arXivDaily arXiv每日学术速递 周一至周五更新
arXiv周末暂无论文更新,休息一下吧,周末愉快~~
arXiv 2409.03363cs.CL
收藏

Con-ReCall:通过对比解码检测大语言模型中的预训练数据

Con-ReCall: Detecting Pre-training Data in LLMs via Contrastive Decoding

National University of Singapore(新加坡国立大学);University of California, Merced(加州大学默塞德分校);University of California, Los Angeles(加州大学洛杉矶分校);University of Queensland(昆士兰大学)

Cheng Wang, Yiwei Wang, Bryan Hooi, Yujun Cai, Nanyun Peng, Kai-Wei Chang

AI总结:

针对大语言模型预训练数据检测需求,提出Con-ReCall方法,通过对比解码利用成员与非成员上下文的不对称分布偏移增强成员推断,在WikiMIA基准上达SOTA且抗文本操纵鲁棒性强。

摘要:

大语言模型的训练数据是其成功的关键,但也带来隐私和安全风险,因为其中可能包含敏感信息。检测预训练数据对于缓解这些问题至关重要。现有方法通常孤立分析目标文本,或仅结合非成员上下文进行分析,忽略了同时考虑成员和非成员上下文可能带来的洞见。尽管此前研究认为成员上下文因引发的分布偏移很小而几乎不提供信息,但我们的分析表明,当与非成员上下文对比时,这些细微偏移可以被有效利用。本文提出Con-ReCall,这是一种新方法,通过对比解码利用成员和非成员上下文引发的不对称分布偏移,放大细微差异以增强成员推断。大量实证评估表明,Con-ReCall在WikiMIA基准上取得了当前最优性能,并且对多种文本操纵技术具有鲁棒性。

英文摘要:

The training data in large language models is key to their success, but it also presents privacy and security risks, as it may contain sensitive information. Detecting pre-training data is crucial for mitigating these concerns. Existing methods typically analyze target text in isolation or solely with non-member contexts, overlooking potential insights from simultaneously considering both member and non-member contexts. While previous work suggested that member contexts provide little information due to the minor distributional shift they induce, our analysis reveals that these subtle shifts can be effectively leveraged when contrasted with non-member contexts. In this paper, we propose Con-ReCall, a novel approach that leverages the asymmetric distributional shifts induced by member and non-member contexts through contrastive decoding, amplifying subtle differences to enhance membership inference. Extensive empirical evaluations demonstrate that Con-ReCall achieves state-of-the-art performance on the WikiMIA benchmark and is robust against various text manipulation techniques.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑