过参数化提升深度模型遗忘能力,隐私与偏见消除更高效。
How Does Overparameterization Affect Machine Unlearning of Deep Neural Networks?
- 通过调整网络宽度研究遗忘机制,验证过参数化优势。
- 过参数化下隐私与偏见消除效果显著,泛化性能下降可控。
- 遗忘仅局部调整决策区域,保持整体功能稳定,适合高安全场景。
机器遗忘是指在不从头训练的情况下更新已训练模型以忘记特定训练数据的任务。本文研究了深度神经网络(DNN)的参数化水平(即网络宽度)对遗忘性能的影响。我们为近期文献中的多种遗忘方法定义了基于验证集的调优策略,发现这些方法的表现受三个因素影响:(i) DNN的参数化水平,(ii) 遗忘目标(数据隐私保护或偏差消除),(iii) 是否显式使用被遗忘样本。结果表明,在过参数化模型上,遗忘通常能显著提升隐私与偏差消除效果,同时仅带来可接受的性能下降;但偏差消除需依赖显式使用被遗忘样本的方法。此外,我们测量了遗忘对靠近被遗忘样本的输入空间中分类决策区域的影响,发现过参数化模型能精细地在小范围内调整模型行为,而几乎不影响其他区域。这说明过参数化模型的遗忘成功源于其在输入空间局部灵活调整功能的能力,同时保持大部分原有功能不变。
原文摘要 · Abstract (English)
Machine unlearning is the task of updating a trained model to forget specific training data without retraining from scratch. In this paper, we investigate how unlearning of deep neural networks (DNNs) is affected by the model parameterization level, which corresponds here to the DNN width. We define validation-based tuning for several unlearning methods from the recent literature, and show how these methods perform differently depending on (i) the DNN parameterization level, (ii) the unlearning goal (unlearned data privacy or bias removal), (iii) whether the unlearning method explicitly uses the unlearned examples. Our results show that unlearning usually excels on overparameterized models by significantly improving privacy/bias at a reasonable cost of utility (generalization) degradation; although for bias removal this requires the unlearning method to use the unlearned examples. Furthermore, we measure how much the unlearning changes the classification decision regions in the proximity of the unlearned examples, and avoids changing them elsewhere. By this we show that the unlearning success for overparameterized models stems from the ability to delicately change the model functionality in small regions in the input space while keeping much of the model functionality unchanged.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。