安全视角下的模型压缩研究综述
作者:
作者单位:

作者简介:

通讯作者:

中图分类号:

TP18

基金项目:

国家重点研发计划(2023YFB2703700); 中央高校基本科研业务费专项资金(2025JBZY025); 北京市自然科学基金(L251062)


Survey on Model Compression Research from Security Perspective
Author:
Affiliation:

Fund Project:

  • 摘要
  • |
  • 图/表
  • |
  • 访问统计
  • |
  • 参考文献
  • |
  • 相似文献
  • |
  • 引证文献
  • |
  • 资源附件
  • |
  • 文章评论
    摘要:

    随着深度学习模型日益广泛地部署于资源受限的场景中, 模型剪枝、量化、知识蒸馏等模型压缩技术已成为提升模型效率与可部署性的关键手段. 然而, 模型压缩在带来性能与效率优势的同时, 也与模型安全和隐私问题产生了复杂关联. 一方面, 压缩过程可能改变模型的表示空间或决策边界, 从而引入新的安全风险或放大已有威胁; 另一方面, 安全与隐私需求也反过来推动模型压缩技术的发展, 使得安全感知的模型压缩逐渐成为一个重要研究方向. 系统梳理近年来安全视角下的模型压缩研究进展, 重点从两个方面进行综述: 一是压缩模型面临的安全与隐私风险, 包括后门攻击、对抗样本、隐私泄露以及前沿应用场景下的新型风险; 二是面向对抗鲁棒性与隐私保护的安全感知模型压缩方法, 总结在压缩过程中引入安全约束与隐私保护机制的代表性研究. 此外, 进一步提炼压缩模型安全与隐私研究面临的关键问题, 给出面向典型部署场景的风险感知选型参考和面向压缩模型安全性的基准化评估维度建议, 并从内在机理分析、真实部署环境下的安全防护等方面对未来研究进行展望.

    Abstract:

    As deep learning models are increasingly deployed in resource-constrained scenarios, model compression techniques such as pruning, quantization, and knowledge distillation have become key approaches for improving model efficiency and deployability. However, while model compression offers advantages in performance and efficiency, it is also intricately linked to security and privacy issues. On the one hand, compression may alter a model’s representation space or decision boundary, thus introducing new security risks or amplifying existing threats. On the other hand, security and privacy requirements have also shaped the development of model compression techniques, making security-aware compression an increasingly important research direction. This study systematically reviews recent progress in model compression research from a security perspective, focusing on two main aspects. First, it examines the security and privacy risks faced by compressed models, including backdoor attacks, adversarial examples, privacy leakage, and emerging risks in frontier application scenarios. Second, it surveys security-aware model compression methods for adversarial robustness and privacy protection, summarizing representative studies that incorporate security constraints and privacy-preserving mechanisms into the compression process. In addition, this study identifies key issues in security and privacy research on compressed models, provides risk-aware guidance for typical deployment scenarios, recommends benchmark-based evaluation dimensions for assessing the security of compressed models, and discusses future research directions in terms of underlying mechanism analysis and security protection in real-world deployments.

    参考文献
    相似文献
    引证文献
引用本文

商婧,王健,王凯崙,杨磊,姜楠,姜强,刘吉强.安全视角下的模型压缩研究综述.软件学报,,():1-39

复制
相关视频

分享
文章指标
  • 点击次数:
  • 下载次数:
  • HTML阅读次数:
  • 引用次数:
历史
  • 收稿日期:2026-03-22
  • 最后修改日期:2026-04-27
  • 录用日期:
  • 在线发布日期: 2026-08-12
  • 出版日期:
文章二维码
您是第位访问者
版权所有:中国科学院软件研究所 京ICP备05046678号-3
地址:北京市海淀区中关村南四街4号,邮政编码:100190
电话:010-62562563 传真:010-62562533 Email:jos@iscas.ac.cn
技术支持:北京勤云科技发展有限公司

京公网安备 11040202500063号