arXiv:2502.13593cs.LGcs.CR2025-02IJCAI综述被引 8

提出首个非迁移学习综述与评测基准,解决模型滥用风险

Toward Robust Non-Transferable Learning: A Survey and Benchmark

  • 系统梳理非迁移学习任务框架与方法体系
  • 发现现有方法在对抗攻击下鲁棒性严重不足
  • 适合关注模型安全与可控性的研究者参考

过去几十年,研究者主要关注模型的泛化能力,却较少关注对其泛化的调控。然而,模型对非预期数据(如有害或未经授权的数据)的泛化能力可能被恶意攻击者利用,导致模型伦理问题。非迁移学习(NTL)旨在重塑深度学习模型的泛化能力,以应对此类挑战。尽管已有众多方法被提出,但缺乏对现有进展的全面回顾和对当前局限性的深入分析。本文首次系统性地总结了NTL领域,提出了首个综合综述,并引入NTLBench——首个统一框架下的NTL性能与鲁棒性评估基准。我们首先介绍NTL的任务设定、通用框架与评价标准,归纳现有方法;特别强调了常被忽视的鲁棒性问题,即各类攻击可破坏NTL建立的非迁移机制。通过NTLBench的实验验证了现有方法在鲁棒性上的显著缺陷。最后,讨论了NTL的实际应用前景、未来方向及面临挑战。

原文摘要 · Abstract (English)

Over the past decades, researchers have primarily focused on improving the generalization abilities of models, with limited attention given to regulating such generalization. However, the ability of models to generalize to unintended data (e.g., harmful or unauthorized data) can be exploited by malicious adversaries in unforeseen ways, potentially resulting in violations of model ethics. Non-transferable learning (NTL), a task aimed at reshaping the generalization abilities of deep learning models, was proposed to address these challenges. While numerous methods have been proposed in this field, a comprehensive review of existing progress and a thorough analysis of current limitations remain lacking. In this paper, we bridge this gap by presenting the first comprehensive survey on NTL and introducing NTLBench, the first benchmark to evaluate NTL performance and robustness within a unified framework. Specifically, we first introduce the task settings, general framework, and criteria of NTL, followed by a summary of NTL approaches. Furthermore, we emphasize the often-overlooked issue of robustness against various attacks that can destroy the non-transferable mechanism established by NTL. Experiments conducted via NTLBench verify the limitations of existing NTL methods in robustness. Finally, we discuss the practical applications of NTL, along with its future directions and associated challenges.

非迁移学习模型安全评测基准

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。