arXiv:2510.00125cs.CLcs.AI2025-10被引 2

无需外部资源,直接优化关键词实现大模型高效遗忘。

Direct Token Optimization: A Self-contained Approach to Large Language Model Unlearning

  • 直接优化关键词以清除指定数据影响。
  • 在多个基准上遗忘效果提升16.8倍,性能保持稳定。
  • 适合隐私保护与内容净化场景使用。

机器遗忘是一种新兴技术,可在不重新训练模型的前提下,移除特定训练数据(遗忘集)对模型的影响,适用于隐私保护、内容审核和模型修正等场景。核心挑战在于确保模型彻底遗忘遗忘集知识,同时不损害整体性能。现有大语言模型的遗忘方法常依赖辅助语言模型、保留数据集甚至商用AI服务,但这些外部资源往往不切实际且可能引入新隐私风险。本文提出直接令牌优化(DTO),一种自包含的遗忘方法,直接在令牌层面优化目标,无需外部资源。针对需遗忘的序列,识别两类令牌:目标令牌(承载关键遗忘信息)和非目标令牌(维持模型性能)。前者用于优化遗忘目标,后者用于保持模型能力。实验表明,所提DTO在多个基准数据集上遗忘质量相比最新基线最高提升16.8倍,同时保持相当的模型实用性。

原文摘要 · Abstract (English)

Machine unlearning is an emerging technique that removes the influence of a subset of training data (forget set) from a model without full retraining, with applications including privacy protection, content moderation, and model correction. The key challenge lies in ensuring that the model completely forgets the knowledge of the forget set without compromising its overall utility. Existing unlearning methods for large language models (LLMs) often utilize auxiliary language models, retain datasets, or even commercial AI services for effective unlearning and maintaining the model utility. However, dependence on these external resources is often impractical and could potentially introduce additional privacy risks. In this work, we propose direct token optimization (DTO), a novel self-contained unlearning approach for LLMs that directly optimizes the token level objectives and eliminates the need for external resources. Given a sequence to unlearn, we identify two categories of tokens: target tokens, which capture critical knowledge for unlearning, and the remaining non-target tokens, which are crucial for maintaining the model utility. The former are used to optimize the unlearning objective, while the latter serve to preserve the model's performance. The experimental results show that the proposed DTO achieves up to 16.8$\times$ improvement in forget quality on several benchmark datasets than the latest baselines while maintaining a comparable level of model utility.

大模型遗忘自包含隐私

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。