Distinguishable Deletion: Unifying Knowledge Erasure and Refusal for Large Language Model Unlearning
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
Mitigating sensitive and harmful outputs is fundamental to ensuring safe deployment of LLMs. Existing approaches typically follow two paradigms: Knowledge Deletion (KD), which erases undesirable information during training, and Distinguishable Refusal (DR), which steers models away from using sensitive knowledge during inference. Despite rapid progress, KD-based unlearning struggles with biased deletion due to suppressing specific token sequences as a substitute for complete knowledge removal, whereas DR-based unlearning risks the re-emergence of harmful knowledge because the underlying knowledge remains intact. To address these issues, we propose Distinguishable Deletion (D2), a paradigm that restricts the response distribution in the latent representation rather than specific tokens to erase undesirable knowledge, while distinguishing it from retained knowledge, enabling a refusal mechanism to handle unlearned inputs safely and coherently. To implement D2, we introduce an energy index that quantifies the presence of knowledge and the separation between unlearned and retained content. Mathematical and empirical analyses show that energy is both accurate and efficient, enabling Energy-based Unlearning Alignment (EUA) to enforce energy-boundary unlearning during training and apply an energy-based refusal mechanism at inference. Extensive experiments demonstrate that EUA significantly outperforms previous methods, indicating the superiority of D2. Our code is available at https://github.com/Puning97/EUA-for-LLM-Unlearning.
Key facts. Cited by 2 papers in the map (data through 7 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 55 of its 76 references that are in the map. First posted on arXiv 16 May 2026.
Builds on
55 of 76 references.
Closest ancestors · 30
Same direction, newest first
- 2026CALIBURN: Self-Calibrated LLM Unlearning Alignment2 Feb
- 2025DRAGON: Guard LLM Unlearning in Context via Negative Detection and Reasoning8 Nov
- 2025Leak@k: Unlearning Does Not Make LLMs Forget Under Probabilistic Decoding7 Nov
- 2025LLM Unlearning with LLM Beliefs22 Oct
- 2025Forget to Know, Remember to Use: Context-Aware Unlearning for Large Language Models20 Oct
- 2025Distribution Preference Optimization: A Fine-grained Perspective for LLM Unlearning6 Oct
- 2025OpenUnlearning: Accelerating LLM Unlearning via Unified Benchmarking of Methods and Metrics14 Jun
- 2025Exploring Criteria of Loss Reweighting to Enhance LLM Unlearning17 May
- 2025Rethinking LLM Unlearning Objectives: A Gradient Perspective and Go Beyond26 Feb
- 2025LLM Unlearning via Neural Activation Redirection11 Feb
- 2024Simplicity Prevails: Rethinking Negative Preference Optimization for LLM Unlearning9 Oct
- 2024Position: LLM Unlearning Benchmarks are Weak Measures of Progress3 Oct
18 more
- 2024MUSE: Machine Unlearning Six-Way Evaluation for Language Models8 Jul
- 2024Soft Prompting for Unlearning in Large Language Models17 Jun
- 2024Towards Effective Evaluations and Comparisons for LLM Unlearning Methods13 Jun
- 2024Reversing the Forget-Retain Objectives: An Efficient LLM Unlearning Framework from Logit Difference12 Jun
- 2024SOUL: Unlocking the Power of Second-Order Optimization for LLM Unlearning28 Apr
- 2024Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearning8 Apr
- 2024Guardrail Baselines for Unlearning in LLMs5 Mar
- 2024Eight Methods to Evaluate Robust Unlearning in LLMs26 Feb
- 2024UNDIAL: Self-Distillation with Adjusted Logits for Robust Unlearning in Large Language Models15 Feb
- 2024Rethinking Machine Unlearning for Large Language Models13 Feb
- 2024Fast Exact Unlearning for In-Context Learning Data for LLMs1 Feb
- 2024TOFU: A Task of Fictitious Unlearning for LLMs11 Jan
- 2023Large Language Model Unlearning14 Oct
- 2023In-Context Unlearning: Language Models as Few Shot Unlearners11 Oct
- 2023Who's Harry Potter? Approximate Unlearning in LLMs3 Oct
- 2023Machine Unlearning: Solutions and Challenges14 Aug
- 2022Knowledge Unlearning for Mitigating Privacy Risks in Language Models4 Oct
- 2022Quark: Controllable Text Generation with Reinforced Unlearning26 May
Other references · 25
- 2023GPT-4 Technical Reportcited by 18,132
- 2024The Llama 3 Herd of Modelscited by 14,192
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 12,865
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 7,916
- 2020Measuring Massive Multitask Language Understandingcited by 7,768
- 2020Sharpness-Aware Minimization for Efficiently Improving Generalizationcited by 1,404
- 2020Energy-based Out-of-distribution Detectioncited by 1,296
- 2023Textbooks Are All You Need II: phi-1.5 technical reportcited by 559
- 2023DecodingTrust: A Comprehensive Assessment of Trustworthiness in GPT Modelscited by 505
- 2023Zephyr: Direct Distillation of LM Alignmentcited by 498
- 2024The WMDP Benchmark: Measuring and Reducing Malicious Use With Unlearningcited by 488
- 2023"Do Anything Now": Characterizing and Evaluating In-The-Wild Jailbreak Prompts on Large Language Modelscited by 457
13 more
- 2023Scalable Extraction of Training Data from (Production) Language Modelscited by 415
- 2023Editing Large Language Models: Problems, Methods, and Opportunitiescited by 367
- 2023Gender bias and stereotypes in Large Language Modelscited by 185
- 2023Copyright Violations and Large Language Modelscited by 108
- 2016Cooperative Training of Descriptor and Generator Networkscited by 60
- 2023LatestEval: Addressing Data Contamination in Language Model Evaluation through Dynamic and Time-Sensitive Test Constructioncited by 57
- 2023Unveiling the Implicit Toxicity in Large Language Modelscited by 51
- 2025The European Union general data protection regulation: what it is and what it meanscited by 30
- 2019Learning Energy-based Spatial-Temporal Generative ConvNets for Dynamic Patternscited by 22
- 2023Plugin estimators for selective classification with out-of-distribution detectioncited by 14
- 2025On the Impossibility of Separating Intelligence from Judgment: The Computational Intractability of Filtering for AI Alignmentcited by 12
- 2025Can Prompts Rewind Time for LLMs? Evaluating the Effectiveness of Prompted Knowledge Cutoffscited by 8
- 2025What Is Preference Optimization Doing, and Why?cited by 2
Built on by
Citing papers per year: 2026: 2.
2 papers.