~/talk

SOFT: Selective Data Obfuscation for Protecting LLM Fine-tuning against...

Talkat USENIX Security '25 · 2025-08-13..08-15· [security, large-language-models]
links:none on file
links:none on file
name:Hanxi Guo
links:none on file
links:none on file
name:Zian Su
links:none on file
links:none on file
name:Yuntao Du
links:none on file
links:none on file
links:none on file
links:none on file
links:none on file
slides:none on file

SOFT identifies low-loss “influential” training samples after a one-epoch warm-up, flags those below a validation-loss threshold, replaces them with semantically equivalent paraphrases (selective obfuscation, paraphrasing with GPT-4), and fine-tunes on the mixed dataset. Across six domains and multiple LLM sizes the ensemble membership-inference attack AUC/AOC falls from ~0.76 for full fine-tuning to ~0.52 with SOFT, while task accuracy stays near baseline, showing substantial privacy reduction with minimal utility loss.

AI-written summary · about

~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.