FOM-UL:面向鲁棒大模型的选择性遗忘框架
Forgetting Only What Matters: Layer-Selective Unlearning toward Robust LLMs
这篇论文提出了FOM-UL框架,能精准删除大模型中的敏感内容,量化后仍能有效防止记忆恢复。
研究人员提出FOM-UL框架,通过transformer层的选择性遗忘来解决大模型记忆敏感内容的问题。该框架使用遗忘-保留显著性评分选择影响遗忘集但对保留集敏感度低的层,在TOFU、KnowUnDo和MUSE评估中表现优于GA、NPO等基线方法。在8位和4位量化后,FOM-UL仍能保持更强的记忆抑制和效用保留。
Forgetting Only What Matters: Layer-Selective Unlearning toward Robust LLMs
Large Language Models (LLMs) can memorize and reproduce sensitive, copyrighted, or otherwise undesirable training content, creating privacy, safety, and regulatory concerns. Machine unlearning offers a practical alternative to full retraining, but many existing methods apply broad or fixed parameter updates that can degrade utility and remain brittle under deployment changes such as post-training quantization, where forgotten knowledge may partially re-emerge. We propose Forgetting Only What Matters via Unlearning Layers (FOM-UL), a layer-level unlearning framework that selects transformer layers using a forget-to-retain significance score. This score identifies layers with high influence on the forget set and low sensitivity to the retain set, allowing FOM-UL to concentrate updates where they are most effective while leaving most of the model unchanged. This targeted update strategy improves the forgetting-utility trade-off and provides an empirical path toward quantization-resilient unlearning by reducing the chance that small, diffuse updates are erased by low-bit rounding. Across TOFU, KnowUnDo, and MUSE-style evaluations, FOM-UL reduces residual memorization compared with strong GA, NPO, KLD, SURE, ReLearn, and LUNAR-based baselines while preserving retain-set utility close to the vanilla model. Under 8-bit and 4-bit post-training quantization, FOM-UL maintains stronger memorization suppression and utility preservation than competing methods, and adversarial prompt evaluations show lower recovery of forgotten content. Overall, FOM-UL provides an efficient unlearning strategy that improves targeted forgetting, utility preservation, and deployment robustness without claiming formal guarantees of erasure.