提出一种3D医学图像分割模型的遗忘机制,实现数据删除合规性。
To forget is to preserve: Machine Unlearning for 3D medical image segmentation

- 基于四种机制设计近似遗忘策略,针对特定受试者进行数据删除。
- 50轮训练后,噪声标签法使遗忘集保留率下降93%,保留集准确率达84%。
- 提供可量化的遗忘性能基准,适合医疗AI合规开发人员参考。
随着《通用数据保护条例》(GDPR)等新数据隐私法规的实施,个人有权要求从训练好的机器学习模型中删除其个人信息,这促使研究者探索数据遗忘技术以满足合规要求。本文基于四种机制,针对MRBrainS18数据集评估了多种近似遗忘策略在3D ResNet-50骨干网络上的表现,该模型使用Med3D框架预训练。以预训练模型为基线,评估其在保留与遗忘两类受试者上的保留准确率。通过20和50两个训练周期下的骰子相似系数(Dice)与平均绝对误差(MAE)进行评估。结果显示,噪声标签策略在50轮训练后实现遗忘集性能下降93%,同时保持84%的保留集准确率,表现出最佳综合性能;其余策略在高训练轮次下出现严重遗忘并导致保留集性能灾难性下降。研究结果为个体级数据遗忘提供了严格的性能基准,为实践者选择合适策略提供了明确依据。
原文摘要 · Abstract (English)
With new data privacy laws such as the General Data Protection Regulation (GDPR) [1] that allow individuals to ask that any of their personal information be erased from trained machine learning models, there has been a push to investigate the unlearning of data from models as a way to comply with these laws. In this regard, based on four mechanics, we consider several approximate unlearning strategies applied to the MRBrainS18 dataset [2]. We use a 3D ResNet-50 [3] as a backbone architecture for segmentation that has been pre-trained with the Med3D framework [4]. Considering the pre-trained model as a baseline, we evaluate respective retention accuracy on 2 types of subjects, i.e., retain and forget. We assess these approaches through their Dice similarity coefficient and mean absolute error (MAE) values using two separate training horizons 20 and 50 epochs. The results show that the Noisy Label strategy had the best overall trade-off with a decrease of 93% in the forget set while maintaining 84% accuracy for the retained set after 50 epochs. All other strategies showed extreme levels of forgetting at higher epoch numbers while also demonstrating catastrophic degradation of their retain set performance. The results of this study provide a strict baseline of performance metrics for unlearning on a subject-specific level and provide practitioners with clear criteria for selecting the proper strategies.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。