arXiv:2503.22539cs.LG2025-03中稿 · The Thirty-Ninth A…被引 4

提出PURGE框架,让知识蒸馏模型高效删除特定数据而无需重训

Efficient Verified Machine Unlearning For Distillation

  • 通过划分教师影响范围,实现可验证的局部重训练
  • 实测在多数据集上速度提升显著,学生模型准确率不变
  • 适合需要快速合规删除数据的工业级模型部署场景

日益增长的数据隐私需求(如GDPR、CCPA)要求机器学习模型能快速移除特定训练数据的影响。尽管像SISA这类验证方法通过数据切片和检查点技术,在单模型场景中实现高效可验证的机器遗忘,但在教师-学生知识蒸馏设置下仍面临挑战:教师侧的遗忘通常导致代价高昂的完整学生模型重训练,因知识在蒸馏过程中广泛传播。本文提出PURGE(带重训练保证的集成分区遗忘),将验证式遗忘与蒸馏结合。通过引入组成映射和增量多教师策略,对蒸馏过程进行分区,使每个教师成分的影响局限于学生数据的独立子集,并严格保持数据隔离。该框架显著降低重训练开销,当教师侧发生遗忘时仅需部分更新学生模型。我们提供了理论分析,量化了遗忘过程的显著加速,并在多个数据集上进行了实证验证,结果表明PURGE在保持学生模型准确率接近标准基线的同时,实现了高效的遗忘性能。

原文摘要 · Abstract (English)

Growing data privacy demands, driven by regulations like GDPR and CCPA, require machine unlearning methods capable of swiftly removing the influence of specific training points. Although verified approaches like SISA, using data slicing and checkpointing, achieve efficient unlearning for single models by reverting to intermediate states, these methods struggle in teacher-student knowledge distillation settings. Unlearning in the teacher typically forces costly, complete student retraining due to pervasive information propagation during distillation. Our primary contribution is PURGE (Partitioned Unlearning with Retraining Guarantee for Ensembles), a novel framework integrating verified unlearning with distillation. We introduce constituent mapping and an incremental multi-teacher strategy that partitions the distillation process, confines each teacher constituent's impact to distinct student data subsets, and crucially maintains data isolation. The PURGE framework substantially reduces retraining overhead, requiring only partial student updates when teacher-side unlearning occurs. We provide both theoretical analysis, quantifying significant speed-ups in the unlearning process, and empirical validation on multiple datasets, demonstrating that PURGE achieves these efficiency gains while maintaining student accuracy comparable to standard baselines.

机器遗忘知识蒸馏数据隐私高效计算

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。