BalDRO: A Distributionally Robust Optimization based Framework for Large Language Model Unlearning
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
As Large Language Models (LLMs) increasingly shape online content, removing targeted information from well-trained LLMs (also known as LLM unlearning) has become critical for web governance. A key challenge lies in sample-wise imbalance within the forget set: different samples exhibit widely varying unlearning difficulty, leading to asynchronous forgetting where some knowledge remains insufficiently erased while others become over-forgotten. To address this, we propose BalDRO, a novel and efficient framework for balanced LLM unlearning. BalDRO formulates unlearning as a min-sup process: an inner step identifies a worst-case data distribution that emphasizes hard-to-unlearn samples, while an outer step updates model parameters under this distribution. We instantiate BalDRO via two efficient variants: BalDRO-G, a discrete GroupDRO-based approximation focusing on high-loss subsets, and BalDRO-DV, a continuous Donsker-Varadhan dual method enabling smooth adaptive weighting within standard training pipelines. Experiments on TOFU and MUSE show that BalDRO significantly improves both forgetting quality and model utility over existing methods, and we release code for reproducibility.
Key facts. Cited by 8 papers in the map (data through 7 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 31 of its 66 references that are in the map. First posted on arXiv 14 Jan 2026.
Builds on
31 of 66 references.
Closest ancestors · 16
Same direction, newest first
- 2026Maximizing Local Entropy Where It Matters: Prefix-Aware Localized LLM Unlearning6 Jan
- 2025Editing as Unlearning: Are Knowledge Editing Methods Strong Baselines for Large Language Model Unlearning?26 May
- 2025DUSK: Do Not Unlearn Shared Knowledge21 May
- 2025Exploring Criteria of Loss Reweighting to Enhance LLM Unlearning17 May
- 2025Not All Data Are Unlearned Equally7 Apr
- 2025SafeEraser: Enhancing Safety in Multimodal Large Language Models through Multimodal Machine Unlearning18 Feb
- 2024LLM Unlearning via Loss Adjustment with Only Forget Data14 Oct
- 2024Simplicity Prevails: Rethinking Negative Preference Optimization for LLM Unlearning9 Oct
- 2024Alternate Preference Optimization for Unlearning Factual Knowledge in Large Language Models20 Sep
- 2024MUSE: Machine Unlearning Six-Way Evaluation for Language Models8 Jul
- 2024Large Language Model Unlearning via Embedding-Corrupted Prompts12 Jun
- 2024What makes unlearning hard and what to do about it3 Jun
4 more
Other references · 15
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 7,916
- 2020Extracting Training Data from Large Language Modelscited by 2,144
- 2024Safety Alignment Should Be Made More Than Just a Few Tokens Deepcited by 450
- 2024ST-WebAgentBench: A Benchmark for Evaluating Safety and Trustworthiness in Web Agentscited by 126
- 2023Advancing Pose-Guided Image Synthesis with Progressive Conditional Diffusion Modelscited by 104
- 2023Finding and Editing Multi-Modal Neurons in Pre-Trained Transformerscited by 36
- 2025We Should Identify and Mitigate Third-Party Safety Risks in MCP-Powered Agent Systemscited by 27
- 2024Separable Multi-Concept Erasure from Diffusion Modelscited by 25
- 2025Learning from Heterogeneity: Generalizing Dynamic Facial Expression Recognition via Distributionally Robust Optimizationcited by 19
- 2025Precise Localization of Memories: A Fine-grained Neuron-level Knowledge Editing Technique for LLMscited by 16
- 2025AgentSociety Challenge: Designing LLM Agents for User Modeling and Recommendation on Web Platformscited by 12
- 2024AdvAnchor: Enhancing Diffusion Model Unlearning with Adversarial Anchorscited by 7
3 more
- 2023Temporally and Distributionally Robust Optimization for Cold-Start Recommendationcited by 5
- 2025Multi-Value Alignment for LLMs via Value Decorrelation and Extrapolationcited by 5
- 2025Debate over Mixed-knowledge: A Robust Multi-Agent Reasoning Framework for Incomplete Knowledge Graph Question Answeringcited by 3
Built on by
Citing papers per year: 2026: 8.
8 papers.
- 2026PASs-MoE: Mitigating Misaligned Co-drift among Router and Experts via Pathway Activation Subspaces for Continual Learningcited by 4
- 2026Revisiting Robustness for LLM Safety Alignment via Selective Geometry Controlcited by 3
- 2026VC-Soup: Value-Consistency Guided Multi-Value Alignment for Large Language Modelscited by 2
- 2026Lingua-SafetyBench: A Benchmark for Safety Evaluation of Multilingual Vision-Language Modelscited by 1
- 2026StressWeb: A Diagnostic Benchmark for Web Agent Robustness under Realistic Interaction Variabilitycited by 1
- 2026Mitigating Error Amplification in Fast Adversarial Trainingcited by 1
- 2026Beyond Cross-Lingual Transfer: Benchmarking Propagation Boundaries in Multilingual LLM Unlearningcited by 1
- 2026One Anchor for All: Unified Multilingual and Multimodal Safety Alignment for LVLMscited by 0
- 2026Beyond Cross-Lingual Transfer: Benchmarking Propagation Boundaries in Multilingual LLM Unlearning5 Sep 2026
- 2026One Anchor for All: Unified Multilingual and Multimodal Safety Alignment for LVLMs30 Jul 2026
- 2026Mitigating Error Amplification in Fast Adversarial Training27 Apr 2026
- 2026StressWeb: A Diagnostic Benchmark for Web Agent Robustness under Realistic Interaction Variability27 Mar 2026
- 2026VC-Soup: Value-Consistency Guided Multi-Value Alignment for Large Language Models18 Mar 2026
- 2026Revisiting Robustness for LLM Safety Alignment via Selective Geometry Control7 Feb 2026
- 2026Lingua-SafetyBench: A Benchmark for Safety Evaluation of Multilingual Vision-Language Models30 Jan 2026
- 2026PASs-MoE: Mitigating Misaligned Co-drift among Router and Experts via Pathway Activation Subspaces for Continual Learning19 Jan 2026