无需真实数据,快速让扩散模型遗忘特定内容
Score Forgetting Distillation: A Swift, Data-Free Method for Machine Unlearning in Diffusion Models
- 用安全类别的得分引导不安全类别,实现无数据遗忘
- 生成质量不受损,目标概念遗忘速度提升显著
- 适合需要快速删除敏感信息的生成模型应用
随着生成式AI的安全性日益受重视,机器遗忘(MU)成为构建可信模型的关键。传统方法依赖真实数据且假设严格。本文提出评分遗忘蒸馏(SFD),通过将不安全类别的条件得分对齐至安全类别,在不使用真实数据的前提下,利用预训练扩散模型的得分蒸馏目标加入遗忘损失,实现对目标概念的快速遗忘。该方法通过单步生成器合成数据,保持原有生成能力的同时加速推理。在多个标签条件与文本到图像扩散模型上验证,SFD能有效消除目标类别生成,同时维持其他类别质量。实验表明该方法通用性强、效果显著,为扩散模型的机器遗忘提供新范式。代码已开源。注意:论文含色情图像及敏感内容,可能引发不适。
原文摘要 · Abstract (English)
The machine learning community is increasingly recognizing the importance of fostering trust and safety in modern generative AI (GenAI) models. We posit machine unlearning (MU) as a crucial foundation for developing safe, secure, and trustworthy GenAI models. Traditional MU methods often rely on stringent assumptions and require access to real data. This paper introduces Score Forgetting Distillation (SFD), an innovative MU approach that promotes the forgetting of undesirable information in diffusion models by aligning the conditional scores of "unsafe" classes or concepts with those of "safe" ones. To eliminate the need for real data, our SFD framework incorporates a score-based MU loss into the score distillation objective of a pretrained diffusion model. This serves as a regularization term that preserves desired generation capabilities while enabling the production of synthetic data through a one-step generator. Our experiments on pretrained label-conditional and text-to-image diffusion models demonstrate that our method effectively accelerates the forgetting of target classes or concepts during generation, while preserving the quality of other classes or concepts. This unlearned and distilled diffusion not only pioneers a novel concept in MU but also accelerates the generation speed of diffusion models. Our experiments and studies on a range of diffusion models and datasets confirm that our approach is generalizable, effective, and advantageous for MU in diffusion models. Code is available at https://github.com/tqch/score-forgetting-distillation. ($\textbf{Warning:}$ This paper contains sexually explicit imagery, discussions of pornography, racially-charged terminology, and other content that some readers may find disturbing, distressing, and/or offensive.)
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。