用稀疏模型对比检测大模型微调后的意外副作用
Reviving Your MNEME: Predicting The Side Effects of LLM Unlearning and Fine-Tuning via Sparse Model Diffing
- 通过稀疏模型差分技术比对基础与微调模型行为变化
- 在三种场景下预测副作用准确率达95%
- 适合关注模型行为稳定性的研究者与工程师
大型语言模型常通过微调或去学习来适应新任务或消除不良行为。现有评估方法仅关注干预后的性能,缺乏通用手段检测意外副作用,如去学习生物知识导致化学任务表现下降,尤其当这些影响不可预测或涌现时。为此,我们提出MNEME(Model diffing for Evaluating Mechanistic Effects),一种基于稀疏模型差分的轻量级框架,通过在任务无关数据集(如The Pile、LMSYS-Chat-1M)上比较基础模型与微调后模型,无需访问微调数据即可识别行为变化。在五个LLM上的三种场景——WMDP知识去学习、涌现性错位和良性微调中,MNEME预测副作用准确率最高达95%,与已知基准一致,且无需定制启发式规则。此外,我们发现对高激活样本重新训练可部分逆转这些影响。结果表明,稀疏探测与差分提供了一种可扩展、自动化的视角,用于理解与管理微调带来的模型变化。
原文摘要 · Abstract (English)
Large language models (LLMs) are frequently fine-tuned or unlearned to adapt to new tasks or eliminate undesirable behaviors. While existing evaluation methods assess performance after such interventions, there remains no general approach for detecting unintended side effects, such as unlearning biology content degrading performance on chemistry tasks, particularly when these effects are unpredictable or emergent. To address this issue, we introduce MNEME, Model diffiNg for Evaluating Mechanistic Effects, a lightweight framework for identifying these side effects using sparse model diffing. MNEME compares base and fine-tuned models on task-agnostic data (for example, The Pile, LMSYS-Chat-1M) without access to fine-tuning data to isolate behavioral shifts. Applied to five LLMs across three scenarios: WMDP knowledge unlearning, emergent misalignment, and benign fine-tuning, MNEME achieves up to 95 percent accuracy in predicting side effects, aligning with known benchmarks and requiring no custom heuristics. Furthermore, we show that retraining on high-activation samples can partially reverse these effects. Our results demonstrate that sparse probing and diffing offer a scalable and automated lens into fine-tuning-induced model changes, providing practical tools for understanding and managing LLM behavior.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。