Offsite-Tuning: Transfer Learning without Full Model
Not on the map. Why?
Abstract (arXiv)
Transfer learning is important for foundation models to adapt to downstream tasks. However, many foundation models are proprietary, so users must share their data with model owners to fine-tune the models, which is costly and raise privacy concerns. Moreover, fine-tuning large foundation models is computation-intensive and impractical for most downstream users. In this paper, we propose Offsite-Tuning, a privacy-preserving and efficient transfer learning framework that can adapt billion-parameter foundation models to downstream data without access to the full model. In offsite-tuning, the model owner sends a light-weight adapter and a lossy compressed emulator to the data owner, who then fine-tunes the adapter on the downstream data with the emulator's assistance. The fine-tuned adapter is then returned to the model owner, who plugs it into the full model to create an adapted foundation model. Offsite-tuning preserves both parties' privacy and is computationally more efficient than the existing fine-tuning methods that require access to the full model weights. We demonstrate the effectiveness of offsite-tuning on various large language and vision foundation models. Offsite-tuning can achieve comparable accuracy as full model fine-tuning while being privacy-preserving and efficient, achieving 6.5x speedup and 5.6x memory reduction. Code is available at https://github.com/mit-han-lab/offsite-tuning.
Key facts. Cited by 78 papers in the map (data through 14 Oct 2026). Builds on 46 of its 60 references that are in the map. First posted on arXiv 9 Feb 2023.
Builds on
46 of 60 references.
References · 46
- 2017Attention Is All You Needcited by 60,361
- 2014Adam: A Method for Stochastic Optimizationcited by 37,240
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
- 2020Language Models are Few-Shot Learnerscited by 32,419
- 2022Training language models to follow instructions with human feedbackcited by 15,971
- 2015Distilling the Knowledge in a Neural Networkcited by 10,324
- 2016Communication-Efficient Learning of Deep Networks from Decentralized Datacited by 7,669
- 2018Think you have Solved Question Answering? Try ARC, the AI2 Reasoning Challengecited by 4,886
- 2019DistilBERT, a distilled version of BERT: smaller, faster, cheaper and lightercited by 4,307
- 2019Parameter-Efficient Transfer Learning for NLPcited by 4,236
- 2022LAION-5B: An open large-scale dataset for training next generation image-text modelscited by 4,152
- 2019HellaSwag: Can a Machine Really Finish Your Sentence?cited by 4,100
34 more
- 2022Robust Speech Recognition via Large-Scale Weak Supervisioncited by 4,057
- 2021On the Opportunities and Risks of Foundation Modelscited by 4,033
- 2021Prefix-Tuning: Optimizing Continuous Prompts for Generationcited by 3,915
- 2021Finetuned Language Models Are Zero-Shot Learnerscited by 3,780
- 2022OPT: Open Pre-trained Transformer Language Modelscited by 3,512
- 2016Pointer Sentinel Mixture Modelscited by 3,096
- 2019Advances and Open Problems in Federated Learningcited by 3,046
- 2019PIQA: Reasoning about Physical Commonsense in Natural Languagecited by 2,883
- 2015Deep Compression: Compressing Deep Neural Networks with Pruning, Trained Quantization and Huffman Codingcited by 2,329
- 2018Can a Suit of Armor Conduct Electricity? A New Dataset for Open Book Question Answeringcited by 2,164
- 2022BLOOM: A 176B-Parameter Open-Access Multilingual Language Modelcited by 1,984
- 2017Quantization and Training of Neural Networks for Efficient Integer-Arithmetic-Only Inferencecited by 1,593
- 2021LAION-400M: Open Dataset of CLIP-Filtered 400 Million Image-Text Pairscited by 1,555
- 2022SmoothQuant: Accurate and Efficient Post-Training Quantization for Large Language Modelscited by 1,386
- 2021BitFit: Simple Parameter-efficient Fine-tuning for Transformer-based Masked Language-modelscited by 1,245
- 2022Few-Shot Parameter-Efficient Fine-Tuning is Better and Cheaper than In-Context Learningcited by 896
- 2017RACE: Large-scale ReAding Comprehension Dataset From Examinationscited by 861
- 2017Crowdsourcing Multiple Choice Science Questionscited by 765
- 2022EVA: Exploring the Limits of Masked Visual Representation Learning at Scalecited by 691
- 2016Federated Optimization: Distributed Machine Learning for On-Device Intelligencecited by 564
- 2022Using DeepSpeed and Megatron to Train Megatron-Turing NLG 530B, A Large-Scale Generative Language Modelcited by 559
- 2022Images Speak in Images: A Generalist Painter for In-Context Visual Learningcited by 318
- 2022Surgical Fine-Tuning Improves Adaptation to Distribution Shiftscited by 205
- 2022On-Device Training Under 256KB Memorycited by 160
- 2020On the Effect of Dropping Layers of Pre-trained Transformer Modelscited by 118
- 2019Generative Models for Effective ML on Private, Decentralized Datasetscited by 85
- 2022MPCFormer: fast, performant and private Transformer inference with MPCcited by 69
- 2016Training Neural Networks Without Gradients: A Scalable ADMM Approachcited by 61
- 2018Faster CryptoNets: Leveraging Sparsity for Real-World Encrypted Inferencecited by 45
- 2018Decoupled Parallel Backpropagation with Convergence Guaranteecited by 39
- 2017Convergent Block Coordinate Descent for Training Tikhonov Regularized Deep Neural Networkscited by 26
- 2018Lifted Neural Networkscited by 20
- 2019On the Acceleration of Deep Learning Model Parallelism with Stalenesscited by 17
- 2018Lifted Proximal Operator Machinescited by 14
Built on by
Citing papers per year: 2023: 22; 2024: 23; 2025: 27; 2026: 6.
78 papers.
Sort:
By area:
- 2024Parameter-Efficient Fine-Tuning for Large Models: A Comprehensive Surveycited by 656
- 2023FederatedScope-LLM: A Comprehensive Package for Fine-tuning Large Language Models in Federated Learningcited by 149
- 2024MixLoRA: Enhancing Large Language Models Fine-Tuning with LoRA-based Mixture of Expertscited by 147
- 2023When Foundation Model Meets Federated Learning: Motivations, Challenges, and Future Directionscited by 84
- 2024FedBiOT: LLM Local Fine-tuning in Federated Learning without Full Modelcited by 74
- 2023BlackVIP: Black-Box Visual Prompting for Robust Transfer Learningcited by 70
- 2023FATE-LLM: A Industrial Grade Federated Learning Framework for Large Language Modelscited by 63
- 2023DP-OPT: Make Large Language Model Your Privacy-Preserving Prompt Engineercited by 57
- 2023Learning from models beyond fine-tuningcited by 48
- 2023Language Models as Black-Box Optimizers for Vision-Language Modelscited by 36
- 2024MELTing point: Mobile Evaluation of Language Transformerscited by 36
- 2024CoGenesis: A Framework Collaborating Large and Small Language Models for Secure Context-Aware Instruction Followingcited by 33
38 more
- 2023Make Pre-trained Model Reversible: From Parameter to Memory Efficient Fine-Tuningcited by 26
- 2023Grounding Foundation Models through Federated Transfer Learning: A General Frameworkcited by 24
- 2024Configurable Foundation Models: Building LLMs from a Modular Perspectivecited by 22
- 2025Ten Challenging Problems in Federated Foundation Modelscited by 20
- 2024FedPFT: Federated Proxy Fine-Tuning of Foundation Modelscited by 16
- 2024On Catastrophic Inheritance of Large Foundation Modelscited by 15
- 2024Light-PEFT: Lightening Parameter-Efficient Fine-Tuning via Early Pruningcited by 15
- 2023FedBone: Towards Large-Scale Federated Multi-Task Learningcited by 14
- 2024Privacy in Fine-tuning Large Language Models: Attacks, Defenses, and Future Directionscited by 14
- 2023Mutual Enhancement of Large and Small Language Models with Cross-Silo Knowledge Transfercited by 13
- 2023A Split-and-Privatize Framework for Large Language Model Fine-Tuningcited by 11
- 2024Derivative-Free Optimization for Low-Rank Adaptation in Large Language Modelscited by 11
- 2023Tunable Soft Prompts are Messengers in Federated Learningcited by 10
- 2023ZooPFL: Exploring Black-box Foundation Models for Personalized Federated Learningcited by 9
- 2023A Recent Survey of Heterogeneous Transfer Learningcited by 8
- 2024DLoRA: Distributed Parameter-Efficient Fine-Tuning Solution for Large Language Modelcited by 8
- 2024Privacy-Preserving Language Model Inference with Instance Obfuscationcited by 7
- 2025A Survey on Collaborating Small and Large Language Models for Performance, Cost-effectiveness, Cloud-edge Privacy, and Trustworthinesscited by 7
- 2023DC-CCL: Device-Cloud Collaborative Controlled Learning for Large Vision Modelscited by 6
- 2024Functional-level Uncertainty Quantification for Calibrated Fine-tuning on LLMscited by 6
- 2024ScaleOT: Privacy-utility-scalable Offsite-tuning with Dynamic LayerReplace and Selective Rank Compressioncited by 6
- 2025AugFL: Augmenting Federated Learning with Pretrained Modelscited by 6
- 2023CRaSh: Clustering, Removing, and Sharing Enhance Fine-tuning without Full Large Language Modelcited by 5
- 2024SFPrompt: Communication-Efficient Split Federated Fine-Tuning for Large Pre-Trained Models over Resource-Limited Devicescited by 5
- 2024CoreGuard: Safeguarding Foundational Capabilities of LLMs Against Model Stealing in Edge Deploymentcited by 5
- 2025Adapt Once, Thrive with Updates: Transferable Parameter-Efficient Fine-Tuning on Evolving Base Modelscited by 5
- 2025VFLAIR-LLM: A Comprehensive Framework and Benchmark for Split Learning of LLMscited by 5
- 2023Parameter-Efficient Learning for Text-to-Speech Accent Adaptationcited by 4
- 2024Save It All: Enabling Full Parameter Tuning for Federated Large Language Models via Cycle Block Gradient Descentcited by 4
- 2024ObfuscaTune: Obfuscated Offsite Fine-tuning and Inference of Proprietary LLMs on Private Datasetscited by 4
- 2025Towards Harnessing the Collaborative Power of Large and Small Models for Domain Taskscited by 4
- 2023CEFHRI: A Communication Efficient Federated Learning Framework for Recognizing Industrial Human-Robot Interactioncited by 3
- 2024Robust Adaptation of Foundation Models with Black-Box Visual Promptingcited by 3
- 2024Exploring Selective Layer Fine-Tuning in Federated Learningcited by 3
- 2025Membership and Memorization in LLM Knowledge Distillationcited by 3
- 2025LoRAFusion: Efficient LoRA Fine-Tuning for LLMscited by 3
- 2023FedPEAT: Convergence of Federated Learning, Parameter-Efficient Fine Tuning, and Emulator Assisted Tuning for Artificial Intelligence Foundation Models with Mobile Edge Computingcited by 2
- 2023PEMA: An Offsite-Tunable Plug-in External Memory Adaptation for Language Modelscited by 2
50 most cited of 78 All 78 (JSON)
- 2026HE-OFT: Privacy-Preserving One-Shot Federated Fine-Tuning under Homomorphic Encryption6 Oct 2026
- 2026CIDERS: Cloud-Edge LLM Collaborative Learning via Accelerating Personalized Bilevel Optimization14 Sep 2026
- 2026Privacy from Symmetry: Orthogonally Equivariant Transformers for LLM Inference15 Jun 2026
- 2026FedProxy: Federated Fine-Tuning of LLMs via Proxy SLMs and Heterogeneity-Aware Fusion21 Apr 2026
- 2026Floe: Federated Specialization for Real-Time LLM-SLM Inference15 Feb 2026
- 2026NOIR: Privacy-Preserving Generation of Code with Open-Source LLMs22 Jan 2026
- 2025PrivTune: Efficient and Privacy-Preserving Fine-Tuning of Large Language Models via Device-Cloud Collaboration9 Dec 2025
- 2025Do Not Merge My Model! Safeguarding Open-Source LLMs Against Unauthorized Model Merging13 Nov 2025
- 2025DistilLock: Safeguarding LLMs from Unauthorized Knowledge Distillation on the Edge19 Oct 2025
- 2025A Survey on Collaborating Small and Large Language Models for Performance, Cost-effectiveness, Cloud-edge Privacy, and Trustworthiness14 Oct 2025
- 2025FedMMKT:Co-Enhancing a Server Text-to-Image Model and Client Task Models in Multi-Modal Federated Learning14 Oct 2025
- 2025LoRAFusion: Efficient LoRA Fine-Tuning for LLMs30 Sep 2025
38 more
- 2025CBP-Tuning: Efficient Local Customization for Black-box Large Language Models15 Sep 2025
- 2025ISACL: Internal State Analyzer for Copyrighted Training Data Leakage25 Aug 2025
- 2025On the Evolution of Federated Post-Training Large Language Models: A Model Accessibility View22 Aug 2025
- 2025FedSODA: Federated Fine-tuning of LLMs via Similarity Group Pruning and Orchestrated Distillation Alignment18 Aug 2025
- 2025Membership and Memorization in LLM Knowledge Distillation9 Aug 2025
- 2025VFLAIR-LLM: A Comprehensive Framework and Benchmark for Split Learning of LLMs5 Aug 2025
- 2025GradOT: Training-free Gradient-preserving Offsite-tuning for Large Language Models6 Jul 2025
- 2025Holmes: Towards Effective and Harmless Model Ownership Verification to Personalized Large Vision Models via Decoupling Common Features24 Jun 2025
- 2025Efficient and Privacy-Preserving Soft Prompt Transfer for LLMs19 Jun 2025
- 2025FedOne: Query-Efficient Federated Learning for Black-box Discrete Prompt Learning17 Jun 2025
- 2025EMLoC: Emulator-based Memory-efficient Fine-tuning with LoRA Correction13 Jun 2025
- 2025Adapt Once, Thrive with Updates: Transferable Parameter-Efficient Fine-Tuning on Evolving Base Models7 Jun 2025
- 2025Generalized and Personalized Federated Learning with Black-Box Foundation Models via Orthogonal Transformations26 May 2025
- 2025FedTDP: A Privacy-Preserving and Unified Framework for Trajectory Data Preparation via Federated Learning8 May 2025
- 2025Towards Harnessing the Collaborative Power of Large and Small Models for Domain Tasks24 Apr 2025
- 2025Collaborative Learning of On-Device Small Model and Cloud-Based Large Model: Advances and Future Directions17 Apr 2025
- 2025Prada: Black-Box LLM Adaptation with Private Data on Resource-Constrained Devices19 Mar 2025
- 2025AugFL: Augmenting Federated Learning with Pretrained Models4 Mar 2025
- 2025Split Adaptation for Pre-trained Vision Transformers1 Mar 2025
- 2025Ten Challenging Problems in Federated Foundation Models14 Feb 2025
- 2025Navigating the Designs of Privacy-Preserving Fine-tuning for Large Language Models8 Jan 2025
- 2024Privacy in Fine-tuning Large Language Models: Attacks, Defenses, and Future Directions21 Dec 2024
- 2024ScaleOT: Privacy-utility-scalable Offsite-tuning with Dynamic LayerReplace and Selective Rank Compression13 Dec 2024
- 2024CoreGuard: Safeguarding Foundational Capabilities of LLMs Against Model Stealing in Edge Deployment16 Oct 2024
- 2024Functional-level Uncertainty Quantification for Calibrated Fine-tuning on LLMs9 Oct 2024
- 2024Taylor Unswift: Secured Weight Release for Large Language Models via Taylor Expansion6 Oct 2024
- 2024Configurable Foundation Models: Building LLMs from a Modular Perspective4 Sep 2024
- 2024Exploring Selective Layer Fine-Tuning in Federated Learning28 Aug 2024
- 2024SFPrompt: Communication-Efficient Split Federated Fine-Tuning for Large Pre-Trained Models over Resource-Limited Devices24 Jul 2024
- 2024Robust Adaptation of Foundation Models with Black-Box Visual Prompting4 Jul 2024
- 2024ObfuscaTune: Obfuscated Offsite Fine-tuning and Inference of Proprietary LLMs on Private Datasets3 Jul 2024
- 2024FedBiOT: LLM Local Fine-tuning in Federated Learning without Full Model25 Jun 2024
- 2024Minimal Interaction Separated Tuning: A New Paradigm for Visual Adaptation25 Jun 2024
- 2024Save It All: Enabling Full Parameter Tuning for Federated Large Language Models via Cycle Block Gradient Descent17 Jun 2024
- 2024Light-PEFT: Lightening Parameter-Efficient Fine-Tuning via Early Pruning6 Jun 2024
- 2024MixLoRA: Enhancing Large Language Models Fine-Tuning with LoRA-based Mixture of Experts22 Apr 2024
- 2024FedPFT: Federated Proxy Fine-Tuning of Foundation Models17 Apr 2024
- 2024DLoRA: Distributed Parameter-Efficient Fine-Tuning Solution for Large Language Model8 Apr 2024
50 newest of 78 All 78 (JSON)
- 2024Parameter-Efficient Fine-Tuning for Large Models: A Comprehensive Surveycited by 656
- 2023FederatedScope-LLM: A Comprehensive Package for Fine-tuning Large Language Models in Federated Learningcited by 149
- 2023When Foundation Model Meets Federated Learning: Motivations, Challenges, and Future Directionscited by 84
- 2024FedBiOT: LLM Local Fine-tuning in Federated Learning without Full Modelcited by 74
- 2023BlackVIP: Black-Box Visual Prompting for Robust Transfer Learningcited by 70
- 2023FATE-LLM: A Industrial Grade Federated Learning Framework for Large Language Modelscited by 63
- 2023DP-OPT: Make Large Language Model Your Privacy-Preserving Prompt Engineercited by 57
- 2023Learning from models beyond fine-tuningcited by 48
- 2024MELTing point: Mobile Evaluation of Language Transformerscited by 36
- 2024CoGenesis: A Framework Collaborating Large and Small Language Models for Secure Context-Aware Instruction Followingcited by 33
- 2023Make Pre-trained Model Reversible: From Parameter to Memory Efficient Fine-Tuningcited by 26
- 2023Grounding Foundation Models through Federated Transfer Learning: A General Frameworkcited by 24
12 most cited of 70 All 70 (JSON)
- 2026HE-OFT: Privacy-Preserving One-Shot Federated Fine-Tuning under Homomorphic Encryption6 Oct 2026
- 2026CIDERS: Cloud-Edge LLM Collaborative Learning via Accelerating Personalized Bilevel Optimization14 Sep 2026
- 2026Privacy from Symmetry: Orthogonally Equivariant Transformers for LLM Inference15 Jun 2026
- 2026FedProxy: Federated Fine-Tuning of LLMs via Proxy SLMs and Heterogeneity-Aware Fusion21 Apr 2026
- 2026Floe: Federated Specialization for Real-Time LLM-SLM Inference15 Feb 2026
- 2026NOIR: Privacy-Preserving Generation of Code with Open-Source LLMs22 Jan 2026
- 2025PrivTune: Efficient and Privacy-Preserving Fine-Tuning of Large Language Models via Device-Cloud Collaboration9 Dec 2025
- 2025Do Not Merge My Model! Safeguarding Open-Source LLMs Against Unauthorized Model Merging13 Nov 2025
- 2025A Survey on Collaborating Small and Large Language Models for Performance, Cost-effectiveness, Cloud-edge Privacy, and Trustworthiness14 Oct 2025
- 2025FedMMKT:Co-Enhancing a Server Text-to-Image Model and Client Task Models in Multi-Modal Federated Learning14 Oct 2025
- 2025LoRAFusion: Efficient LoRA Fine-Tuning for LLMs30 Sep 2025
- 2025CBP-Tuning: Efficient Local Customization for Black-box Large Language Models15 Sep 2025
12 newest of 70 All 70 (JSON)