用关键词检测大模型训练数据泄露,准确率提升超17%。
Tag&Tab: Pretraining Data Detection in Large Language Models Using Keyword-Based Membership Inference Attack
- 通过关键词标记+平均对数似然计算,改进了数据成员推断方法。
- 在4个数据集上平均AUC提升5.3%至17.6%,优于现有技术。
- 适合关注模型隐私与数据安全的研究者或从业者使用。
大型语言模型(LLMs)已成为数字任务辅助的核心工具,其训练依赖海量数据,可能包含受版权保护或敏感信息。现有预训练数据检测方法多聚焦于句子或段落级别的成员推断攻击(MIA),通常基于目标模型预测词元的概率分析,但准确性较差,未充分考虑文本语义重要性和词语关键性。为此,我们提出Tag&Tab,一种新型的预训练数据检测方法。该方法利用自然语言处理技术对输入文本中的关键词进行标记(Tagging),再通过LLM获取这些关键词的概率,并计算其平均对数似然以判断文本是否属于训练数据(Tabbing)。在四个基准数据集(BookMIA、MIMIR、PatentMIA和The Pile)及多个不同规模的开源LLM上的实验表明,相比最先进方法,平均AUC得分提升5.3%至17.6%。Tag&Tab不仅为大模型数据泄露检测设立了新标准,也证明了关键词在LLM成员推断中的关键作用。
原文摘要 · Abstract (English)
Large language models (LLMs) have become essential tools for digital task assistance. Their training relies heavily on the collection of vast amounts of data, which may include copyright-protected or sensitive information. Recent studies on detecting pretraining data in LLMs have primarily focused on sentence- or paragraph-level membership inference attacks (MIAs), usually involving probability analysis of the target model's predicted tokens. However, these methods often exhibit poor accuracy, failing to account for the semantic importance of textual content and word significance. To address these shortcomings, we propose Tag&Tab, a novel approach for detecting data used in LLM pretraining. Our method leverages established natural language processing (NLP) techniques to tag keywords in the input text, a process we term Tagging. Then, the LLM is used to obtain probabilities for these keywords and calculate their average log-likelihood to determine input text membership, a process we refer to as Tabbing. Our experiments on four benchmark datasets (BookMIA, MIMIR, PatentMIA, and the Pile) and several open-source LLMs of varying sizes demonstrate an average increase in AUC scores ranging from 5.3% to 17.6% over state-of-the-art methods. Tag&Tab not only sets a new standard for data leakage detection in LLMs, but its outstanding performance is a testament to the importance of words in MIAs on LLMs.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。