用反事实数据和新指标实现高效无损的LLM去记忆。
MEOW: MEMOry Supervised LLM Unlearning Via Inverted Facts
- 通过离线模型生成反事实数据,引导模型遗忘敏感信息。
- 在ToFU基准上实现强遗忘效果,且自然语言理解能力提升。
- 无需额外模型或保留数据,适合实际部署场景。
大型语言模型可能记住敏感信息,引发滥用风险。后训练去记忆方法为缓解此问题提供了前景,但现有方法面临三大挑战:1. 效用损失:有效去记忆常导致无关任务性能崩溃;2. 效率低下:多数方法需添加同规模模型或难以获取的保留数据;3. 鲁棒性不足:即使有效仍可能被提取技术泄露。为此,我们提出MEOW,一种基于梯度下降的简单而有效的去记忆方法。首先,使用离线LLM生成一组反事实数据;其次,设计新度量MEMO以量化模型中的记忆程度;最后,基于MEMO信号选择最优反事实数据集并进行微调。我们在常用去记忆基准ToFU上,针对Llama2-7B-Chat与Phi-1.5B进行评估,涵盖NLU与NLG任务。结果表明,MEOW在不显著损失模型效用的前提下,显著提升遗忘质量;同时,在NLU与NLG能力上未出现明显退化,甚至在NLU上略有提升。
原文摘要 · Abstract (English)
Large Language Models (LLMs) can memorize sensitive information, raising concerns about potential misuse. LLM Unlearning, a post-hoc approach to remove this information from trained LLMs, offers a promising solution to mitigate these risks. However, previous practices face three key challenges: 1. Utility: successful unlearning often causes catastrophic collapse on unrelated tasks. 2. Efficiency: many methods either involve adding similarly sized models, which slows down unlearning or inference, or require retain data that are difficult to obtain. 3. Robustness: even effective methods may still leak data via extraction techniques. To address these challenges, we propose MEOW, a simple yet effective gradient descent-based unlearning method. Specifically, we use an offline LLM to generate a set of inverted facts. Then, we design a new metric, MEMO, to quantify memorization in LLMs. Finally, based on the signals provided by MEMO, we select the most appropriate set of inverted facts and finetune the model based on them. We evaluate MEOW on the commonly used unlearn benchmark, ToFU, with Llama2-7B-Chat and Phi-1.5B, and test it on both NLU and NLG tasks. Results demonstrate significant improvement of MEOW in forget quality without substantial loss in model utility. Meanwhile, MEOW does not exhibit significant degradation in NLU or NLG capabilities, and there is even a slight improvement in NLU performance.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。