arXiv:2409.14781cs.CLcs.CR2024-09EMNLP被引 76

提出新方法提升大模型训练数据检测准确率,解决误判常见词问题。

Pretraining Data Detection for Large Language Models: A Divergence-based Calibration Method

  • 基于熵差原理校准词元概率,增强检测鲁棒性。
  • 在英中文基准上显著优于现有方法,尤其减少对常见词的误判。
  • 适合关注模型透明性与数据合规性的研究人员使用。

随着大语言模型训练语料规模扩大,开发者越来越不愿公开数据细节,这给科学评估和伦理部署带来挑战。近期研究通过黑盒访问推断文本是否曾被用于模型训练。当前最优方法Min-K% Prob假设非训练文本包含少数低概率异常词,但容易误判包含大量高概率常见词的文本。为此,本文提出一种基于发散度的校准方法,受随机性偏离概念启发,计算词元概率分布与词元频率分布间的交叉熵作为检测得分。我们构建了首个中文基准PatentMIA,用于评估中文文本上的检测性能。实验表明,该方法在英文基准和PatentMIA上均显著优于现有方法。代码与数据集已开源。

原文摘要 · Abstract (English)

As the scale of training corpora for large language models (LLMs) grows, model developers become increasingly reluctant to disclose details on their data. This lack of transparency poses challenges to scientific evaluation and ethical deployment. Recently, pretraining data detection approaches, which infer whether a given text was part of an LLM's training data through black-box access, have been explored. The Min-K\% Prob method, which has achieved state-of-the-art results, assumes that a non-training example tends to contain a few outlier words with low token probabilities. However, the effectiveness may be limited as it tends to misclassify non-training texts that contain many common words with high probabilities predicted by LLMs. To address this issue, we introduce a divergence-based calibration method, inspired by the divergence-from-randomness concept, to calibrate token probabilities for pretraining data detection. We compute the cross-entropy (i.e., the divergence) between the token probability distribution and the token frequency distribution to derive a detection score. We have developed a Chinese-language benchmark, PatentMIA, to assess the performance of detection approaches for LLMs on Chinese text. Experimental results on English-language benchmarks and PatentMIA demonstrate that our proposed method significantly outperforms existing methods. Our code and PatentMIA benchmark are available at https://github.com/zhang-wei-chao/DC-PDD.

数据检测大模型可信AI中文数据

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。