arXiv:2410.02159cs.LGcs.AI2024-10ICLR被引 14

提出高效去记忆方法,精准删除模型私密数据而不损任务性能。

Mitigating Memorization In Language Models

  • 采用机器遗忘技术,定位并移除模型中的记忆内容。
  • 新方法BalancedSubnet在清除记忆上优于其他方法,且保持任务准确率。
  • 开发轻量级模型TinyMem,加速记忆缓解策略的测试与验证。

语言模型可能将训练数据编码于参数中,导致推理时直接复现原始数据,带来隐私风险。本文研究三类正则化、三类微调和十一种机器遗忘方法(其中五种为新提出),并引入轻量级小模型TinyMem,用于快速开发与评估记忆缓解策略。实验表明:正则化方法效果差且慢;微调方法虽有效但成本高;而基于遗忘的方法更高效精准,可提前在推理前定位并清除记忆信息。特别地,提出的平衡子网法(BalancedSubnet)在去除记忆的同时,更好维持目标任务性能。

原文摘要 · Abstract (English)

Language models (LMs) can "memorize" information, i.e., encode training data in their weights in such a way that inference-time queries can lead to verbatim regurgitation of that data. This ability to extract training data can be problematic, for example, when data are private or sensitive. In this work, we investigate methods to mitigate memorization: three regularizer-based, three finetuning-based, and eleven machine unlearning-based methods, with five of the latter being new methods that we introduce. We also introduce TinyMem, a suite of small, computationally-efficient LMs for the rapid development and evaluation of memorization-mitigation methods. We demonstrate that the mitigation methods that we develop using TinyMem can successfully be applied to production-grade LMs, and we determine via experiment that: regularizer-based mitigation methods are slow and ineffective at curbing memorization; fine-tuning-based methods are effective at curbing memorization, but overly expensive, especially for retaining higher accuracies; and unlearning-based methods are faster and more effective, allowing for the precise localization and removal of memorized information from LM weights prior to inference. We show, in particular, that our proposed unlearning method BalancedSubnet outperforms other mitigation methods at removing memorized information while preserving performance on target tasks.

语言模型记忆消除隐私保护机器遗忘

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。