arXiv:2510.19811cs.CLcs.LG2025-10被引 19

Hubble开源模型套件,用于研究大模型记忆风险与缓解策略。

Hubble: a Model Suite to Advance the Study of LLM Memorization

  • 通过控制插入敏感文本,构建标准与扰动版模型对比记忆行为。
  • 发现敏感数据在小语料中更易被记住,且早期出现更利于遗忘。
  • 适合安全研究者、模型开发者测试隐私保护机制。

我们提出Hubble,一套全开源的大语言模型套件,用于科学研究大模型的记忆现象。Hubble包含标准和扰动两种版本:标准模型在大规模英文语料上预训练,扰动模型则以相同方式训练,但插入受控的文本(如书摘、传记、测试集),模拟关键记忆风险。核心发布包含8个模型——100亿或5000亿词元上训练的10亿或80亿参数的标准与扰动模型,表明记忆风险取决于敏感数据在训练语料中的频率:同一密码在较小语料中比在较大语料中更容易被记住。此外还发布了6个在不同预训练阶段插入文本的扰动模型,显示无持续暴露的敏感数据会逐渐被遗忘。研究建议两条最佳实践:扩大训练语料稀释敏感数据,将敏感数据置于训练前期。除上述发现外,Hubble支持多种记忆研究,例如分析传记揭示不同类型隐私信息的记忆难易程度。我们还证明随机插入使Hubble成为会员推断和机器遗忘的理想测试平台,欢迎社区进一步探索、基准测试与扩展。

原文摘要 · Abstract (English)

We present Hubble, a suite of fully open-source large language models (LLMs) for the scientific study of LLM memorization. Hubble models come in standard and perturbed variants: standard models are pretrained on a large English corpus, and perturbed models are trained in the same way but with controlled insertion of text (e.g., book passages, biographies, and test sets) designed to emulate key memorization risks. Our core release includes 8 models -- standard and perturbed models with 1B or 8B parameters, pretrained on 100B or 500B tokens -- establishing that memorization risks are determined by the frequency of sensitive data relative to size of the training corpus (i.e., a password appearing once in a smaller corpus is memorized better than the same password in a larger corpus). Our release also includes 6 perturbed models with text inserted at different pretraining phases, showing that sensitive data without continued exposure can be forgotten. These findings suggest two best practices for addressing memorization risks: to dilute sensitive data by increasing the size of the training corpus, and to order sensitive data to appear earlier in training. Beyond these general empirical findings, Hubble enables a broad range of memorization research; for example, analyzing the biographies reveals how readily different types of private information are memorized. We also demonstrate that the randomized insertions in Hubble make it an ideal testbed for membership inference and machine unlearning, and invite the community to further explore, benchmark, and build upon our work.

大模型记忆风险隐私安全开源模型

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。