arXiv:2411.08443cs.LGcs.CV2024-11被引 3

用低秩适配技术高效删去预训练模型中的特定数据,保持其余性能。

Machine Unlearning on Pre-trained Models by Residual Feature Alignment Using LoRA

  • 通过LoRA分解中间特征,仅调整残差部分实现删减。
  • 在多个数据集上验证,删去数据后保留数据性能下降小于1%。
  • 适合需要隐私保护的模型更新场景,计算成本低。

机器遗忘是一种新兴技术,可在不显著影响模型在剩余数据上性能的前提下,从训练好的模型中移除部分训练数据。该技术对保护用户隐私及清除有害或过时数据日益重要。核心挑战在于如何高效且有效消除特定信息而不损害模型在保留数据上的可用性。对于预训练模型,微调是实现遗忘目标的重要手段。以往方法通常微调整个模型参数,带来巨大计算开销;同时,微调过程可能导致中间层特征偏移,影响模型整体性能。本文提出一种新颖高效的预训练模型机器遗忘方法,称为残差特征对齐遗忘(Residual Feature Alignment Unlearning)。具体地,利用LoRA将模型中间特征分解为预训练特征与残差特征。通过调整残差特征,使遗忘后的模型在中间特征层面与预训练模型对齐,从而同时满足遗忘和保留目标。方法旨在对保留数据学习零残差,对遗忘数据学习偏移残差。大量实验在多个数据集上验证了该方法的有效性。

原文摘要 · Abstract (English)

Machine unlearning is an emerging technology that removes a subset of the training data from a trained model without significantly affecting the model performance on the remaining data. This topic is becoming increasingly important in protecting user privacy and eliminating harmful or outdated data. The key challenge lies in effectively and efficiently unlearning specific information without compromising the model's utility on the retained data. For pre-trained models, fine-tuning is an important way to achieve the unlearning target. Previous work typically fine-tuned the entire model's parameters, which incurred significant computational costs. In addition, the fine-tuning process may cause shifts in the intermediate layer features, affecting the model's overall utility. In this work, we propose a novel and efficient machine unlearning method for pre-trained models. We term the method Residual Feature Alignment Unlearning. Specifically, we leverage LoRA (Low-Rank Adaptation) to decompose the model's intermediate features into pre-trained features and residual features. By adjusting the residual features, we align the unlearned model with the pre-trained model at the intermediate feature level to achieve both unlearning and remaining targets. The method aims to learn zero residuals on the retained set and shifted residuals on the unlearning set. Extensive experiments on numerous datasets validate the effectiveness of our approach.

机器遗忘LoRA预训练模型隐私保护

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。