arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2409.00685cs.CV

面向一体化图像恢复模型的精确遗忘

Accurate Forgetting for All-in-One Image Restoration Model

Fuzhou University(福州大学);Sun Yat-sen University(中山大学)

Xin Su, Zhuoran Zheng

AI总结:

本文针对一体化图像恢复模型提出一种基于对抗样本与梯度上升的实例级遗忘方法,以低成本移除特定退化类型(如雾霾、雨水)对模型的影响,同时保持整体恢复性能稳健。

摘要:

隐私保护一直是一个持续的话题,尤其是在人工智能领域。目前,一种被称为机器遗忘(Machine Unlearning)的低成本方案会遗忘模型中记住的私有数据。具体而言,给定一个私有数据集和一个已训练的神经网络,我们需要使用例如剪枝、微调和梯度上升等方法,来消除该私有数据集对神经网络的影响。受此启发,我们尝试利用这一概念来弥合图像恢复与安全领域之间的差距,从而开创一个新的研究思路。我们针对一体化模型(All-In-One model,一种能够恢复多种退化信息的神经网络)提出了这一场景:给定一个如雾霾或雨水等私有数据集,需要消除其对已训练模型的影响。值得注意的是,我们发现该任务面临巨大挑战:既要移除敏感数据的影响,又要确保整体模型性能保持稳健,这类似于指挥一个交响乐团时缺少特定乐器,却仍要保持演奏悦耳动听。在此,我们探索了一种简单而有效的方法:通过使用对抗样本和梯度上升技术实现实例级遗忘(Instance-wise Unlearning)。与从头重新训练模型的策略相比,我们的方法是一种低成本解决方案,其中梯度上升技巧会遗忘指定数据,而对抗样本则维持模型性能的稳健性。通过在两个主流统一图像恢复模型上进行大量实验,我们表明,我们的方法在遗忘给定退化类型的同时,能够有效保留其余数据的知识。

英文摘要:

Privacy protection has always been an ongoing topic, especially for AI. Currently, a low-cost scheme called Machine Unlearning forgets the private data remembered in the model. Specifically, given a private dataset and a trained neural network, we need to use e.g. pruning, fine-tuning, and gradient ascent to remove the influence of the private dataset on the neural network. Inspired by this, we try to use this concept to bridge the gap between the fields of image restoration and security, creating a new research idea. We propose the scene for the All-In-One model (a neural network that restores a wide range of degraded information), where a given dataset such as haze, or rain, is private and needs to be eliminated from the influence of it on the trained model. Notably, we find great challenges in this task to remove the influence of sensitive data while ensuring that the overall model performance remains robust, which is akin to directing a symphony orchestra without specific instruments while keeping the playing soothing. Here we explore a simple but effective approach: Instance-wise Unlearning through the use of adversarial examples and gradient ascent techniques. Our approach is a low-cost solution compared to the strategy of retraining the model from scratch, where the gradient ascent trick forgets the specified data and the performance of the adversarial sample maintenance model is robust. Through extensive experimentation on two popular unified image restoration models, we show that our approach effectively preserves knowledge of remaining data while unlearning a given degradation type.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑