arXiv:2502.00678cs.LGcs.AI2025-02ICML被引 21

用核差异法量化大模型数据泄露,揭示评测结果是否被记忆污染

How Contaminated Is Your Benchmark? Quantifying Dataset Leakage in Large Language Models with Kernel Divergence

  • 通过对比微调前后样本嵌入的核相似矩阵差异,检测数据泄露
  • 在受控实验中与泄露程度近乎完美相关,优于现有方法
  • 适合关注评测可信度的研究者和模型开发者

数据泄露问题指评估数据集与预训练语料存在重叠,导致性能指标虚高,削弱模型评估的可靠性。为解决此问题,本文提出核差异得分(Kernel Divergence Score, KDS),通过计算模型在基准数据集上微调前后样本嵌入的核相似矩阵差异来评估数据泄露程度。其核心思路是:微调对未见过的样本影响更大,而对已见过的样本影响较小。在多种受控泄露场景下的大量实验表明,KDS与泄露水平呈现近似完美相关性,显著优于现有基线方法。此外,通过全面消融实验分析关键设计选择,验证了细粒度核信息的重要性,并确认该框架在不同数据集与设置下的可靠性。代码已开源。

原文摘要 · Abstract (English)

Dataset contamination, where evaluation datasets overlap with pre-training corpora, inflates performance metrics and undermines the reliability of model evaluations. Measuring dataset contamination thus becomes essential to ensure that performance evaluations genuinely reflect a model's ability to generalize to unseen data, rather than relying on memorized examples. To address this problem, we propose Kernel Divergence Score (KDS), a novel method that evaluates dataset contamination by computing the divergence between the kernel similarity matrix of sample embeddings, before and after fine-tuning on the benchmark dataset. Leveraging the insight that fine-tuning affects unseen samples more significantly than seen ones, KDS provides a reliable measure of contamination. Through extensive experiments on controlled contamination scenarios, KDS demonstrates a near-perfect correlation with contamination levels and outperforms existing baselines. Additionally, we perform comprehensive ablation studies to analyze the impact of key design choices, providing deeper insights into the components and effectiveness of KDS. These ablations highlight the importance of leveraging fine-grained kernel-based information and confirm the reliability of the proposed framework across diverse datasets and settings. Code is released in https://github.com/deeplearning-wisc/kernel-divergence-score.

大模型评测数据泄露核方法可靠性

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。