arXiv:2608.03277cs.LGcs.CR2026-08

提出自适应降噪方法,提升私有化零阶微调模型性能

Noise-Aware Shrinkage for Differentially Private Zeroth-Order Fine-Tuning of Large Language Models

论文配图:Noise-Aware Shrinkage for Differentially Private Zeroth-Order Fine-Tuning of Large Language Models
图 1 · 摘自论文原文
  • 根据信号质量动态调整噪声抑制强度,避免噪声主导更新
  • 在相同隐私预算下,多个模型上优于现有方法
  • 无需额外查询或隐私预算,适合资源受限的私有微调

差分隐私零阶优化(DP-ZO)通过仅前向评估实现大语言模型的内存高效私有微调。现有基于聚合的DP-ZO方法以固定尺度重建模型更新,忽略了有用信号强度随训练变化的特点,导致噪声主导的更新被过度加权,损害模型性能。为此,我们提出SAGE——一种噪声感知的自适应收缩方法,根据估计的信号质量对隐私化估计进行动态衰减。SAGE通过从观测二阶矩中减去已知高斯噪声方差来估计底层信号能量,结合时间追踪稳定估计,并将当前信噪比与预热参考值比较,生成有界收缩因子。作为纯后处理,SAGE无需额外隐私预算或模型查询,仅引入恒定额外状态。理论分析表明,收缩能更快降低二次更新风险项,同时保留有效下降方向。在RoBERTa-large、OPT-1.3B和OPT-6.7B上的实验表明,SAGE在相同隐私预算下多数场景下优于基线,且保持了DP-ZO的前向仅存效率。

原文摘要 · Abstract (English)

Differentially private zeroth-order optimization (DP-ZO) enables memory-efficient private fine-tuning of large language models using only forward evaluations. Existing aggregation-based DP-ZO methods reconstruct model updates at a fixed scale, ignoring that the strength of useful signals varies throughout training. Consequently, noise-dominated updates may receive excessive weight and degrade model utility. To address this issue, we propose SAGE, a noise-aware shrinkage method that adaptively attenuates privatized estimates according to their estimated signal quality. SAGE subtracts the known Gaussian noise variance from the observed second moment to estimate the underlying signal energy, stabilizes this estimate through temporal tracking, and compares its current signal-to-noise level with a warm-up reference to derive a bounded shrinkage factor. As pure post-processing, SAGE requires neither additional privacy budget nor model queries and introduces only constant additional state. Our theoretical analysis shows that shrinkage reduces the quadratic update-risk term faster than the linear descent term, preserving useful descent while limiting the influence of noise-dominated updates. Experiments on RoBERTa-large, OPT-1.3B, and OPT-6.7B demonstrate that SAGE outperforms existing baselines in most settings under the same privacy budgets while preserving the forward-only memory efficiency of DP-ZO.

差分隐私零阶优化大模型微调自适应收缩

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。