修复微调时梯度奇异值的异常增长,提升隐私保护下的训练效率
Re-examining Low Rank adaptation for private LLM fine-tuning
- 通过恢复梯度奇异值的快速衰减特性,优化差分隐私训练过程
- 在多个基准上实现更优的样本效率,模型参数达40亿仍有效
- 适合关注隐私保护下大模型高效微调的研究者与开发者
在敏感数据上微调大语言模型时,隐私保护至关重要。差分隐私随机梯度下降(DP-SGD)通过截断样本梯度并添加校准高斯噪声,提供形式化隐私保障。理论与实践均表明,低秩模型更适合于差分隐私训练,尤其适用于具有强低秩结构的LLM微调梯度。现有方法如DP-LoRA通过限制更新至低秩子空间来利用这一特性,即仅保留每层梯度SVD中的少数非零成分。然而我们指出,尽管非零成分数量少很重要,但DP-SGD引入的各向同性噪声会放大梯度矩阵的奇异值,破坏其自然快速衰减。本文研究此噪声引起的奇异值膨胀是否影响性能,并证明部分恢复原始奇异值分布能显著提升DP-SGD的样本效率。在语言分类(基于RoBERTa的GLUE基准)和文本生成(基于Qwen与Llama的E2E、DART表到文本基准,模型最大达40亿参数)上的实验表明,恢复奇异值快速衰减是加速差分隐私优化的有效策略,且不损害隐私保证。
原文摘要 · Abstract (English)
Privacy is a central concern when fine-tuning large language models (LLMs) on sensitive data, and differentially private stochastic gradient descent (DP-SGD) -- which clips per-sample gradients and adds calibrated Gaussian noise -- is the standard tool for formal privacy guarantees. Both theory and practice show that lower-rank models are better suited to DP training, a property especially relevant for LLMs, whose fine-tuning gradients exhibit a strong low-rank structure. Methods such as DP-LoRA exploit this by restricting updates to a low-rank subspace, i.e., retaining only a few non-zero components in the SVD of each layer's gradient. However, we argue that while having few non-zero components is important, the isotropic noise injected by DP-SGD inflates the singular values of the gradient matrix, disrupting their naturally fast decay. In this work, we investigate whether this noise-induced eigenvalue blow-up reduces performance, and show that partially restoring the original singular-value profile significantly improves the sample efficiency of DP-SGD. Experiments on language classification (GLUE benchmark with RoBERTa) and text generation (E2E and DART table-to-text benchmarks with Qwen and Llama models up to 4B parameters) showcase that restoring the fast decay of singular values is a viable strategy for speeding up the DP optimization process, without compromising privacy guarantees.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。