arXivDaily arXiv每日学术速递 周一至周五更新
​通知:联邦节假日调休:哥伦布日 / 原住民日(Columbus Day / Indigenous Peoples' Day),今日(13日)无更新。
arXiv 2602.03567cs.LGcs.AI

通过定制扰动高效验证数据擦除:近似遗忘的验证方法

EVE: Efficient Verification of Data Erasure through Customized Perturbation in Approximate Unlearning

University of Technology Sydney(新南威尔士大学)

Weiqi Wang, Zhiyi Tian, Chenhan Zhang, Luoyu Chen, Shui Yu

AI总结:

EVE通过定制扰动高效验证数据擦除,无需参与模型初始训练,提升验证效率和准确性。

摘要:

验证机器遗忘过程是否正确执行至关重要,但这一领域仍处于探索初期。一些现有方法提出基于后门技术的遗忘验证方法。然而,这些方法通常需要参与模型的初始训练阶段以对模型进行后门操作,以便后续验证,这效率低下且不切实际。在本文中,我们提出了一种高效的擦除验证方法(EVE),用于在不参与模型初始训练过程的情况下验证机器遗忘。核心思想是通过扰动遗忘数据,确保模型对指定样本的预测在遗忘前和遗忘后使用扰动数据时发生变化。遗忘用户可以利用这些变化的观察作为验证信号。具体而言,扰动被设计成两个关键目标:确保遗忘效果并改变遗忘模型对目标样本的预测。我们将扰动生成形式化为一个对抗性优化问题,并通过对齐遗忘梯度与目标样本边界变化的梯度来解决。我们进行了广泛的实验,结果表明,EVE可以在不参与模型初始训练过程的情况下验证机器遗忘,不同于基于后门的方法。此外,EVE显著优于最先进的遗忘验证方法,在效率上有显著提升,同时提高了验证准确性。EVE的源代码已发布在https://anonymous.4open.science/r/EVE-C143,提供了一种新的机器遗忘验证工具。

英文摘要:

Verifying whether the machine unlearning process has been properly executed is critical but remains underexplored. Some existing approaches propose unlearning verification methods based on backdooring techniques. However, these methods typically require participation in the model's initial training phase to backdoor the model for later verification, which is inefficient and impractical. In this paper, we propose an efficient verification of erasure method (EVE) for verifying machine unlearning without requiring involvement in the model's initial training process. The core idea is to perturb the unlearning data to ensure the model prediction of the specified samples will change before and after unlearning with perturbed data. The unlearning users can leverage the observation of the changes as a verification signal. Specifically, the perturbations are designed with two key objectives: ensuring the unlearning effect and altering the unlearned model's prediction of target samples. We formalize the perturbation generation as an adversarial optimization problem, solving it by aligning the unlearning gradient with the gradient of boundary change for target samples. We conducted extensive experiments, and the results show that EVE can verify machine unlearning without involving the model's initial training process, unlike backdoor-based methods. Moreover, EVE significantly outperforms state-of-the-art unlearning verification methods, offering significant speedup in efficiency while enhancing verification accuracy. The source code of EVE is released at \uline{https://anonymous.4open.science/r/EVE-C143}, providing a novel tool for verification of machine unlearning.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑