DUET: Distilled LLM Unlearning from an Efficiently Contextualized Teacher
Yisheng Zhong, Zhengbang Yang, Zhuangdi Zhu
TL;DR
This work tackles the problem of unlearning undesirable knowledge in LLMs without full retraining by introducing DUET, a distillation-based framework that transfers in-context refusal behavior from a prompt-conditioned teacher into a student model via Top-K logit distillation. By aligning the student’s top logits with the teacher’s responses on forgotten content, while incorporating retention data, DUET achieves strong forgetting with minimal degradation to general utility. Empirical results on HP-related content (MUSE) and WMDP benchmarks show DUET outperforms existing methods in balancing forgetting and utility, exhibiting robustness to reverse prompting and across different evaluation formats, all with data-efficient training. The approach also includes expanded evaluation protocols and demonstrates generalizability across multiple LLMs, offering a scalable path toward trustworthy unlearning in real-world settings.
Abstract
LLM unlearning is a technique to remove the impacts of undesirable knowledge from the model without retraining from scratch, which is indispensable towards trustworthy AI. Existing unlearning methods face significant limitations: conventional tuning-based unlearning is computationally heavy and prone to catastrophic forgetting. In contrast, in-contextualized unlearning is lightweight for precise unlearning but vulnerable to prompt removal or reverse engineering attacks. In response, we propose Distilled Unlearning from an Efficient Teacher (DUET), a novel distillation-based unlearning method that combines the merits of these two lines of work. It learns a student model to imitate the behavior of a prompt-steered teacher that effectively refuses undesirable knowledge generation while preserving general domain knowledge. Extensive evaluations on existing benchmarks with our enriched evaluation protocols demonstrate that DUET achieves higher performance in both forgetting and utility preservation, while being orders of magnitude more data-efficient than state-of-the-art unlearning methods.
