Direct Token Optimization: A Self-contained Approach to Large Language Model Unlearning
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
Machine unlearning is an emerging technique that removes the influence of a subset of training data (forget set) from a model without full retraining, with applications including privacy protection, content moderation, and model correction. The key challenge lies in ensuring that the model completely forgets the knowledge of the forget set without compromising its overall utility. Existing unlearning methods for large language models (LLMs) often utilize auxiliary language models, retain datasets, or even commercial AI services for effective unlearning and maintaining the model utility. However, dependence on these external resources is often impractical and could potentially introduce additional privacy risks. In this work, we propose direct token optimization (DTO), a novel self-contained unlearning approach for LLMs that directly optimizes the token level objectives and eliminates the need for external resources. Given a sequence to unlearn, we identify two categories of tokens: target tokens, which capture critical knowledge for unlearning, and the remaining non-target tokens, which are crucial for maintaining the model utility. The former are used to optimize the unlearning objective, while the latter serve to preserve the model's performance. The experimental results show that the proposed DTO achieves up to 16.8× improvement in forget quality on several benchmark datasets than the latest baselines while maintaining a comparable level of model utility.
Key facts. Cited by 2 papers in the map (data through 14 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 51 of its 59 references that are in the map. First posted on arXiv 30 Sep 2025.
Builds on
51 of 59 references.
Closest ancestors · 33
Same direction, newest first
- 2025OpenUnlearning: Accelerating LLM Unlearning via Unified Benchmarking of Methods and Metrics14 Jun
- 2025A Certified Unlearning Approach without Access to Source Data6 Jun
- 2025Not All Tokens Are Meant to Be Forgotten3 Jun
- 2025GUARD: Generation-time LLM Unlearning via Adaptive Restriction and Detection19 May
- 2025Exploring Criteria of Loss Reweighting to Enhance LLM Unlearning17 May
- 2025Not All Data Are Unlearned Equally7 Apr
- 2025Rethinking LLM Unlearning Objectives: A Gradient Perspective and Go Beyond26 Feb
- 2024LLM Unlearning via Loss Adjustment with Only Forget Data14 Oct
- 2024A Closer Look at Machine Unlearning for Large Language Models10 Oct
- 2024Simplicity Prevails: Rethinking Negative Preference Optimization for LLM Unlearning9 Oct
- 2024Unified Gradient-Based Machine Unlearning with Remain Geometry Enhancement29 Sep
- 2024Alternate Preference Optimization for Unlearning Factual Knowledge in Large Language Models20 Sep
21 more
- 2024On the Limitations and Prospects of Machine Unlearning for Generative AI1 Aug
- 2024Revisiting Who's Harry Potter: Towards Targeted Unlearning from a Causal Intervention Perspective24 Jul
- 2024On Large Language Model Continual Unlearning14 Jul
- 2024MUSE: Machine Unlearning Six-Way Evaluation for Language Models8 Jul
- 2024RWKU: Benchmarking Real-World Knowledge Unlearning for Large Language Models16 Jun
- 2024Reversing the Forget-Retain Objectives: An Efficient LLM Unlearning Framework from Logit Difference12 Jun
- 2024Large Language Model Unlearning via Embedding-Corrupted Prompts12 Jun
- 2024SOUL: Unlocking the Power of Second-Order Optimization for LLM Unlearning28 Apr
- 2024Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearning8 Apr
- 2024Second-Order Information Matters: Revisiting Machine Unlearning for Large Language Models13 Mar
- 2024Machine Unlearning of Pre-trained Large Language Models23 Feb
- 2024Towards Safer Large Language Models through Machine Unlearning15 Feb
- 2024Contrastive Unlearning: A Contrastive Approach to Machine Unlearning19 Jan
- 2024TOFU: A Task of Fictitious Unlearning for LLMs11 Jan
- 2023Deep Unlearning: Fast and Efficient Gradient-free Approach to Class Forgetting1 Dec
- 2023Large Language Model Unlearning14 Oct
- 2023Who's Harry Potter? Approximate Unlearning in LLMs3 Oct
- 2023Towards Unbounded Machine Unlearning20 Feb
- 2023Learning to Unlearn: Instance-wise Unlearning for Pre-trained Classifiers27 Jan
- 2022Zero-Shot Machine Unlearning14 Jan
- 2021Fast Yet Effective Machine Unlearning17 Nov
Other references · 18
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 8,065
- 2020The Pile: An 800GB Dataset of Diverse Text for Language Modelingcited by 2,411
- 2019Fine-Tuning Language Models from Human Preferencescited by 2,150
- 2019Machine Unlearningcited by 1,061
- 2021Membership Inference Attacks From First Principlescited by 878
- 2022Quantifying Memorization Across Neural Language Modelscited by 763
- 2019Certified Data Removal from Machine Learning Modelscited by 535
- 2024The WMDP Benchmark: Measuring and Reducing Malicious Use With Unlearningcited by 509
- 2022Memorization Without Overfitting: Analyzing the Training Dynamics of Large Language Modelscited by 220
- 2024Do Membership Inference Attacks Work on Large Language Models?cited by 195
- 2023Practical Membership Inference Attacks against Fine-tuned Large Language Models via Self-prompt Calibrationcited by 98
6 more
- 2024A Survey on Large Language Models for Critical Societal Domains: Finance, Healthcare, and Lawcited by 74
- 2024Demystifying Verbatim Memorization in Large Language Modelscited by 56
- 2023Unveiling Security, Privacy, and Ethical Concerns of ChatGPTcited by 53
- 2023Exploring Memorization in Fine-tuned Language Modelscited by 45
- 2024A Comprehensive Survey of Large Language Models and Multimodal Large Language Models in Medicinecited by 45
- 2024Generated Data with Fake Privacy: Hidden Dangers of Fine-tuning Large Language Models on Generated Datacited by 22
Built on by
Citing papers per year: 2026: 2.
2 papers.
Similar, not cited
Close in wording, no citation either way
- 2024Machine Unlearning in Large Language Models
- 2024The Frontier of Data Erasure: Machine Unlearning for Large Language Models
- 2026Unlearning in LLMs: Methods, Evaluation, and Open Challenges
- 2024Machine Unlearning in Large Language Models
- 2025Hierarchical Federated Unlearning for Large Language Models
- 2024Rethinking Machine Unlearning for Large Language Models
- 2025Not Every Token Needs Forgetting: Selective Unlearning to Limit Change in Utility in Large Language Model Unlearning
- 2025SoK: Machine Unlearning for Large Language Models