提出随机梯度下降的删数据算法,理论保证删除效果。
Descend or Rewind? Stochastic Gradient Descent Unlearning
- 用扰动梯度系统分析删数据过程,统一处理凸与非凸函数。
- 证明了随机D2D和R2D在强凸下有更紧的误差界,非凸下R2D更优。
- 实验验证两方法优劣,为实际删数据提供可信赖基准。
机器删数据算法旨在移除特定训练数据的影响,而无需从头重新训练。本文研究两种全批量梯度下降算法:‘下降删除’(D2D)和‘回溯删除’(R2D),二者均易实现且满足可证明的删数据保证。尽管随机版D2D被广泛用作‘微调’删数据基线,但其在非凸函数上缺乏理论支持。本文通过分析受扰或有偏的梯度系统(可能收缩、半收缩或扩张),为随机D2D和R2D在强凸、凸及非凸损失函数下建立了$(\varepsilon, \delta)$认证删数据保证。核心是通过最优耦合删数据与重训练轨迹的随机行为,获得期望下的敏感性界。结果表明,在强凸情形下D2D能给出更紧的保证;而在凸与非凸情况下,R2D更合适。最后通过实证比较验证了各方法的优缺点。
原文摘要 · Abstract (English)
Machine unlearning algorithms aim to remove the impact of selected training data from a model without the computational expenses of retraining from scratch. Two such algorithms are ``Descent-to-Delete" (D2D) and ``Rewind-to-Delete" (R2D), full-batch gradient descent algorithms that are easy to implement and satisfy provable unlearning guarantees. In particular, the stochastic version of D2D is widely implemented as the ``finetuning" unlearning baseline, despite lacking theoretical backing on nonconvex functions. In this work, we prove $(\varepsilon, δ)$ certified unlearning guarantees for stochastic R2D and D2D for strongly convex, convex, and nonconvex loss functions, by analyzing unlearning through the lens of disturbed or biased gradient systems, which may be contracting, semi-contracting, or expansive respectively. Our argument relies on optimally coupling the random behavior of the unlearning and retraining trajectories, resulting in a sensitivity bound that holds in expectation that yields $(\varepsilon, δ)$ unlearning. We determine that D2D can yield tighter guarantees for strongly convex functions, but R2D is more appropriate for convex and nonconvex functions. Finally, we compare the algorithms empirically, demonstrating the strengths and weaknesses of each approach.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。