Reference-Specific Unlearning Metrics Can Hide the Truth: A Reality Check
On the map: LLM safety and security → Vision-language and text-to-image safety
Abstract (arXiv)
Current unlearning metrics for generative models evaluate success based on reference responses or classifier outputs rather than assessing the core objective: whether the unlearned model behaves indistinguishably from a model that never saw the unwanted data. This reference-specific approach creates systematic blind spots, allowing models to appear successful while retaining unwanted knowledge accessible through alternative prompts or attacks. We address these limitations by proposing Functional Alignment for Distributional Equivalence (FADE), a novel metric that measures distributional similarity between unlearned and reference models by comparing bidirectional likelihood assignments over generated samples. Unlike existing approaches that rely on predetermined references, FADE captures functional alignment across the entire output distribution, providing a principled assessment of genuine unlearning. Our experiments on the TOFU benchmark for LLM unlearning and the UnlearnCanvas benchmark for text-to-image diffusion model unlearning reveal that methods achieving near-optimal scores on traditional metrics fail to achieve distributional equivalence, with many becoming more distant from the gold standard than before unlearning. These findings expose fundamental gaps in current evaluation practices and demonstrate that FADE provides a more robust foundation for developing and assessing truly effective unlearning methods.
Key facts. Cited by 5 papers in the map (data through 14 Oct 2026). Placed in Vision-language and text-to-image safety, one of 12 directions in LLM safety and security. Builds on 35 of its 37 references that are in the map. First posted on arXiv 14 Oct 2025.
Builds on
35 of 37 references.
Closest ancestors · 3
Same direction, newest first
- 2024Holistic Unlearning Benchmark: A Multi-Faceted Evaluation for Text-to-Image Diffusion Model Unlearning8 Oct
- 2024UnlearnCanvas: Stylized Image Dataset for Enhanced Machine Unlearning Evaluation in Diffusion Models19 Feb
- 2023Ring-A-Bell! How Reliable are Concept Removal Methods for Diffusion Models?16 Oct
Other references · 32
- 2020Denoising Diffusion Probabilistic Modelscited by 21,076
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,863
- 2024The Llama 3 Herd of Modelscited by 14,715
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 8,065
- 2019The Curious Case of Neural Text Degenerationcited by 2,916
- 2018Hierarchical Neural Story Generationcited by 1,193
- 2021Maximum Likelihood Training of Score-Based Diffusion Modelscited by 672
- 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 618
- 2023Erasing Concepts from Diffusion Modelscited by 539
- 2024TOFU: A Task of Fictitious Unlearning for LLMscited by 533
- 2022Safe Latent Diffusion: Mitigating Inappropriate Degeneration in Diffusion Modelscited by 513
- 2024The WMDP Benchmark: Measuring and Reducing Malicious Use With Unlearningcited by 509
20 more
- 2024Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearningcited by 504
- 2022Knowledge Unlearning for Mitigating Privacy Risks in Language Modelscited by 437
- 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generationcited by 386
- 2023Large Language Model Unlearningcited by 302
- 2016Diverse Beam Search: Decoding Diverse Solutions from Neural Sequence Modelscited by 301
- 2024MUSE: Machine Unlearning Six-Way Evaluation for Language Modelscited by 261
- 2024Eight Methods to Evaluate Robust Unlearning in LLMscited by 163
- 2018Inference Suboptimality in Variational Autoencoderscited by 132
- 2022Continual Learning and Private Unlearningcited by 130
- 2024Catastrophic Failure of LLM Unlearning via Quantizationcited by 81
- 2024RWKU: Benchmarking Real-World Knowledge Unlearning for Large Language Modelscited by 78
- 2024Scissorhands: Scrub Data Influence via Connection Sensitivity in Networkscited by 52
- 2024UnUnlearning: Unlearning is not sufficient for content regulation in advanced generative AIcited by 51
- 2024Are we making progress in unlearning? Findings from the first NeurIPS unlearning competitioncited by 50
- 2023Knowledge Unlearning for LLMs: Tasks, Methods, and Challengescited by 38
- 2024Towards Robust and Parameter-Efficient Knowledge Unlearning for LLMscited by 36
- 2025Unlearning vs. Obfuscation: Are We Truly Removing Knowledge?cited by 11
- 2025Unlearning Isn't Invisible: Detecting Unlearning Traces in LLMs from Model Outputscited by 11
- 2025Why Knowledge Distillation Works in Generative Models: A Minimal Working Explanationcited by 9
- 2025Existing Large Language Model Unlearning Evaluations Are Inconclusivecited by 8
Built on by
Citing papers per year: 2025: 1; 2026: 4.
5 papers.
- 2026Knowledge Vector Weakening: Efficient Training-free Unlearning for Large Vision-Language Modelscited by 3
- 2026Position: The Term "Machine Unlearning" Is Overused in LLMscited by 3
- 2025RapidUn: Influence-Driven Parameter Reweighting for Efficient Large Language Model Unlearningcited by 0
- 2026TILDE: TILt-based Distributional Erasure for Concept Unlearningcited by 0
- 2026TARE: Weigh a Never-Poisoned Twin Before Reading Backdoor-Defense Costscited by 0
- 2026TARE: Weigh a Never-Poisoned Twin Before Reading Backdoor-Defense Costs4 Oct 2026
- 2026TILDE: TILt-based Distributional Erasure for Concept Unlearning7 Jul 2026
- 2026Position: The Term "Machine Unlearning" Is Overused in LLMs8 May 2026
- 2026Knowledge Vector Weakening: Efficient Training-free Unlearning for Large Vision-Language Models29 Jan 2026
- 2025RapidUn: Influence-Driven Parameter Reweighting for Efficient Large Language Model Unlearning4 Dec 2025
Similar, not cited
Close in wording, no citation either way
- 2024Boosting Alignment for Post-Unlearning Text-to-Image Generative Models
- 2026eval-unlearn: Benchmarking unlearning in Text-to-Image Diffusion Models
- 2025Generative Model Unlearning: A Survey through Target Events, Unlearning Operators, and Evaluation Protocols
- 2026Forget Many, Forget Right: Scalable and Precise Concept Unlearning in Diffusion Models
- 2025Continual Unlearning for Text-to-Image Diffusion Models: A Regularization Perspective
- 2023FAST: Feature Aware Similarity Thresholding for Weak Unlearning in Black-Box Generative Models
- 2026Erasure or Erosion? Evaluating Compositional Degradation in Unlearned Text-To-Image Diffusion Models
- 2024Unlearning in- vs. out-of-distribution data in LLMs under gradient-based method