Timezone: »

 
Poster
On Provable Copyright Protection for Generative Models
Nikhil Vyas · Sham Kakade · Boaz Barak

Wed Jul 26 02:00 PM -- 03:30 PM (PDT) @ Exhibit Hall 1 #416
in Poster Session 3 »
There is a growing concern that learned conditional generative models may output samples that are substantially similar to some copyrighted data $C$ that was in their training set. We give a formal definition of near access-freeness (NAF) and prove bounds on the probability that a model satisfying this definition outputs a sample similar to $C$, even if $C$ is included in its training set. Roughly speaking, a generative model $p$ is $k$-NAF if for every potentially copyrighted data $C$, the output of $p$ diverges by at most $k$-bits from the output of a model $q$ that did not access $C$ at all. We also give generative model learning algorithms, which efficiently modify the original generative model learning algorithm in a black box manner, that output generative models with strong bounds on the probability of sampling protected content. Furthermore, we provide promising experiments for both language (transformers) and image (diffusion) generative models, showing minimal degradation in output quality while ensuring strong protections against sampling protected content.
[ PDF]  [ Poster] 

Author Information

Nikhil Vyas (Harvard University.)
Sham Kakade (Harvard University and Amazon Scholar)
Boaz Barak (Harvard University)

More from the Same Authors