Reproduce “Localizing and Mitigating Memorization in Image Autoregressive Models” on OpenResearch

Turn your favorite coding agents into research agents that review literature, develop hypotheses, and run experiments.

Universal app for Apple silicon and Intel. Requires macOS 11 or later.

About this paper

Aditya Kasliwal, Franziska Boenisch, Adam Dziedzic

Researchers at the CISPA Helmholtz Center for Information Security localized memorization within Image Autoregressive (IAR) models, identifying architecture-specific patterns in VAR and RAR models. Their targeted interventions, based on UnitMem scores, effectively reduced data extraction by up to 83.6% for VAR-d30 while maintaining generative quality.

Key insights

  • Memorization patterns in VAR models are scale-dependent, shifting from earlier blocks at coarser resolutions to deeper blocks at finer resolutions, indicating hierarchical processing of memorized information.
  • In RAR models, high memorization scores concentrate predominantly in the middle and later blocks, suggesting that later processing stages are more critical for specific instance memorization.
  • The UnitMem metric effectively identifies neurons crucial for memorizing training instances, establishing a functional link between localized memorization scores and tangible privacy risks related to data extraction.

Summary by alphaXiv.

Tip: change arxiv.org to autoarxiv.org in any arXiv abstract link to open the paper here.