揭示了模型学习中数据记忆的内在权衡,解释为何少量数据必导致大量记忆。
Trade-offs in Data Memorization via Strong Data Processing Inequalities
- 基于强数据处理不等式建立记忆下界分析新方法
- 少量样本时需记忆Ω(d)比特数据信息,随样本增多而递减
- 结果与简单算法匹配,适用于隐私敏感场景研究
近期研究发现,训练大型语言模型会记忆大量训练数据,可能引发隐私泄露问题。本文提出一种通用方法,通过强数据处理不等式与数据记忆的新关联,推导出过剩记忆的下界。我们证明,在若干自然的二分类问题中,样本数量与学习算法所需记忆的数据信息量之间存在权衡:当仅有O(1)个d维样本时,需记忆Ω(d)比特信息;随着样本数增长,该需求以特定问题速率下降。我们的下界在多数情况下被简单学习算法逼近(仅差对数因子)。此外,结果可扩展至更一般的聚类混合模型。本工作基于Brown等人(2021)的工作,克服了其下界的一些局限性。
原文摘要 · Abstract (English)
Recent research demonstrated that training large language models involves memorization of a significant fraction of training data. Such memorization can lead to privacy violations when training on sensitive user data and thus motivates the study of data memorization's role in learning. In this work, we develop a general approach for proving lower bounds on excess data memorization, that relies on a new connection between strong data processing inequalities and data memorization. We then demonstrate that several simple and natural binary classification problems exhibit a trade-off between the number of samples available to a learning algorithm, and the amount of information about the training data that a learning algorithm needs to memorize to be accurate. In particular, $Ω(d)$ bits of information about the training data need to be memorized when $O(1)$ $d$-dimensional examples are available, which then decays as the number of examples grows at a problem-specific rate. Further, our lower bounds are generally matched (up to logarithmic factors) by simple learning algorithms. We also extend our lower bounds to more general mixture-of-clusters models. Our definitions and results build on the work of Brown et al. (2021) and address several limitations of the lower bounds in their work.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。