提出轻量级视觉语言模型去记忆方法,防止敏感信息泄露。
Cross-Modal Attention Guided Unlearning in Vision-Language Models
- 利用跨模态注意力识别关键视觉标记,针对性修改以去记忆
- 无需重训练或修改原模型,效果媲美微调方法
- 适合需保护隐私的多模态问答系统部署
视觉语言模型(VLMs)在视觉问答(VQA)等多模态任务中展现出强大能力,但其预训练数据可能包含私密或敏感信息,导致推理时泄露。尽管机器去记忆已在大语言模型中应用,但在视觉语言模型中更为复杂,因查询中的视觉与文本内容均可能含敏感信息。本文探索针对VQA任务的去记忆方法,通过分析跨模态注意力机制,定位对输出生成贡献较低的视觉标记,并设计轻量级的交叉模态注意力引导去记忆(CAGUL)框架。该方法不修改预训练模型参数,仅通过外部模块对低重要性视觉标记进行编码,实现敏感信息抑制。实验表明,CAGUL在保持参考模型行为的同时有效防止信息泄露,性能优于或等同于基于微调的基线方法,且无需重新训练,是适用于VLMs的实际高效去记忆方案。
原文摘要 · Abstract (English)
Vision-Language Models (VLMs) have demonstrated immense capabilities in multi-modal understanding and inference tasks such as Visual Question Answering (VQA), which requires models to infer outputs based on visual and textual context simultaneously. Such inference abilities of large-scale pretrained models are often attributed to the massive scale of pre-training data collected across several domains. However, the models may memorize private and/or sensitive information during training and regurgitate it in inference. Recently, machine unlearning has been leveraged to address the leakage of private data in LLMs. VLMs add a layer of complexity to this process, as the visual context in the query may also contain sensitive information in addition to the text. To address this issue, we explore unlearning for vision-language models, specifically for the VQA task. We explore the role of visual tokens for output generation in VLMs using cross-modal attention and utilize it to formulate Cross-Modal Attention Guided Unlearning (CAGUL), a lightweight and efficient VLM unlearning framework. In contrast to computationally expensive model finetuning methods, CAGUL utilizes external modules to encode unlearning information in visual tokens of low importance for relevant queries. We find that the transformed visual tokens not only prevent leakage but also retain reference model behavior. Experimental results show that our method performs better or on par with finetuning-based baselines without altering the pre-trained model parameters or incurring retraining costs, making it a practical and effective unlearning solution for VLMs.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。