用少量新数据微调,能更好识别大模型的训练数据来源。
Fine-tuning can Help Detect Pretraining Data from Large Language Models
- 通过微调后分数差异检测训练数据成员
- 在多个模型上显著提升检测AUC指标
- 适合关注模型安全与数据溯源的研究者
在大语言模型时代,检测预训练数据对公平评估和伦理风险防控至关重要。现有方法依赖困惑度(Perplexity)或最小k%等评分函数区分成员与非成员,但训练数据的多样性和复杂性导致区分困难,性能受限。本文首次探索模型发布后可获取的未见数据,发现微调后成员与非成员的困惑度变化趋势不同。为此提出新颖有效的方法Fine-tuned Score Deviation(FSD),通过测量在同领域少量未见数据微调后评分的偏离距离来提升检测能力。实验证明,少量未见数据可大幅降低所有非成员的得分,使成员与非成员间的偏离距离更大。在多个基准数据集上,FSD显著提升了各类模型的AUC表现。
原文摘要 · Abstract (English)
In the era of large language models (LLMs), detecting pretraining data has been increasingly important due to concerns about fair evaluation and ethical risks. Current methods differentiate members and non-members by designing scoring functions, like Perplexity and Min-k%. However, the diversity and complexity of training data magnifies the difficulty of distinguishing, leading to suboptimal performance in detecting pretraining data. In this paper, we first explore the benefits of unseen data, which can be easily collected after the release of the LLM. We find that the perplexities of LLMs shift differently for members and non-members, after fine-tuning with a small amount of previously unseen data. In light of this, we introduce a novel and effective method termed Fine-tuned Score Deviation(FSD), which improves the performance of current scoring functions for pretraining data detection. In particular, we propose to measure the deviation distance of current scores after fine-tuning on a small amount of unseen data within the same domain. In effect, using a few unseen data can largely decrease the scores of all non-members, leading to a larger deviation distance than members. Extensive experiments demonstrate the effectiveness of our method, significantly improving the AUC score on common benchmark datasets across various models.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。