通过选择最坏提示类型微调,提升大模型概念消除效果
MPSelectTune: Prompt-type Selection for Fine-tuning improves Concept Unlearning in LLMs

- 用最易暴露概念的提示类型进行微调,强化去偏能力
- 在4个基准上主任务准确率提升2%-15%,最坏情况概念残留降17%
- 适合需要安全可控大模型的部署场景
大语言模型可通过少量示例和适当提示适配多种任务,但预训练模型中存在的性别、生物武器等有害概念可能在不同提示下引发不安全或不道德响应。现有去偏方法常忽略提示类型差异,难以鲁棒地消除概念。本文提出MPSelectTune,一种两阶段方法:先用多提示类型联合训练,再针对概念预测准确率最高的提示类型进行微调,以最小化该类型下的概念保留。实验在四个基准上显示,相比近期基线,主任务准确率提升2%-15%,最坏情况概念准确率降低最多17%。
原文摘要 · Abstract (English)
LLMs can be conveniently adapted to a diverse set of tasks, e.g, prediction, question-answering tasks, etc, using appropriate prompts with few-shot examples. Biased or harmful concepts, e.g. gender or bio-weapons, present in pre-trained LLMs can lead to unsafe or unethical responses for many such prompts. Removing such undesirable concepts robustly across different prompt types remains a challenging problem, since existing unlearning methods typically ignore the impact of prompt variation. In this paper, we explore a novel adversarial approach to use a joint prompt for the main task and concept task prediction. We show that fine-tuning using the ``worst prompt type'' for concept prediction (with the highest concept accuracy) improves the average unlearning performance over a fine-tuning method that uses a combination of all prompt types. Our proposed method, MPSelectTune, is a two-stage approach that minimizes the concept accuracy of the highest accuracy-prompt type, after fine-tuning using a novel multi-task loss using multiple prompt types. Experimental results on four benchmarks show $2 - 15\%$ main task accuracy improvements over recent baselines and while reducing the worst-case concept accuracy by up to $17\%$ compared to recent baselines.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。