arXiv:2509.24675cs.CLcs.AI2025-09被引 4

揭示大模型删知识的两难:删不净或伤整体能力

Understanding the Dilemma of Unlearning for Large Language Models

  • 通过提示词贡献追踪,解析删知识时模型内部变化
  • 删知识后多数内容仍能通过强调关键词恢复
  • 盲目惩罚所有词会引发灾难性遗忘,影响通用能力

无监督学习旨在从大语言模型(LLMs)中移除特定知识,但其有效性仍存争议。一方面,‘遗忘’的知识常可通过轻量微调等干预手段恢复;另一方面,删知识可能引发灾难性遗忘,损害模型整体性能。尽管已有多种删知识方法被探索,但由于难以追踪大模型复杂架构中的知识状态,其内在机制分析仍很匮乏。本文提出 unPact,一个基于提示词归因与贡献追踪的可解释删知识框架。通过量化每个提示词对输出的影响,实现删前删后的对比分析。在六种主流删知识方法、三种 LLMs 和三个基准测试上发现:(1)删知识主要通过干扰提示词中关键词的关注度实现;(2)大部分知识并未真正删除,仅需在提示中强调关键词即可恢复,无需修改模型权重;(3)灾难性遗忘源于对所有提示词的无差别惩罚。结果表明当前删知识方法面临两难:要么不足——知识可轻易恢复;要么过度——通用能力严重下降,尚未实现可靠的删知识。

原文摘要 · Abstract (English)

Unlearning seeks to remove specific knowledge from large language models (LLMs), but its effectiveness remains contested. On one side, "forgotten" knowledge can often be recovered through interventions such as light fine-tuning; on the other side, unlearning may induce catastrophic forgetting that degrades general capabilities. Despite active exploration of unlearning methods, interpretability analyses of the mechanism are scarce due to the difficulty of tracing knowledge in LLMs' complex architectures. We address this gap by proposing unPact, an interpretable framework for unlearning via prompt attribution and contribution tracking. Typically, it quantifies each prompt token's influence on outputs, enabling pre- and post-unlearning comparisons to reveal what changes. Across six mainstream unlearning methods, three LLMs, and three benchmarks, we find that: (1) Unlearning appears to be effective by disrupting focus on keywords in prompt; (2) Much of the knowledge is not truly erased and can be recovered by simply emphasizing these keywords in prompts, without modifying the model's weights; (3) Catastrophic forgetting arises from indiscriminate penalization of all tokens. Taken together, our results suggest an unlearning dilemma: existing methods tend either to be insufficient - knowledge remains recoverable by keyword emphasis, or overly destructive - general performance collapses due to catastrophic forgetting, still leaving a gap to reliable unlearning.

大模型知识删除可解释性遗忘

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。