提出ScaleOT框架,实现高隐私低损耗的模型微调。
ScaleOT: Privacy-utility-scalable Offsite-tuning with Dynamic LayerReplace and Selective Rank Compression
- 用强化学习评估层重要性,动态替换与压缩层以生成压缩模拟器。
- 相比全量微调,性能近乎无损且隐私保护更强。
- 适合关注隐私与效率平衡的LLM部署场景。
Offsite-tuning是一种保护隐私的大型语言模型(LLM)微调方法,通过模型所有者向数据所有者共享一个有损压缩的模拟器进行下游任务微调,从而保护模型和数据双方的隐私。然而,现有方法常因统一丢弃模型层或依赖昂贵的知识蒸馏,导致适应性能下降、计算成本高、防护能力弱。为此,我们提出ScaleOT,一种新型隐私-效用可扩展的离站微调框架,能有效平衡隐私与性能。ScaleOT引入一种基于强化学习的逐层有损压缩算法,自动评估各层重要性;采用轻量级网络(称为harmonizers)替代原始模型层;通过灵活组合重要原始层与harmonizers,生成适配不同规模模型的优化模拟器,提升隐私保护能力。此外,我们提出一种秩压缩方法,进一步降低原始层维度,在几乎不影响性能的前提下显著增强隐私性。大量实验表明,ScaleOT在接近全量微调性能的同时,实现了更强的模型隐私保护。
原文摘要 · Abstract (English)
Offsite-tuning is a privacy-preserving method for tuning large language models (LLMs) by sharing a lossy compressed emulator from the LLM owners with data owners for downstream task tuning. This approach protects the privacy of both the model and data owners. However, current offsite tuning methods often suffer from adaptation degradation, high computational costs, and limited protection strength due to uniformly dropping LLM layers or relying on expensive knowledge distillation. To address these issues, we propose ScaleOT, a novel privacy-utility-scalable offsite-tuning framework that effectively balances privacy and utility. ScaleOT introduces a novel layerwise lossy compression algorithm that uses reinforcement learning to obtain the importance of each layer. It employs lightweight networks, termed harmonizers, to replace the raw LLM layers. By combining important original LLM layers and harmonizers in different ratios, ScaleOT generates emulators tailored for optimal performance with various model scales for enhanced privacy protection. Additionally, we present a rank reduction method to further compress the original LLM layers, significantly enhancing privacy with negligible impact on utility. Comprehensive experiments show that ScaleOT can achieve nearly lossless offsite tuning performance compared with full fine-tuning while obtaining better model privacy.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。