Memorization Through the Lens of Curvature of Loss Function Around Samples
Isha Garg, Deepak Ravikumar, Kaushik Roy
摘要
Deep neural networks are over-parameterized and easily overfit the datasets they train on. In the extreme case, it has been shown that these networks can memorize a training set with fully randomized labels. We propose using the curvature of loss function around each training sample, averaged over training epochs, as a measure of memorization of the sample. We use this metric to study the generalization versus memorization properties of different samples in popular image datasets and show that it captures memorization statistics well, both qualitatively and quantitatively. We first show that the high curvature samples visually correspond to long-tailed, mislabeled, or conflicting samples, those that are most likely to be memorized. This analysis helps us find, to the best of our knowledge, a novel failure mode on the CIFAR100 and ImageNet datasets: that of duplicated images with differing labels. Quantitatively, we corroborate the validity of our scores via two methods. First, we validate our scores against an independent and comprehensively calculated baseline, by showing high cosine similarity with the memorization scores released by Feldman and Zhang (2020). Second, we inject corrupted samples which are memorized by the network, and show that these are learned with high curvature. To this end, we synthetically mislabel a random subset of the dataset. We overfit a network to it and show that sorting by curvature yields high AUROC values for identifying the corrupted samples. An added advantage of our method is that it is scalable, as it requires training only a single network as opposed to the thousands trained by the baseline, while capturing the aforementioned failure mode that the baseline fails to identify.
问问这篇 Paper
智能体会读完全文。
Lune 把这篇 Paper 索引到了每一个公式,引用它的顶会 Paper 也一样。你提问,回答直接引用原文。
引用它的顶会 Paper14
- NoiseGPT: Label Noise Detection and Rectification through Probability CurvatureHaoyu Wang, Zhuo Huang, Zhiwei Lin, Tongliang LiuNeurIPS 2024 · 被引用 27 次
- Unveiling Privacy, Memorization, and Input Curvature LinksDeepak Ravikumar, Efstathia Soufleri, Abolfazl Hashemi, Kaushik RoyICML 2024 · 被引用 16 次
- Remaining-data-free Machine Unlearning by Suppressing Sample ContributionXinwen Cheng, Zhehao Huang, Wenxing Zhou, Zhengbao He 等ICLR 2026 · 被引用 11 次
- SAP: Corrective Machine Unlearning with Scaled Activation Projection for Label Noise RobustnessSangamesh Kodge, Deepak Ravikumar, Gobinda Saha, Kaushik RoyAAAI 2025 · 被引用 10 次
- Curvature Clues: Decoding Deep Learning Privacy with Input Loss CurvatureDeepak Ravikumar, Efstathia Soufleri, Kaushik RoyNeurIPS 2024 · 被引用 10 次
它引用的顶会 Paper10
- Membership Inference Attacks Against Machine Learning ModelsReza Shokri, Marco Stronati, Congzheng Song, Vitaly ShmatikovS&P 2017 · 被引用 5,137 次
- The Secret Sharer: Evaluating and Testing Unintended Memorization in Neural NetworksNicholas Carlini, Chang Liu, Úlfar Erlingsson, Jernej Kos 等USENIX Security 2019 · 被引用 1,386 次
- Overfitting in adversarially robust deep learningLeslie Rice, Eric Wong, J. Zico KolterICML 2020 · 被引用 935 次
- What Neural Networks Memorize and Why: Discovering the Long Tail via Influence EstimationVitaly Feldman, Chiyuan ZhangNeurIPS 2020 · 被引用 674 次
- Identifying Mislabeled Data using the Area Under the Margin RankingGeoff Pleiss, Tianyi Zhang, Ethan R. Elenberg, Kilian Q. WeinbergerNeurIPS 2020 · 被引用 398 次
相关 Paper
- Random Label Prediction Heads for Studying Memorization in Deep Neural NetworksMarlon Becker, Jonas Konrad, Luis Garcia Rodriguez, Benjamin RisseICLR 2026
- Towards Memorization Estimation: Fast, Formal and FreeDeepak Ravikumar, Efstathia Soufleri, Abolfazl Hashemi, Kaushik RoyICML 2025
- Memorization Through the Lens of Sample GradientsDeepak Ravikumar, Efstathia Soufleri, Abolfazl Hashemi, Kaushik RoyICLR 2026
- On Memorization in Probabilistic Deep Generative ModelsGerrit J. J. van den Burg, Christopher K. I. WilliamsNeurIPS 2021 · 被引用 92 次
- Localizing Memorized Regions in Diffusion Models via Coordinate-Wise Curvature DifferencesGwangho Kim, Sungyoon LeeICML 2026
