提出新方法让模型快速遗忘特定数据,且不影响其他性能。
Unified Gradient-Based Machine Unlearning with Remain Geometry Enhancement
- 基于梯度分解与余下数据几何结构优化更新路径。
- 50步完成ImageNet类遗忘,效率远超此前数千步方法。
- 适用于图像分类与生成任务,无需特定模型限制。
机器遗忘(MU)旨在提升深度神经网络的隐私与可信度。近似MU是大规模模型的实用方案。本文从最陡下降方向出发,通过最小化输出Kullback-Leibler散度,在参数邻域内逼近精确遗忘。该方向可分解为加权遗忘梯度上升、保留微调梯度下降及权重显著性矩阵,此分解基于欧几里得度量,涵盖多数现有梯度基MU方法。然而,仅依赖欧氏空间可能导致次优迭代轨迹,因忽略了输出概率空间的几何结构。为此,我们提出将遗忘更新嵌入由剩余数据几何结构构建的流形中,引入剩余数据的二阶海森矩阵以抑制有效遗忘对保留性能的干扰。但大规模模型计算二阶海森矩阵不可行。为高效利用海森调制优势,我们设计快-慢参数更新策略,隐式逼近最新显著遗忘方向。该方法不受特定模态约束,可适配计算机视觉中的各类遗忘任务,包括分类与生成。大量实验验证其有效性与效率:在ImageNet上使用DiT实现类遗忘仅需50步,而在CIFAR-10上用DDPM遗忘一类也仅需50步,远少于此前数千步的要求。
原文摘要 · Abstract (English)
Machine unlearning (MU) has emerged to enhance the privacy and trustworthiness of deep neural networks. Approximate MU is a practical method for large-scale models. Our investigation into approximate MU starts with identifying the steepest descent direction, minimizing the output Kullback-Leibler divergence to exact MU inside a parameters' neighborhood. This probed direction decomposes into three components: weighted forgetting gradient ascent, fine-tuning retaining gradient descent, and a weight saliency matrix. Such decomposition derived from Euclidean metric encompasses most existing gradient-based MU methods. Nevertheless, adhering to Euclidean space may result in sub-optimal iterative trajectories due to the overlooked geometric structure of the output probability space. We suggest embedding the unlearning update into a manifold rendered by the remaining geometry, incorporating second-order Hessian from the remaining data. It helps prevent effective unlearning from interfering with the retained performance. However, computing the second-order Hessian for large-scale models is intractable. To efficiently leverage the benefits of Hessian modulation, we propose a fast-slow parameter update strategy to implicitly approximate the up-to-date salient unlearning direction. Free from specific modal constraints, our approach is adaptable across computer vision unlearning tasks, including classification and generation. Extensive experiments validate our efficacy and efficiency. Notably, our method successfully performs class-forgetting on ImageNet using DiT and forgets a class on CIFAR-10 using DDPM in just 50 steps, compared to thousands of steps required by previous methods.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。