GradOT: Training-free Gradient-preserving Offsite-tuning for Large Language Models
Not on the map. Why?
Abstract (arXiv)
The rapid growth of large language models (LLMs) with traditional centralized fine-tuning emerges as a key technique for adapting these models to domain-specific challenges, yielding privacy risks for both model and data owners. One promising solution, called offsite-tuning (OT), is proposed to address these challenges, where a weaker emulator is compressed from the original model and further fine-tuned with adapter to enhance privacy. However, the existing OT-based methods require high computational costs and lack theoretical analysis. This paper introduces a novel OT approach based on gradient-preserving compression, named GradOT. By analyzing the OT problem through the lens of optimization, we propose a method that selectively applies compression techniques such as rank compression and channel pruning, preserving the gradients of fine-tuned adapters while ensuring privacy. Extensive experiments demonstrate that our approach surpasses existing OT methods, both in terms of privacy protection and model performance. Our method provides a theoretical foundation for OT and offers a practical, training-free solution for offsite-tuning of large-scale LLMs.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 33 of its 49 references that are in the map. First posted on arXiv 6 Jul 2025.
Builds on
33 of 49 references.
References · 33
- 2017Attention Is All You Needcited by 60,361
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,399
- 2020Language Models are Few-Shot Learnerscited by 32,419
- 2022Training language models to follow instructions with human feedbackcited by 15,971
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
- 2015Distilling the Knowledge in a Neural Networkcited by 10,324
- 2018Think you have Solved Question Answering? Try ARC, the AI2 Reasoning Challengecited by 4,886
- 2019DistilBERT, a distilled version of BERT: smaller, faster, cheaper and lightercited by 4,307
- 2019HellaSwag: Can a Machine Really Finish Your Sentence?cited by 4,100
- 2021Finetuned Language Models Are Zero-Shot Learnerscited by 3,780
- 2022OPT: Open Pre-trained Transformer Language Modelscited by 3,512
- 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 3,104
21 more
- 2017TriviaQA: A Large Scale Distantly Supervised Challenge Dataset for Reading Comprehensioncited by 2,955
- 2019PIQA: Reasoning about Physical Commonsense in Natural Languagecited by 2,883
- 2019BoolQ: Exploring the Surprising Difficulty of Natural Yes/No Questionscited by 2,183
- 2018Can a Suit of Armor Conduct Electricity? A New Dataset for Open Book Question Answeringcited by 2,164
- 2019SuperGLUE: A Stickier Benchmark for General-Purpose Language Understanding Systemscited by 1,729
- 2021GLM: General Language Model Pretraining with Autoregressive Blank Infillingcited by 1,031
- 2017RACE: Large-scale ReAding Comprehension Dataset From Examinationscited by 861
- 2021Robust fine-tuning of zero-shot modelscited by 797
- 2017Crowdsourcing Multiple Choice Science Questionscited by 765
- 2022A Survey on In-context Learningcited by 721
- 2020BERT-ATTACK: Adversarial Attack Against BERT Using BERTcited by 491
- 2021Laplace Redux -- Effortless Bayesian Deep Learningcited by 365
- 2021Federated Learning for Internet of Things: A Comprehensive Surveycited by 252
- 2019Limitations of the Empirical Fisher Approximation for Natural Gradient Descentcited by 217
- 2023The Learnability of In-Context Learningcited by 127
- 2020On the Effect of Dropping Layers of Pre-trained Transformer Modelscited by 118
- 2023Offsite-Tuning: Transfer Learning without Full Modelcited by 78
- 2023DP-OPT: Make Large Language Model Your Privacy-Preserving Prompt Engineercited by 57
- 2022PipeFisher: Efficient Training of Large Language Models Using Pipelining and Fisher Information Matricescited by 24
- 2023Low-Rank Prune-And-Factorize for Language Model Compressioncited by 11
- 2024ScaleOT: Privacy-utility-scalable Offsite-tuning with Dynamic LayerReplace and Selective Rank Compressioncited by 6
Built on by
Not cited yet.