GSS: Gated Subspace Steering for Selective Memorization Mitigation in LLMs
Not on the map. Why?
Abstract (arXiv)
Large language models (LLMs) can memorize and reproduce training sequences verbatim -- a tendency that undermines both generalization and privacy. Existing mitigation methods apply interventions uniformly, degrading performance on the majority of tokens that generalize normally. We show empirically that memorization is sparse, intermittent, and token-conditioned, suggesting that effective mitigation requires context-aware intervention rather than static parameter modification. To this end, we propose a novel and effective selective memorization mitigation method -- Gated Subspace Steering (GSS), which decomposes intervention into a probe (detecting memorization-relevant activations) and a steer (applying targeted correction only when the probe exceeds a threshold). The optimal probe-steer pair emerges from a principled optimization framework based on optimal subspace steering. Experiments on four benchmarks show GSS matches or exceeds state-of-the-art memorization reduction while requiring 100-1000 × less compute than optimization-based alternatives. Furthermore, we provide new theoretical insights into the geometry of memorization in neural representations.
Key facts. Cited by 2 papers in the map (data through 7 Oct 2026). Builds on 58 of its 64 references that are in the map. First posted on arXiv 9 Feb 2026.
Builds on
58 of 64 references.
References · 58
- 2021Training Verifiers to Solve Math Word Problemscited by 9,743
- 2022Locating and Editing Factual Associations in GPTcited by 2,609
- 2020The Pile: An 800GB Dataset of Diverse Text for Language Modelingcited by 2,346
- 2013Visualizing and Understanding Convolutional Networkscited by 2,278
- 2020Extracting Training Data from Large Language Modelscited by 2,144
- 2022Editing Models with Task Arithmeticcited by 1,076
- 2019Machine Unlearningcited by 1,020
- 2023Steering Llama 2 via Contrastive Activation Additioncited by 1,009
- 2022Mass-Editing Memory in a Transformercited by 976
- 2018The Secret Sharer: Evaluating and Testing Unintended Memorization in Neural Networkscited by 847
- 2023Enhancing Chat Language Models by Scaling High-quality Instructional Conversationscited by 825
- 2023Steering Language Models With Activation Engineeringcited by 824
38 more
- 2022Quantifying Memorization Across Neural Language Modelscited by 755
- 2021Deduplicating Training Data Makes Language Models Bettercited by 705
- 2023The Geometry of Truth: Emergent Linear Structure in Large Language Model Representations of True/False Datasetscited by 673
- 2024Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearningcited by 484
- 2022Memory-Based Model Editing at Scalecited by 443
- 2022Knowledge Unlearning for Mitigating Privacy Risks in Language Modelscited by 424
- 2020Amnesiac Machine Learningcited by 305
- 2022A Survey of Machine Unlearningcited by 298
- 2021Fast Yet Effective Machine Unlearningcited by 209
- 2025AxBench: Steering LLMs? Even Simple Baselines Outperform Sparse Autoencoderscited by 199
- 2024Programming Refusal with Conditional Activation Steeringcited by 191
- 2018SpotTune: Transfer Learning through Adaptive Fine-tuningcited by 166
- 2024Machine Unlearning of Pre-trained Large Language Modelscited by 118
- 2024On Memorization of Large Language Models in Logical Reasoningcited by 114
- 2023EasyEdit: An Easy-to-use Knowledge Editing Framework for Large Language Modelscited by 97
- 2025AnyEdit: Edit Any Knowledge Encoded in Language Modelscited by 74
- 2023Fast Model Debias with Machine Unlearningcited by 70
- 2024Large Language Model Safety: A Holistic Surveycited by 56
- 2024Demystifying Verbatim Memorization in Large Language Modelscited by 55
- 2025How much do language models memorize?cited by 53
- 2023Unveiling the Implicit Toxicity in Large Language Modelscited by 51
- 2025AlphaSteer: Learning Refusal Steering with Principled Null-Space Constraintcited by 45
- 2024Steering Away from Harm: An Adaptive Approach to Defending Vision Language Model Against Jailbreakscited by 44
- 2024Learning to Edit: Aligning LLMs with Knowledge Editingcited by 43
- 2024To Each (Textual Sequence) Its Own: Improving Memorized-Data Unlearning in Large Language Modelscited by 42
- 2025Unlearning Isn't Deletion: Investigating Reversibility of Machine Unlearning in LLMscited by 41
- 2024WilKE: Wise-Layer Knowledge Editor for Lifelong Knowledge Editingcited by 40
- 2025LLM Unlearning via Neural Activation Redirectioncited by 38
- 2025AdaSteer: Your Aligned LLM is Inherently an Adaptive Jailbreak Defendercited by 37
- 2024Selective Forgetting: Advancing Machine Unlearning Techniques and Evaluation in Language Modelscited by 36
- 2024Activation Scaling for Steering and Interpreting Language Modelscited by 33
- 2023Do Localization Methods Actually Localize Memorized Data in LLMs? A Tale of Two Benchmarkscited by 29
- 2025MMUnlearner: Reformulating Multimodal Machine Unlearning in the Era of Multimodal Large Language Modelscited by 29
- 2024The Pitfalls of Memorization: When Memorization Hurts Generalizationcited by 16
- 2024Mitigating Memorization In Language Modelscited by 11
- 2025The Landscape of Memorization in LLMs: Mechanisms, Measurement, and Mitigationcited by 9
- 2024A Multi-Perspective Analysis of Memorization in Large Language Modelscited by 8
- 2025Guiding Giants: Lightweight Controllers for Weighted Activation Steering in LLMscited by 8
50 most cited of 58 All 58 (JSON)
Built on by
Citing papers per year: 2026: 2.
2 papers.