arXiv:2507.09937cs.LGcs.AI2025-07ICML被引 9

提出可主动隔离记忆的模型设计,解决大模型记忆隐私问题。

Memorization Sinks: Isolating Memorization during LLM Training

  • 用唯一序列标识符激活特定记忆神经元,实现记忆内容分离。
  • 在百亿参数规模下验证记忆隔离效果,同时保持语言能力不下降。
  • 首次在真实数据上证明记忆隔离与通用能力可共存,适合隐私敏感场景。

大语言模型容易重复记忆文本序列,引发隐私和版权问题。现有事后移除记忆的方法效果有限。本文在受控环境下发现,自然语言序列的记忆会与通用语言能力机制性纠缠,难以事后剥离。为此提出新范式MemSinks,通过为每个序列设计独特标识符,激活专属记忆神经元,实现记忆内容的主动隔离。通过分析学习与遗忘动态,证明该方法能有效分离记忆信息,便于移除而不损害语言能力。我们在百亿参数、百亿词量规模上实现了该方法,验证了记忆隔离与强泛化性能并存。据我们所知,这是首个在真实数据上证明记忆隔离与通用能力可协同实现的案例。代码已开源。

原文摘要 · Abstract (English)

Large language models are susceptible to memorizing repeated sequences, posing privacy and copyright concerns. A popular mitigation strategy is to remove memorized information from specific neurons post-hoc. However, such approaches have shown limited success so far. In a controlled setting, we show that the memorization of natural sequences (those that resemble linguistically plausible text) become mechanistically entangled with general language abilities, thereby becoming challenging to remove post-hoc. In this work, we put forward a new paradigm of MemSinks that promotes isolation of memorization by design. We leverage a sequence identifier that activates a unique set of memorization neurons for each sequence across repetitions. By analyzing the dynamics of learning and forgetting, we argue that MemSinks facilitates isolation of memorized content, making it easier to remove without compromising general language capabilities. We implement MemSinks at the billion-parameter and billion-token scale, and observe both effective isolation and strong generalization. To our knowledge, this is the first proof-of-concept on real data demonstrating that simultaneous generalization and isolation is achievable. We open-source our code at http://github.com/grghosal/MemSinks.

大模型记忆隔离隐私保护

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。