用大模型知识蒸馏实现痴呆语音转录隐私保护,效果更好且更轻量。
DiDOTS: Knowledge Distillation from Large-Language-Models for Dementia Obfuscation in Transcribed Speech
- 通过提示工程引导大模型生成混淆文本,保护痴呆患者隐私。
- 相比现有方法,隐私保护能力提升1.3至2.2倍,保持语义可用性。
- 模型参数减少一阶,微调开销降三阶,适合实际部署。
痴呆是一种影响数千万人的神经认知障碍,预计到2050年病例将增至三倍。近年来,痴呆分类技术的进步使攻击者可通过语音转录推断患者敏感状态,威胁隐私。现有文本混淆方法未应用于痴呆领域,且依赖大量标注数据,而此类敏感医疗数据极难获取。本文提出利用大语言模型(LLMs)结合零样本、少样本和知识驱动提示设计,对语音转录中的痴呆信息进行混淆。评估显示,LLMs在混淆效果上优于现有方法。然而,其数十亿参数导致训练、存储与共享困难,且存在幻觉、拒绝响应等脆弱性。为此,本文提出新方法DiDOTS:基于教师-学生范式,采用参数高效微调进行知识蒸馏。DiDOTS参数量仅为教师模型的十分之一,微调参数仅需全量微调的千分之一。在两个数据集上,相较先前工作,DiDOTS在隐私性能上分别提升1.3倍和2.2倍,同时人类评估认为其在保留语义可用性方面优于当前最优重述模型。
原文摘要 · Abstract (English)
Dementia is a sensitive neurocognitive disorder affecting tens of millions of people worldwide and its cases are expected to triple by 2050. Alarmingly, recent advancements in dementia classification make it possible for adversaries to violate affected individuals' privacy and infer their sensitive condition from speech transcriptions. Existing obfuscation methods in text have never been applied for dementia and depend on the availability of large labeled datasets which are challenging to collect for sensitive medical attributes. In this work, we bridge this research gap and tackle the above issues by leveraging Large-Language-Models (LLMs) with diverse prompt designs (zero-shot, few-shot, and knowledge-based) to obfuscate dementia in speech transcripts. Our evaluation shows that LLMs are more effective dementia obfuscators compared to competing methods. However, they have billions of parameters which renders them hard to train, store and share, and they are also fragile suffering from hallucination, refusal and contradiction effects among others. To further mitigate these, we propose a novel method, DiDOTS. DiDOTS distills knowledge from LLMs using a teacher-student paradigm and parameter-efficient fine-tuning. DiDOTS has one order of magnitude fewer parameters compared to its teacher LLM and can be fine-tuned using three orders of magnitude less parameters compared to full fine-tuning. Our evaluation shows that compared to prior work DiDOTS retains the performance of LLMs achieving 1.3x and 2.2x improvement in privacy performance on two datasets, while humans rate it as better in preserving utility even when compared to state-of-the-art paraphrasing models.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。