提出可量化遗忘难易度的多目标遗忘方法,兼顾隐私保护与模型性能。
How Hard Can It Be? Hardness-Aware Multi-Objective Unlearning

- 基于数据相似性度量遗忘难度,指导模型更新方向。
- 在图像与文本数据上显著提升遗忘效果,保留性能损失更小。
- 能识别不可调和情况,帮助用户判断是否该停止遗忘操作。
机器遗忘旨在移除特定训练数据的影响,以应对隐私、版权或偏见问题,同时保持模型在剩余保留数据上的性能。现有方法如加权损失优化,无法保证对所有遗忘与保留数据都达到指定程度的改进。本文从约束优化视角提出新方法(HAMU),首先发现遗忘与保留数据间的相似性可量化二者调和的难度;进而设计算法,在确保遗忘质量提升的同时,最小化保留性能的退化。该难度度量还能提示用户:当保留性能损失不可避免时,应停止遗忘过程。方法适用于非凸模型且易于并行,可在真实场景部署。实验表明,相比基线方法,HAMU在大规模图像与文本数据集上表现更优。
原文摘要 · Abstract (English)
Machine unlearning aims to remove the influence of specific forget training data due to privacy, copyright or bias concerns while maintaining the model performance on the remaining retain data. Existing unlearning algorithms, such as optimizing a weighted combination of losses, have tried to achieve these objectives of improving forget quality and maintaining retain utility. However, they do not guarantee that these objectives can be improved by a specified extent for all forget and retain data. In this work, we address this limitation with a novel and theoretically-grounded approach from a constrained optimization perspective. Firstly, we identify that the hardness of reconciling both objectives can be quantified by the similarity between the forget data and the retain data. Next, we derive an unlearning algorithm (HAMU) with the overall goal of guaranteeing a specified improvement in forget quality while minimizing the retain utility cost/degradation by updating the model weights based on our hardness measure. Our hardness measure also informs users when retain utility degradation is unavoidable, i.e., both objectives cannot be improved simultaneously, and stopping should be considered. Our algorithm is applicable to non-convex models and is easily parallelizable, making it readily deployable in real-world scenarios. We empirically demonstrate HAMU's superior performance over baselines on both image and text datasets using large models. Our code is available at https://github.com/aoi3142/HAMU.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。