arXiv:2508.01620cs.LGcs.CR2025-08被引 2

IMU通过影响力指导遗忘,仅用删除数据就能高效清除模型记忆。

IMU: Influence-guided Machine Unlearning

  • 基于影响函数动态分配遗忘强度,避免对所有删除样本一视同仁。
  • 相比均匀遗忘方法,模型性能提升30%,实现遗忘与实用性的平衡。
  • 无需保留数据,适合隐私敏感场景,适用于视觉与语言任务。

机器遗忘旨在有选择地消除特定数据点对预训练模型的影响。然而,现有方法通常依赖保留集以维持模型性能,这在隐私保护和存储限制下难以实现。尽管部分无保留数据的方法尝试通过特征几何偏移或辅助统计量规避该问题,但普遍对遗忘样本采用统一处理,忽视其贡献差异。为此,我们提出影响力引导的机器遗忘(IMU),一种仅使用遗忘集即可执行遗忘的理论性方法。不同于传统的均匀梯度上升或隐式权重机制,IMU显式利用影响函数作为优先级信号,分配遗忘强度。为避免全模型海塞矩阵求逆的高昂开销,我们引入一个理论合理的分类器级影响近似方法。该高效设计使IMU能够动态重加权遗忘更新,重点攻击最支持遗忘目标的数据,同时最小化对保留知识的扰动。在视觉与语言任务上的大量实验表明,IMU表现优异:相比标准均匀梯度上升,保持相同遗忘深度的同时,平均提升模型性能30%,有效克服了遗忘与性能之间的固有权衡。

原文摘要 · Abstract (English)

Machine Unlearning (MU) aims to selectively erase the influence of specific data points from pretrained models. However, most existing MU methods rely on the retain set to preserve model utility, which is often impractical due to privacy restrictions and storage constraints. While several retain-data-free methods attempt to bypass this using geometric feature shifts or auxiliary statistics, they typically treat forgetting samples uniformly, overlooking their heterogeneous contributions. To address this, we propose \ul{I}nfluence-guided \ul{M}achine \ul{U}nlearning (IMU), a principled method that conducts MU using only the forget set. Departing from uniform Gradient Ascent (GA) or implicit weighting mechanisms, IMU leverages influence functions as an explicit priority signal to allocate unlearning strength. To circumvent the prohibitive cost of full-model Hessian inversion, we introduce a theoretically grounded classifier-level influence approximation. This efficient design allows IMU to dynamically reweight unlearning updates, aggressively targeting samples that most strongly support the forgetting objective while minimizing unnecessary perturbation to retained knowledge. Extensive experiments across vision and language tasks show that IMU achieves highly competitive results. Compared to standard uniform GA, IMU maintains identical unlearning depth while enhancing model utility by an average of 30%, effectively overcoming the inherent utility-forgetting trade-off.

机器遗忘影响函数隐私保护模型更新

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。