通过分析注意力机制发现模型生成内容中的版权数据来源。
Inner-Probe: Discovering Copyright-related Data Generation in LLM Architecture
- 利用注意力输出结果,轻量级分析特定数据集对生成文本的影响。
- 在Books3上效率提升3倍,在Pile上准确率高出15.04%至58.7%。
- 适合关注版权风险与数据溯源的AI研发人员使用。
大型语言模型(LLMs)依赖高质量版权数据集进行训练,引发生成内容可能侵权的担忧。现有方法如提示工程或语义分类器存在两大局限:难以定位具体子数据集(如某位作者的作品)对输出的影响;将整个训练库视为版权内容,忽略非版权数据的存在。本文提出Inner-Probe,一种轻量级框架,通过分析生成过程中多头注意力(MHA)的输出,更有效地识别版权子数据集的贡献。该方法采用基于LSTM的监督网络,以MHA结果为输入进行训练,并结合无监督对比学习的全局投影器实现非版权文本检测。在Books3数据集上,子数据集贡献分析效率提升3倍;在Pile数据集上,准确率比基线高15.04%至58.7%;非版权数据过滤的AUC提升0.104。
原文摘要 · Abstract (English)
Large Language Models (LLMs) utilize extensive knowledge databases and show powerful text generation ability. However, their reliance on high-quality copyrighted datasets raises concerns about copyright infringements in generated texts. Current research often employs prompt engineering or semantic classifiers to identify copyrighted content, but these approaches have two significant limitations: (1) Challenging to identify which specific subdataset (e.g., works from particular authors) influences an LLM's output. (2) Treating the entire training database as copyrighted, hence overlooking the inclusion of non-copyrighted training data. We propose Inner-Probe, a lightweight framework designed to evaluate the influence of copyrighted sub-datasets on LLM-generated texts. Unlike traditional methods relying solely on text, we discover that the results of multi-head attention (MHA) during LLM output generation provide more effective information. Thus, Inner-Probe performs sub-dataset contribution analysis using a lightweight LSTM based network trained on MHA results in a supervised manner. Harnessing such a prior, Inner-Probe enables non-copyrighted text detection through a concatenated global projector trained with unsupervised contrastive learning. Inner-Probe demonstrates 3x improved efficiency compared to semantic model training in sub-dataset contribution analysis on Books3, achieves 15.04% - 58.7% higher accuracy over baselines on the Pile, and delivers a 0.104 increase in AUC for non-copyrighted data filtering.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。