KUDA: Knowledge Unlearning by Deviating Representation for Large Language Models
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
Large language models (LLMs) acquire a large amount of knowledge through pre-training on vast and diverse corpora. While this endows LLMs with strong capabilities in generation and reasoning, it amplifies risks associated with sensitive, copyrighted, or harmful content in training data. LLM unlearning, which aims to remove specific knowledge encoded within models, is a promising technique to reduce these risks. However, existing LLM unlearning methods often force LLMs to generate random or incoherent answers due to their inability to alter the encoded knowledge precisely. To achieve effective unlearning at the knowledge level of LLMs, we propose Knowledge Unlearning by Deviating representAtion (KUDA). We first utilize causal tracing to locate specific layers for target knowledge storage. We then design a new unlearning objective that induces the model's representations to deviate from its original position in the phase of knowledge removal, thus disrupting the ability to associate with the target knowledge. To resolve the optimization conflicts between forgetting and retention, we employ a relaxation null-space projection mechanism to mitigate the disruption to the representation space of retaining knowledge. Extensive experiments on representative benchmarks, WMDP and MUSE, demonstrate that KUDA outperforms most existing baselines by effectively balancing knowledge removal and model utility retention. Source code is available at https://github.com/AceNagi/KUDA.
Key facts. Cited by 2 papers in the map (data through 14 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 73 of its 93 references that are in the map. First posted on arXiv 22 Feb 2026.
Builds on
73 of 93 references.
Closest ancestors · 29
Same direction, newest first
- 2025Beyond Data Filtering: Knowledge Localization for Capability Removal in LLMs5 Dec
- 2025LLM Unlearning on Noisy Forget Sets: A Study of Incomplete, Rewritten, and Watermarked Data10 Oct
- 2025Understanding the Dilemma of Unlearning for Large Language Models29 Sep
- 2025Scrub It Out! Erasing Sensitive Memorization in Code Language Models via Machine Unlearning17 Sep
- 2025SoK: Machine Unlearning for Large Language Models10 Jun
- 2025Invariance Makes LLM Unlearning Resilient Even to Unanticipated Downstream Fine-Tuning2 Jun
- 2025GRU: Mitigating the Trade-off between Unlearning and Retention for LLMs12 Mar
- 2025Rethinking LLM Unlearning Objectives: A Gradient Perspective and Go Beyond26 Feb
- 2025FaithUn: Toward Faithful Forgetting in Language Models by Investigating the Interconnectedness of Knowledge26 Feb
- 2025LLM Unlearning via Neural Activation Redirection11 Feb
- 2025Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyond7 Feb
- 2025Improving LLM Unlearning Robustness via Random Perturbations31 Jan
17 more
- 2024WAGLE: Strategic Weight Attribution for Effective and Modular Unlearning in Large Language Models23 Oct
- 2024Catastrophic Failure of LLM Unlearning via Quantization21 Oct
- 2024A Closer Look at Machine Unlearning for Large Language Models10 Oct
- 2024Simplicity Prevails: Rethinking Negative Preference Optimization for LLM Unlearning9 Oct
- 2024Dissecting Fine-Tuning Unlearning in Large Language Models9 Oct
- 2024MUSE: Machine Unlearning Six-Way Evaluation for Language Models8 Jul
- 2024Avoiding Copyright Infringement via Large Language Model Unlearning16 Jun
- 2024Reversing the Forget-Retain Objectives: An Efficient LLM Unlearning Framework from Logit Difference12 Jun
- 2024Large Language Model Unlearning via Embedding-Corrupted Prompts12 Jun
- 2024Machine Unlearning via Null Space Calibration21 Apr
- 2024Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearning8 Apr
- 2024Dissecting Language Models: Machine Unlearning via Selective Pruning2 Mar
- 2024Rethinking Machine Unlearning for Large Language Models13 Feb
- 2024TOFU: A Task of Fictitious Unlearning for LLMs11 Jan
- 2023Large Language Model Unlearning14 Oct
- 2023Who's Harry Potter? Approximate Unlearning in LLMs3 Oct
- 2022Knowledge Unlearning for Mitigating Privacy Risks in Language Models4 Oct
Other references · 44
- 2022Training language models to follow instructions with human feedbackcited by 15,971
- 2017Proximal Policy Optimization Algorithmscited by 15,215
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 8,065
- 2020Measuring Massive Multitask Language Understandingcited by 7,963
- 2016Pointer Sentinel Mixture Modelscited by 3,096
- 2022Locating and Editing Factual Associations in GPTcited by 2,691
- 2020Transformer Feed-Forward Layers Are Key-Value Memoriescited by 1,336
- 2023Fine-tuning Aligned Language Models Compromises Safety, Even When Users Do Not Intend To!cited by 1,154
- 2019Machine Unlearningcited by 1,061
- 2022Mass-Editing Memory in a Transformercited by 1,001
- 2023Dissecting Recall of Factual Associations in Auto-Regressive Language Modelscited by 528
32 more
- 2024The WMDP Benchmark: Measuring and Reducing Malicious Use With Unlearningcited by 509
- 2024Jailbreaking Leading Safety-Aligned LLMs with Simple Adaptive Attackscited by 486
- 2024Safety Alignment Should Be Made More Than Just a Few Tokens Deepcited by 472
- 2024Prometheus 2: An Open Source Language Model Specialized in Evaluating Other Language Modelscited by 446
- 2023Detecting Pretraining Data from Large Language Modelscited by 387
- 2023Editing Large Language Models: Problems, Methods, and Opportunitiescited by 372
- 2024AlphaEdit: Null-Space Constrained Knowledge Editing for Language Modelscited by 236
- 2023Large Language Models in Finance: A Surveycited by 226
- 2023How does GPT-2 compute greater-than?: Interpreting mathematical abilities in a pre-trained language modelcited by 202
- 2020When Machine Unlearning Jeopardizes Privacycited by 198
- 2023Knowledge Editing for Large Language Models: A Surveycited by 194
- 2024Large Language Models for Education: A Survey and Outlookcited by 188
- 2023PMET: Precise Model Editing in a Transformercited by 173
- 2021Training Networks in Null Space of Feature Covariance for Continual Learningcited by 143
- 2021Graph Unlearningcited by 138
- 2025LLM4SR: A Survey on Large Language Models for Scientific Researchcited by 83
- 2023Use of LLMs for Illicit Purposes: Threats, Prevention Measures, and Vulnerabilitiescited by 82
- 2023In-context Pretraining: Language Modeling Beyond Document Boundariescited by 79
- 2023DEPN: Detecting and Editing Privacy Neurons in Pretrained Language Modelscited by 79
- 2024Large Language Model Safety: A Holistic Surveycited by 59
- 2024A Unified Framework for Model Editingcited by 57
- 2024Eraser: Jailbreaking Defense in Large Language Models via Unlearning Harmful Knowledgecited by 51
- 2023Explaining How Transformers Use Context to Build Predictionscited by 43
- 2024Unlearning Backdoor Attacks for LLMs with Weak-to-Strong Knowledge Distillationcited by 27
- 2025Depth Gives a False Sense of Privacy: LLM Internal States Inversioncited by 17
- 2023FACE-AUDITOR: Data Auditing in Facial Recognition Systemscited by 16
- 2024SoK: Dataset Copyright Auditing in Machine Learning Systemscited by 15
- 2025Backdoor Token Unlearning: Exposing and Defending Backdoors in Pretrained Language Modelscited by 8
- 2025Forgetting to Forget: Attention Sink as A Gateway for Backdooring LLM Unlearningcited by 6
- 2025DUP: Detection-guided Unlearning for Backdoor Purification in Language Modelscited by 4
- 2025BURN: Backdoor Unlearning via Adversarial Boundary Analysiscited by 2
- 2025VICTOR: Dataset Copyright Auditing in Video Recognition Systemscited by 1
Built on by
Citing papers per year: 2026: 2.
2 papers.
Similar, not cited
Close in wording, no citation either way
- 2025A Survey on Unlearning in Large Language Models
- 2025Concept Unlearning in Large Language Models via Self-Constructed Knowledge Triplets
- 2024To Forget or Not? Towards Practical Knowledge Unlearning for Large Language Models
- 2023Knowledge Unlearning for LLMs: Tasks, Methods, and Challenges
- 2026Unlearning in LLMs: Methods, Evaluation, and Open Challenges
- 2026Making LLMs Truly Forget: Deep Unlearning by Searching, Selecting, and Severing Knowledge Paths
- 2024Towards Robust and Parameter-Efficient Knowledge Unlearning for LLMs
- 2025UniErase: Towards Balanced and Precise Unlearning in Language Models