arXiv:2504.05651cs.LGcs.CV2025-04NeurIPS被引 4

提出高效方法,无需重训即可测量大模型对训练数据的遗忘记忆。

Measuring Déjà vu Memorization Efficiently

  • 用单模型替代双模型,直接估算数据集相关性与记忆程度。
  • 首次实现对预训练开源视觉模型的记忆度量化,结果稳定一致。
  • 发现开源模型整体记忆率低于子集训练模型,适合安全评估者使用。

近期研究发现,表示学习模型可能意外记住训练数据。例如, déjà vu 方法表明,对于某些模型和图像,仅凭背景表示就能准确预测前景标签,效果优于数据集层面的相关性。但该方法需训练两个模型——一个估计数据集相关性,另一个估计记忆程度——这对大型开源模型而言难以实施。本文提出更简单的替代方法,可直接估算数据集相关性,并用于近似预训练模型的记忆能力,无需任何重新训练。这使得首次对预训练开源图像和视觉语言模型的记忆能力进行测量成为可能。结果表明,不同测量方式得出的总体记忆水平高度相似。我们还发现,开源模型的整体记忆率通常低于在子集数据上训练的同类模型。代码已开源,支持视觉与视觉语言模型。

原文摘要 · Abstract (English)

Recent research has shown that representation learning models may accidentally memorize their training data. For example, the déjà vu method shows that for certain representation learning models and training images, it is sometimes possible to correctly predict the foreground label given only the representation of the background - better than through dataset-level correlations. However, their measurement method requires training two models - one to estimate dataset-level correlations and the other to estimate memorization. This multiple model setup becomes infeasible for large open-source models. In this work, we propose alternative simple methods to estimate dataset-level correlations, and show that these can be used to approximate an off-the-shelf model's memorization ability without any retraining. This enables, for the first time, the measurement of memorization in pre-trained open-source image representation and vision-language representation models. Our results show that different ways of measuring memorization yield very similar aggregate results. We also find that open-source models typically have lower aggregate memorization than similar models trained on a subset of the data. The code is available both for vision and vision language models.

模型记忆表示学习安全评估开源模型

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。