arXiv:2504.16046cs.CL2025-04EMNLP被引 2

提出可认证的推理时版权防护方法,防止大模型生成抄袭内容。

Certified Mitigation of Worst-Case LLM Copyright Infringement

  • 通过检测并重写潜在侵权文本,实现推理时实时防护
  • 对长段原文复制有效,可降低版权侵权风险至零
  • 轻量高效,适合真实场景大规模应用

大语言模型在预训练阶段接触受版权保护的内容,可能导致部署后无意侵犯版权。现有“版权删除”方法虽能缓解平均风险,但忽视了长篇完全复制等最坏情况。本文提出BloomScrub,一种简单高效的推理时版权防护方法:反复结合布隆过滤器进行快速文本比对与重写,将可能侵权段落转换为合法内容。当无法移除超过阈值长度的引用时,系统可选择不响应,实现可认证的风险控制。实验表明,该方法显著降低侵权风险,同时保持模型可用性,并支持不同强度的合规策略。结果表明,轻量级推理时方法在版权防护中具有惊人效果。

原文摘要 · Abstract (English)

The exposure of large language models (LLMs) to copyrighted material during pre-training raises concerns about unintentional copyright infringement post deployment. This has driven the development of "copyright takedown" methods, post-training approaches aimed at preventing models from generating content substantially similar to copyrighted ones. While current mitigation approaches are somewhat effective for average-case risks, we demonstrate that they overlook worst-case copyright risks exhibits by the existence of long, verbatim quotes from copyrighted sources. We propose BloomScrub, a remarkably simple yet highly effective inference-time approach that provides certified copyright takedown. Our method repeatedly interleaves quote detection with rewriting techniques to transform potentially infringing segments. By leveraging efficient data sketches (Bloom filters), our approach enables scalable copyright screening even for large-scale real-world corpora. When quotes beyond a length threshold cannot be removed, the system can abstain from responding, offering certified risk reduction. Experimental results show that BloomScrub reduces infringement risk, preserves utility, and accommodates different levels of enforcement stringency with adaptive abstention. Our results suggest that lightweight, inference-time methods can be surprisingly effective for copyright prevention.

版权防护大模型安全推理时防御

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。