无需保留数据即可高效删除模型中的特定数据影响,效果媲美重新训练。
WIN-U: Woodbury-Informed Newton-Unlearning as a retain-free Machine Unlearning Framework

- 基于牛顿法和伍德伯里公式,仅用二阶信息完成单步更新。
- 在多个视觉与语言任务上达到当前最优的遗忘效果与性能保持。
- 适合隐私敏感场景,无需访问被保留的数据集。
大型语言模型中的隐私问题催生了“被遗忘权”的迫切需求。机器遗忘旨在移除特定数据(即遗忘集)对已训练模型的影响。理想情况是使模型表现如同仅在剩余数据(保留集)上训练过一样。现有方法多依赖对保留数据的直接访问,这在隐私或成本受限时难以实现。本文提出WIN-U,一种无需保留数据的遗忘框架,仅需原始模型在全量数据上的二阶信息。通过单次牛顿式更新,结合伍德伯里矩阵恒等式与遗忘集曲率的广义高斯-牛顿近似,WIN-U得到闭式线性解,并作为黄金标准重训练最优解的局部二阶近似。在多种视觉与语言基准上的大量实验表明,WIN-U在遗忘效力与性能保持方面达到当前最优,且对重学习攻击更具鲁棒性。重要的是,该方法无需访问保留数据。
原文摘要 · Abstract (English)
Privacy concerns in LLMs have led to the rapidly growing need to enforce a data's "right to be forgotten". Machine unlearning addresses precisely this task, namely the removal of the influence of some specific data, i.e., the forget set, from a trained model. The gold standard for unlearning is to produce the model that would have been learned on only the rest of the training data, i.e., the retain set. Most existing unlearning methods rely on direct access to the retained data, which may not be practical due to privacy or cost constraints. We propose WIN-U, a retained-data free unlearning framework that requires only second order information for the originally trained model on the full data. The unlearning is performed using a single Newton-style step. Using the Woodbury matrix identity and a generalized Gauss-Newton approximation for the forget set curvature, the WIN-U update recovers the closed-form linear solution and serves as a local second-order approximation to the gold-standard retraining optimum. Extensive experiments on various vision and language benchmarks demonstrate that WIN-U achieves SOTA performance in terms of unlearning efficacy and utility preservation, while being more robust against relearning attacks compared to existing methods. Importantly, WIN-U does not require access to the retained data.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。