arXiv:2411.00409cs.LG2024-11NeurIPS被引 4

让大模型忘记特定类别,且无需访问模型内部信息。

Black-Box Forgetting

  • 通过优化输入提示实现黑箱模型的定向遗忘。
  • 在4个基准数据集上显著降低指定类别的识别准确率。
  • 适合需要隐私保护或模型可控性的实际应用。

大规模预训练模型(PTMs)具备覆盖广泛物体类别的零样本分类能力。然而,实际应用中并不总是需要识别所有类别,保留对无关类别的识别能力不仅会降低整体精度,还带来操作上的不便。为此,我们研究了针对PTMs的可选遗忘问题,目标是使模型无法识别特定类别,同时保持其余类别的准确性。现有方法均假设为白盒环境,即可以获取模型架构、参数和梯度等信息。但实际中,由于商业或社会责任原因,许多PTM以黑箱形式存在。本文首次提出黑箱场景下的选择性遗忘问题——黑箱遗忘,并提出相应解决方案。由于无法获取模型内部信息,我们采用无导数优化方法,通过调整输入提示来降低指定类别的识别性能。为避免高维优化的困难并保证遗忘效果,我们提出潜在上下文共享机制,在多个提示词间引入共享的低维潜在成分。在四个标准基准数据集上的实验表明,该方法优于合理基线。代码已开源:https://github.com/yusukekwn/Black-Box-Forgetting。

原文摘要 · Abstract (English)

Large-scale pre-trained models (PTMs) provide remarkable zero-shot classification capability covering a wide variety of object classes. However, practical applications do not always require the classification of all kinds of objects, and leaving the model capable of recognizing unnecessary classes not only degrades overall accuracy but also leads to operational disadvantages. To mitigate this issue, we explore the selective forgetting problem for PTMs, where the task is to make the model unable to recognize only the specified classes while maintaining accuracy for the rest. All the existing methods assume "white-box" settings, where model information such as architectures, parameters, and gradients is available for training. However, PTMs are often "black-box," where information on such models is unavailable for commercial reasons or social responsibilities. In this paper, we address a novel problem of selective forgetting for black-box models, named Black-Box Forgetting, and propose an approach to the problem. Given that information on the model is unavailable, we optimize the input prompt to decrease the accuracy of specified classes through derivative-free optimization. To avoid difficult high-dimensional optimization while ensuring high forgetting performance, we propose Latent Context Sharing, which introduces common low-dimensional latent components among multiple tokens for the prompt. Experiments on four standard benchmark datasets demonstrate the superiority of our method with reasonable baselines. The code is available at https://github.com/yusukekwn/Black-Box-Forgetting.

模型遗忘黑箱优化提示工程可解释性

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。