用强化学习让大模型生成更隐私安全的文本重写。
RL-Finetuned LLMs for Privacy-Preserving Synthetic Rewriting
- 用强化学习优化大模型,同时保护显性和隐性隐私
- 在不降低语义质量的前提下显著提升作者匿名化效果
- 适合关注数据隐私与模型生成安全的研究者
现代机器学习系统依赖大规模高质量数据集,通常来自用户生成内容或领域专有语料库。这些数据常包含敏感个人信息,引发隐私、数据安全及合规性问题。传统去标识化虽可移除明显身份信息,但可能导致下游任务性能下降,且难以抵御基于写作风格、主题焦点或人口统计线索等隐含信号的推理攻击。为此,我们提出一种强化学习框架,通过复合奖励函数微调大语言模型(LLM),联合优化显性与隐性隐私、语义保真度和输出多样性。隐私奖励结合语义线索与基于潜在表示最小生成树(MST)的结构模式,捕捉群体级规律,在分布上下文中建模隐私敏感信号,引导模型生成既保留实用价值又降低隐私风险的合成重写文本。实验表明,该方法显著提升作者匿名化与隐私指标,且未损害语义质量,为大模型时代隐私保护的数据生成提供了可扩展、模型无关的解决方案。
原文摘要 · Abstract (English)
The performance of modern machine learning systems depends on access to large, high-quality datasets, often sourced from user-generated content or proprietary, domain-specific corpora. However, these rich datasets inherently contain sensitive personal information, raising significant concerns about privacy, data security, and compliance with regulatory frameworks. While conventional anonymization techniques can remove explicit identifiers, such removal may result in performance drop in downstream machine learning tasks. More importantly, simple anonymization may not be effective against inference attacks that exploit implicit signals such as writing style, topical focus, or demographic cues, highlighting the need for more robust privacy safeguards during model training. To address the challenging issue of balancing user privacy and data utility, we propose a reinforcement learning framework that fine-tunes a large language model (LLM) using a composite reward function that jointly optimizes for explicit and implicit privacy, semantic fidelity, and output diversity. To effectively capture population level regularities, the privacy reward combines semantic cues with structural patterns derived from a minimum spanning tree (MST) over latent representations. By modeling these privacy-sensitive signals in their distributional context, the proposed approach guides the model to generate synthetic rewrites that preserve utility while mitigating privacy risks. Empirical results show that the proposed method significantly enhances author obfuscation and privacy metrics without degrading semantic quality, providing a scalable and model-agnostic solution for privacy preserving data generation in the era of large language models.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。