mlsanityData to 7 Oct 2026

Wisdom is Knowing What not to Say: Hallucination-Free LLMs Unlearning via Attention Shifting

arXiv 2510.17210 ↗First posted 20 Oct 2025cs.CLcited by 5

On the map: LLM safety and security → Machine unlearning

Abstract (arXiv)

The increase in computing power and the necessity of AI-assisted decision-making boost the growing application of large language models (LLMs). Along with this, the potential retention of sensitive data of LLMs has spurred increasing research into machine unlearning. However, existing unlearning approaches face a critical dilemma: Aggressive unlearning compromises model utility, while conservative strategies preserve utility but risk hallucinated responses. This significantly limits LLMs' reliability in knowledge-intensive applications. To address this, we introduce a novel Attention-Shifting (AS) framework for selective unlearning. AS is driven by two design objectives: (1) context-preserving suppression that attenuates attention to fact-bearing tokens without disrupting LLMs' linguistic structure; and (2) hallucination-resistant response shaping that discourages fabricated completions when queried about unlearning content. AS realizes these objectives through two attention-level interventions, which are importance-aware suppression applied to the unlearning set to reduce reliance on memorized knowledge and attention-guided retention enhancement that reinforces attention toward semantically essential tokens in the retained dataset to mitigate unintended degradation. These two components are jointly optimized via a dual-loss objective, which forms a soft boundary that localizes unlearning while preserving unrelated knowledge under representation superposition. Experimental results show that AS improves performance preservation over the state-of-the-art unlearning methods, achieving up to 15% higher accuracy on the ToFU benchmark and 10% on the TDEC benchmark, while maintaining competitive hallucination-free unlearning effectiveness. Compared to existing methods, AS demonstrates a superior balance between unlearning effectiveness, generalization, and response reliability.

Key facts. Cited by 5 papers in the map (data through 7 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 34 of its 40 references that are in the map. First posted on arXiv 20 Oct 2025.

Builds on

34 of 40 references.

Closest ancestors · 18

Same direction, newest first

  1. 2024LLM Unlearning via Loss Adjustment with Only Forget Data14 Oct
  2. 2024A Closer Look at Machine Unlearning for Large Language Models10 Oct
  3. 2024MEOW: MEMOry Supervised LLM Unlearning Via Inverted Facts18 Sep
  4. 2024Towards Robust and Parameter-Efficient Knowledge Unlearning for LLMs13 Aug
  5. 2024To Forget or Not? Towards Practical Knowledge Unlearning for Large Language Models2 Jul
  6. 2024Soft Prompting for Unlearning in Large Language Models17 Jun
  7. 2024Reversing the Forget-Retain Objectives: An Efficient LLM Unlearning Framework from Logit Difference12 Jun
  8. 2024Large Language Model Unlearning via Embedding-Corrupted Prompts12 Jun
  9. 2024Offset Unlearning for Large Language Models17 Apr
  10. 2024Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearning8 Apr
  11. 2024Towards Safer Large Language Models through Machine Unlearning15 Feb
  12. 2024Rethinking Machine Unlearning for Large Language Models13 Feb
6 more
  1. 2024Selective Forgetting: Advancing Machine Unlearning Techniques and Evaluation in Language Models8 Feb
  2. 2024TOFU: A Task of Fictitious Unlearning for LLMs11 Jan
  3. 2023Unlearn What You Want to Forget: Efficient Unlearning for LLMs31 Oct
  4. 2023Large Language Model Unlearning14 Oct
  5. 2023Who's Harry Potter? Approximate Unlearning in LLMs3 Oct
  6. 2022Knowledge Unlearning for Mitigating Privacy Risks in Language Models4 Oct

Other references · 16

  1. 2023GPT-4 Technical Reportcited by 18,132
  2. 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 12,865
  3. 2020The Pile: An 800GB Dataset of Diverse Text for Language Modelingcited by 2,346
  4. 2020Extracting Training Data from Large Language Modelscited by 2,144
  5. 2022Language Models (Mostly) Know What They Knowcited by 1,783
  6. 2023A Survey on Hallucination in Large Language Models: Principles, Taxonomy, Challenges, and Open Questionscited by 1,582
  7. 2023Jailbroken: How Does LLM Safety Training Fail?cited by 1,565
  8. 2019PubMedQA: A Dataset for Biomedical Research Question Answeringcited by 1,271
  9. 2016The LAMBADA dataset: Word prediction requiring a broad discourse contextcited by 960
  10. 2022Toy Models of Superpositioncited by 928
  11. 2024SnapKV: LLM Knows What You are Looking for Before Generationcited by 848
  12. 2024Safety Alignment Should Be Made More Than Just a Few Tokens Deepcited by 450
4 more
  1. 2023Shifting Attention to Relevance: Towards the Predictive Uncertainty Quantification of Free-Form Large Language Modelscited by 147
  2. 2024Eraser: Jailbreaking Defense in Large Language Models via Unlearning Harmful Knowledgecited by 48
  3. 2024Forget to Flourish: Leveraging Machine-Unlearning on Pretrained Language Models for Privacy Leakagecited by 6
  4. 2025The Rise of Parameter Specialization for Knowledge Storage in Large Language Modelscited by 1

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2026: 5.

5 papers.