arXivDaily arXiv每日学术速递 周一至周五更新
arXiv周末暂无论文更新,休息一下吧,周末愉快~~
arXiv 2409.13853cs.CLcs.AIcs.CRcs.LG
收藏

使用动态软提示解锁大型语言模型中的记忆能力

Unlocking Memorization in Large Language Models with Dynamic Soft Prompting

George Mason University(乔治梅森大学);GE Healthcare(GE医疗);University of Pittsburgh(匹兹堡大学);William and Mary(威廉玛丽学院);Southern University of Science and Technology(南方科技大学);Florida State University(佛罗里达州立大学)

Zhepeng Wang, Runxue Bao, Yawen Wu, Jackson Taylor, Cao Xiao, Feng Zheng, Weiwen Jiang, Shangqian Gao, Yanfu Zhang

AI总结:

提出一种基于动态软提示的LLM记忆能力估计方法,通过训练transformer生成器生成适应输入变化的软提示,更准确提取记忆数据,在文本和代码生成任务中分别实现112.75%和32.26%的最大相对改进。

摘要:

预训练的大型语言模型(LLMs)已经彻底改变了自然语言处理(NLP)任务,如摘要生成、问答和翻译。然而,由于LLMs倾向于记忆训练数据,它们带来了重大的安全风险,可能导致隐私泄露和版权侵权。准确测量这种记忆能力对于评估和缓解这些潜在风险至关重要。然而,以往试图表征记忆能力的尝试受到限制,要么仅使用前缀,要么在前缀前添加常量软提示,这些方法无法对输入的变化做出反应。为了解决这一挑战,我们提出了一种使用动态的、依赖前缀的软提示来估计LLM记忆能力的新方法。我们的方法涉及训练一个基于transformer的生成器来生成能够适应输入变化的软提示,从而能够更准确地提取记忆数据。我们的方法不仅解决了以往方法的局限性,而且在多种实验设置下与最先进的技术相比表现出更优越的性能。特别是,在文本生成任务和代码生成任务的可发现记忆率方面,我们的方法分别比原始基线实现了112.75%和32.26%的最大相对改进。

英文摘要:

Pretrained large language models (LLMs) have revolutionized natural language processing (NLP) tasks such as summarization, question answering, and translation. However, LLMs pose significant security risks due to their tendency to memorize training data, leading to potential privacy breaches and copyright infringement. Accurate measurement of this memorization is essential to evaluate and mitigate these potential risks. However, previous attempts to characterize memorization are constrained by either using prefixes only or by prepending a constant soft prompt to the prefixes, which cannot react to changes in input. To address this challenge, we propose a novel method for estimating LLM memorization using dynamic, prefix-dependent soft prompts. Our approach involves training a transformer-based generator to produce soft prompts that adapt to changes in input, thereby enabling more accurate extraction of memorized data. Our method not only addresses the limitations of previous methods but also demonstrates superior performance in diverse experimental settings compared to state-of-the-art techniques. In particular, our method can achieve the maximum relative improvement of 112.75% and 32.26% over the vanilla baseline in terms of discoverable memorization rate for the text generation task and code generation task respectively.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑