提出简单有效的新方法,解决大模型删忆中参考模型偏差问题。
Simplicity Prevails: Rethinking Negative Preference Optimization for LLM Unlearning
- 不依赖参考模型,用简单偏好优化实现删忆
- 在TOFU和MUSE数据集上保持模型性能且防重学攻击
- 适合需要安全删除敏感数据的模型部署场景
本文研究大语言模型(LLM)删忆问题,旨在移除不良数据影响(如版权内容或有害信息)的同时保留模型能力。现有基于梯度上升的方法因缺乏对优化偏移的控制,易导致过度遗忘甚至模型崩溃。负向偏好优化(NPO)虽为当前主流,但存在参考模型偏差:使用删忆前的模型评估效果,造成不同难度遗忘数据的优化力度不均,且早期梯度权重平滑失效。为此,本文提出简化的SimNPO框架,摒弃对参考模型的依赖,通过简单偏好优化提升删忆效果。基于马尔可夫链混合分析揭示其优势。实验在TOFU和MUSE等基准上验证了其有效性与抗重学攻击鲁棒性。
原文摘要 · Abstract (English)
This work studies the problem of large language model (LLM) unlearning, aiming to remove unwanted data influences (e.g., copyrighted or harmful content) while preserving model utility. Despite the increasing demand for unlearning, a technically-grounded optimization framework is lacking. Gradient ascent (GA)-type methods, though widely used, are suboptimal as they reverse the learning process without controlling optimization divergence (i.e., deviation from the pre-trained state), leading to risks of over-forgetting and potential model collapse. Negative preference optimization (NPO) has been proposed to address this issue and is considered one of the state-of-the-art LLM unlearning approaches. In this work, we revisit NPO and identify another critical issue: reference model bias. This bias arises from using the reference model (i.e., the model prior to unlearning) to evaluate the unlearning success, which can compromise NPO's effectiveness. Specifically, it leads to (a) uneven allocation of optimization power across forget data with varying difficulty levels and (b) ineffective gradient weight smoothing during the early stages of unlearning optimization. To overcome these challenges, we propose a simple yet effective unlearning optimization framework, called SimNPO, showing that `simplicity' in removing the reliance on a reference model (through the lens of simple preference optimization) benefits unlearning. We provide deeper insights into SimNPO's advantages through an analysis based on mixtures of Markov chains. Extensive experiments further validate SimNPO's efficacy on benchmarks like TOFU and MUSE, as well as its robustness against relearning attacks. Codes are available at https://github.com/OPTML-Group/Unlearn-Simple.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。