arXiv:2410.11143cs.CLcs.AI2024-10ICLR被引 76

仅用遗忘数据实现大模型删忆,不依赖保留数据或参考模型。

LLM Unlearning via Loss Adjustment with Only Forget Data

  • 基于遗忘数据直接调整损失函数,避免混淆遗忘与保留内容。
  • 在哈利波特版权内容和实体删忆任务上均显著提升删忆效果。
  • 无需额外数据即可保持模型原有能力,适合隐私保护场景。

大语言模型的删忆对保障AI伦理与合规至关重要,尤其在应对隐私泄露、偏见、安全及法规变化方面。现有方法常依赖保留数据或参考模型进行响应校准,但难以平衡删忆效果与模型整体性能,因不同查询常引发相似响应,导致遗忘与保留内容边界模糊。本文提出仅使用遗忘数据的删忆方法——忘却数据仅损失调整(FLAT),通过最大化遗忘数据上的f散度,指导模型如何不回答、以及如何正确回应。该方法利用f散度的变分形式,为模板响应学习与遗忘响应分配不同权重,实现精准损失调整。实验表明,该方法在哈利波特数据集上的版权内容删忆和TOFU数据集上的实体删忆任务中,均优于现有方法,且对模型保留能力影响极小,确保跨任务高可用性。

原文摘要 · Abstract (English)

Unlearning in Large Language Models (LLMs) is essential for ensuring ethical and responsible AI use, especially in addressing privacy leak, bias, safety, and evolving regulations. Existing approaches to LLM unlearning often rely on retain data or a reference LLM, yet they struggle to adequately balance unlearning performance with overall model utility. This challenge arises because leveraging explicit retain data or implicit knowledge of retain data from a reference LLM to fine-tune the model tends to blur the boundaries between the forgotten and retain data, as different queries often elicit similar responses. In this work, we propose eliminating the need to retain data or the reference LLM for response calibration in LLM unlearning. Recognizing that directly applying gradient ascent on the forget data often leads to optimization instability and poor performance, our method guides the LLM on what not to respond to, and importantly, how to respond, based on the forget data. Hence, we introduce Forget data only Loss AjustmenT (FLAT), a "flat" loss adjustment approach which addresses these issues by maximizing f-divergence between the available template answer and the forget answer only w.r.t. the forget data. The variational form of the defined f-divergence theoretically provides a way of loss adjustment by assigning different importance weights for the learning w.r.t. template responses and the forgetting of responses subject to unlearning. Empirical results demonstrate that our approach not only achieves superior unlearning performance compared to existing methods but also minimizes the impact on the model's retained capabilities, ensuring high utility across diverse tasks, including copyrighted content unlearning on Harry Potter dataset and MUSE Benchmark, and entity unlearning on the TOFU dataset.

大模型删忆隐私保护无参考模型

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。