提出抗污染的联邦LoRA微调框架,实现高效跨客户端协作。
Federated LoRA Fine-Tuning for LLMs via Collaborative Alignment

- 通过低秩加块稀疏分解,从局部更新中恢复共享子空间。
- 在无噪声下可精确恢复共享子空间,且能准确识别污染客户端。
- 适合存在数据异构和恶意干扰的联邦学习场景,提升模型性能。
低秩适应(LoRA)已成为大语言模型参数高效微调的强大工具。本文研究了在联邦学习设置下的LoRA,实现了客户端间的协同微调并保持参数效率。我们关注高度异构的场景,其中客户端仅共享部分结构,且大量客户端可能被污染。提出一种抗污染的协同低秩对齐与可识别恢复框架(CLAIR),仅依赖初步的本地估计。其形式适用于线性回归、神经网络及大模型模块等可由矩阵更新表示的场景。CLAIR通过结构化低秩加块稀疏分解,恢复共享的LoRA子空间并检测污染客户端。理论上证明:在无噪声情况下可精确恢复共享子空间;在初步估计误差下具稳定性;在温和分离条件下一致恢复协作集。进一步量化发现,通过跨客户端平均降低非子空间误差,同时保留客户端特异性变化,当此理想增益超过子空间估计成本与良性异构代价时,优于本地微调。实验上,在文本复制任务上对Transformer进行微调,结果表明CLAIR能准确检测污染,且优于本地微调和非鲁棒的联邦平均。
原文摘要 · Abstract (English)
Low-rank adaptation (LoRA) has emerged as a powerful tool for parameter-efficient fine-tuning of large language models (LLMs). This paper studies LoRA under a federated learning setting, enabling collaborative fine-tuning across clients while preserving parameter efficiency. We focus on a highly heterogeneous regime in which clients share only partial structure and a substantial subset may be contaminated. We propose Collaborative Low-rank Alignment and Identifiable Recovery (CLAIR), a contamination-aware framework that relies only on preliminary local estimators. Its formulation applies broadly, from linear regression to neural network and LLM modules, whenever local adaptation can be represented by matrix-valued updates. CLAIR recovers the shared LoRA subspace and detects contaminated clients via a structured low-rank plus block-sparse decomposition. We prove exact recovery of the shared LoRA subspace in the noiseless case, stable recovery under preliminary estimation error, and consistent collaborative-set recovery under mild separation conditions. We further quantify the gain from CLAIR refinement: it reduces off-subspace estimation error through cross-client averaging while preserving client-specific variation within the shared LoRA subspace, thus improves over local fine-tuning whenever this oracle gain outweighs the costs of subspace estimation and benign-client heterogeneity. Empirically, we demonstrate the benefits of CLAIR by fine-tuning a Transformer architecture on a text-copying task. The results show accurate contamination detection and improved benign-client performance compared with local fine-tuning and non-robust federated averaging.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。