arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2302.04460cs.CLcs.AIcs.CRcs.LG
收藏

从语言模型中提取训练数据的技巧锦囊

Bag of Tricks for Training Data Extraction from Language Models

Institute of Automation, Chinese Academy of Sciences(中国科学院自动化研究所);Sea AI Lab(Sea人工智能实验室)

Weichen Yu, Tianyu Pang, Qian Liu, Chao Du, Bingyi Kang, Yan Huang, Min Lin, Shuicheng Yan

AI总结:

针对语言模型训练数据提取效果不足的问题,本文系统研究生成与排序阶段的多种技巧,并在 GPT-Neo 1.3B 上证明其可显著提升提取性能。

摘要:

随着语言模型的发展,隐私保护正受到越来越多的关注。因此,训练数据提取具有重要意义,因为它可以作为评估隐私泄露的一种潜在工具。然而,由于该任务的难度,现有大多数方法仍处于概念验证阶段,效果还不够理想。本文利用一个公开可用的数据集,研究并基准测试了用于改进训练数据提取的各种技巧。由于现有大多数提取方法采用“先生成后排序”的流程,即先生成文本候选作为潜在训练数据,再依据特定标准对其进行排序,因此我们的研究同时聚焦于文本生成(例如采样策略)和文本排序(例如 token 级标准)两方面的技巧。实验结果表明,若干此前被忽视的技巧可能对训练数据提取的成功至关重要。基于 GPT-Neo 1.3B 的评估结果,我们提出的技巧在大多数情况下大幅优于基线,为未来研究提供了一个强得多的基线。代码可在 https://github.com/weichen-yu/LM-Extraction 获取。

英文摘要:

With the advance of language models, privacy protection is receiving more attention. Training data extraction is therefore of great importance, as it can serve as a potential tool to assess privacy leakage. However, due to the difficulty of this task, most of the existing methods are proof-of-concept and still not effective enough. In this paper, we investigate and benchmark tricks for improving training data extraction using a publicly available dataset. Because most existing extraction methods use a pipeline of generating-then-ranking, i.e., generating text candidates as potential training data and then ranking them based on specific criteria, our research focuses on the tricks for both text generation (e.g., sampling strategy) and text ranking (e.g., token-level criteria). The experimental results show that several previously overlooked tricks can be crucial to the success of training data extraction. Based on the GPT-Neo 1.3B evaluation results, our proposed tricks outperform the baseline by a large margin in most cases, providing a much stronger baseline for future research. The code is available at https://github.com/weichen-yu/LM-Extraction.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑