通过分片训练与动态重分配,有效降低扩散模型的隐私记忆风险。
Redistribute Ensemble Training for Mitigating Memorization in Diffusion Models
- 用代理模型分片训练,避免直接暴露原始图像数据。
- 跳过低损失样本并动态重分配,减少过度遗忘优质数据。
- 在多个数据集上验证,可使记忆分数降低46.7%。
扩散模型虽能生成高质量图像,但存在数据记忆问题,带来隐私风险。现有方法多限于文本模态,适用性受限。本文从视觉模态出发,提出新方法:将训练数据分片,每片训练一个代理模型,再聚合形成最终模型。分析发现,易记图像的训练损失显著偏低,因此我们跳过当前小批量中损失异常低的样本以避免记忆。但如何平衡避免记忆与保持足够训练数据是关键挑战,为此提出IET-AGC+,通过在分片间重分配高记忆性样本,防止过度跳过。同时基于损失值动态增强样本,进一步抑制记忆。在四个数据集上的实验表明,该方法显著降低记忆容量且维持生成质量;对Stable Diffusion等预训练模型微调后,记忆评分下降46.7%,证明有效性。代码已公开。
原文摘要 · Abstract (English)
Diffusion models, known for their tremendous ability to generate high-quality samples, have recently raised concerns due to their data memorization behavior, which poses privacy risks. Recent methods for memory mitigation have primarily addressed the issue within the context of the text modality in cross-modal generation tasks, restricting their applicability to specific conditions. In this paper, we propose a novel method for diffusion models from the perspective of visual modality, which is more generic and fundamental for mitigating memorization. Directly exposing visual data to the model increases memorization risk, so we design a framework where models learn through proxy model parameters instead. Specially, the training dataset is divided into multiple shards, with each shard training a proxy model, then aggregated to form the final model. Additionally, practical analysis of training losses illustrates that the losses for easily memorable images tend to be obviously lower. Thus, we skip the samples with abnormally low loss values from the current mini-batch to avoid memorizing. However, balancing the need to skip memorization-prone samples while maintaining sufficient training data for high-quality image generation presents a key challenge. Thus, we propose IET-AGC+, which redistributes highly memorizable samples between shards, to mitigate these samples from over-skipping. Furthermore, we dynamically augment samples based on their loss values to further reduce memorization. Extensive experiments and analysis on four datasets show that our method successfully reduces memory capacity while maintaining performance. Moreover, we fine-tune the pre-trained diffusion models, e.g., Stable Diffusion, and decrease the memorization score by 46.7\%, demonstrating the effectiveness of our method. Code is available in: https://github.com/liuxiao-guan/IET_AGC.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。