluations Are Inconclusive
- 2025Understanding the Dilemma of Unlearning for Large Language Models
- 2025A Survey on Unlearning in Large Language Models
- 2026Anatomy of Unlearning: The Dual Impact of Fact Salience and Model Fine-Tuning
- 2026Unlearning in LLMs: Methods, Evaluation, and Open Challenges
- 2024Towards Robust Evaluation of Unlearning in LLMs via Data Transformations
- 2025Learning-Time Encoding Shapes Unlearning in LLMs