arXiv:2602.19926cs.LGcs.AI2026-02被引 6

针对大模型联邦学习中的隐私-性能权衡,提出新方法提升隐私保护下的微调效果。

Rethinking LoRA for Privacy-Preserving Federated Learning in Large Models

  • 分步更新低秩矩阵,减少梯度耦合与噪声放大
  • 在ε=1隐私预算下,图像模型准确率比基线高16.83%
  • 适用于视觉与语言大模型,适合注重隐私的场景

在差分隐私联邦学习(DPFL)框架下微调大视觉模型(LVMs)和大语言模型(LLMs)面临隐私与性能的固有权衡。低秩适配(LoRA)作为一种参数高效微调(PEFT)方法,通过引入两个可训练的低秩矩阵并冻结预训练权重,降低了计算与通信开销。然而,在DPFL设置中直接应用LoRA会导致性能下降,尤其在视觉模型中更为明显。我们分析发现三个此前未被充分关注的问题:(1)两个非对称低秩矩阵同时更新导致的梯度耦合;(2)差分隐私下噪声放大的叠加效应;(3)参数空间中全局聚合模型的尖锐性。为此,我们提出LA-LoRA(Local Alternating LoRA),通过解耦梯度交互并对齐客户端更新方向,增强在严格隐私约束下的鲁棒性。理论上,LA-LoRA强化了噪声联邦环境中的收敛性保证。大量实验表明,其在Swin Transformer和RoBERTa模型上均达到当前最优(SOTA)性能,对DP噪声具有强鲁棒性,并广泛适用于大视觉与大语言模型。例如,在Tiny-ImageNet数据集上以ε=1的隐私预算微调Swin-B模型时,其测试准确率比最优基线RoLoRA高出16.83%。代码已公开。

原文摘要 · Abstract (English)

Fine-tuning large vision models (LVMs) and large language models (LLMs) under differentially private federated learning (DPFL) is hindered by a fundamental privacy-utility trade-off. Low-Rank Adaptation (LoRA), a promising parameter-efficient fine-tuning (PEFT) method, reduces computational and communication costs by introducing two trainable low-rank matrices while freezing pre-trained weights. However, directly applying LoRA in DPFL settings leads to performance degradation, especially in LVMs. Our analysis reveals three previously underexplored challenges: (1) gradient coupling caused by the simultaneous update of two asymmetric low-rank matrices, (2) compounded noise amplification under differential privacy, and (3) sharpness of the global aggregated model in the parameter space. To address these issues, we propose LA-LoRA (\textbf{L}ocal \textbf{A}lternating \textbf{LoRA}), a novel approach that decouples gradient interactions and aligns update directions across clients to enhance robustness under stringent privacy constraints. Theoretically, LA-LoRA strengthens convergence guarantees in noisy federated environments. Extensive experiments demonstrate that LA-LoRA achieves state-of-the-art (SOTA) performance on Swin Transformer and RoBERTa models, showcasing robustness to DP noise and broad applicability across both LVMs and LLMs. For example, when fine-tuning the Swin-B model on the Tiny-ImageNet dataset under a strict privacy budget ($ε= 1$), LA-LoRA outperforms the best baseline, RoLoRA, by 16.83\% in test accuracy. Code is provided in \repolink.

联邦学习隐私保护低秩适配大模型

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。