Do Localization Methods Actually Localize Memorized Data in LLMs? A Tale of Two Benchmarks

Ting-Yun Chang, Jesse Thomason, Robin Jia
11/15/2023
cs.CL

No official code found. Best implementation: terarachang/MemPi (9 stars, Apache-2.0, last commit 2024-07-17).

Abstract

The concept of localization in LLMs is often mentioned in prior work; however, methods for localization have never been systematically and directly evaluated. We propose two complementary benchmarks that evaluate the ability of localization methods to pinpoint LLM components responsible for memorized data. In our INJ benchmark, we actively inject a piece of new information into a small subset of LLM weights, enabling us to directly evaluate whether localization methods can identify these "ground truth" weights. In our DEL benchmark, we evaluate localization by measuring how much dropping out identified neurons deletes a memorized pretrained sequence. Despite their different perspectives, our two benchmarks yield consistent rankings of five localization methods. Methods adapted from network pruning perform well on both benchmarks, and all evaluated methods show promising localization ability. On the other hand, even successful methods identify neurons that are not specific to a single memorized sequence.

View on arXivView PDF

Code Implementations(1)

terarachang/MemPiCommunity100%
Apache-2.0

localize a memorized sequence in LLMs (NAACL 2024)

91Shell, PythonNov 13, 20232 years agoApache-2.0

Similar Papers

Cite this paper

@article{chang2023localization,
  title  = {Do Localization Methods Actually Localize Memorized Data in LLMs? A Tale of Two Benchmarks},
  author = {Ting-Yun Chang and Jesse Thomason and Robin Jia},
  year   = {2023},
  eprint = {2311.09060},
  archivePrefix = {arXiv},
  url    = {http://arxiv.org/abs/2311.09060v2}
}

Add a badge to your README

Shows whether official code is linked for this paper.

Code of Paper badge
[![Code of Paper](https://codeofpaper.com/badge/2311.09060.svg)](https://codeofpaper.com/paper/2311.09060)

Discussion