提出首个可验证的零知识机器遗忘框架,支持多粒度且抗伪造攻击。
zkUnlearner: A Zero-Knowledge Framework for Verifiable Unlearning with Multi-Granularity and Forgery-Resistance
- 用比特掩码技术实现梯度下降算法的可选性零知识证明
- 支持样本、特征、类别级遗忘,且在基准测试中验证了实用性
- 首次防御梯度伪造攻击,适合隐私敏感场景
随着“被遗忘权”需求增长,可验证机器遗忘对保障透明度与问责制愈发重要。我们提出 zkUnlearner,首个支持多粒度和抗伪造的零知识机器遗忘框架。首先,设计通用计算模型,采用比特掩码技术实现梯度下降算法中现有零知识证明的选择性,不仅支持传统样本级遗忘,还可实现更高级的特征级与类别级遗忘。该模型可转换为算术电路,兼容多种零知识证明系统。其次,针对随机梯度下降中梯度伪造威胁,提出首套有效防御策略,可抵御主流伪造攻击。最后,基于zkSNARK实现框架并进行全面性能评估,验证其实际可行性。
原文摘要 · Abstract (English)
As the demand for exercising the "right to be forgotten" grows, the need for verifiable machine unlearning has become increasingly evident to ensure both transparency and accountability. We present {\em zkUnlearner}, the first zero-knowledge framework for verifiable machine unlearning, specifically designed to support {\em multi-granularity} and {\em forgery-resistance}. First, we propose a general computational model that employs a {\em bit-masking} technique to enable the {\em selectivity} of existing zero-knowledge proofs of training for gradient descent algorithms. This innovation enables not only traditional {\em sample-level} unlearning but also more advanced {\em feature-level} and {\em class-level} unlearning. Our model can be translated to arithmetic circuits, ensuring compatibility with a broad range of zero-knowledge proof systems. Furthermore, our approach overcomes key limitations of existing methods in both efficiency and privacy. Second, forging attacks present a serious threat to the reliability of unlearning. Specifically, in Stochastic Gradient Descent optimization, gradients from unlearned data, or from minibatches containing it, can be forged using alternative data samples or minibatches that exclude it. We propose the first effective strategies to resist state-of-the-art forging attacks. Finally, we benchmark a zkSNARK-based instantiation of our framework and perform comprehensive performance evaluations to validate its practicality.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。