Towards Mitigating Excessive Forgetting in LLM Unlearning via Entanglement-Guidance with Proxy Constraint
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
Large language models (LLMs) are trained on massive datasets that may include private or copyrighted content. Due to growing privacy and ownership concerns, data owners may request the removal of their data from trained models. Machine unlearning provides a practical solution by removing the influence of specific data without full retraining. However, most existing methods still suffer from over-unlearning due to the lack of a principled mechanism to regulate the forgetting boundary, leading to unnecessary utility degradation and heightened privacy and robustness risks. In this work, we propose EGUP (Entanglement-Guided Unlearning with Proxy Constraint), a novel framework that leverages entanglement and proxy constraint to guide the unlearning process while mitigating over-unlearning. Within each iteration, EGUP employs inter-sample entanglement to adaptively reweight the unlearning strength, assigning greater unlearning efforts to forget samples that are semantically closer to retained knowledge. Across iterations, EGUP leverages intra-sample entanglement to track the representation shift of each forget sample and dynamically adjust its unlearning effort. In addition, we incorporate a proxy constraint that approximates the model's expected outputs after unlearning, forming a reference boundary that softly regularizes the unlearning process. EGUP is compatible with existing gradient-based objectives and serves as a plug-and-play enhancement. We evaluate EGUP on the TOFU and MUSE benchmarks, demonstrating consistent improvements in the unlearning-utility trade-off across multiple LLMs. Moreover, EGUP achieves performance close to the retrained model while remaining scalable and robust.
Key facts. Cited by 1 paper in the map (data through 14 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 43 of its 56 references that are in the map. First posted on arXiv 28 Aug 2025.
Builds on
43 of 56 references.
Closest ancestors · 20
Same direction, newest first
- 2025Module-Aware Parameter-Efficient Machine Unlearning on Transformers24 Aug
- 2025Towards Evaluation for Real-World LLM Unlearning2 Aug
- 2025Exploring Criteria of Loss Reweighting to Enhance LLM Unlearning17 May
- 2025SafeEraser: Enhancing Safety in Multimodal Large Language Models through Multimodal Machine Unlearning18 Feb
- 2024Improved Localized Machine Unlearning Through the Lens of Memorization3 Dec
- 2024Unified Gradient-Based Machine Unlearning with Remain Geometry Enhancement29 Sep
- 2024An Adversarial Perspective on Machine Unlearning for AI Safety26 Sep
- 2024MUSE: Machine Unlearning Six-Way Evaluation for Language Models8 Jul
- 2024Machine Unlearning Fails to Remove Data Poisoning Attacks25 Jun
- 2024Reversing the Forget-Retain Objectives: An Efficient LLM Unlearning Framework from Logit Difference12 Jun
- 2024SOUL: Unlocking the Power of Second-Order Optimization for LLM Unlearning28 Apr
- 2024Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearning8 Apr
8 more
- 2024Inexact Unlearning Needs More Careful Evaluations to Avoid a False Sense of Privacy2 Mar
- 2024Machine Unlearning of Pre-trained Large Language Models23 Feb
- 2024Rethinking Machine Unlearning for Large Language Models13 Feb
- 2024TOFU: A Task of Fictitious Unlearning for LLMs11 Jan
- 2023ERASER: Machine Unlearning in MLaaS via an Inference Serving-Aware Approach3 Nov
- 2023Large Language Model Unlearning14 Oct
- 2023Who's Harry Potter? Approximate Unlearning in LLMs3 Oct
- 2022Knowledge Unlearning for Mitigating Privacy Risks in Language Models4 Oct
Other references · 23
- 2020Language Models are Few-Shot Learnerscited by 32,419
- 2023GPT-4 Technical Reportcited by 18,396
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
- 2023Qwen Technical Reportcited by 3,344
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,281
- 2019Machine Unlearningcited by 1,061
- 2018An Empirical Study of Example Forgetting during Deep Neural Network Learningcited by 678
- 2023Textbooks Are All You Need II: phi-1.5 technical reportcited by 565
- 2024The WMDP Benchmark: Measuring and Reducing Malicious Use With Unlearningcited by 509
- 2023Jailbreaking ChatGPT via Prompt Engineering: An Empirical Studycited by 498
- 2020What Neural Networks Memorize and Why: Discovering the Long Tail via Influence Estimationcited by 497
- 2019Does Learning Require Memorization? A Short Tale about a Long Tailcited by 460
11 more
- 2023Detecting Pretraining Data from Large Language Modelscited by 387
- 2023A Survey on Large Language Model (LLM) Security and Privacy: The Good, the Bad, and the Uglycited by 387
- 2021Enhanced Membership Inference Attacks against Machine Learning Modelscited by 248
- 2023Can Sensitive Information Be Deleted From LLMs? Objectives for Defending Against Extraction Attackscited by 158
- 2023Copyright Violations and Large Language Modelscited by 108
- 2024Evaluating Copyright Takedown Methods for Language Modelscited by 43
- 2025Membership Inference Attacks Against Vision-Language Modelscited by 29
- 2024Differentially Private Zeroth-Order Methods for Scalable Large Language Model Finetuningcited by 14
- 2025R.R.: Unveiling LLM Training Privacy through Recollection and Rankingcited by 10
- 2023Quantifying and Defending against Privacy Threats on Federated Knowledge Graph Embeddingcited by 7
- 2024EM-MIAs: Enhancing Membership Inference Attacks in Large Language Models through Ensemble Modelingcited by 5
Built on by
Citing papers per year: 2026: 1.
1 paper.
- 2026Mitigating Private Data Leakage in LLMs with Whiteoutcited by 0
- 2026Mitigating Private Data Leakage in LLMs with Whiteout1 Oct 2026
Similar, not cited
Close in wording, no citation either way
- 2026Machine Unlearning under Retain-Forget Entanglement
- 2026ALTER: Asymmetric LoRA for Token-Entropy-Guided Unlearning of LLMs
- 2025Unlearning That Lasts: Utility-Preserving, Robust, and Almost Irreversible Forgetting in LLMs
- 2025LLM Unlearning on Noisy Forget Sets: A Study of Incomplete, Rewritten, and Watermarked Data
- 2025Constrained Entropic Unlearning: A Primal-Dual Framework for Large Language Models
- 2025Leak@k: Unlearning Does Not Make LLMs Forget Under Probabilistic Decoding
- 2026Forgetting Only What Matters: Layer-Selective Unlearning toward Robust LLMs
- 2024Large Language Model Unlearning via Embedding-Corrupted Prompts