解决大模型遗忘敏感内容的难题,提升遗忘后模型质量与可靠性。
A Closer Look at Machine Unlearning for Large Language Models
- 用最大熵目标优化无目标遗忘,增强输出多样性。
- 引入答案保留损失,有效防止有目标遗忘时关键信息丢失。
- 提出三项新评估指标,更全面衡量遗忘后模型表现。
大语言模型可能记忆敏感或受版权保护的内容,引发隐私和法律问题。由于从头训练成本高昂,研究者尝试采用机器遗忘技术在不损害整体性能的前提下移除特定内容。本文探讨了大模型遗忘中的若干问题,并提出改进思路。为解决遗忘后模型输出评估不足的问题,我们引入三项新指标:词元多样性、句子语义一致性和事实正确性。我们将遗忘方法分为无目标和有目标两类,并分别分析其问题:无目标遗忘的拟合行为不可预测,易产生幻觉;现有正则化对有目标遗忘效果有限。为此,我们提出使用最大熵(ME)目标用于无目标遗忘,结合答案保留(AP)损失作为正则化项用于有目标遗忘。在虚构遗忘、持续遗忘和真实场景三种实验中,验证了所提方法的有效性。代码已开源。
原文摘要 · Abstract (English)
Large language models (LLMs) may memorize sensitive or copyrighted content, raising privacy and legal concerns. Due to the high cost of retraining from scratch, researchers attempt to employ machine unlearning to remove specific content from LLMs while preserving the overall performance. In this paper, we discuss several issues in machine unlearning for LLMs and provide our insights on possible approaches. To address the issue of inadequate evaluation of model outputs after unlearning, we introduce three additional metrics to evaluate token diversity, sentence semantics, and factual correctness. We then categorize unlearning methods into untargeted and targeted, and discuss their issues respectively. Specifically, the behavior that untargeted unlearning attempts to approximate is unpredictable and may involve hallucinations, and existing regularization is insufficient for targeted unlearning. To alleviate these issues, we propose using the objective of maximizing entropy (ME) for untargeted unlearning and incorporate answer preservation (AP) loss as regularization for targeted unlearning. Experimental results across three scenarios, i.e., fictitious unlearning, continual unlearning, and real-world unlearning, demonstrate the effectiveness of our approaches. The code is available at https://github.com/sail-sg/closer-look-LLM-unlearning.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。