无需训练即可保护隐私地微调大模型,性能超越现有方法
GradOT: Training-free Gradient-preserving Offsite-tuning for Large Language Models
- 通过梯度保持压缩,选择性应用降秩与通道剪枝
- 在不训练的前提下,实现比现有方法更优的隐私与性能平衡
- 适合关注大模型隐私微调的开发者与研究者
大型语言模型(LLMs)的传统集中式微调虽能应对领域挑战,却带来模型与数据隐私风险。为解决此问题,提出离站微调(OT),即从原模型压缩生成较弱模拟器,并用适配器微调以增强隐私。然而现有方法计算开销高且缺乏理论分析。本文提出一种基于梯度保持压缩的新OT方法——GradOT。通过优化视角分析OT问题,设计选择性压缩策略(如秩压缩、通道剪枝),在保留微调适配器梯度的同时保障隐私。大量实验表明,该方法在隐私保护与模型性能上均优于现有方案。本工作为OT提供理论基础,并给出适用于大规模LLM的实用、免训练离站微调方案。
原文摘要 · Abstract (English)
The rapid growth of large language models (LLMs) with traditional centralized fine-tuning emerges as a key technique for adapting these models to domain-specific challenges, yielding privacy risks for both model and data owners. One promising solution, called offsite-tuning (OT), is proposed to address these challenges, where a weaker emulator is compressed from the original model and further fine-tuned with adapter to enhance privacy. However, the existing OT-based methods require high computational costs and lack theoretical analysis. This paper introduces a novel OT approach based on gradient-preserving compression, named GradOT. By analyzing the OT problem through the lens of optimization, we propose a method that selectively applies compression techniques such as rank compression and channel pruning, preserving the gradients of fine-tuned adapters while ensuring privacy. Extensive experiments demonstrate that our approach surpasses existing OT methods, both in terms of privacy protection and model performance. Our method provides a theoretical foundation for OT and offers a practical, training-free solution for offsite-tuning of large-scale LLMs.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。