给开源大模型加水印,防版权滥用和违规使用。
Mark Your LLM: Detecting the Misuse of Open-Source Large Language Models via Watermarking
- 在推理时注入水印,识别模型被滥用的两种场景。
- 后门水印对版权侵犯检测有效,但易受微调影响。
- 适合关注模型安全与版权保护的研究者使用。
随着Llama3等开源大语言模型能力提升,亟需水印技术以检测其潜在滥用。现有方法要么在推理时添加水印(不适用于开源模型),要么主要针对分类类LLM,难以适配近期生成式大模型。本文定义了两类开源LLM滥用场景:知识产权(IP)侵犯与模型使用违规。探索了推理时水印蒸馏与后门水印在这些场景下的应用。提出综合评估方法,分析不同现实微调场景对水印的影响及水印对模型性能的干扰。实验表明,后门水印可有效检测IP侵犯;推理时水印蒸馏适用于两类场景,但对微调更敏感,且对模型性能影响更大。未来应探索更先进的水印方法以应对开源大模型滥用问题。
原文摘要 · Abstract (English)
As open-source large language models (LLMs) like Llama3 become more capable, it is crucial to develop watermarking techniques to detect their potential misuse. Existing watermarking methods either add watermarks during LLM inference, which is unsuitable for open-source LLMs, or primarily target classification LLMs rather than recent generative LLMs. Adapting these watermarks to open-source LLMs for misuse detection remains an open challenge. This work defines two misuse scenarios for open-source LLMs: intellectual property (IP) violation and LLM Usage Violation. Then, we explore the application of inference-time watermark distillation and backdoor watermarking in these contexts. We propose comprehensive evaluation methods to assess the impact of various real-world further fine-tuning scenarios on watermarks and the effect of these watermarks on LLM performance. Our experiments reveal that backdoor watermarking could effectively detect IP Violation, while inference-time watermark distillation is applicable in both scenarios but less robust to further fine-tuning and has a more significant impact on LLM performance compared to backdoor watermarking. Exploring more advanced watermarking methods for open-source LLMs to detect their misuse should be an important future direction.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。