arXiv:2507.09990cs.CRcs.AI2025-07NeurIPS被引 4

提出新方法让联邦学习中两个低秩适配器同时更新且隐私有保障。

Differentially Private Federated Low Rank Adaptation Beyond Fixed-Matrix

  • 用双阶段压缩技术保护隐私,实现双向适配器更新。
  • 在多种数据分布下,性能优于现有方法,且满足严格差分隐私。
  • 适合需要保护数据隐私的多方协作大模型微调场景。

大型语言模型(LLMs)通常需针对特定任务微调,LoRA通过训练低秩适配器提供计算高效方案。在联邦学习中,多个用户协同微调全局模型而无需共享原始数据,此时传输本地适配器仍存在严重隐私泄露风险。将差分隐私(DP)应用于联邦LoRA面临困境:对两个适配器加噪会放大模型合成噪声;固定一个适配器则损害微调可学习性。本文提出FedASK(带双压缩的差分隐私联邦低秩适配),一种新型联邦LoRA框架,支持两个低秩适配器的有效更新并具备强差分隐私保护。受随机化SVD启发,核心思想是两阶段压缩流水线:先聚合经精心压缩、隐私保护的本地更新,再由服务器重建全局矩阵,从而有效更新两个适配器。理论证明了FedASK的差分隐私保证和精确聚合性质。大量实验表明,无论在何种隐私设置或数据分布下,FedASK均持续优于基线方法。

原文摘要 · Abstract (English)

Large language models (LLMs) typically require fine-tuning for domain-specific tasks, and LoRA offers a computationally efficient approach by training low-rank adapters. LoRA is also communication-efficient for federated LLMs when multiple users collaboratively fine-tune a global LLM model without sharing their proprietary raw data. However, even the transmission of local adapters between a server and clients risks serious privacy leakage. Applying differential privacy (DP) to federated LoRA encounters a dilemma: adding noise to both adapters amplifies synthetic noise on the model, while fixing one adapter impairs the learnability of fine-tuning. In this paper, we propose FedASK (Differentially Private Federated Low Rank Adaptation with Double Sketching) , a novel federated LoRA framework to enable effective updating of both low-rank adapters with robust differential privacy. Inspired by randomized SVD, our key idea is a two-stage sketching pipeline. This pipeline first aggregates carefully sketched, privacy-preserving local updates, and then reconstructs the global matrices on the server to facilitate effective updating of both adapters. We theoretically prove FedASK's differential privacy guarantee and its exact aggregation property. Comprehensive experiments demonstrate that FedASK consistently outperforms baseline methods across a variety of privacy settings and data distributions.

联邦学习差分隐私低秩适配LLM微调

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。