Jacobian-guided Noise Injection for Quantization Robustness in Large Language Models
Not on the map. Why?
Abstract (arXiv)
Quantization of Large Language Models (LLMs) is often hindered by the sensitivity of the self-attention mechanism to discretization errors. We identify the softmax operator as a bottleneck for quantization stability due to its sensitivity to outliers and state-dependent Jacobian. We theoretically establish that suppressing the norm of this Jacobian helps in bounding quantization-induced performance degradation. Based on this, we propose Jacobian-Guided Noise Injection, a training strategy that injects zero-mean Gaussian noise into pre-attention logits, with variance derived directly from the Jacobian Frobenius norm. Unlike prior approaches that rely on heuristic or penalise jacobian directly, our method provides a way to identify the optimal noise variance based on the local attention sensitivity. We evaluate the method on SOTA LLM architectures, where it demonstrates improved robustness over popular PTQ methods. Empirical analysis reveals that the proposed method gives up to +37% relative gains on Top-1 accuracy on ImageNet-1K for SigLIP and improves relative perplexity by upto 40% on WikiText for language models in low bit quantisation settings, proving the efficacy of the approach.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 35 of its 46 references that are in the map. First posted on arXiv 21 Aug 2026.
Builds on
35 of 46 references.
References · 35
- 2017Attention Is All You Needcited by 60,361
- 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 30,186
- 2024The Llama 3 Herd of Modelscited by 14,715
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 14,132
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
- 2020Measuring Massive Multitask Language Understandingcited by 7,963
- 2014Explaining and Harnessing Adversarial Examplescited by 7,364
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
- 2017On Calibration of Modern Neural Networkscited by 4,960
- 2024Qwen2.5 Technical Reportcited by 4,942
- 2019HellaSwag: Can a Machine Really Finish Your Sentence?cited by 4,100
- 2023Sigmoid Loss for Language Image Pre-Trainingcited by 3,109
23 more
- 2016Pointer Sentinel Mixture Modelscited by 3,096
- 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,975
- 2019PIQA: Reasoning about Physical Commonsense in Natural Languagecited by 2,883
- 2019Benchmarking Neural Network Robustness to Common Corruptions and Perturbationscited by 2,877
- 2022GPTQ: Accurate Post-Training Quantization for Generative Pre-trained Transformerscited by 1,919
- 2017Quantization and Training of Neural Networks for Efficient Integer-Arithmetic-Only Inferencecited by 1,593
- 2022SmoothQuant: Accurate and Efficient Post-Training Quantization for Large Language Modelscited by 1,386
- 2017Mixed Precision Trainingcited by 1,156
- 2022LLM.int8(): 8-bit Matrix Multiplication for Transformers at Scalecited by 906
- 2021A Survey of Quantization Methods for Efficient Neural Network Inferencecited by 815
- 2019Learned Step Size Quantizationcited by 628
- 2018PACT: Parameterized Clipping Activation for Quantized Neural Networkscited by 467
- 2018HAQ: Hardware-Aware Automated Quantization with Mixed Precisioncited by 443
- 2019HAWQ: Hessian AWare Quantization of Neural Networks with Mixed-Precisioncited by 402
- 2021Post-Training Quantization for Vision Transformercited by 278
- 2021I-BERT: Integer-only BERT Quantizationcited by 255
- 2021FQ-ViT: Post-Training Quantization for Fully Quantized Vision Transformercited by 151
- 2022RepQ-ViT: Scale Reparameterization for Post-Training Quantization of Vision Transformerscited by 137
- 2018Improving DNN Robustness to Adversarial Attacks using Jacobian Regularizationcited by 88
- 2024A Survey on Transformer Compressioncited by 46
- 2024Towards Accurate Post-Training Quantization of Vision Transformers via Error Reductioncited by 23
- 2017Noisy Softmax: Improving the Generalization Ability of DCNN via Postponing the Early Softmax Saturationcited by 21
- 2024Training More Robust Classification Model via Discriminative Loss and Gaussian Noise Injectioncited by 1
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2026Activation Denoising: A Robustness View on Parallel vs Sequential LLM Quantization
- 2025SiLQ: Simple Large Language Model Quantization-Aware Training
- 2023Norm Tweaking: High-performance Low-bit Quantization of Large Language Models
- 2025Layer-Wise High-Impact Parameter Ratio Optimization in Post-Training Quantization for Large Language Models
- 2024Understanding the Difficulty of Low-Precision Post-Training Quantization for LLMs
- 2024Taming Sensitive Weights : Noise Perturbation Fine-tuning for Robust LLM Quantization
- 2025BAQ: Efficient Bit Allocation Quantization for Large Language Models
- 2026Cross-Layer Error Compensation and Finite-Sample Feature-Statistics Matching for Extreme Low-Bit Quantization of Large Language Models