arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2501.02441stat.MLcs.AIcs.CLcs.CRcs.LGmath.STstat.TH

一种用于大语言模型数据盗用检测的统计假设检验框架

A Statistical Hypothesis Testing Framework for Data Misappropriation Detection in Large Language Models

Peking University(北京大学);University of California at Berkeley(加州大学伯克利分校);Rutgers University(罗格斯大学)

Yinpeng Cai, Lexin Li, Linjun Zhang

AI总结:

针对大语言模型训练中存在的数据盗用问题,提出嵌入水印结合统计假设检验的检测框架,构建检验统计量与最优阈值,控制两类错误并证明渐近最优性,经实验验证有效。

摘要:

近年来,大语言模型(Large Language Models, LLMs)迅速普及。然而,LLM的训练引发了重大的隐私与法律担忧,尤其是在训练数据中未经适当署名或许可就提炼并纳入受版权保护的材料的问题,这一问题属于更广泛的数据盗用范畴。本文聚焦于一个具体的数据盗用检测问题,即判断给定的LLM是否纳入了由另一个LLM生成的数据。我们提出在受版权保护的训练数据中嵌入水印,并将数据盗用检测建模为假设检验问题。我们开发了一个通用的统计检验框架,构建了检验统计量,确定了最优拒绝阈值,并明确控制了第一类和第二类错误。此外,我们证明了所提检验的渐近最优性,并通过大量数值实验验证了其实际有效性。

英文摘要:

Large Language Models (LLMs) are rapidly gaining enormous popularity in recent years. However, the training of LLMs has raised significant privacy and legal concerns, particularly regarding the distillation and inclusion of copyrighted materials in their training data without proper attribution or licensing, an issue that falls under the broader concern of data misappropriation. In this article, we focus on a specific problem of data misappropriation detection, namely, to determine whether a given LLM has incorporated the data generated by another LLM. We propose embedding watermarks into the copyrighted training data and formulating the detection of data misappropriation as a hypothesis testing problem. We develop a general statistical testing framework, construct test statistics, determine optimal rejection thresholds, and explicitly control type I and type II errors. Furthermore, we establish the asymptotic optimality properties of the proposed tests, and demonstrate the empirical effectiveness through intensive numerical experiments.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑