Zum Hauptinhalt springen
Echtzeit-Radar & Feeds
Alle RSS Feeds ➔
👥 Community & Social
Linux Tipps & HardeningSecurity: Ausführen beliebiger Kommandos in perl-Dancer2 (Fedora)(29.09.2026 um 07:43 Uhr)
•
Linux Tipps & HardeningSecurity: Denial of Service in perl-HTML-FormFu (Fedora)(29.09.2026 um 07:46 Uhr)
••
Linux Tipps & HardeningSecurity: Zwei Probleme in NetworkManager-l2tp (Fedora)(29.09.2026 um 07:46 Uhr)
••
Sicherheitslücken (CVE)CVE-2026-77144 | TYPO3 Events 2 Plugin up to 10.2.11 permission(29.09.2026 um 06:21 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-21753 | HCL Hive 1.0 unmaintained third party components(29.09.2026 um 06:21 Uhr)
••
Sicherheitslücken (CVE)CVE-2026-75038 | ilya-zlobintsev LACT up to 0.10.0 symlink(29.09.2026 um 06:21 Uhr)
••
Linux Tipps & HardeningSecurity: Ausführen beliebiger Kommandos in perl-Dancer2 (Fedora)(29.09.2026 um 07:43 Uhr)
•
Linux Tipps & HardeningSecurity: Denial of Service in perl-HTML-FormFu (Fedora)(29.09.2026 um 07:46 Uhr)
••
Linux Tipps & HardeningSecurity: Zwei Probleme in NetworkManager-l2tp (Fedora)(29.09.2026 um 07:46 Uhr)
••
Sicherheitslücken (CVE)CVE-2026-77144 | TYPO3 Events 2 Plugin up to 10.2.11 permission(29.09.2026 um 06:21 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-21753 | HCL Hive 1.0 unmaintained third party components(29.09.2026 um 06:21 Uhr)
••
Sicherheitslücken (CVE)CVE-2026-75038 | ilya-zlobintsev LACT up to 0.10.0 symlink(29.09.2026 um 06:21 Uhr)
••
Intelligence View
⚡ tsecurity.de Intelligence

PEFT Explained: How to Fine-Tune LLMs Without Retraining Billions of Parameters

Hello, I'm Shrijith Venkatramana. I'm building git-lrc, an AI code reviewer that runs on every commit. Star Us to help devs discover the project. Do give it a try and share your feedback for improving the product. Large Language Models…

0
↗ Quelle (dev.to)
Reagiere als Erste:r — dein Feedback zählt!

Hello, I'm Shrijith Venkatramana. I'm building git-lrc, an AI code reviewer that runs on every commit. Star Us to help devs discover the project. Do give it a try and share your feedback for improving the product.






Large Language Models have a reputation for being expensive to train.



When GPT-style models first became popular, fine-tuning meant updating every weight in the network. If your model had 7 billion parameters, you trained 7 billion parameters. If it had 70 billion parameters, you trained 70 billion parameters.



For most teams, that was simply impractical.



Then researchers realized something surprising: you often don't need to modify the entire model to teach it new skills. In many cases, you can freeze almost all of the model and train only a tiny fraction of additional parameters.



This idea became known as Parameter-Efficient Fine-Tuning (PEFT).



Today, PEFT techniques power countless production AI systems because they dramatically reduce training cost while preserving most of the benefits of full fine-tuning.



Let's see how it works.






Why Full Fine-Tuning Is Expensive



Imagine a 7B parameter model.



With traditional fine-tuning:




  • All parameters participate in gradient updates

  • Large optimizer states must be stored

  • Significant GPU memory is required

  • Training checkpoints become enormous



A rough mental model looks like this:




Pretrained Model
┌───────────────────────┐
│ 7 Billion Parameters │
└───────────────────────┘
│
▼
Update ALL parameters





This approach works, but it's wasteful.



Most of the knowledge inside the model—language understanding, reasoning patterns, grammar, world knowledge—already exists.



For many tasks, we only need to slightly adjust the model's behavior.



That's where PEFT enters the picture.





The Core Insight Behind PEFT



Researchers discovered that task-specific changes often occupy a surprisingly small subspace of the model's overall parameter space.



In simpler terms:




The model may only need a small "steering adjustment" rather than a complete rewrite.




Instead of modifying billions of weights, PEFT methods:




  1. Freeze the original model

  2. Add a small number of trainable parameters

  3. Train only those new parameters



The pretrained model remains unchanged.



Frozen Base Model
┌───────────────────────┐
│ 7 Billion Parameters │
└───────────────────────┘
│
▼
Small Trainable Module
(~Millions)





This dramatically reduces memory requirements and training costs.




The most widely used PEFT method today is LoRA (Low-Rank Adaptation).



Instead of directly updating a large weight matrix:



W





LoRA represents the update as two much smaller matrices:



ΔW = A × B





where:




  • A is small

  • B is small

  • Their product approximates the desired weight update



Instead of learning the entire matrix:



W_new = W + ΔW





the original weight matrix stays frozen and only A and B are trained.



Conceptually:



Original Layer

Input
│
▼
Frozen Weight Matrix W
│
▼
Output

LoRA Layer

Input
│
├──► Frozen W ──────┐
│ │
└──► A ─► B ────────┤
▼
Output





The trainable parameter count drops dramatically.



For example:




























Model Size Full Fine-Tuning LoRA Trainable Parameters
7B 7 Billion ~5–20 Million
13B 13 Billion ~10–40 Million
70B 70 Billion ~50–200 Million


The exact numbers vary, but the reduction is often hundreds of times smaller.





Why PEFT Works Surprisingly Well



At first glance, PEFT sounds too good to be true.



How can training 0.1% of the parameters achieve results close to training 100%?



One explanation comes from observations about neural network optimization.



Many fine-tuning tasks do not require the model to learn fundamentally new language abilities.



Instead, they require:




  • Adapting style

  • Learning domain terminology

  • Following specialized instructions

  • Producing preferred output formats



The pretrained model already knows how to generate language.



The task-specific training simply nudges its behavior.



Think of it like changing a ship's course:



Full Fine-Tuning
= Rebuilding the ship

PEFT
= Turning the steering wheel





For many practical applications, steering is enough.





A Real Example: Fine-Tuning for Customer Support



Suppose you're building an AI assistant for a software company.



You have:




  • Product documentation

  • Historical support tickets

  • Internal troubleshooting guides



A full fine-tuning approach might require updating billions of parameters.



With LoRA:



from peft import LoraConfig

config = LoraConfig(
r=16,
lora_alpha=32,
lora_dropout=0.05,
target_modules=["q_proj", "v_proj"]
)





The training process only learns the LoRA adapter weights.



The base model remains frozen.



After training, you might end up with:



Base Model: 14 GB
LoRA Adapter: 100 MB





This creates a huge operational advantage.



Instead of distributing an entire model, you can distribute only the adapter.



Base Model
+
Adapter A -> Customer Support
Adapter B -> Legal Assistant
Adapter C -> Finance Assistant





One foundation model can support many specialized behaviors.





Beyond LoRA: Other PEFT Techniques



LoRA gets most of the attention, but PEFT is a broader family of methods.





Adapters



Small neural layers are inserted between existing layers.



Transformer Layer
│
▼
Adapter
│
▼
Next Layer





Only the adapter layers are trained.





Prompt Tuning



Instead of modifying model weights, trainable embeddings are prepended to prompts.



[Learned Tokens]
+
User Prompt
+
Model





The learned tokens guide model behavior.





Prefix Tuning



Special trainable vectors are injected into transformer attention mechanisms.



The model learns how to condition its attention patterns without changing the original weights.





IA³



A lightweight approach that learns scaling factors applied to activations instead of introducing new matrices.



This can reduce trainable parameter counts even further.



Different techniques trade off:




  • Performance

  • Memory usage

  • Training speed

  • Inference complexity



But all share the same philosophy: train less, achieve more.





Production Benefits That Matter



PEFT isn't merely a research curiosity.



It solves real operational problems.





Lower GPU Costs



Fewer trainable parameters mean:




  • Smaller memory footprint

  • Larger batch sizes

  • Cheaper training runs





Faster Experimentation



Teams can train multiple variants quickly.



Base Model
│
├── Adapter A
├── Adapter B
├── Adapter C
└── Adapter D





Running experiments becomes significantly cheaper.





Easier Deployment



Adapters are often tiny compared to the base model.



Moving a 50–200 MB adapter is much easier than moving a 14–140 GB model.





Multi-Tenant Systems



Organizations can maintain:




  • One shared foundation model

  • Many task-specific adapters



This architecture has become increasingly common in enterprise AI platforms.





The Future of Fine-Tuning



A few years ago, the assumption was simple:




If you want a specialized model, retrain the model.




PEFT challenged that assumption.



Today, many production systems fine-tune only a tiny fraction of parameters while achieving performance close to full fine-tuning. Techniques like LoRA have become standard tools in the LLM ecosystem because they make customization accessible to teams that don't have massive compute budgets.



As models continue growing larger, the importance of parameter-efficient approaches will likely increase rather than decrease.



The era of retraining every parameter may turn out to be the exception, not the rule.





Final Thoughts



PEFT changed the economics of model customization.



Instead of updating billions of parameters, developers can often achieve excellent results by training only a small collection of adapters, prompts, or low-rank matrices. The result is faster training, lower costs, easier deployment, and far more experimentation.



If you're building AI products today, understanding PEFT is almost as important as understanding transformers themselves.



Have you used LoRA or another PEFT technique in production, and how close did it get to full fine-tuning performance for your use case?





*AI agents write code fast. They also silently remove logic, change behavior, and introduce bugs -- without telling you. You often find out in production.



git-lrc fixes this. It hooks into git commit and reviews every diff before it lands. 60-second setup. Completely free.*



Any feedback or contributors are welcome! It's online, source-available, and ready for anyone to use.







GitHub logo

HexmosTech
/
git-lrc



Free, Micro AI Code Reviews That Run on Commit











AI agents write code fast. They also silently remove logic, change behavior, and introduce bugs -- without telling you. You often find out in production.


git-lrc fixes this. It hooks into git commit and reviews every diff before it lands. 60-second setup. Completely free.



See It In Action




See git-lrc catch serious security issues such as leaked credentials, expensive cloud
operations, and sensitive material in log statements






git-lrc-intro-60s.mp4









Why





  • 🤖 AI agents silently break things. Code removed. Logic changed. Edge cases gone. You won't notice until production.

  • 🔍 Catch it before it ships. AI-powered inline comments show you exactly what changed and what looks wrong.

  • …




2. Cyber Threat Intelligence & Forensik

CTI Threat Relationship Graph2 Knoten / 1 Relationen
CVE / Incident Software MITRE ATT&CK CWE Weakness IoC
Ähnliche Beiträge
🔍 Verwandte News

Auch interessante Nachrichten PEFT Explained: How to Fine-Tune LLMs Without Retraining Billions of Parameters

Thematisch verwandte Begriffe: PEFT, Explained, FineTune, LLMs · 6 Treffer

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

💬 Kommentare werden geladen…
Zum Aktualisieren ziehen
ZERO-DAY CVE-2026-102367 | mall4j through 4.0 contains an insufficient session expiration vulnerab…
Advisory →
tsecurity.de Icon
Offline-Lesen, Eilmeldungen & 0ms Ladezeit

Installiere tsecurity.de direkt auf deinen Home-Bildschirm für das ultimative Vollbild-Magazinerlebnis ohne Browser-Leisten.

Nächster Beitrag