arXiv:2510.21322cs.LGcs.CL2025-10被引 1

用去记忆技术清除大模型中的敏感信息,无需重新训练。

Leverage Unlearning to Sanitize LLMs

  • 通过重置最后一层神经元并微调,消除模型对敏感数据的记忆。
  • 仅需少量额外训练轮次,即可大幅减少敏感信息的泄露次数。
  • 适合已投入资源训练模型的医院等机构安全共享模型。

预训练大语言模型在各类任务中日益重要。为提升特定任务性能,常需在特定语料库(如医疗报告、商业数据)上进行微调,但这些数据可能包含个人或机密信息,被模型记忆并在后续使用中复现,带来隐私或保密风险。为在不依赖安全语料库额外微调的前提下,清除模型中的记忆并实现模型净化,我们提出SANI。SANI是一种去记忆方法,包含擦除与修复两阶段:1)重置模型最后几层中的部分神经元,破坏对细粒度信息的记忆;2)在避免再次记忆敏感信息的前提下微调模型。我们在两种场景下全面评估:一是对已用医疗数据微调的模型,移除直接和间接标识符;二是对标准预训练模型,移除定义为机密的信息项。结果表明,仅需少量额外训练轮次,模型即被有效净化,敏感信息复现数量显著降低。该方法对已投入大量资源训练模型的医疗机构等组织具有重要实用价值。

原文摘要 · Abstract (English)

Pre-trained large language models (LLMs) are becoming useful for various tasks. To improve their performance on certain tasks, it is necessary to fine-tune them on specific data corpora (e.g., medical reports, business data). These specialized data corpora may contain sensitive data (e.g., personal or confidential data) that will be memorized by the model and likely to be regurgitated during its subsequent use. This memorization of sensitive information by the model poses a significant privacy or confidentiality issue. To remove this memorization and sanitize the model without requiring costly additional fine-tuning on a secured data corpus, we propose SANI. SANI is an unlearning approach to sanitize language models. It relies on both an erasure and repair phases that 1) reset certain neurons in the last layers of the model to disrupt the memorization of fine-grained information, and then 2) fine-tune the model while avoiding memorizing sensitive information. We comprehensively evaluate SANI to sanitize both a model fine-tuned and specialized with medical data by removing directly and indirectly identifiers from the memorization of the model, and a standard pre-trained model by removing specific terms defined as confidential information from the model. Results show that with only few additional epochs of unlearning, the model is sanitized and the number of regurgitations is drastically reduced. This approach can be particularly useful for hospitals or other industries that have already spent significant resources training models on large datasets and wish to sanitize them before sharing.

大模型隐私保护去记忆医疗AI

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。