mlsanityData to 14 Oct 2026

Reference-Specific Unlearning Metrics Can Hide the Truth: A Reality Check

arXiv 2510.12981 ↗First posted 14 Oct 2025cs.LGcited by 5

On the map: LLM safety and security → Vision-language and text-to-image safety

Abstract (arXiv)

Current unlearning metrics for generative models evaluate success based on reference responses or classifier outputs rather than assessing the core objective: whether the unlearned model behaves indistinguishably from a model that never saw the unwanted data. This reference-specific approach creates systematic blind spots, allowing models to appear successful while retaining unwanted knowledge accessible through alternative prompts or attacks. We address these limitations by proposing Functional Alignment for Distributional Equivalence (FADE), a novel metric that measures distributional similarity between unlearned and reference models by comparing bidirectional likelihood assignments over generated samples. Unlike existing approaches that rely on predetermined references, FADE captures functional alignment across the entire output distribution, providing a principled assessment of genuine unlearning. Our experiments on the TOFU benchmark for LLM unlearning and the UnlearnCanvas benchmark for text-to-image diffusion model unlearning reveal that methods achieving near-optimal scores on traditional metrics fail to achieve distributional equivalence, with many becoming more distant from the gold standard than before unlearning. These findings expose fundamental gaps in current evaluation practices and demonstrate that FADE provides a more robust foundation for developing and assessing truly effective unlearning methods.

Key facts. Cited by 5 papers in the map (data through 14 Oct 2026). Placed in Vision-language and text-to-image safety, one of 12 directions in LLM safety and security. Builds on 35 of its 37 references that are in the map. First posted on arXiv 14 Oct 2025.

Builds on

35 of 37 references.

Closest ancestors · 3

Same direction, newest first

  1. 2024Holistic Unlearning Benchmark: A Multi-Faceted Evaluation for Text-to-Image Diffusion Model Unlearning8 Oct
  2. 2024UnlearnCanvas: Stylized Image Dataset for Enhanced Machine Unlearning Evaluation in Diffusion Models19 Feb
  3. 2023Ring-A-Bell! How Reliable are Concept Removal Methods for Diffusion Models?16 Oct

Other references · 32

  1. 2020Denoising Diffusion Probabilistic Modelscited by 21,076
  2. 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,863
  3. 2024The Llama 3 Herd of Modelscited by 14,715
  4. 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 8,065
  5. 2019The Curious Case of Neural Text Degenerationcited by 2,916
  6. 2018Hierarchical Neural Story Generationcited by 1,193
  7. 2021Maximum Likelihood Training of Score-Based Diffusion Modelscited by 672
  8. 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 618
  9. 2023Erasing Concepts from Diffusion Modelscited by 539
  10. 2024TOFU: A Task of Fictitious Unlearning for LLMscited by 533
  11. 2022Safe Latent Diffusion: Mitigating Inappropriate Degeneration in Diffusion Modelscited by 513
  12. 2024The WMDP Benchmark: Measuring and Reducing Malicious Use With Unlearningcited by 509
20 more
  1. 2024Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearningcited by 504
  2. 2022Knowledge Unlearning for Mitigating Privacy Risks in Language Modelscited by 437
  3. 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generationcited by 386
  4. 2023Large Language Model Unlearningcited by 302
  5. 2016Diverse Beam Search: Decoding Diverse Solutions from Neural Sequence Modelscited by 301
  6. 2024MUSE: Machine Unlearning Six-Way Evaluation for Language Modelscited by 261
  7. 2024Eight Methods to Evaluate Robust Unlearning in LLMscited by 163
  8. 2018Inference Suboptimality in Variational Autoencoderscited by 132
  9. 2022Continual Learning and Private Unlearningcited by 130
  10. 2024Catastrophic Failure of LLM Unlearning via Quantizationcited by 81
  11. 2024RWKU: Benchmarking Real-World Knowledge Unlearning for Large Language Modelscited by 78
  12. 2024Scissorhands: Scrub Data Influence via Connection Sensitivity in Networkscited by 52
  13. 2024UnUnlearning: Unlearning is not sufficient for content regulation in advanced generative AIcited by 51
  14. 2024Are we making progress in unlearning? Findings from the first NeurIPS unlearning competitioncited by 50
  15. 2023Knowledge Unlearning for LLMs: Tasks, Methods, and Challengescited by 38
  16. 2024Towards Robust and Parameter-Efficient Knowledge Unlearning for LLMscited by 36
  17. 2025Unlearning vs. Obfuscation: Are We Truly Removing Knowledge?cited by 11
  18. 2025Unlearning Isn't Invisible: Detecting Unlearning Traces in LLMs from Model Outputscited by 11
  19. 2025Why Knowledge Distillation Works in Generative Models: A Minimal Working Explanationcited by 9
  20. 2025Existing Large Language Model Unlearning Evaluations Are Inconclusivecited by 8

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 1; 2026: 4.

5 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2024Boosting Alignment for Post-Unlearning Text-to-Image Generative Models
  2. 2026eval-unlearn: Benchmarking unlearning in Text-to-Image Diffusion Models
  3. 2025Generative Model Unlearning: A Survey through Target Events, Unlearning Operators, and Evaluation Protocols
  4. 2026Forget Many, Forget Right: Scalable and Precise Concept Unlearning in Diffusion Models
  5. 2025Continual Unlearning for Text-to-Image Diffusion Models: A Regularization Perspective
  6. 2023FAST: Feature Aware Similarity Thresholding for Weak Unlearning in Black-Box Generative Models
  7. 2026Erasure or Erosion? Evaluating Compositional Degradation in Unlearned Text-To-Image Diffusion Models
  8. 2024Unlearning in- vs. out-of-distribution data in LLMs under gradient-based method