arXiv:2512.06711cs.CL2025-12被引 13

用少量参数实现隐私保护的高效指令微调

Parameter-Efficient Fine-Tuning with Differential Privacy for Robust Instruction Adaptation in Large Language Models

  • 冻结主模型,仅更新低维投影空间参数
  • 结合梯度裁剪与自适应噪声分配,提升隐私预算效率
  • 适合需要安全训练的多任务指令场景

本研究针对大规模语言模型指令微调中的隐私保护与效率问题,提出一种参数高效的方法,将差分隐私噪声分配与梯度裁剪协同集成于统一优化框架中。该方法保持骨干模型冻结,通过低维投影子空间更新参数,并在梯度计算中引入裁剪与自适应噪声分配机制,降低隐私预算消耗,保障训练稳定性和鲁棒性。统一框架融合梯度约束、噪声分配与参数投影,有效缓解多任务指令场景下的性能波动与隐私风险。在超参数、环境和数据敏感性维度上进行实验,结果表明该方法在准确率、隐私预算和参数效率方面均优于基线模型,且在多样和不确定数据条件下表现稳定。研究丰富了差分隐私与参数高效微调的理论融合,展示了其在指令任务中的实际适应性,为复杂指令环境下的安全训练提供了可行方案。

原文摘要 · Abstract (English)

This study addresses the issues of privacy protection and efficiency in instruction fine-tuning of large-scale language models by proposing a parameter-efficient method that integrates differential privacy noise allocation with gradient clipping in a collaborative optimization framework. The method keeps the backbone model frozen and updates parameters through a low-dimensional projection subspace, while introducing clipping and adaptive noise allocation during gradient computation. This design reduces privacy budget consumption and ensures training stability and robustness. The unified framework combines gradient constraints, noise allocation, and parameter projection, effectively mitigating performance fluctuations and privacy risks in multi-task instruction scenarios. Experiments are conducted across hyperparameter, environment, and data sensitivity dimensions. Results show that the method outperforms baseline models in accuracy, privacy budget, and parameter efficiency, and maintains stable performance under diverse and uncertain data conditions. The findings enrich the theoretical integration of differential privacy and parameter-efficient fine-tuning and demonstrate its practical adaptability in instruction tasks, providing a feasible solution for secure training in complex instruction environments.

隐私保护微调大模型

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。