DeltaMaskIEEE BigData 2024

DeltaMask: Minimizing Communication in Federated Fine-Tuning of Vision Foundation Models

Adapt foundation models by communicating sparse mask changes.

Vasileios Tsouvalas Yuki M. Asano Aaqib Saeed

At a glance

Adapt a frozen model by communicating mask changes. DeltaMask trains stochastic masks over pretrained weights, selects changes to a shared reference mask, and encodes their positions with probabilistic filters. The server approximately reconstructs those masks and updates global mask probabilities.

Inside DeltaMask
Fixed weightsPretrained⊙Learned mask101011101Sampled bits=SubnetworkSelected weightsTrain mask scores; keep the backbone weights fixed
Learn which pretrained weights to useLocal training changes mask scores, not pretrained backbone weights. Sampling the mask selects a subnetwork for the task; the experiments mask the last five backbone blocks.
Compare with the shared seeded sampleShared11010101Local10001111Changed01011010Only differing positions enter the update set
Find changes to a shared referenceA publicly shared seed lets every participant sample the same reference binary mask from global probabilities. Compare the trained local sample with that reference and collect the differing positions.
Rank changed positions by relative entropyKL compares local and global probabilities5274Keep the top-κ subsetOmitκ controls how many ranked changes are sent
Keep the most informative changesRank differing positions by KL divergence between local and global mask probabilities. Retain a top-κ subset, controlling how much information enters the transmission.
Positions527BFuse8 filterDEFLATEApproximate membership → lossless byte compression
Encode positions as fingerprintsA four-wise BFuse8 filter stores the selected positions compactly. Its fingerprint array is then losslessly DEFLATE-compressed in a PNG-like representation for upload.
Query the filter and flip reference bitsReference11010101Query01001110Recovered10011011Highlighted query: a possible false positiveBayesian aggregation forms the next probabilities
Reconstruct, then aggregate masksThe server queries the filter and flips reference bits at reported positions. Recovery is approximate: ranking omits some changes and membership queries can return false positives. Bayesian aggregation updates the next global probabilities.
Method diagram

Swipe across the diagram

What this adds

  • 01

    Mask-based adaptation: learn subnetworks while keeping pretrained backbone weights fixed.

  • 02

    Sparse change encoding: rank differing positions and compress them with a binary fuse filter.

  • 03

    Controllable trade-off: vary retained changes and fingerprint width to balance bitrate and accuracy.

Abstract

Foundation Models (FMs) have revolutionized machine learning with their adaptability and high performance across tasks; yet, their integration into Federated Learning (FL) is challenging due to substantial communication overhead from their extensive parameterization. Current communication-efficient FL strategies, such as gradient compression, reduce bitrates to around 1 bit-per-parameter (bpp). However, these approaches fail to harness the characteristics of FMs, with their large number of parameters still posing a challenge to communication efficiency, even at these bitrate regimes. In this work, we present DeltaMask, a novel method that efficiently fine-tunes FMs in FL at an ultra-low bitrate, well below 1 bpp. DeltaMask employs stochastic masking to detect highly effective subnetworks within FMs and leverage stochasticity and sparsity in client masks to compress updates into a compact grayscale image using probabilistic filters, deviating from traditional weight training approaches. Our comprehensive evaluations across various datasets and architectures demonstrate DeltaMask efficiently achieves bitrates as low as 0.09 bpp, enhancing communication efficiency while maintaining FMs performance, as measured on 8 datasets and 5 pre-trained models of various network architectures.

Read more ↗
How it works

DeltaMask

01

Optimize a stochastic mask

Transform unconstrained mask scores with a sigmoid, sample binary activations, and apply them to fixed pretrained weights. The classifier first receives one round of linear probing.

θ=sigmoid(s),m∼Bern(θ),w′=m⊙winit

Sections III-A–C and Algorithm 1, PDF pages 4–6. The experiments target the last five backbone blocks.

02

Form and rank mask differences

Sample the global reference with a shared seed. Collect positions where local and reference bits disagree, rank them by relative entropy of their probabilities, and retain a top-κ subset.

Δ={i:mlocal,i≠mref,i}

Section III-B and Equation 4, PDF page 5, with simplified round/client notation. The main setup schedules κ from 0.8.

03

Filter first, compress bytes second

Encode selected positions in a four-wise binary fuse filter using 8-bit fingerprints by default. PNG-like DEFLATE compression then shrinks the fingerprint bytes losslessly.

Section III-B, PDF page 5. Selection and probabilistic membership make mask recovery approximate; DEFLATE itself does not discard fingerprint data.

04

Recover masks and update probabilities

Query membership for every possible position, flip the corresponding reference bits, and feed reconstructed client masks to Bayesian aggregation for the next round.

m^=mref⊕𝟙Δ′^

Equation 5 and Algorithm 1, PDF pages 5–6. False positives can flip extra bits; this is not a lossless-recovery or formal privacy guarantee.

Method details in the paper ↗

Original paper figures & sources
DeltaMask pipeline: a client compares server and local binary masks, ranks changed positions, encodes them with a probabilistic filter and grayscale image, and the server reconstructs masks for Bayesian aggregation.Enlarge
The update is a compact record of changed mask positions. Clients rank those changes and encode them with a probabilistic filter; the server queries the filter to reconstruct and aggregate local masks. Figure 2 in the accepted manuscript
Evaluation

Results

Results from the source manuscript ↗

01

IID, full participation

DeltaMask reports 85.44% average accuracy at 0.151 bpp: 0.63 percentage points below FedPM and 2.64 below the fine-tuning reference.

Accuracy (%)

Higher is better
0100
Fine-tuning
88.08
FedMask
79.23
EDEN
84.14
DeepReduce
76.53
FedPM
86.07
DeltaMask
85.44

Bitrate (bits / parameter)

Lower is better
032
Fine-tuning
32
FedMask
1.0
EDEN
0.691
DeepReduce
1.089
FedPM
0.872
DeltaMask
0.151
Experiment details

CLIP ViT-B/32; eight image datasets, Dirichlet α=10, 30 clients, full participation, 100 rounds and one local epoch. Reported average accuracy (%) is higher-is-better; average bits per parameter (bpp) is lower-is-better.

The table reports no uncertainty for the eight-task averages. The fine-tuning reference updates the same last five blocks targeted by masking, not the entire backbone.

IID data with full participation. CLIP ViT-B/32; eight image datasets, Dirichlet α=10, 30 clients, full participation, 100 rounds and one local epoch. Reported average accuracy (%) is higher-is-better; average bits per parameter (bpp) is lower-is-better.
MethodAverage accuracy (%)Average bitrate (bpp)
Fine-tuning88.0832
FedMask79.231.0
EDEN84.140.691
DeepReduce76.531.089
FedPM86.070.872
DeltaMask85.440.151
Table II · ρ=1.0 · PDF page 11 ↗
02

Non-IID, partial participation

With 20% participation, DeltaMask reports 81.13% at 0.233 bpp: 0.51 percentage points below FedPM and 2.06 below fine-tuning.

Accuracy (%)

Higher is better
0100
Fine-tuning
83.19
FedMask
68.86
EDEN
78.56
DeepReduce
73.90
FedPM
81.64
DeltaMask
81.13

Bitrate (bits / parameter)

Lower is better
032
Fine-tuning
32
FedMask
1.0
EDEN
0.715
DeepReduce
1.173
FedPM
0.948
DeltaMask
0.233
Experiment details

CLIP ViT-B/32; eight image datasets, Dirichlet α=0.1, 30 clients with 20% participation, 300 rounds and one local epoch. Average accuracy (%) is higher-is-better; average bpp is lower-is-better.

These averages have no tabulated uncertainty. This setting uses three times as many rounds as the IID panel, so bitrate alone is not total training communication.

Non-IID data with partial participation. CLIP ViT-B/32; eight image datasets, Dirichlet α=0.1, 30 clients with 20% participation, 300 rounds and one local epoch. Average accuracy (%) is higher-is-better; average bpp is lower-is-better.
MethodAverage accuracy (%)Average bitrate (bpp)
Fine-tuning83.1932
FedMask68.861.0
EDEN78.560.715
DeepReduce73.901.173
FedPM81.640.948
DeltaMask81.130.233
Table III · ρ=0.2 · PDF page 11 ↗
03

Backbone comparison

All five backbones use approximately 0.2–0.25 bpp. Only CLIP ViT-L/14 exceeds its fine-tuning accuracy in this separate ten-client study.

Accuracy (%)

Higher is better
Fine-tuning accuracy (%)DeltaMask accuracy (%)
0100
CLIP ViT-B/32
77.35 ± 0.009
75.82 ± 0.023
CLIP ViT-L/14
89.07 ± 0.012
89.48 ± 0.031
DINOv2-Base
75.01 ± 0.007
73.36 ± 0.027
DINOv2-Small
65.55 ± 0.019
63.01 ± 0.033
ConvMixer-768/32
78.52 ± 0.009
75.31 ± 0.021
Experiment details

CIFAR-100, IID Dirichlet α=10, ten clients. Accuracy (%) is higher-is-better; DeltaMask bitrate is lower-is-better. Entries retain the source’s ± terms; experiments average three runs, but the dispersion convention is not defined.

This is a separate ten-client experiment; its CLIP ViT-B/32 values should not be substituted into the thirty-client tables. Unusually small ± terms are reproduced without reinterpretation.

Architecture and pretraining variation. CIFAR-100, IID Dirichlet α=10, ten clients. Accuracy (%) is higher-is-better; DeltaMask bitrate is lower-is-better. Entries retain the source’s ± terms; experiments average three runs, but the dispersion convention is not defined.
BackboneFine-tuning accuracy (%)DeltaMask accuracy (%)DeltaMask bitrate (bpp)
CLIP ViT-B/3277.35 ± 0.00975.82 ± 0.0230.207 ± 0.001
CLIP ViT-L/1489.07 ± 0.01289.48 ± 0.0310.225 ± 0.002
DINOv2-Base75.01 ± 0.00773.36 ± 0.0270.197 ± 0.001
DINOv2-Small65.55 ± 0.01963.01 ± 0.0330.214 ± 0.001
ConvMixer-768/3278.52 ± 0.00975.31 ± 0.0210.251 ± 0.001
Table I · PDF page 9 ↗
Study scope & sources
  • Accepted IEEE BigData manuscript; image classification across eight datasets and five pretrained backbones.
  • The 0.09 bpp headline is a lowest reported setting, not the mean across tasks; fine-tuning targets the same last five blocks.
Data
CIFAR-10/100, SVHN, EMNIST, Fashion-MNIST, EuroSAT, Food-101 and Cars196; image classification only.
Models
CLIP ViT-B/32 and ViT-L/14, DINOv2-Base and DINOv2-Small, and ConvMixer-768/32; masks target the last five blocks.
Compared with
Linear probing, fine-tuning, FedMask, EDEN, DeepReduce and FedPM; additional CPU/traffic comparisons include DRIVE and FedCode.
Protocol
Shared seeded reference masks; one initial linear-probing round for classifier initialization; BFuse8 by default, with ranking and filter-bitwidth ablations.

Scope & limitations

  • The experiments cover image classification. Broader task support and personalization are proposals rather than evaluated outcomes.
  • The 0.09 bpp headline is a lowest reported setting; Tables II–III give eight-task average bitrates of 0.151–0.233 bpp for DeltaMask.
  • The CPU encoding/decoding study excludes aggregation and omits arithmetic coding for masking baselines; it is not an end-to-end device latency test.
  • Probabilistic filters permit false positives. Hashing and bit flips are not evaluated as a formal privacy mechanism.

TU/e accepted manuscript for IEEE BigData 2024, published 16 January 2025; 11 PDF pages including repository cover and Appendices A–B; downloaded 14 October 2026 ↗

Reference

Cite this work

BibTeX
@inproceedings{tsouvalas2025deltamask,
  title = {DeltaMask: Minimizing Communication in Federated Fine-Tuning of Vision Foundation Models},
  author = {Vasileios Tsouvalas and Yuki M. Asano and Aaqib Saeed},
  booktitle = {2024 IEEE International Conference on Big Data (BigData)},
  year = {2025},
  pages = {8042--8051},
  publisher = {IEEE},
  doi = {10.1109/BigData62323.2024.10825398},
  url = {https://doi.org/10.1109/BigData62323.2024.10825398}
}

Keep exploring

AE-PSL

Align first. Compress every training step.

MPSL

Multimodal fine-tuning with lightweight edge clients.

Figure preview

Open full-size image