{"id":"https://openalex.org/W7163197878","doi":"https://doi.org/10.48550/arxiv.2606.00944","title":"PRISM: Gauge-Invariant Tangent-Space Differentially Private LoRA","display_name":"PRISM: Gauge-Invariant Tangent-Space Differentially Private LoRA","publication_year":2026,"publication_date":"2026-05-31","ids":{"openalex":"https://openalex.org/W7163197878","doi":"https://doi.org/10.48550/arxiv.2606.00944"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.00944","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.00944","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.00944","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5137652433","display_name":"Shihao Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Shihao","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5137679045","display_name":"Xueru Zhang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Xueru","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.8184000253677368,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.8184000253677368,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11612","display_name":"Stochastic Gradient Optimization Techniques","score":0.13860000669956207,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11716","display_name":"Random Matrices and Applications","score":0.0052999998442828655,"subfield":{"id":"https://openalex.org/subfields/2613","display_name":"Statistics and Probability"},"field":{"id":"https://openalex.org/fields/26","display_name":"Mathematics"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/differential-privacy","display_name":"Differential privacy","score":0.6313999891281128},{"id":"https://openalex.org/keywords/noise","display_name":"Noise (video)","score":0.5877000093460083},{"id":"https://openalex.org/keywords/bilinear-interpolation","display_name":"Bilinear interpolation","score":0.5224000215530396},{"id":"https://openalex.org/keywords/invariant","display_name":"Invariant (physics)","score":0.4361000061035156},{"id":"https://openalex.org/keywords/matrix-decomposition","display_name":"Matrix decomposition","score":0.4300000071525574},{"id":"https://openalex.org/keywords/stability","display_name":"Stability (learning theory)","score":0.3824999928474426},{"id":"https://openalex.org/keywords/prism","display_name":"Prism","score":0.37380000948905945}],"concepts":[{"id":"https://openalex.org/C23130292","wikidata":"https://www.wikidata.org/wiki/Q5275358","display_name":"Differential privacy","level":2,"score":0.6313999891281128},{"id":"https://openalex.org/C99498987","wikidata":"https://www.wikidata.org/wiki/Q2210247","display_name":"Noise (video)","level":3,"score":0.5877000093460083},{"id":"https://openalex.org/C205203396","wikidata":"https://www.wikidata.org/wiki/Q612143","display_name":"Bilinear interpolation","level":2,"score":0.5224000215530396},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5160999894142151},{"id":"https://openalex.org/C190470478","wikidata":"https://www.wikidata.org/wiki/Q2370229","display_name":"Invariant (physics)","level":2,"score":0.4361000061035156},{"id":"https://openalex.org/C42355184","wikidata":"https://www.wikidata.org/wiki/Q1361088","display_name":"Matrix decomposition","level":3,"score":0.4300000071525574},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.3905999958515167},{"id":"https://openalex.org/C112972136","wikidata":"https://www.wikidata.org/wiki/Q7595718","display_name":"Stability (learning theory)","level":2,"score":0.3824999928474426},{"id":"https://openalex.org/C67666897","wikidata":"https://www.wikidata.org/wiki/Q165896","display_name":"Prism","level":2,"score":0.37380000948905945},{"id":"https://openalex.org/C45374587","wikidata":"https://www.wikidata.org/wiki/Q12525525","display_name":"Computation","level":2,"score":0.36329999566078186},{"id":"https://openalex.org/C187834632","wikidata":"https://www.wikidata.org/wiki/Q188804","display_name":"Factorization","level":2,"score":0.3549000024795532},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.3424000144004822},{"id":"https://openalex.org/C29265498","wikidata":"https://www.wikidata.org/wiki/Q7047719","display_name":"Noise measurement","level":3,"score":0.3336000144481659},{"id":"https://openalex.org/C106487976","wikidata":"https://www.wikidata.org/wiki/Q685816","display_name":"Matrix (chemical analysis)","level":2,"score":0.3296000063419342},{"id":"https://openalex.org/C93226319","wikidata":"https://www.wikidata.org/wiki/Q193137","display_name":"Differential (mechanical device)","level":2,"score":0.3091000020503998},{"id":"https://openalex.org/C47446073","wikidata":"https://www.wikidata.org/wiki/Q5165890","display_name":"Control theory (sociology)","level":3,"score":0.2978000044822693},{"id":"https://openalex.org/C184720557","wikidata":"https://www.wikidata.org/wiki/Q7825049","display_name":"Topology (electrical circuits)","level":2,"score":0.2890999913215637},{"id":"https://openalex.org/C139807058","wikidata":"https://www.wikidata.org/wiki/Q352374","display_name":"Adaptation (eye)","level":2,"score":0.26420000195503235},{"id":"https://openalex.org/C126255220","wikidata":"https://www.wikidata.org/wiki/Q141495","display_name":"Mathematical optimization","level":1,"score":0.2551000118255615}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.00944","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.00944","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.00944","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.00944","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Applying":[0],"differential":[1],"privacy":[2,151],"(DP)":[3],"via":[4],"DP-SGD":[5,58],"to":[6,60,77],"Low-Rank":[7],"Adaptation":[8],"(LoRA)":[9],"is":[10,30,42,91],"a":[11,22,33,55,110,138],"natural":[12],"approach":[13],"for":[14,88,134],"privacy-preserving":[15],"fine-tuning.":[16],"However,":[17],"LoRA's":[18],"low-rank":[19,34],"parameterization":[20],"poses":[21],"fundamental":[23],"challenge.":[24],"In":[25],"LoRA,":[26],"each":[27],"trainable":[28],"update":[29,52,142],"represented":[31],"as":[32],"matrix":[35],"$Z":[36],"=":[37],"AB^\\top$,":[38],"but":[39],"this":[40,72],"factorization":[41],"inherently":[43],"non-identifiable:":[44],"many":[45],"factor":[46],"pairs":[47],"$(A,B)$":[48],"represent":[49],"the":[50,61,114],"same":[51],"$Z$.":[53],"As":[54],"result,":[56],"applying":[57],"directly":[59],"factors":[62],"induces":[63],"gauge-dependent":[64],"perturbations":[65],"on":[66,119],"$Z$,":[67,120],"and":[68,100,136],"we":[69],"show":[70],"that":[71,90,144],"naive":[73],"DP-LoRA":[74],"can":[75],"lead":[76],"unbounded":[78],"noise":[79,98,105,117],"amplification.":[80],"We":[81,129],"propose":[82],"PRISM,":[83],"an":[84,102],"intrinsic":[85,116],"DP":[86],"mechanism":[87],"LoRA":[89],"gauge":[92],"invariant":[93],"by":[94],"construction,":[95],"avoids":[96],"bilinear":[97],"amplification,":[99],"admits":[101],"efficient":[103],"low-dimensional":[104],"sampler.":[106],"Moreover,":[107],"PRISM":[108,135],"yields":[109],"closed-form":[111],"characterization":[112],"of":[113],"effective":[115],"induced":[118],"enabling":[121],"stable":[122],"privacy-utility":[123],"trade-offs":[124],"through":[125],"bounded,":[126],"gauge-invariant":[127,140],"perturbations.":[128],"establish":[130],"standard":[131],"$(\u03b5,\u03b4)$-DP":[132],"guarantees":[133],"introduce":[137],"DP-aware,":[139],"adaptive":[141,146],"rule":[143],"prevents":[145],"optimization":[147],"from":[148],"amplifying":[149],"injected":[150],"noise,":[152],"improving":[153],"numerical":[154],"stability":[155],"in":[156],"practice.":[157]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-06-03T00:00:00"}