mlsanityData to 14 Oct 2026

KUDA: Knowledge Unlearning by Deviating Representation for Large Language Models

arXiv 2602.19275 ↗First posted 22 Feb 2026cs.CRcited by 2

On the map: LLM safety and security → Machine unlearning

Abstract (arXiv)

Large language models (LLMs) acquire a large amount of knowledge through pre-training on vast and diverse corpora. While this endows LLMs with strong capabilities in generation and reasoning, it amplifies risks associated with sensitive, copyrighted, or harmful content in training data. LLM unlearning, which aims to remove specific knowledge encoded within models, is a promising technique to reduce these risks. However, existing LLM unlearning methods often force LLMs to generate random or incoherent answers due to their inability to alter the encoded knowledge precisely. To achieve effective unlearning at the knowledge level of LLMs, we propose Knowledge Unlearning by Deviating representAtion (KUDA). We first utilize causal tracing to locate specific layers for target knowledge storage. We then design a new unlearning objective that induces the model's representations to deviate from its original position in the phase of knowledge removal, thus disrupting the ability to associate with the target knowledge. To resolve the optimization conflicts between forgetting and retention, we employ a relaxation null-space projection mechanism to mitigate the disruption to the representation space of retaining knowledge. Extensive experiments on representative benchmarks, WMDP and MUSE, demonstrate that KUDA outperforms most existing baselines by effectively balancing knowledge removal and model utility retention. Source code is available at https://github.com/AceNagi/KUDA.

Key facts. Cited by 2 papers in the map (data through 14 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 73 of its 93 references that are in the map. First posted on arXiv 22 Feb 2026.

Builds on

73 of 93 references.

Closest ancestors · 29

Same direction, newest first

  1. 2025Beyond Data Filtering: Knowledge Localization for Capability Removal in LLMs5 Dec
  2. 2025LLM Unlearning on Noisy Forget Sets: A Study of Incomplete, Rewritten, and Watermarked Data10 Oct
  3. 2025Understanding the Dilemma of Unlearning for Large Language Models29 Sep
  4. 2025Scrub It Out! Erasing Sensitive Memorization in Code Language Models via Machine Unlearning17 Sep
  5. 2025SoK: Machine Unlearning for Large Language Models10 Jun
  6. 2025Invariance Makes LLM Unlearning Resilient Even to Unanticipated Downstream Fine-Tuning2 Jun
  7. 2025GRU: Mitigating the Trade-off between Unlearning and Retention for LLMs12 Mar
  8. 2025Rethinking LLM Unlearning Objectives: A Gradient Perspective and Go Beyond26 Feb
  9. 2025FaithUn: Toward Faithful Forgetting in Language Models by Investigating the Interconnectedness of Knowledge26 Feb
  10. 2025LLM Unlearning via Neural Activation Redirection11 Feb
  11. 2025Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyond7 Feb
  12. 2025Improving LLM Unlearning Robustness via Random Perturbations31 Jan
17 more
  1. 2024WAGLE: Strategic Weight Attribution for Effective and Modular Unlearning in Large Language Models23 Oct
  2. 2024Catastrophic Failure of LLM Unlearning via Quantization21 Oct
  3. 2024A Closer Look at Machine Unlearning for Large Language Models10 Oct
  4. 2024Simplicity Prevails: Rethinking Negative Preference Optimization for LLM Unlearning9 Oct
  5. 2024Dissecting Fine-Tuning Unlearning in Large Language Models9 Oct
  6. 2024MUSE: Machine Unlearning Six-Way Evaluation for Language Models8 Jul
  7. 2024Avoiding Copyright Infringement via Large Language Model Unlearning16 Jun
  8. 2024Reversing the Forget-Retain Objectives: An Efficient LLM Unlearning Framework from Logit Difference12 Jun
  9. 2024Large Language Model Unlearning via Embedding-Corrupted Prompts12 Jun
  10. 2024Machine Unlearning via Null Space Calibration21 Apr
  11. 2024Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearning8 Apr
  12. 2024Dissecting Language Models: Machine Unlearning via Selective Pruning2 Mar
  13. 2024Rethinking Machine Unlearning for Large Language Models13 Feb
  14. 2024TOFU: A Task of Fictitious Unlearning for LLMs11 Jan
  15. 2023Large Language Model Unlearning14 Oct
  16. 2023Who's Harry Potter? Approximate Unlearning in LLMs3 Oct
  17. 2022Knowledge Unlearning for Mitigating Privacy Risks in Language Models4 Oct

Other references · 44

  1. 2022Training language models to follow instructions with human feedbackcited by 15,971
  2. 2017Proximal Policy Optimization Algorithmscited by 15,215
  3. 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
  4. 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 8,065
  5. 2020Measuring Massive Multitask Language Understandingcited by 7,963
  6. 2016Pointer Sentinel Mixture Modelscited by 3,096
  7. 2022Locating and Editing Factual Associations in GPTcited by 2,691
  8. 2020Transformer Feed-Forward Layers Are Key-Value Memoriescited by 1,336
  9. 2023Fine-tuning Aligned Language Models Compromises Safety, Even When Users Do Not Intend To!cited by 1,154
  10. 2019Machine Unlearningcited by 1,061
  11. 2022Mass-Editing Memory in a Transformercited by 1,001
  12. 2023Dissecting Recall of Factual Associations in Auto-Regressive Language Modelscited by 528
32 more
  1. 2024The WMDP Benchmark: Measuring and Reducing Malicious Use With Unlearningcited by 509
  2. 2024Jailbreaking Leading Safety-Aligned LLMs with Simple Adaptive Attackscited by 486
  3. 2024Safety Alignment Should Be Made More Than Just a Few Tokens Deepcited by 472
  4. 2024Prometheus 2: An Open Source Language Model Specialized in Evaluating Other Language Modelscited by 446
  5. 2023Detecting Pretraining Data from Large Language Modelscited by 387
  6. 2023Editing Large Language Models: Problems, Methods, and Opportunitiescited by 372
  7. 2024AlphaEdit: Null-Space Constrained Knowledge Editing for Language Modelscited by 236
  8. 2023Large Language Models in Finance: A Surveycited by 226
  9. 2023How does GPT-2 compute greater-than?: Interpreting mathematical abilities in a pre-trained language modelcited by 202
  10. 2020When Machine Unlearning Jeopardizes Privacycited by 198
  11. 2023Knowledge Editing for Large Language Models: A Surveycited by 194
  12. 2024Large Language Models for Education: A Survey and Outlookcited by 188
  13. 2023PMET: Precise Model Editing in a Transformercited by 173
  14. 2021Training Networks in Null Space of Feature Covariance for Continual Learningcited by 143
  15. 2021Graph Unlearningcited by 138
  16. 2025LLM4SR: A Survey on Large Language Models for Scientific Researchcited by 83
  17. 2023Use of LLMs for Illicit Purposes: Threats, Prevention Measures, and Vulnerabilitiescited by 82
  18. 2023In-context Pretraining: Language Modeling Beyond Document Boundariescited by 79
  19. 2023DEPN: Detecting and Editing Privacy Neurons in Pretrained Language Modelscited by 79
  20. 2024Large Language Model Safety: A Holistic Surveycited by 59
  21. 2024A Unified Framework for Model Editingcited by 57
  22. 2024Eraser: Jailbreaking Defense in Large Language Models via Unlearning Harmful Knowledgecited by 51
  23. 2023Explaining How Transformers Use Context to Build Predictionscited by 43
  24. 2024Unlearning Backdoor Attacks for LLMs with Weak-to-Strong Knowledge Distillationcited by 27
  25. 2025Depth Gives a False Sense of Privacy: LLM Internal States Inversioncited by 17
  26. 2023FACE-AUDITOR: Data Auditing in Facial Recognition Systemscited by 16
  27. 2024SoK: Dataset Copyright Auditing in Machine Learning Systemscited by 15
  28. 2025Backdoor Token Unlearning: Exposing and Defending Backdoors in Pretrained Language Modelscited by 8
  29. 2025Forgetting to Forget: Attention Sink as A Gateway for Backdooring LLM Unlearningcited by 6
  30. 2025DUP: Detection-guided Unlearning for Backdoor Purification in Language Modelscited by 4
  31. 2025BURN: Backdoor Unlearning via Adversarial Boundary Analysiscited by 2
  32. 2025VICTOR: Dataset Copyright Auditing in Video Recognition Systemscited by 1

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2026: 2.

2 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2025A Survey on Unlearning in Large Language Models
  2. 2025Concept Unlearning in Large Language Models via Self-Constructed Knowledge Triplets
  3. 2024To Forget or Not? Towards Practical Knowledge Unlearning for Large Language Models
  4. 2023Knowledge Unlearning for LLMs: Tasks, Methods, and Challenges
  5. 2026Unlearning in LLMs: Methods, Evaluation, and Open Challenges
  6. 2026Making LLMs Truly Forget: Deep Unlearning by Searching, Selecting, and Severing Knowledge Paths
  7. 2024Towards Robust and Parameter-Efficient Knowledge Unlearning for LLMs
  8. 2025UniErase: Towards Balanced and Precise Unlearning in Language Models