Is Gradient Ascent Really Necessary? Memorize to Forget for Machine Unlearning
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
For ethical and safe AI, machine unlearning rises as a critical topic aiming to protect sensitive, private, and copyrighted knowledge from misuse. To achieve this goal, it is common to conduct gradient ascent (GA) to reverse the training on undesired data. However, such a reversal is prone to catastrophic collapse, which leads to serious performance degradation in general tasks. As a solution, we propose model extrapolation as an alternative to GA, which reaches the counterpart direction in the hypothesis space from one model given another reference model. Therefore, we leverage the original model as the reference, further train it to memorize undesired data while keeping prediction consistency on the rest retained data, to obtain a memorization model. Counterfactual as it might sound, a forget model can be obtained via extrapolation from the memorization model to the reference model. Hence, we avoid directly acquiring the forget model using GA, but proceed with gradient descent for the memorization model, which successfully stabilizes the machine unlearning process. Our model extrapolation is simple and efficient to implement, and it can also effectively converge throughout training to achieve improved unlearning performance.
Key facts. Cited by 5 papers in the map (data through 7 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 52 of its 65 references that are in the map. First posted on arXiv 6 Feb 2026.
Builds on
52 of 65 references.
Closest ancestors · 22
Same direction, newest first
- 2025Exploring Criteria of Loss Reweighting to Enhance LLM Unlearning17 May
- 2025Rethinking LLM Unlearning Objectives: A Gradient Perspective and Go Beyond26 Feb
- 2025CoME: An Unlearning-based Approach to Conflict-free Model Editing20 Feb
- 2024Mechanistic Unlearning: Robust Knowledge Unlearning and Editing via Mechanistic Localization16 Oct
- 2024LLM Unlearning via Loss Adjustment with Only Forget Data14 Oct
- 2024Simplicity Prevails: Rethinking Negative Preference Optimization for LLM Unlearning9 Oct
- 2024Alternate Preference Optimization for Unlearning Factual Knowledge in Large Language Models20 Sep
- 2024MUSE: Machine Unlearning Six-Way Evaluation for Language Models8 Jul
- 2024Unlearning or Obfuscating? Jogging the Memory of Unlearned LLMs via Benign Relearning19 Jun
- 2024Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearning8 Apr
- 2024Machine Unlearning of Pre-trained Large Language Models23 Feb
- 2024TOFU: A Task of Fictitious Unlearning for LLMs11 Jan
10 more
- 2023Unlearn What You Want to Forget: Efficient Unlearning for LLMs31 Oct
- 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generation19 Oct
- 2023Large Language Model Unlearning14 Oct
- 2023Who's Harry Potter? Approximate Unlearning in LLMs3 Oct
- 2023KGA: A General Machine Unlearning Framework Based on Knowledge Gap Alignment11 May
- 2023Model Sparsity Can Simplify Machine Unlearning11 Apr
- 2022Knowledge Unlearning for Mitigating Privacy Risks in Language Models4 Oct
- 2022Continual Learning and Private Unlearning24 Mar
- 2021Unrolling SGD: Understanding Factors Influencing Machine Unlearning27 Sep
- 2021Remember What You Want to Forget: Algorithms for Machine Unlearning4 Mar
Other references · 30
- 2020Language Models are Few-Shot Learnerscited by 32,199
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 13,958
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 7,916
- 2019Momentum Contrast for Unsupervised Visual Representation Learningcited by 7,482
- 2022OPT: Open Pre-trained Transformer Language Modelscited by 3,464
- 2018Neural Tangent Kernel: Convergence and Generalization in Neural Networkscited by 2,597
- 2017Understanding Black-box Predictions via Influence Functionscited by 1,714
- 2023Jailbroken: How Does LLM Safety Training Fail?cited by 1,565
- 2020Sharpness-Aware Minimization for Efficiently Improving Generalizationcited by 1,404
- 2022Editing Models with Task Arithmeticcited by 1,076
- 2019Machine Unlearningcited by 1,020
- 2024Phi-4 Technical Reportcited by 675
18 more
- 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 599
- 2019Certified Data Removal from Machine Learning Modelscited by 512
- 2024The WMDP Benchmark: Measuring and Reducing Malicious Use With Unlearningcited by 488
- 2019Making AI Forget You: Data Deletion in Machine Learningcited by 447
- 2024GaLore: Memory-Efficient LLM Training by Gradient Low-Rank Projectioncited by 447
- 2023A Survey on Large Language Model (LLM) Security and Privacy: The Good, the Bad, and the Uglycited by 380
- 2023LLM-Adapters: An Adapter Family for Parameter-Efficient Fine-Tuning of Large Language Modelscited by 317
- 2020Approximate Data Deletion from Machine Learning Modelscited by 250
- 2023Copyright Violations and Large Language Modelscited by 108
- 2023DEPN: Detecting and Editing Privacy Neurons in Pretrained Language Modelscited by 75
- 2022Harnessing Out-Of-Distribution Examples via Augmenting Content and Stylecited by 43
- 2018Classification from Positive, Unlabeled and Biased Negative Datacited by 34
- 2023Robust Generalization against Photon-Limited Corruptions via Worst-Case Sharpness Minimizationcited by 29
- 2023Machine Vision Therapy: Multimodal Large Language Models Can Enhance Visual Robustness via Denoising In-Context Learningcited by 27
- 2025Understanding and Enhancing the Transferability of Jailbreaking Attackscited by 22
- 2023FlatMatch: Bridging Labeled Data and Unlabeled Data with Cross-Sharpness for Semi-Supervised Learningcited by 20
- 2025FORCE: Transferable Visual Jailbreaking Attacks via Feature Over-Reliance CorrEctioncited by 11
- 2025Trustworthy Machine Learning under Distribution Shiftscited by 2
Built on by
Citing papers per year: 2026: 5.
5 papers.
- 2026When Safety Collides: Resolving Multi-Category Harmful Conflicts in Text-to-Image Diffusion via Adaptive Safety Guidancecited by 9
- 2026VII: Visual Instruction Injection for Jailbreaking Image-to-Video Generation Modelscited by 6
- 2026Mitigating Mismatch within Reference-based Preference Optimizationcited by 1
- 2026MeGU: Machine-Guided Unlearning with Target Feature Disentanglementcited by 0
- 2026LLM Unlearning for Cyber Defense: A Survey on Methods, Challenges, and Emerging Threatscited by 0
- 2026LLM Unlearning for Cyber Defense: A Survey on Methods, Challenges, and Emerging Threats23 Jun 2026
- 2026VII: Visual Instruction Injection for Jailbreaking Image-to-Video Generation Models24 Feb 2026
- 2026When Safety Collides: Resolving Multi-Category Harmful Conflicts in Text-to-Image Diffusion via Adaptive Safety Guidance24 Feb 2026
- 2026MeGU: Machine-Guided Unlearning with Target Feature Disentanglement19 Feb 2026
- 2026Mitigating Mismatch within Reference-based Preference Optimization12 Feb 2026