mlsanityData to 14 Oct 2026

BLUR: A Bi-Level Optimization Approach for LLM Unlearning

arXiv 2506.08164 ↗First posted 9 Jun 2025cs.LGcited by 23

On the map: LLM safety and security → Machine unlearning

Abstract (arXiv)

Enabling large language models (LLMs) to unlearn knowledge and capabilities acquired during training has proven vital for ensuring compliance with data regulations and promoting ethical practices in generative AI. Although there are growing interests in developing various unlearning algorithms, it remains unclear how to best formulate the unlearning problem. The most popular formulation uses a weighted sum of forget and retain loss, but it often leads to performance degradation due to the inherent trade-off between forget and retain losses. In this work, we argue that it is important to model the hierarchical structure of the unlearning problem, where the forget problem (which textitunlearns certain knowledge and/or capabilities) takes priority over the retain problem (which preserves model utility). This hierarchical structure naturally leads to a bi-level optimization formulation where the lower-level objective focuses on minimizing the forget loss, while the upper-level objective aims to maintain the model's utility. Based on this new formulation, we propose a novel algorithm, termed Bi-Level UnleaRning (textttBLUR), which not only possesses strong theoretical guarantees but more importantly, delivers superior performance. In particular, our extensive experiments demonstrate that textttBLUR consistently outperforms all the state-of-the-art algorithms across various unlearning tasks, models, and metrics. Codes are available at https://github.com/OptimAI-Lab/BLURLLMUnlearning.

Key facts. Cited by 23 papers in the map (data through 14 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 44 of its 61 references that are in the map. First posted on arXiv 9 Jun 2025.

Builds on

44 of 61 references.

Closest ancestors · 17

Same direction, newest first

  1. 2024Unlearning as multi-task optimization: A normalized gradient difference approach with an adaptive learning rate29 Oct
  2. 2024WAGLE: Strategic Weight Attribution for Effective and Modular Unlearning in Large Language Models23 Oct
  3. 2024Simplicity Prevails: Rethinking Negative Preference Optimization for LLM Unlearning9 Oct
  4. 2024An Adversarial Perspective on Machine Unlearning for AI Safety26 Sep
  5. 2024MUSE: Machine Unlearning Six-Way Evaluation for Language Models8 Jul
  6. 2024UnUnlearning: Unlearning is not sufficient for content regulation in advanced generative AI27 Jun
  7. 2024Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearning8 Apr
  8. 2024Eight Methods to Evaluate Robust Unlearning in LLMs26 Feb
  9. 2024Towards Safer Large Language Models through Machine Unlearning15 Feb
  10. 2024TOFU: A Task of Fictitious Unlearning for LLMs11 Jan
  11. 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generation19 Oct
  12. 2023Large Language Model Unlearning14 Oct
5 more
  1. 2023Who's Harry Potter? Approximate Unlearning in LLMs3 Oct
  2. 2022Knowledge Unlearning for Mitigating Privacy Risks in Language Models4 Oct
  3. 2022Continual Learning and Private Unlearning24 Mar
  4. 2021Unrolling SGD: Understanding Factors Influencing Machine Unlearning27 Sep
  5. 2021Remember What You Want to Forget: Algorithms for Machine Unlearning4 Mar

Other references · 27

  1. 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
  2. 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 8,065
  3. 2017Model-Agnostic Meta-Learning for Fast Adaptation of Deep Networkscited by 4,897
  4. 2022Editing Models with Task Arithmeticcited by 1,120
  5. 2023Erasing Concepts from Diffusion Modelscited by 539
  6. 2024The WMDP Benchmark: Measuring and Reducing Malicious Use With Unlearningcited by 509
  7. 2023Scalable Extraction of Training Data from (Production) Language Modelscited by 434
  8. 2018Bilevel Programming for Hyperparameter Optimization and Meta-Learningcited by 405
  9. 2015Gradient-based Hyperparameter Optimization through Reversible Learningcited by 360
  10. 2024TrustLLM: Trustworthiness in Large Language Modelscited by 285
  11. 2020Bilevel Optimization: Convergence Analysis and Enhanced Designcited by 222
  12. 2023Gender bias and stereotypes in Large Language Modelscited by 187
15 more
  1. 2024Defensive Unlearning with Adversarial Training for Robust Concept Erasure in Diffusion Modelscited by 168
  2. 2017Fairness in Machine Learning: Lessons from Political Philosophycited by 149
  3. 2021Graph Unlearningcited by 138
  4. 2023Copyright Violations and Large Language Modelscited by 108
  5. 2022A framework for bilevel optimization that enables stochastic and global variance reduction algorithmscited by 99
  6. 2023Identifying and Mitigating the Security Risks of Generative AIcited by 91
  7. 2017A First Order Method for Solving Convex Bi-Level Optimization Problemscited by 67
  8. 2023A Survey on Federated Unlearning: Challenges, Methods, and Future Directionscited by 63
  9. 2023Unveiling the Implicit Toxicity in Large Language Modelscited by 51
  10. 2020Federated Unlearningcited by 29
  11. 2023When Demonstrations Meet Generative World Models: A Maximum Likelihood Framework for Offline Inverse Reinforcement Learningcited by 26
  12. 2022A Conditional Gradient-based Method for Simple Bilevel Optimization with Convex Lower-level Problemcited by 17
  13. 2023Netflix and Forget: Efficient and Exact Machine Unlearning from Bi-linear Recommendationscited by 12
  14. 2024Machine Unlearning for Recommendation Systems: An Insightcited by 9
  15. 2024Near-Optimal Convex Simple Bilevel Optimization with a Bisection Methodcited by 4

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 4; 2026: 19.

23 papers.

Sort:

By area:

  1. 2025Leak@k: Unlearning Does Not Make LLMs Forget Under Probabilistic Decodingcited by 9
  2. 2026CURE:Circuit-Aware Unlearning for LLM-based Recommendationcited by 6
  3. 2025Downgrade to Upgrade: Optimizer Simplification Enhances Robustness in LLM Unlearningcited by 4
  4. 2025On the Complexity of Finding Stationary Points in Nonconvex Simple Bilevel Optimizationcited by 2
  5. 2026STaR: Sensitive Trajectory Regulation for Unlearning in Large Reasoning Modelscited by 2
  6. 2026A Mechanistic Perspective and Circuit-Guided Difficulty Metric for Unlearningcited by 2
  7. 2026MEMOREPAIR: Barrier-First Cascade Repair in Agentic Memorycited by 2
  8. 2026Inference-Time Machine Unlearning via Gated Activation Redirectioncited by 2
  9. 2026TRACER: Token ReAssignment for Concept ERasure in Generative Recommendationcited by 2
  10. 2026Subspace Control: Turning Constrained Model Steering into Controllable Spectral Optimizationcited by 1
  11. 2026Modeling LLM Unlearning as an Asymmetric Two-Task Learning Problemcited by 1
  12. 2026Unlearners Can Lie: Evaluating and Improving Honesty in LLM Unlearningcited by 1
11 more
  1. 2026TEMPO: Temporal Enforcement via Mode-Separated Policy Optimization for Trustworthy LLM Backtestingcited by 1
  2. 2025RapidUn: Influence-Driven Parameter Reweighting for Efficient Large Language Model Unlearningcited by 0
  3. 2026DualOptim+: Bridging Shared and Decoupled Optimizer States for Better Machine Unlearning in Large Language Modelscited by 0
  4. 2026Replay What Matters: Off-Policy Replay for Efficient LLM Reinforcement Unlearningcited by 0
  5. 2026Understanding Machine Unlearning Through the Lens of Mode Connectivitycited by 0
  6. 2026SAUL: Sharpness-Aware Augmented-Lagrangian Unlearningcited by 0
  7. 2026BLADE: Bilevel Low-rank Augmented-Lagrangian Erasure for LLM Unlearningcited by 0
  8. 2026Stochastic Nonconvex Bilevel Optimization: Improved Rates Without Rare-Visit Assumptioncited by 0
  9. 2026When Retain Constraints Conflict: Mitigating Forget-Retain Interference in Tabular Datacited by 0
  10. 2026Do LLMs Really Forget? Hidden-State Leakage in Model Unlearning and How to Fix itcited by 0
  11. 2026Faithful Dual-constrained Erasure for Robust LLM Safety Alignmentcited by 0

Similar, not cited

Close in wording, no citation either way

  1. 2025BLUR: A Benchmark for LLM Unlearning Robust to Forget-Retain Overlap
  2. 2024Machine Unlearning of Pre-trained Large Language Models
  3. 2024LLM Unlearning via Loss Adjustment with Only Forget Data
  4. 2025RULE: Reinforcement UnLEarning Achieves Forget-Retain Pareto Optimality
  5. 2024Rethinking Machine Unlearning for Large Language Models
  6. 2025Unlearning That Lasts: Utility-Preserving, Robust, and Almost Irreversible Forgetting in LLMs
  7. 2025Direct Token Optimization: A Self-contained Approach to Large Language Model Unlearning
  8. 2024SOUL: Unlocking the Power of Second-Order Optimization for LLM Unlearning