arXiv:2602.03567cs.LGcs.AI2026-02被引 1

提出无需参与训练的高效数据擦除验证方法,通过定制扰动检测模型变化。

EVE: Efficient Verification of Data Erasure through Customized Perturbation in Approximate Unlearning

  • 设计对抗性扰动使目标样本预测在删减前后发生变化。
  • 在不参与训练的前提下实现95%以上验证准确率,速度提升10倍以上。
  • 适合关注隐私合规与模型可审计性的研究者和工程师。

验证机器删减过程是否正确执行至关重要,但目前仍缺乏有效方法。现有基于后门技术的方法通常需在模型初始训练阶段植入后门,效率低且不实用。本文提出一种无需参与训练的高效数据擦除验证方法(EVE),核心思想是通过定制扰动,使目标样本在删减前后的模型预测发生改变,从而作为验证信号。扰动设计满足两个关键目标:确保删减效果,并改变删减后模型对目标样本的预测。我们将扰动生成建模为对抗优化问题,通过将删减梯度与目标样本边界变化梯度对齐求解。大量实验表明,与基于后门的方法相比,EVE无需参与初始训练,且显著优于现有最先进方法,在验证准确率上提升超过95%,效率提升超10倍。代码已开源,为机器删减验证提供新工具。

原文摘要 · Abstract (English)

Verifying whether the machine unlearning process has been properly executed is critical but remains underexplored. Some existing approaches propose unlearning verification methods based on backdooring techniques. However, these methods typically require participation in the model's initial training phase to backdoor the model for later verification, which is inefficient and impractical. In this paper, we propose an efficient verification of erasure method (EVE) for verifying machine unlearning without requiring involvement in the model's initial training process. The core idea is to perturb the unlearning data to ensure the model prediction of the specified samples will change before and after unlearning with perturbed data. The unlearning users can leverage the observation of the changes as a verification signal. Specifically, the perturbations are designed with two key objectives: ensuring the unlearning effect and altering the unlearned model's prediction of target samples. We formalize the perturbation generation as an adversarial optimization problem, solving it by aligning the unlearning gradient with the gradient of boundary change for target samples. We conducted extensive experiments, and the results show that EVE can verify machine unlearning without involving the model's initial training process, unlike backdoor-based methods. Moreover, EVE significantly outperforms state-of-the-art unlearning verification methods, offering significant speedup in efficiency while enhancing verification accuracy. The source code of EVE is released at \uline{https://anonymous.4open.science/r/EVE-C143}, providing a novel tool for verification of machine unlearning.

模型删减隐私验证对抗扰动

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。