arXiv:2508.06783cs.LGcs.AI2025-08中稿 · the Transactions o…被引 2

提出分阶段隐私对齐框架,让大模型在保护人类偏好隐私的同时提升性能。

PROPS: Progressively Private Self-alignment of Large Language Models

  • 用多阶段自反馈机制,逐步提升模型对齐的隐私性。
  • 相同隐私预算下,胜率比DP-SGD高3倍,比随机响应高2.5倍。
  • 适合注重隐私保护的大模型训练,尤其适用于标注数据敏感的场景。

对齐是利用人类反馈训练大语言模型的关键步骤,以确保模型符合人类价值观与社会规范。但依赖人类反馈会引发隐私问题:标注者的偏好可能暴露其个人价值观、信仰和性格特征。现有方法如差分隐私随机梯度下降(DP-SGD)通过在微调中加密梯度提供严格隐私保障,但过度保护且损害模型性能,因人类偏好仅与(提示,回复)对的标签相关。本文聚焦于基于偏好级别的隐私对齐,保护人类提供的偏好标签隐私。提出PROPS(PROgressively Private Self-alignment)框架,利用前阶段私有化对齐的模型作为后续阶段的标签生成器,补充训练数据。理论证明了其隐私性,并在Pythia、GPT等模型及AlpacaEval、Anthropic HH-RLHF、truthy-dpo-v0.1等多个数据集上验证。在相同隐私预算下,PROPS相比DP-SGD实现最高3倍的胜率提升,相比随机响应(RR)提升2.5倍,兼顾高隐私与高效用。

原文摘要 · Abstract (English)

Alignment is a key step in developing Large Language Models (LLMs) using human feedback to ensure adherence to human values and societal norms. Dependence on human feedback raises privacy concerns about how much a labeler's preferences may reveal about their personal values, beliefs, and personality traits. Existing approaches, such as Differentially Private SGD (DP-SGD), provide rigorous privacy guarantees by privatizing gradients during fine-tuning and alignment but can provide more privacy than necessary as human preferences are tied only to labels of (prompt, response) pairs and can degrade model utility. This work focuses on LLM alignment with preference-level privacy, which preserves the privacy of preference labels provided by humans. We propose PROPS (PROgressively Private Self-alignment), a multi-stage privacy preserving alignment framework where privately aligned models in previous stages can serve as labelers for supplementing training data in the subsequent stages of alignment. We present theoretical guarantees for PROPS as well as comprehensive validation using multiple models (Pythia and GPT) and datasets (AlpacaEval, Anthropic HH-RLHF, truthy-dpo-v0.1) to demonstrate the utility of PROPS over existing methods while still providing high privacy. For the same privacy budget, alignment via PROPS can achieve up to 3x higher win-rates compared to DP-SGD, and 2.5x higher win-rates compared to Randomized Response (RR) based alignment.

大模型对齐隐私保护差分隐私自对齐

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。