Concentrated Differentially Private Gradient Descent with Adaptive per-Iteration Privacy Budget
Not on the map. Why?
Abstract (arXiv)
Iterative algorithms, like gradient descent, are common tools for solving a variety of problems, such as model fitting. For this reason, there is interest in creating differentially private versions of them. However, their conversion to differentially private algorithms is often naive. For instance, a fixed number of iterations are chosen, the privacy budget is split evenly among them, and at each iteration, parameters are updated with a noisy gradient. In this paper, we show that gradient-based algorithms can be improved by a more careful allocation of privacy budget per iteration. Intuitively, at the beginning of the optimization, gradients are expected to be large, so that they do not need to be measured as accurately. However, as the parameters approach their optimal values, the gradients decrease and hence need to be measured more accurately. We add a basic line-search capability that helps the algorithm decide when more accurate gradient measurements are necessary. Our gradient descent algorithm works with the recently introduced zCDP version of differential privacy. It outperforms prior algorithms for model fitting and is competitive with the state-of-the-art for (ε,δ)-differential privacy, a strictly weaker definition than zCDP.
Key facts. Cited by 31 papers in the map (data through 7 Oct 2026). First posted on arXiv 28 Aug 2018.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 9; 2022: 7; 2023: 6; 2024: 1; 2025: 4; 2026: 4.
31 papers.
Sort:
By area:
- 2021Do Not Let Privacy Overbill Utility: Gradient Embedding Perturbation for Private Learningcited by 86
- 2022Mixed Differential Privacy in Computer Visioncited by 53
- 2021Survey: Leakage and Privacy at Inference Timecited by 44
- 2023Why Is Public Pretraining Necessary for Private Model Training?cited by 36
- 2021Differentially private inference via noisy optimizationcited by 27
- 2021DPNAS: Neural Architecture Search for Deep Learning with Differential Privacycited by 20
- 2023Choosing Public Datasets for Private Machine Learning via Gradient Subspace Distancecited by 14
- 2022DPIS: An Enhanced Mechanism for Differentially Private SGD with Importance Samplingcited by 13
- 2022Adap DP-FL: Differentially Private Federated Learning with Adaptive Noisecited by 12
- 2021DPlis: Boosting Utility of Differentially Private Deep Learning via Randomized Smoothingcited by 10
- 2022DPAR: Decoupled Graph Neural Networks with Node-Level Differential Privacycited by 10
- 2023DPSUR: Accelerating Differentially Private Stochastic Gradient Descent Using Selective Update and Releasecited by 9
19 more
- 2023Spectral-DP: Differentially Private Deep Learning through Spectral Perturbation and Filteringcited by 6
- 2021Dynamic Privacy Budget Allocation Improves Data Efficiency of Differentially Private Gradient Descentcited by 5
- 2021Efficient Hyperparameter Optimization for Differentially Private Deep Learningcited by 5
- 2021Adaptive Differentially Private Empirical Risk Minimizationcited by 5
- 2023Heterogeneous Decentralized Machine Unlearning with Seed Model Distillationcited by 3
- 2021Noise-Augmented Privacy-Preserving Empirical Risk Minimization with Dual-purpose Regularizer and Privacy Budget Retrieval and Recyclingcited by 2
- 2022Differentially Private Partial Set Cover with Applications to Facility Locationcited by 1
- 2022SA-DPSGD: Differentially Private Stochastic Gradient Descent based on Simulated Annealingcited by 1
- 2023DP-SGD with weight clippingcited by 1
- 2025Differentially Private Federated Low Rank Adaptation Beyond Fixed-Matrixcited by 1
- 2025Correlating Cross-Iteration Noise for DP-SGD using Model Curvaturecited by 1
- 2026Differentially Private Auditing Under Strategic Responsecited by 1
- 2022Encoded Gradients Aggregation against Gradient Leakage in Federated Learningcited by 0
- 2024CURATE: Scaling-up Differentially Private Causal Graph Discoverycited by 0
- 2025Towards Reliable and Generalizable Differentially Private Machine Learning (Extended Version)cited by 0
- 2025Rethinking Layer-wise Gaussian Noise Injection: Bridging Implicit Objectives and Privacy Budget Allocationcited by 0
- 2026An exponential mechanism based on quadratic approximations for fine-tuning machine learning models with privacy guaranteescited by 0
- 2026Revisiting Privacy Amplification by Subsampling in Selective Release DPSGDcited by 0
- 2026Noise-Aware Shrinkage for Differentially Private Zeroth-Order Fine-Tuning of Large Language Modelscited by 0
- 2026Noise-Aware Shrinkage for Differentially Private Zeroth-Order Fine-Tuning of Large Language Models4 Aug 2026
- 2026Revisiting Privacy Amplification by Subsampling in Selective Release DPSGD3 Jun 2026
- 2026An exponential mechanism based on quadratic approximations for fine-tuning machine learning models with privacy guarantees19 May 2026
- 2026Differentially Private Auditing Under Strategic Response8 May 2026
- 2025Correlating Cross-Iteration Noise for DP-SGD using Model Curvature6 Oct 2025
- 2025Rethinking Layer-wise Gaussian Noise Injection: Bridging Implicit Objectives and Privacy Budget Allocation4 Sep 2025
- 2025Towards Reliable and Generalizable Differentially Private Machine Learning (Extended Version)21 Aug 2025
- 2025Differentially Private Federated Low Rank Adaptation Beyond Fixed-Matrix14 Jul 2025
- 2024CURATE: Scaling-up Differentially Private Causal Graph Discovery27 Sep 2024
- 2023DPSUR: Accelerating Differentially Private Stochastic Gradient Descent Using Selective Update and Release23 Nov 2023
- 2023DP-SGD with weight clipping27 Oct 2023
- 2023Heterogeneous Decentralized Machine Unlearning with Seed Model Distillation25 Aug 2023
19 more
- 2023Spectral-DP: Differentially Private Deep Learning through Spectral Perturbation and Filtering25 Jul 2023
- 2023Choosing Public Datasets for Private Machine Learning via Gradient Subspace Distance2 Mar 2023
- 2023Why Is Public Pretraining Necessary for Private Model Training?19 Feb 2023
- 2022Adap DP-FL: Differentially Private Federated Learning with Adaptive Noise29 Nov 2022
- 2022SA-DPSGD: Differentially Private Stochastic Gradient Descent based on Simulated Annealing14 Nov 2022
- 2022DPIS: An Enhanced Mechanism for Differentially Private SGD with Importance Sampling18 Oct 2022
- 2022DPAR: Decoupled Graph Neural Networks with Node-Level Differential Privacy10 Oct 2022
- 2022Differentially Private Partial Set Cover with Applications to Facility Location21 Jul 2022
- 2022Encoded Gradients Aggregation against Gradient Leakage in Federated Learning26 May 2022
- 2022Mixed Differential Privacy in Computer Vision22 Mar 2022
- 2021Noise-Augmented Privacy-Preserving Empirical Risk Minimization with Dual-purpose Regularizer and Privacy Budget Retrieval and Recycling16 Oct 2021
- 2021DPNAS: Neural Architecture Search for Deep Learning with Differential Privacy16 Oct 2021
- 2021Adaptive Differentially Private Empirical Risk Minimization14 Oct 2021
- 2021Efficient Hyperparameter Optimization for Differentially Private Deep Learning9 Aug 2021
- 2021Survey: Leakage and Privacy at Inference Time4 Jul 2021
- 2021Differentially private inference via noisy optimization19 Mar 2021
- 2021DPlis: Boosting Utility of Differentially Private Deep Learning via Randomized Smoothing2 Mar 2021
- 2021Do Not Let Privacy Overbill Utility: Gradient Embedding Perturbation for Private Learning25 Feb 2021
- 2021Dynamic Privacy Budget Allocation Improves Data Efficiency of Differentially Private Gradient Descent19 Jan 2021
- 2021Do Not Let Privacy Overbill Utility: Gradient Embedding Perturbation for Private Learningcited by 86
- 2022Mixed Differential Privacy in Computer Visioncited by 53
- 2021Survey: Leakage and Privacy at Inference Timecited by 44
- 2023Why Is Public Pretraining Necessary for Private Model Training?cited by 36
- 2021Differentially private inference via noisy optimizationcited by 27
- 2021DPNAS: Neural Architecture Search for Deep Learning with Differential Privacycited by 20
- 2023Choosing Public Datasets for Private Machine Learning via Gradient Subspace Distancecited by 14
- 2022DPIS: An Enhanced Mechanism for Differentially Private SGD with Importance Samplingcited by 13
- 2022Adap DP-FL: Differentially Private Federated Learning with Adaptive Noisecited by 12
- 2021DPlis: Boosting Utility of Differentially Private Deep Learning via Randomized Smoothingcited by 10
- 2022DPAR: Decoupled Graph Neural Networks with Node-Level Differential Privacycited by 10
- 2023Spectral-DP: Differentially Private Deep Learning through Spectral Perturbation and Filteringcited by 6
12 most cited of 29 All 29 (JSON)
- 2026Noise-Aware Shrinkage for Differentially Private Zeroth-Order Fine-Tuning of Large Language Models4 Aug 2026
- 2026Revisiting Privacy Amplification by Subsampling in Selective Release DPSGD3 Jun 2026
- 2026An exponential mechanism based on quadratic approximations for fine-tuning machine learning models with privacy guarantees19 May 2026
- 2026Differentially Private Auditing Under Strategic Response8 May 2026
- 2025Correlating Cross-Iteration Noise for DP-SGD using Model Curvature6 Oct 2025
- 2025Rethinking Layer-wise Gaussian Noise Injection: Bridging Implicit Objectives and Privacy Budget Allocation4 Sep 2025
- 2025Towards Reliable and Generalizable Differentially Private Machine Learning (Extended Version)21 Aug 2025
- 2025Differentially Private Federated Low Rank Adaptation Beyond Fixed-Matrix14 Jul 2025
- 2024CURATE: Scaling-up Differentially Private Causal Graph Discovery27 Sep 2024
- 2023DP-SGD with weight clipping27 Oct 2023
- 2023Spectral-DP: Differentially Private Deep Learning through Spectral Perturbation and Filtering25 Jul 2023
- 2023Choosing Public Datasets for Private Machine Learning via Gradient Subspace Distance2 Mar 2023
12 newest of 29 All 29 (JSON)