LoREnc: Low-Rank Encryption for Securing Foundation Models and LoRA Adapters
Abstract
LoREnc secures foundation models and low-rank adapters through spectral truncation and compensation techniques that prevent unauthorized model recovery while maintaining performance for authorized users.
Foundation models and low-rank adapters enable efficient on-device generative AI but raise risks such as intellectual property leakage and model recovery attacks. Existing defenses are often impractical because they require retraining or access to the original dataset. We propose LoREnc, a training-free framework that secures both FMs and adapters via spectral truncation and compensation. LoREnc suppresses dominant low-rank components of FM weights, compensates for the missing information in authorized adapters, and further applies orthogonal reparameterization to obscure structural fingerprints of the protected adapter. Unauthorized users produce structurally collapsed outputs, while authorized users recover exact performance. Experiments demonstrate that LoREnc provides strong protection against model recovery with under 1% computational overhead.
Community
LoREnc protects foundation model weights from extraction by injecting noise into the FM that cancels out in the LoRA adapter — the fine-tuned output stays intact while FM weights remain obfuscated.
Accepted at ICIP 2026.
This is an automated message from the Librarian Bot. I found the following papers similar to this paper.
The following papers were recommended by the Semantic Scholar API
- FedSpy-LLM: Towards Scalable and Generalizable Data Reconstruction Attacks from Gradients on LLMs (2026)
- Toward Efficient Membership Inference Attacks against Federated Large Language Models: A Projection Residual Approach (2026)
- SafeLM: Unified Privacy-Aware Optimization for Trustworthy Federated Large Language Models (2026)
- DurableUn: Quantization-Induced Recovery Attacks in Machine Unlearning (2026)
- FedDetox: Robust Federated SLM Alignment via On-Device Data Sanitization (2026)
- Towards Privacy-Preserving Large Language Model: Text-free Inference Through Alignment and Adaptation (2026)
- Breaking Euston: Recovering Private Inputs from Secure Inference by Exploiting Subspace Leakage (2026)
Please give a thumbs up to this comment if you found it helpful!
If you want recommendations for any Paper on Hugging Face checkout this Space
You can directly ask Librarian Bot for paper recommendations by tagging it in a comment: @librarian-bot recommend
Get this paper in your agent:
hf papers read 2605.13163 Don't have the latest CLI?
curl -LsSf https://hf.co/cli/install.sh | bash Models citing this paper 0
No model linking this paper
Datasets citing this paper 0
No dataset linking this paper
Spaces citing this paper 0
No Space linking this paper
Collections including this paper 0
No Collection including this paper