提出新方法消除删除数据对稀疏模型剪枝结构的影响。
The Right to be Forgotten in Pruning: Unveil Machine Unlearning on Sparse Models
- 通过'反剪枝'重构被删数据影响的模型拓扑
- 理论证明反剪枝误差有上界,可兼容现有遗忘算法
- 设计新评估指标,克服传统攻击检测的不可靠性
机器遗忘旨在高效消除模型中关于已删除数据的记忆,以实现被遗忘权。尽管现有遗忘算法取得成功,但稀疏模型中的遗忘问题尚未得到充分研究。本文实证发现,删除的数据会影响稀疏模型的剪枝结构。基于此观察与被遗忘权理念,我们提出新术语“反剪枝”,用于消除删除数据对模型剪枝的影响,并设计相应算法近似由保留数据驱动的剪枝结构。我们指出,任何现有遗忘算法均可集成该反剪枝流程,且反剪枝误差在理论上具有上界。该算法适用于结构化与非结构化稀疏模型。实验进一步发现,成员推断攻击(MIA)精度无法可靠评估模型是否遗忘,微小删除数据量变化即可导致任意的MIA结果。为此,我们提出了针对稀疏模型的新评估指标。最后,我们在多种剪枝方法和遗忘算法下进行了广泛实验,验证了反剪枝的有效性。代码已开源于 https://github.com/NKUShaw/SparseModels。
原文摘要 · Abstract (English)
Machine unlearning aims to efficiently eliminate the memory about deleted data from trained models and address the right to be forgotten. Despite the success of existing unlearning algorithms, unlearning in sparse models has not yet been well studied. In this paper, we empirically find that the deleted data has an impact on the pruned topology in a sparse model. Motivated by the observation and the right to be forgotten, we define a new terminology ``un-pruning" to eliminate the impact of deleted data on model pruning. Then we propose an un-pruning algorithm to approximate the pruned topology driven by retained data. We remark that any existing unlearning algorithm can be integrated with the proposed un-pruning workflow and the error of un-pruning is upper-bounded in theory. Also, our un-pruning algorithm can be applied to both structured sparse models and unstructured sparse models. In the experiment, we further find that Membership Inference Attack (MIA) accuracy is unreliable for assessing whether a model has forgotten deleted data, as a small change in the amount of deleted data can produce arbitrary MIA results. Accordingly, we devise new performance metrics for sparse models to evaluate the success of un-pruning. Lastly, we conduct extensive experiments to verify the efficacy of un-pruning with various pruning methods and unlearning algorithms. Our code is released at https://github.com/NKUShaw/SparseModels .
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。