-
Notifications
You must be signed in to change notification settings - Fork 7
/
main_watermark.py
executable file
·328 lines (291 loc) · 15.6 KB
/
main_watermark.py
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
# Copyright (c) Meta Platforms, Inc. and affiliates.
# All rights reserved.
# This source code is licensed under the license found in the
# LICENSE file in the root directory of this source tree.
"""
python main_watermark.py --model_name guanaco-7b \
--prompt_type guanaco --prompt_path data.json --nsamples 10 --batch_size 16 \
--method openai --method_detect openai --seeding hash --ngram 2 --scoring_method v2 --temperature 1.0 \
--payload 0 --payload_max 4 \
--output_dir output/
python main_watermark.py --model_name guanaco-7b \
--prompt_type guanaco --prompt_path data.json --nsamples 10 --batch_size 16 \
--method maryland --seeding hash --ngram 2 --gamma 0.25 --delta 2.0 \
--payload 0 --payload_max 4 \
--output_dir output/
"""
import argparse
from typing import Dict, List
import os
import time
import json
import tqdm
import pandas as pd
import numpy as np
import torch
from peft import PeftModel
from transformers import AutoModelForCausalLM, AutoTokenizer
from sentence_transformers import SentenceTransformer
from wm import (WmGenerator, OpenaiGenerator, OpenaiDetector, OpenaiNeymanPearsonDetector,
OpenaiDetectorZ, MarylandGenerator, MarylandDetector, MarylandDetectorZ)
import utils
def get_args_parser():
parser = argparse.ArgumentParser('Args', add_help=False)
# model parameters
parser.add_argument('--model_name', type=str)
# prompts parameters
parser.add_argument('--prompt_path', type=str, default="data/alpaca_data.json")
parser.add_argument('--prompt_type', type=str, default="alpaca",
help='type of prompt formatting. Choose between: alpaca, oasst, guanaco')
parser.add_argument('--prompt', type=str, nargs='+', default=None,
help='prompt to use instead of prompt_path, can be a list')
# generation parameters
parser.add_argument('--temperature', type=float, default=0.8)
parser.add_argument('--top_p', type=float, default=0.95)
parser.add_argument('--max_gen_len', type=int, default=256)
# watermark parameters
parser.add_argument('--method', type=str, default='none',
help='Choose between: none (no watermarking), openai (Aaronson et al.), maryland (Kirchenbauer et al.)')
parser.add_argument('--method_detect', type=str, default='same',
help='Statistical test to detect watermark. Choose between: same (same as method), openai, openaiz, openainp, maryland, marylandz')
parser.add_argument('--seeding', type=str, default='hash',
help='seeding method for rng key generation as introduced in https://github.com/jwkirchenbauer/lm-watermarking')
parser.add_argument('--ngram', type=int, default=4,
help='watermark context width for rng key generation')
parser.add_argument('--gamma', type=float, default=0.25,
help='gamma for maryland: proportion of greenlist tokens')
parser.add_argument('--delta', type=float, default=4.0,
help='delta for maryland: bias to add to greenlist tokens')
parser.add_argument('--hash_key', type=int, default=35317,
help='hash key for rng key generation')
parser.add_argument('--scoring_method', type=str, default='none',
help='method for scoring. choose between: \
none (score every tokens), v1 (score token when wm context is unique), \
v2 (score token when {wm context + token} is unique')
# multibit
parser.add_argument('--payload', type=int, default=0, help='message')
parser.add_argument('--payload_max', type=int, default=0,
help='maximal message, must be inferior to the vocab size at the moment')
# expe parameters
parser.add_argument('--nsamples', type=int, default=None,
help='number of samples to generate, if None, take all prompts')
parser.add_argument('--batch_size', type=int, default=16)
parser.add_argument('--do_eval', type=utils.bool_inst, default=True)
parser.add_argument('--seed', type=int, default=0)
parser.add_argument('--output_dir', type=str, default='output')
parser.add_argument('--split', type=int, default=None,
help='split the prompts in nsplits chunks and chooses the split-th chunk. \
Allows to run in parallel. \
If None, treat prompts as a whole')
parser.add_argument('--nsplits', type=int, default=None,
help='number of splits to do. If None, treat prompts as a whole')
# distributed parameters
parser.add_argument('--ngpus', type=int, default=None)
return parser
def format_prompts(prompts: List[Dict], prompt_type: str) -> List[str]:
if prompt_type=='alpaca':
PROMPT_DICT = {
"prompt_input": (
"Below is an instruction that describes a task, paired with an input that provides further context.\nWrite a response that appropriately completes the request.\n\n### Instruction:\n{instruction}\n\n### Input:\n{input}\n\n### Response:\n"
),
"prompt_no_input": (
"Below is an instruction that describes a task, paired with an input that provides further context.\nWrite a response that appropriately completes the request.\n\n### Instruction:\n{instruction}\n\n### Response:\n"
),
}
elif prompt_type=='guanaco':
PROMPT_DICT = {
"prompt_input": (
"A chat between a curious human and an artificial intelligence assistant.\nThe assistant gives helpful, detailed, and polite answers to the user's questions.\n\n### Human: {instruction}\n\n### Input:\n{input}\n\n### Assistant:"
),
"prompt_no_input": (
"A chat between a curious human and an artificial intelligence assistant.\nThe assistant gives helpful, detailed, and polite answers to the user's questions.\n\n### Human: {instruction}\n\n### Assistant:"
)
}
prompt_input, prompt_no_input = PROMPT_DICT["prompt_input"], PROMPT_DICT["prompt_no_input"]
prompts = [
prompt_input.format_map(example) if example.get("input", "") != "" else prompt_no_input.format_map(example)
for example in prompts
]
return prompts
def load_prompts(json_path: str, prompt_type: str, nsamples: int=None) -> List[str]:
with open(json_path, "r") as f:
prompts = json.loads(f.read())
new_prompts = prompts
# new_prompts = [prompt for prompt in prompts if len(prompt["output"].split()) > 5]
new_prompts = new_prompts[:nsamples]
print(f"Filtered {len(new_prompts)} prompts from {len(prompts)}")
new_prompts = format_prompts(new_prompts, prompt_type)
return new_prompts
def load_results(json_path: str, nsamples: int=None, result_key: str='result') -> List[str]:
with open(json_path, "r") as f:
if json_path.endswith('.json'):
prompts = json.loads(f.read())
else:
prompts = [json.loads(line) for line in f.readlines()] # load jsonl
new_prompts = [o[result_key] for o in prompts]
new_prompts = new_prompts[:nsamples]
return new_prompts
def main(args):
print('job dir: {}'.format(os.path.dirname(os.path.realpath(__file__))))
print("{}".format(args).replace(', ', ',\n'))
torch.manual_seed(args.seed)
np.random.seed(args.seed)
# build model
if args.model_name == "llama-7b":
model_name = "huggyllama/llama-7b"
adapters_name = None
if args.model_name == "guanaco-7b":
model_name = "huggyllama/llama-7b"
adapters_name = 'timdettmers/guanaco-7b'
elif args.model_name == "guanaco-13b":
model_name = "huggyllama/llama-13b"
adapters_name = 'timdettmers/guanaco-13b'
tokenizer = AutoTokenizer.from_pretrained(model_name)
args.ngpus = torch.cuda.device_count() if args.ngpus is None else args.ngpus
model = AutoModelForCausalLM.from_pretrained(
model_name,
device_map="auto",
torch_dtype=torch.float16,
max_memory={i: '32000MB' for i in range(args.ngpus)},
offload_folder="offload",
)
if adapters_name is not None:
model = PeftModel.from_pretrained(model, adapters_name)
model = model.eval()
for param in model.parameters():
param.requires_grad = False
print(f"Using {args.ngpus}/{torch.cuda.device_count()} GPUs - {torch.cuda.memory_allocated() / 1e9:.2f} GB allocated per GPU")
# build watermark generator
if args.method == "none":
generator = WmGenerator(model, tokenizer)
elif args.method == "openai":
generator = OpenaiGenerator(model, tokenizer, args.ngram, args.seed, args.seeding, args.hash_key, payload=args.payload)
elif args.method == "maryland":
generator = MarylandGenerator(model, tokenizer, args.ngram, args.seed, args.seeding, args.hash_key, payload=args.payload, gamma=args.gamma, delta=args.delta)
else:
raise NotImplementedError("method {} not implemented".format(args.method))
# load prompts
if args.prompt is not None:
prompts = args.prompt
prompts = [{"instruction": prompt} for prompt in prompts]
else:
prompts = load_prompts(json_path=args.prompt_path, prompt_type=args.prompt_type, nsamples=args.nsamples)
# do splits
if args.split is not None:
nprompts = len(prompts)
left = nprompts * args.split // args.nsplits
right = nprompts * (args.split + 1) // args.nsplits if (args.split != args.nsplits - 1) else nprompts
prompts = prompts[left:right]
print(f"Creating prompts from {left} to {right}")
# (re)start experiment
os.makedirs(args.output_dir, exist_ok=True)
start_point = 0 # if resuming, start from the last line of the file
if os.path.exists(os.path.join(args.output_dir, f"results.jsonl")):
with open(os.path.join(args.output_dir, f"results.jsonl"), "r") as f:
for _ in f:
start_point += 1
print(f"Starting from {start_point}")
# generate
all_times = []
with open(os.path.join(args.output_dir, f"results.jsonl"), "a") as f:
for ii in range(start_point, len(prompts), args.batch_size):
# generate chunk
time0 = time.time()
chunk_size = min(args.batch_size, len(prompts) - ii)
results = generator.generate(
prompts[ii:ii+chunk_size],
max_gen_len=args.max_gen_len,
temperature=args.temperature,
top_p=args.top_p
)
time1 = time.time()
# time chunk
speed = chunk_size / (time1 - time0)
eta = (len(prompts) - ii) / speed
eta = time.strftime("%Hh%Mm%Ss", time.gmtime(eta))
all_times.append(time1 - time0)
print(f"Generated {ii:5d} - {ii+chunk_size:5d} - Speed {speed:.2f} prompts/s - ETA {eta}")
# log
for prompt, result in zip(prompts[ii:ii+chunk_size], results):
f.write(json.dumps({
"prompt": prompt,
"result": result[len(prompt):],
"speed": speed,
"eta": eta}) + "\n")
f.flush()
print(f"Average time per prompt: {np.sum(all_times) / (len(prompts) - start_point) :.2f}")
if args.method_detect == 'same':
args.method_detect = args.method
if (not args.do_eval) or (args.method_detect not in ["openai", "maryland", "marylandz", "openaiz", "openainp"]):
return
# build watermark detector
if args.method_detect == "openai":
detector = OpenaiDetector(tokenizer, args.ngram, args.seed, args.seeding, args.hash_key)
elif args.method_detect == "openaiz":
detector = OpenaiDetectorZ(tokenizer, args.ngram, args.seed, args.seeding, args.hash_key)
elif args.method_detect == "openainp":
detector = OpenaiNeymanPearsonDetector(model, tokenizer, args.ngram, args.seed, args.seeding, args.hash_key)
elif args.method_detect == "maryland":
detector = MarylandDetector(tokenizer, args.ngram, args.seed, args.seeding, args.hash_key, gamma=args.gamma, delta=args.delta)
elif args.method_detect == "marylandz":
detector = MarylandDetectorZ(tokenizer, args.ngram, args.seed, args.seeding, args.hash_key, gamma=args.gamma, delta=args.delta)
# build sbert model
sbert_model = SentenceTransformer('all-MiniLM-L6-v2')
cossim = torch.nn.CosineSimilarity(dim=0, eps=1e-6)
results_orig = load_results(json_path=args.prompt_path, nsamples=args.nsamples, result_key="output")
if args.split is not None:
results_orig = results_orig[left:right]
# evaluate
results = load_results(json_path=os.path.join(args.output_dir, f"results.jsonl"), nsamples=args.nsamples, result_key="result")
log_stats = []
text_index = left if args.split is not None else 0
with open(os.path.join(args.output_dir, 'scores.jsonl'), 'w') as f:
for text, text_orig in tqdm.tqdm(zip(results, results_orig)):
# compute watermark score
if args.method_detect == "openainp":
scores_no_aggreg, probs = detector.get_scores_by_t([text], scoring_method=args.scoring_method, payload_max=args.payload_max)
scores = detector.aggregate_scores(scores_no_aggreg) # p 1
pvalues = detector.get_pvalues(scores_no_aggreg, probs)
else:
scores_no_aggreg = detector.get_scores_by_t([text], scoring_method=args.scoring_method, payload_max=args.payload_max)
scores = detector.aggregate_scores(scores_no_aggreg) # p 1
pvalues = detector.get_pvalues(scores_no_aggreg)
if args.payload_max:
# decode payload and adjust pvalues
payloads = np.argmin(pvalues, axis=1).tolist()
all_pvalues = [pvalues[0].tolist()]
pvalues = pvalues[:,payloads][0].tolist() # in fact pvalue is of size 1, but the format could be adapted to take multiple text at the same time
scores = [float(s[payload]) for s,payload in zip(scores,payloads)]
# adjust pvalue to take into account the number of tests (2**payload_max)
# use exact formula for high values and (more stable) upper bound for lower values
M = args.payload_max+1
pvalues = [(1 - (1 - pvalue)**M) if pvalue > min(1 / M, 1e-5) else M * pvalue for pvalue in pvalues]
else:
payloads = [ 0 ] * len(pvalues)
pvalues = pvalues[:,0].tolist()
all_pvalues = pvalues
scores = [float(s[0]) for s in scores]
num_tokens = [len(score_no_aggreg) for score_no_aggreg in scores_no_aggreg]
# compute sbert score
xs = sbert_model.encode([text, text_orig], convert_to_tensor=True)
score_sbert = cossim(xs[0], xs[1]).item()
# log stats and write
log_stat = {
'text_index': text_index,
'num_token': num_tokens[0],
'score': scores[0],
'pvalue': pvalues[0],
'all_pvalues': all_pvalues[0],
'score_sbert': score_sbert,
'payload': payloads[0],
}
log_stats.append(log_stat)
f.write(json.dumps(log_stat)+'\n')
text_index += 1
df = pd.DataFrame(log_stats)
df['log10_pvalue'] = np.log10(df['pvalue'])
print(f">>> Scores: \n{df.describe(percentiles=[])}")
print(f"Saved scores to {os.path.join(args.output_dir, 'scores.csv')}")
if __name__ == "__main__":
args = get_args_parser().parse_args()
main(args)