arXiv:2502.05684cs.LGcs.AI2025-02被引 4

用信息论正则化实现数据点和特征的可审计删减,兼顾性能与理论保障

Machine Unlearning via Information Theoretic Regularization

  • 基于信息论设计统一框架,实现可验证的数据点与特征删除
  • 提供高概率可审计的删减保证,理论证明必要性与充分性
  • 适用于深度学习多种场景,适合关注隐私与模型可控性的研究者

如何在最小化性能损失的前提下,有效移除学习结果中不期望的信息(如特定特征或单个数据点的影响),并提供严格保障?本文提出基于信息论正则化的统一数学框架,解决数据点和特征层面的机器遗忘问题。针对数据点遗忘,提出「边际遗忘原理」,构建可审计、可证明的框架,并给出基于该原理的信息论遗忘定义及边际遗忘的充分性与必要性证明。该框架自然解决边际遗忘问题,实现高概率可审计的遗忘保障。对于特征遗忘,框架适用于具有灵活训练目标的深度学习,结合学习目标灵活性与正则化设计简洁性,具备广泛适应性与实用性。从数学角度看,为多种信息论训练目标下的最优特征遗忘问题提供统一解析解。理论分析揭示了机器遗忘、信息论、最优传输与极值σ代数之间的深刻联系。数值模拟验证了理论结论。

原文摘要 · Abstract (English)

How can we effectively remove or ``unlearn'' undesirable information, such as specific features or the influence of individual data points, from a learning outcome while minimizing utility loss and ensuring rigorous guarantees? We introduce a unified mathematical framework based on information-theoretic regularization to address both data-point unlearning and feature unlearning. For data-point unlearning, we introduce the \emph{Marginal Unlearning Principle}, an auditable and provable framework. Moreover, we provide an information-theoretic unlearning definition based on the proposed principle and provable guarantees on sufficiency and necessity of marginal unlearning. We then show that the proposed framework provides a natural solution to the marginal unlearning problem and yields auditable high-probability marginal-unlearning guarantees. For feature unlearning, the framework applies to deep learning with flexible training objectives. By combining flexibility in learning objectives with simplicity in regularization design, our approach is highly adaptable and practical for a wide range of machine learning and AI applications. From a mathematical perspective, we provide a unified analytic solution to the optimal feature unlearning problem with a variety of information-theoretic training objectives. Our theoretical analysis reveals intriguing connections between machine unlearning, information theory, optimal transport, and extremal sigma algebras. Numerical simulations support our theoretical findings.

机器遗忘信息论隐私保护深度学习

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。