arXiv:2509.22214cs.LG2025-09中稿 · ICLR被引 2

当参数量超过数据维度乘以样本数时,可重建训练数据。

A Law of Data Reconstruction for Random Features (and Beyond)

  • 从数据重构视角出发,揭示参数量需超dn才能实现记忆。
  • 在随机特征等模型中,参数量远超dn时可精准还原数据。
  • 适用于多种网络结构,为数据隐私提供理论依据。

大规模深度学习模型会记忆部分训练数据。传统理论认为,当模型参数量p大于样本数n时即可实现插值或标签拟合。本文从数据重构角度分析,发现当p > dn(d为数据维度)时,训练样本在特征空间所张成的子空间已足以在输入空间中识别出每个样本。我们提出一种基于优化的重构方法,可在随机特征、两层全连接及深层残差网络中有效恢复训练集。结果表明,当参数量突破dn阈值时,整个训练数据可被重建,揭示了数据重构的一般规律。

原文摘要 · Abstract (English)

Large-scale deep learning models are known to memorize parts of the training set. In machine learning theory, memorization is often framed as interpolation or label fitting, and classical results show that this can be achieved when the number of parameters $p$ in the model is larger than the number of training samples $n$. In this work, we consider memorization from the perspective of data reconstruction, demonstrating that this can be achieved when $p$ is larger than $dn$, where $d$ is the dimensionality of the data. More specifically, we show that, in the random features model, when $p \gg dn$, the subspace spanned by the training samples in feature space gives sufficient information to identify the individual samples in input space. Our analysis suggests an optimization method to reconstruct the dataset from the model parameters, and we demonstrate that this method performs well on various architectures (random features, two-layer fully-connected and deep residual networks). Our results reveal a law of data reconstruction, according to which the entire training dataset can be recovered as $p$ exceeds the threshold $dn$.

数据重构随机特征模型记忆隐私分析

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。