精准删去敏感信息,同时保留有用内容的遗忘技术
Not All Tokens Are Meant to Be Forgotten
- 区分需删除词与通用词,只对敏感词做针对性遗忘
- 在TOFU和MUSE数据集上实现最优遗忘效果且模型性能下降小
- 适合需要隐私保护的LLM应用场景
大型语言模型在海量文本上预训练后,具备接近人类的语言理解、推理和决策能力。然而,它们容易记忆不希望保留的信息(如隐私或受版权保护的内容),引发重大隐私与法律风险。无记忆化方法虽有潜力,但存在过度遗忘问题——现有方法对需遗忘样本中的所有词都进行抑制,导致模型整体能力严重下降。为此,我们提出目标信息遗忘(TIF)框架,包含:(1) 一种灵活的目标信息识别器,可区分需删除词(UW)与通用词(GW);(2) 一种新型目标偏好优化方法,利用逻辑偏好损失消除与UW相关的不良信息,通过保留损失维持GW相关内容,有效提升遗忘效率并减轻性能退化。在TOFU和MUSE基准上的大量实验表明,TIF框架在增强遗忘效果的同时保持了模型实用性,并达到当前最优水平。
原文摘要 · Abstract (English)
Large Language Models (LLMs), pre-trained on massive text corpora, exhibit remarkable human-level language understanding, reasoning, and decision-making abilities. However, they tend to memorize unwanted information, such as private or copyrighted content, raising significant privacy and legal concerns. Unlearning has emerged as a promising solution, but existing methods face a significant challenge of over-forgetting. This issue arises because they indiscriminately suppress the generation of all the tokens in forget samples, leading to a substantial loss of model utility. To overcome this challenge, we introduce the Targeted Information Forgetting (TIF) framework, which consists of (1) a flexible targeted information identifier designed to differentiate between unwanted words (UW) and general words (GW) in the forget samples, and (2) a novel Targeted Preference Optimization approach that leverages Logit Preference Loss to unlearn unwanted information associated with UW and Preservation Loss to retain general information in GW, effectively improving the unlearning process while mitigating utility degradation. Extensive experiments on the TOFU and MUSE benchmarks demonstrate that the proposed TIF framework enhances unlearning effectiveness while preserving model utility and achieving state-of-the-art results.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。