arXiv:2504.06398cs.LG2025-04被引 1

选关键参数更新,让机器忘掉敏感信息更准更快。

Sharpness-Aware Parameter Selection for Machine Unlearning

  • 只更新模型中对目标特征影响最大的参数(基于海森矩阵对角线值)
  • 实验显示在低计算成本下显著提升遗忘效果,准确率下降超30%以上
  • 适合需要高效删除敏感数据的模型部署场景

当训练数据中误包含信用卡号等敏感信息时,需从已训练模型中移除这些信息,此过程称为机器遗忘。现有方法多针对单个样本的遗忘,而本文关注一组数据特征或标签的回滚。传统方法需更新全部参数或仅最后层,本文提出新策略:通过分析模型参数在学习后海森矩阵中的对角线值,识别出对目标特征贡献最大的参数子集,并仅更新它们。理论证明该策略与尖锐性感知优化和鲁棒遗忘相关。实验证明,该方法在保持低计算开销的同时,使遗忘效率提升显著,如在ImageNet上实现超过30%的精度下降,且优于主流基线方法。

原文摘要 · Abstract (English)

It often happens that some sensitive personal information, such as credit card numbers or passwords, are mistakenly incorporated in the training of machine learning models and need to be removed afterwards. The removal of such information from a trained model is a complex task that needs to partially reverse the training process. There have been various machine unlearning techniques proposed in the literature to address this problem. Most of the proposed methods revolve around removing individual data samples from a trained model. Another less explored direction is when features/labels of a group of data samples need to be reverted. While the existing methods for these tasks do the unlearning task by updating the whole set of model parameters or only the last layer of the model, we show that there are a subset of model parameters that have the largest contribution in the unlearning target features. More precisely, the model parameters with the largest corresponding diagonal value in the Hessian matrix (computed at the learned model parameter) have the most contribution in the unlearning task. By selecting these parameters and updating them during the unlearning stage, we can have the most progress in unlearning. We provide theoretical justifications for the proposed strategy by connecting it to sharpness-aware minimization and robust unlearning. We empirically show the effectiveness of the proposed strategy in improving the efficacy of unlearning with a low computational cost.

机器遗忘参数选择模型安全

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。