about
Mitigating Memorization in Language Models (arxiv.org)
2 points by dunemns on Oct 4, 2024 | hide | past | pdf | discuss on HN

In plain words: They tested 17 ways to stop language models from copying training text, including five new ones that find and erase memorized facts from the model's weights. Erasing worked faster and better than penalties or retraining, with one new trick best at keeping task accuracy.

Abstract · Mitigating Memorization In Language Models

Language models (LMs) can "memorize" information, i.e., encode training data in their weights in such a way that inference-time queries can lead to verbatim regurgitation of that data. This ability to extract training data can be problematic, for example, when data are private or sensitive. In this work, we investigate methods to mitigate memorization: three regularizer-based, three finetuning-based, and eleven machine unlearning-based methods, with five of the latter being new methods that we introduce. We also introduce TinyMem, a suite of small, computationally-efficient LMs for the rapid development and evaluation of memorization-mitigation methods. We demonstrate that the mitigation methods that we develop using TinyMem can successfully be applied to production-grade LMs, and we determine via experiment that: regularizer-based mitigation methods are slow and ineffective at curbing memorization; fine-tuning-based methods are effective at curbing memorization, but overly expensive, especially for retaining higher accuracies; and unlearning-based methods are faster and more effective, allowing for the precise localization and removal of memorized information from LM weights prior to inference. We show, in particular, that our proposed unlearning method BalancedSubnet outperforms other mitigation methods at removing memorized information while preserving performance on target tasks.

Mansi Sakarvadia, Aswathy Ajith, Arham Khan, Nathaniel Hudson, Caleb Geniesse, Kyle Chard, Yaoqing Yang, Ian Foster, Michael W. Mahoney
arXiv:2410.02159 · cs.LG, cs.AI, cs.CL · submitted Oct 3, 2024 · updated Sep 30, 2026
abstract · pdf · html · Published in the Proceedings of the International Conference on Learning Representations (ICLR), 2025

add comment on HN