LLM Unlearning Without an Expert Curated Dataset
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
Modern large language models often encode sensitive, harmful, or copyrighted knowledge, raising the need for post-hoc unlearning-the ability to remove specific domains of knowledge from a model without full retraining. A major bottleneck in current unlearning pipelines is constructing effective forget sets-datasets that approximate the target domain and guide the model to forget it. In this work, we introduce a scalable, automated approach to generate high-quality forget sets using language models themselves. Our method synthesizes textbook-style data through a structured prompting pipeline, requiring only a domain name as input. Through experiments on unlearning biosecurity, cybersecurity, and Harry Potter novels, we show that our synthetic datasets consistently outperform the baseline synthetic alternatives and are comparable to the expert-curated ones. Additionally, ablation studies reveal that the multi-step generation pipeline significantly boosts data diversity, which in turn improves unlearning utility. Overall, our findings suggest that synthetic datasets offer a promising path toward practical, scalable unlearning for a wide range of emerging domains without the need for manual intervention. We release our code and dataset at https://github.com/xyzhu123/Synthetic_Textbook.
Key facts. Cited by 5 papers in the map (data through 14 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 33 of its 38 references that are in the map. First posted on arXiv 8 Aug 2025.
Builds on
33 of 38 references.
Closest ancestors · 8
Same direction, newest first
- 2025Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyond7 Feb
- 2024LLM Unlearning via Loss Adjustment with Only Forget Data14 Oct
- 2024A Closer Look at Machine Unlearning for Large Language Models10 Oct
- 2024Erasing Conceptual Knowledge from Language Models3 Oct
- 2024Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearning8 Apr
- 2024Towards Safer Large Language Models through Machine Unlearning15 Feb
- 2023Large Language Model Unlearning14 Oct
- 2023Who's Harry Potter? Approximate Unlearning in LLMs3 Oct
Other references · 25
- 2022Training language models to follow instructions with human feedbackcited by 15,971
- 2024The Llama 3 Herd of Modelscited by 14,715
- 2021Training Verifiers to Solve Math Word Problemscited by 10,109
- 2020Measuring Massive Multitask Language Understandingcited by 7,963
- 2025DeepSeek-R1: Incentivizing Reasoning Capability in LLMs via Reinforcement Learningcited by 6,330
- 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 3,104
- 2016Pointer Sentinel Mixture Modelscited by 3,096
- 2017TriviaQA: A Large Scale Distantly Supervised Challenge Dataset for Reading Comprehensioncited by 2,955
- 2020The Pile: An 800GB Dataset of Diverse Text for Language Modelingcited by 2,411
- 2024Phi-3 Technical Report: A Highly Capable Language Model Locally on Your Phonecited by 1,917
- 2023Jailbroken: How Does LLM Safety Training Fail?cited by 1,651
- 2025s1: Simple test-time scalingcited by 1,341
13 more
- 2023Textbooks Are All You Needcited by 569
- 2018Texygen: A Benchmarking Platform for Text Generation Modelscited by 491
- 2024Improving Alignment and Robustness with Circuit Breakerscited by 322
- 2024tinyBenchmarks: evaluating LLMs with fewer examplescited by 310
- 2023LEACE: Perfect linear concept erasure in closed formcited by 267
- 2024Latent Adversarial Training Improves Robustness to Persistent Harmful Behaviors in LLMscited by 173
- 2024Nemotron-4 340B Technical Reportcited by 144
- 2024Tamper-Resistant Safeguards for Open-Weight LLMscited by 138
- 2025Gold-medalist Performance in Solving Olympiad Geometry with AlphaGeometry2cited by 97
- 2024On the Diversity of Synthetic Data and its Impact on Training Large Language Modelscited by 59
- 2023Artificial intelligence and biological misuse: Differentiating risks of language models and biological design toolscited by 45
- 2025Model Tampering Attacks Enable More Rigorous Evaluations of LLM Capabilitiescited by 39
- 2024Fantastic Copyrighted Beasts and How (Not) to Generate Themcited by 24
Built on by
Citing papers per year: 2026: 5.
5 papers.
- 2026From Domains to Instances: Dual-Granularity Data Synthesis for LLM Unlearningcited by 2
- 2026Inference-time Unlearning Using Conformal Predictioncited by 2
- 2026SoK: Unlearnability and Unlearning for Model Dememorizationcited by 0
- 2026What to Forget in Unlearning? Forget Set Curation for Language Modelscited by 0
- 2026Safety for Whom? Boundary-Aware Self-Distillation for Controlled LLM Safety Refusalcited by 0
- 2026Safety for Whom? Boundary-Aware Self-Distillation for Controlled LLM Safety Refusal3 Sep 2026
- 2026What to Forget in Unlearning? Forget Set Curation for Language Models14 Aug 2026
- 2026SoK: Unlearnability and Unlearning for Model Dememorization12 May 2026
- 2026Inference-time Unlearning Using Conformal Prediction3 Feb 2026
- 2026From Domains to Instances: Dual-Granularity Data Synthesis for LLM Unlearning7 Jan 2026
Similar, not cited
Close in wording, no citation either way
- 2023Unlearn What You Want to Forget: Efficient Unlearning for LLMs
- 2025Reveal and Release: Iterative LLM Unlearning with Self-generated Data
- 2026Unlearning in LLMs: Methods, Evaluation, and Open Challenges
- 2025LLM Unlearning on Noisy Forget Sets: A Study of Incomplete, Rewritten, and Watermarked Data
- 2024TOFU: A Task of Fictitious Unlearning for LLMs
- 2024Catastrophic Failure of LLM Unlearning via Quantization
- 2026Confess What You Know: Forget-Set Misalignment with Model Knowledge in LLM Unlearning
- 2024Towards Robust Evaluation of Unlearning in LLMs via Data Transformations