VFLAIR-LLM: A Comprehensive Framework and Benchmark for Split Learning of LLMs
Not on the map. Why?
Abstract (arXiv)
With the advancement of Large Language Models (LLMs), LLM applications have expanded into a growing number of fields. However, users with data privacy concerns face limitations in directly utilizing LLM APIs, while private deployments incur significant computational demands. This creates a substantial challenge in achieving secure LLM adaptation under constrained local resources. To address this issue, collaborative learning methods, such as Split Learning (SL), offer a resource-efficient and privacy-preserving solution for adapting LLMs to private domains. In this study, we introduce VFLAIR-LLM (available at https://github.com/FLAIR-THU/VFLAIR-LLM), an extensible and lightweight split learning framework for LLMs, enabling privacy-preserving LLM inference and fine-tuning in resource-constrained environments. Our library provides two LLM partition settings, supporting three task types and 18 datasets. In addition, we provide standard modules for implementing and evaluating attacks and defenses. We benchmark 5 attacks and 9 defenses under various Split Learning for LLM(SL-LLM) settings, offering concrete insights and recommendations on the choice of model partition configurations, defense strategies, and relevant hyperparameters for real-world applications.
Key facts. Cited by 4 papers in the map (data through 7 Oct 2026). Builds on 30 of its 51 references that are in the map. First posted on arXiv 5 Aug 2025.
Builds on
30 of 51 references.
References · 30
- 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,084
- 2021Training Verifiers to Solve Math Word Problemscited by 9,743
- 2021Measuring Mathematical Problem Solving With the MATH Datasetcited by 5,203
- 2018GLUE: A Multi-Task Benchmark and Analysis Platform for Natural Language Understandingcited by 4,854
- 2016SQuAD: 100,000+ Questions for Machine Comprehension of Textcited by 4,115
- 2015Character-level Convolutional Networks for Text Classificationcited by 2,293
- 2016The LAMBADA dataset: Word prediction requiring a broad discourse contextcited by 960
- 2023Distilling Step-by-Step! Outperforming Larger Language Models with Less Training Data and Smaller Model Sizescited by 710
- 2020CodeBLEU: a Method for Automatic Evaluation of Code Synthesiscited by 468
- 2019Federated Machine Learning: Concept and Applicationscited by 409
- 2018Split learning for health: Distributed deep learning without sharing raw patient datacited by 391
- 2023A Survey on Large Language Model (LLM) Security and Privacy: The Good, the Bad, and the Uglycited by 380
18 more
- 2020SplitFed: When Federated Learning Meets Split Learningcited by 308
- 2018Distributed learning of deep neural network over multiple agentscited by 277
- 2017Sparse Communication for Distributed Gradient Descentcited by 243
- 2020Information Leakage in Embedding Modelscited by 199
- 2023Text Embeddings Reveal (Almost) As Much As Textcited by 189
- 2022Will we run out of data? Limits of LLM scaling based on human-generated datacited by 187
- 2021FedPara: Low-Rank Hadamard Product for Communication-Efficient Federated Learningcited by 140
- 2021Label Leakage and Protection in Two-party Split Learningcited by 87
- 2023Sentence Embedding Leaks More Information than You Expect: Generative Embedding Inversion Attack to Recover the Whole Sentencecited by 81
- 2023Offsite-Tuning: Transfer Learning without Full Modelcited by 77
- 2021Differential Privacy for Text Analytics via Natural Text Sanitizationcited by 74
- 2023DP-Forward: Fine-tuning and Inference on Language Models with Differential Privacy in Forward Passcited by 65
- 2022A Customized Text Sanitization Mechanism with Differential Privacycited by 51
- 2020Improving Robustness to Model Inversion Attacks via Mutual Information Regularizationcited by 49
- 2024Unveiling the Vulnerability of Private Fine-Tuning in Split-Based Frameworks for Large Language Models: A Bidirectionally Enhanced Attackcited by 17
- 2023A Split-and-Privatize Framework for Large Language Model Fine-Tuningcited by 11
- 2014Managing your Private and Public Data: Bringing down Inference Attacks against your Privacycited by 10
- 2024ScaleOT: Privacy-utility-scalable Offsite-tuning with Dynamic LayerReplace and Selective Rank Compressioncited by 6
Built on by
Citing papers per year: 2026: 4.
4 papers.
- 2026HOSL: Hybrid-Order Split Learning for Memory-Constrained Edge Trainingcited by 3
- 2026From Prompts to Responses: Dual-Sided Data Leakage and Defense in Split Large Language Modelscited by 1
- 2026KVDiagnosis: A Diagnostic Benchmark for KV-Cache Compression in Long-Context Language Modelscited by 1
- 2026Privacy Failure in Split-LLM Training, The Returned Gradient Nullifies the Decoyscited by 0
- 2026Privacy Failure in Split-LLM Training, The Returned Gradient Nullifies the Decoys3 Sep 2026
- 2026KVDiagnosis: A Diagnostic Benchmark for KV-Cache Compression in Long-Context Language Models10 Aug 2026
- 2026From Prompts to Responses: Dual-Sided Data Leakage and Defense in Split Large Language Models12 Jun 2026
- 2026HOSL: Hybrid-Order Split Learning for Memory-Constrained Edge Training16 Jan 2026