arXiv:2502.15010cs.CLcs.AI2025-02被引 5

让大模型忘掉特定文本,还能保持理解力。

Obliviate: Efficient Unmemorization for Protecting Intellectual Property in Large Language Models

  • 通过最小调整输出分布,精准消除指定内容的复现。
  • 复现文字减少近百倍,下游任务准确率下降不超过1%。
  • 适合需要版权合规的部署型大模型使用。

近期人工智能公司与内容创作者间的版权协议凸显了对语言模型复现受版权保护文本能力进行细粒度控制的需求。现有方法——从激进的遗忘训练到简单的输出过滤——或牺牲模型效用,或无法有效防止原文复现。我们提出Obliviate,一种轻量级后训练方法,可手术式抑制特定序列的精确复现,同时保留语义理解能力。该方法首先识别记忆片段,随后针对每个目标词元,通过Kullback-Leibler散度惩罚最小化调整模型输出分布,降低原文复现概率;同时对非目标词元施加一致性损失,以维持流畅性与任务表现。我们在四个主流6-8B参数模型(LLaMA-3.1、LLaMA-3.1-Instruct、Qwen-2.5、Yi-1.5)上评估,使用合成记忆基准和真实版权文本(如《白鲸》《弗兰肯斯坦》《爱丽丝梦游仙境》《悲惨世界》)。在所有场景中,Obliviate将原文复现量降低两个数量级(例如从数百词降至不足12词),而对HellaSwag、MMLU、TruthfulQA、Winogrande等下游任务准确率影响最大仅1%。此外,我们在MUSE和CoTaEval基准上对比了Obliviate与其他遗忘与版权保护技术,结果表明其是部署型大模型实现版权合规的实用且高保真方案。

原文摘要 · Abstract (English)

Recent copyright agreements between AI companies and content creators underscore the need for fine-grained control over language models' ability to reproduce copyrighted text. Existing defenses-ranging from aggressive unlearning to simplistic output filters-either sacrifice model utility or inadequately address verbatim leakage. We introduce Obliviate, a lightweight post-training method that surgically suppresses exact reproduction of specified sequences while preserving semantic understanding. Obliviate first identifies memorized passages and then, for each target token, minimally adjusts the model's output distribution via a Kullback-Leibler divergence penalty to drive down the probability of exact reproduction. Simultaneously, we enforce a consistency loss on non-target tokens to retain the model's fluency and task performance. We evaluate Obliviate on four popular 6-8B-parameter models (LLaMA-3.1, LLaMA-3.1-Instruct, Qwen-2.5, and Yi-1.5) using synthetic memorization benchmarks and organic copyrighted excerpts (e.g., Moby Dick, Frankenstein, Alice in Wonderland and Les Miserables). Across all settings, Obliviate reduces verbatim recall by two orders of magnitude (e.g., from hundreds of words to fewer than 12) while degrading downstream accuracy by at most 1% on HellaSwag, MMLU, TruthfulQA, and Winogrande. Furthermore, we benchmark Obliviate aganist different unlearning and copyright techniques using the MUSE and CoTaEval benchmarks. These results position Obliviate as a practical, high-fidelity solution for copyright compliance in deployed LLMs.

模型遗忘版权保护大模型

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。