arXiv:2505.12805cs.LGcs.AI2025-05NeurIPS被引 15

FedSVD通过SVD重参数化解决联邦学习中LoRA的隐私噪声放大问题。

FedSVD: Adaptive Orthogonalization for Private Federated Learning with LoRA

  • 用SVD对LoRA更新进行全局重构,仅传输并聚合矩阵B
  • 新生成的A矩阵为正交向量,降低梯度范数,提升隐私保护效果
  • 适用于高隐私要求场景,显著改善模型性能与训练稳定性

低秩适配(LoRA)在联邦学习中广泛用于高效微调语言模型,但与差分隐私随机梯度下降(DP-SGD)结合时会引发严重噪声放大:DP-SGD对样本梯度加噪,而LoRA更新中的矩阵乘积$BA$会加剧此效应。冻结一个矩阵(如$A$)可减少噪声但限制模型表达能力,常导致适应性能不佳。为此,我们提出FedSVD,一种基于奇异值分解(SVD)的全局重参数化方法。客户端仅优化并上传矩阵$B$,服务器聚合后使用前一时刻的$A$计算$BA$,再通过SVD重构:新$A$由$BA$的右正交奇异向量组成,新$B$包含剩余奇异值分量。该方法避免了二次噪声放大,同时让$A$更优捕捉整体更新主方向。正交结构约束$B$的梯度范数,在DP-SGD下保留更多信号,理论分析支持其有效性。实验表明,FedSVD在多种隐私设置与基准测试中均显著优于基线,无论在私有还是非私有场景下表现更优。

原文摘要 · Abstract (English)

Low-Rank Adaptation (LoRA), which introduces a product of two trainable low-rank matrices into frozen pre-trained weights, is widely used for efficient fine-tuning of language models in federated learning (FL). However, when combined with differentially private stochastic gradient descent (DP-SGD), LoRA faces substantial noise amplification: DP-SGD perturbs per-sample gradients, and the matrix multiplication of the LoRA update ($BA$) intensifies this effect. Freezing one matrix (e.g., $A$) reduces the noise but restricts model expressiveness, often resulting in suboptimal adaptation. To address this, we propose $\texttt{FedSVD}$, a simple yet effective method that introduces a global reparameterization based on singular value decomposition (SVD). In our approach, each client optimizes only the $B$ matrix and transmits it to the server. The server aggregates the $B$ matrices, computes the product $BA$ using the previous $A$, and refactorizes the result via SVD. This yields a new adaptive $A$ composed of the orthonormal right singular vectors of $BA$, and an updated $B$ containing the remaining SVD components. This reparameterization avoids quadratic noise amplification, while allowing $A$ to better capture the principal directions of the aggregate updates. Moreover, the orthonormal structure of $A$ bounds the gradient norms of $B$ and preserves more signal under DP-SGD, as confirmed by our theoretical analysis. As a result, $\texttt{FedSVD}$ consistently improves stability and performance across a variety of privacy settings and benchmarks, outperforming relevant baselines under both private and non-private regimes.

联邦学习隐私保护LoRASVD

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。