arXiv:2412.02467cs.LGcs.CL2024-12被引 8

用两阶段微调让大模型在隐私保护下更好生成表格数据

DP-2Stage: Adapting Language Models as Differentially Private Tabular Data Generators

  • 先非私有微调伪数据,再私有微调真实数据
  • 相比直接私有微调,生成质量显著提升
  • 适合需要隐私保护的数据合成场景

在差分隐私(DP)保护下生成表格数据可提供理论隐私保障,但训练模型面临挑战,主要源于在噪声监督信号下捕捉复杂结构的困难。近期预训练大语言模型(如GPT-2规模)在合成表格数据方面展现出巨大潜力,但在DP约束下的应用仍基本未被探索。本文通过将DP技术应用于合成表格数据生成,发现直接对大模型进行DP微调时,由于隐私预算被低效分配给非隐私元素(如表格结构),导致生成文本连贯性下降。为此,我们提出DP-2Stage:一种两阶段微调框架。第一阶段在伪数据上进行非私有微调,第二阶段在私有数据上进行差分隐私微调。实验证明,该方法在多种设置和指标下均优于直接私有微调的大模型。代码与配置已公开于https://github.com/tejuafonja/DP-2Stage。

原文摘要 · Abstract (English)

Generating tabular data under differential privacy (DP) protection ensures theoretical privacy guarantees but poses challenges for training machine learning models, primarily due to the need to capture complex structures under noisy supervision signals. Recently, pre-trained Large Language Models (LLMs) -- even those at the scale of GPT-2 -- have demonstrated great potential in synthesizing tabular data. However, their applications under DP constraints remain largely unexplored. In this work, we address this gap by applying DP techniques to the generation of synthetic tabular data. Our findings shows that LLMs face difficulties in generating coherent text when fine-tuned with DP, as privacy budgets are inefficiently allocated to non-private elements like table structures. To overcome this, we propose DP-2Stage, a two-stage fine-tuning framework for differentially private tabular data generation. The first stage involves non-private fine-tuning on a pseudo dataset, followed by DP fine-tuning on a private dataset. Our empirical results show that this approach improves performance across various settings and metrics compared to directly fine-tuned LLMs in DP contexts. We release our code and setup at https://github.com/tejuafonja/DP-2Stage.

差分隐私表格生成大模型微调

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。