paper-with-me

홈 › Papers

RWKU: Benchmarking Real-World Knowledge Unlearning for Large Language Models

2024-06-16 · Zhuoran Jin, Pengfei Cao, Chenhao Wang, Zhitao He, Hongbang Yuan, Jiachun Li, Yubo Chen, Kang Liu, Jun Zhao

Large language models (LLMs) inevitably memorize sensitive, copyrighted, and harmful knowledge from the training corpus; therefore, it is crucial to erase this knowledge from the models. Machine unlearning is a promising solution for efficiently removing specific knowledge by post hoc modifying models. In this paper, we propose a Real-World Knowledge Unlearning benchmark (RWKU) for LLM unlearning. RWKU is designed based on the following three key factors: (1) For the task setting, we consider a more practical and challenging unlearning setting, where neither the forget corpus nor the retain corpus is accessible. (2) For the knowledge source, we choose 200 real-world famous people as the unlearning targets and show that such popular knowledge is widely present in various LLMs. (3) For the evaluation framework, we design the forget set and the retain set to evaluate the model's capabilities across various real-world applications. Regarding the forget set, we provide four four membership inference attack (MIA) methods and nine kinds of adversarial attack probes to rigorously test unlearning efficacy. Regarding the retain set, we assess locality and utility in terms of neighbor perturbation, general ability, reasoning ability, truthfulness, factuality, and fluency. We conduct extensive experiments across two unlearning scenarios, two models and six baseline methods and obtain some meaningful findings. We release our benchmark and code publicly at http://rwku-bench.github.io for future work.

📄 PDF Abstract BibTeX arXiv:2406.10890

Code (1)

jinzhuoran/rwku 공식 구현 pytorch

Tasks

Adversarial AttackBenchmarkingInference AttackMachine UnlearningMembership Inference AttackWorld Knowledge

Methods 이 논문이 사용한 방법론

SET Dynamic Sparse Training method where weight mask is updated randomly periodically
HOC 설명 없음

Similar Papers 제목 키워드 기반

An Empirical Study of Reward Specification and Benchmark Reliability in GRPO-based LLM Unlearning

2026-08-18 · Rubén Balbastre, Juan Manuel Orduña, Mariano Pérez arxiv

Practical LLM unlearning is usually evaluated through two objectives: suppress target-specific knowledge and preserve non-target utility. In generative QA, this leaves a third behavior underspecified: when a target-adjac…

Beyond Binary Rewards: A Comparative Study of Reward Design for Reinforcement Unlearning

2026-07-30 · Efstratios Zaradoukas, Davide Gabrielli, Bardh Prenkaj, Gjergji Kasneci arxiv

Machine unlearning seeks to selectively remove specific knowledge from trained language models without full retraining, a growing necessity under privacy regulations such as GDPR and the EU AI Act. Recent work has reform…

Reinforcement Learning

Reinforcement Unlearning via Group Relative Policy Optimization

2026-01-28 · Efstratios Zaradoukas, Bardh Prenkaj, Gjergji Kasneci arxiv

During pretraining, LLMs inadvertently memorize sensitive or copyrighted data, posing significant compliance challenges under legal frameworks like the GDPR and the EU AI Act. Fulfilling these mandates demands techniques…

Adversarial Robustness

On the Hidden Costs of Counterfactual Knowledge Training in LLM Unlearning

2026-05-26 · Xiaotian Ye, Xiaohan Wang, Mengqi Zhang, Shu Wu arxiv

Counterfactual tuning (CFT) has emerged as a promising paradigm for Large Language Model (LLM) unlearning by training models to generate alternative fictitious knowledge in place of undesired content. However, in this wo…

Modeling LLM Unlearning as an Asymmetric Two-Task Learning Problem

2026-04-16 · Zeguan Xiao, Siqing Li, Yong Wang, Xuetao Wei 외 arxiv

Machine unlearning for large language models (LLMs) aims to remove targeted knowledge while preserving general capability. In this paper, we recast LLM unlearning as an asymmetric two-task problem: retention is the prima…